Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/23c8a875-2ccd-4122-812d-c7afe70035e6/42e34a30-6867-3da9-8d9b-9ecfa6247212.roa
File:                     42e34a30-6867-3da9-8d9b-9ecfa6247212.roa (raw, json)
Hash identifier:          phkxI25575lVSK/aQ48bVF/u7D1eVuBMUlTGd4Y14Wc=
Subject key identifier:   CC:66:A7:7A:EA:5C:9B:23:7F:A1:60:29:BB:09:5A:8B:82:22:32:12
Certificate issuer:       /CN=23c8a875-2ccd-4122-812d-c7afe70035e6
Certificate serial:       010D0C9F4328584D5E1A5081304E3270CBD5C100
Authority key identifier: CB:9B:E6:BA:B1:5B:9D:D9:68:F2:58:51:A5:6A:0E:33:A4:70:3D:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/23c8a875-2ccd-4122-812d-c7afe70035e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/23c8a875-2ccd-4122-812d-c7afe70035e6/42e34a30-6867-3da9-8d9b-9ecfa6247212.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     14618
IP address blocks:        216.75.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/23c8a875-2ccd-4122-812d-c7afe70035e6/23c8a875-2ccd-4122-812d-c7afe70035e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/23c8a875-2ccd-4122-812d-c7afe70035e6/23c8a875-2ccd-4122-812d-c7afe70035e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/23c8a875-2ccd-4122-812d-c7afe70035e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:50:81:30:4e:32:70:cb:d5:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23c8a875-2ccd-4122-812d-c7afe70035e6
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=76686a2c-874f-4fa5-97d1-757b56ff08b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:da:94:5c:9c:11:7a:18:c5:c4:8c:9c:d3:66:
                    64:5d:e9:40:23:33:94:44:67:94:eb:5a:b5:1c:69:
                    c9:56:f4:57:a2:7f:b7:08:61:5a:07:e0:c9:06:58:
                    a5:9d:97:47:27:19:9d:f8:48:58:a9:cc:f3:8d:ed:
                    e8:13:3a:e0:71:39:d6:98:1d:b7:c5:ff:fe:66:5c:
                    7f:2a:e1:d5:50:2d:4f:42:35:de:73:9e:df:d3:09:
                    ad:f8:b1:cd:f6:62:11:f3:c9:9f:ea:80:30:b0:72:
                    54:9c:b5:96:42:eb:e6:5d:b1:b0:91:53:5b:c5:e2:
                    ef:15:2a:4f:e4:30:06:ef:e5:45:87:82:f0:09:7a:
                    0d:70:ae:9e:9c:ae:2b:20:b2:07:69:26:3d:98:55:
                    66:b7:cd:34:9c:f6:2d:76:16:d4:c2:83:e9:8b:36:
                    b3:1d:79:6b:1d:55:46:10:9d:b0:35:43:f5:c8:f5:
                    68:d5:d6:2d:15:6e:7b:4d:1d:80:c0:ff:e3:df:ac:
                    34:d2:09:cc:14:b8:22:1e:83:f8:fc:6e:7a:ef:ef:
                    a7:88:56:95:17:bc:c8:88:1c:54:c0:0f:90:7e:c4:
                    63:6f:f7:eb:0b:8d:fb:eb:b5:0f:b1:16:6b:ae:3d:
                    36:c6:c6:6f:d9:13:27:ea:b2:6b:27:40:8f:74:38:
                    44:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:66:A7:7A:EA:5C:9B:23:7F:A1:60:29:BB:09:5A:8B:82:22:32:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/23c8a875-2ccd-4122-812d-c7afe70035e6/42e34a30-6867-3da9-8d9b-9ecfa6247212.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/23c8a875-2ccd-4122-812d-c7afe70035e6/23c8a875-2ccd-4122-812d-c7afe70035e6.crl

            X509v3 Authority Key Identifier:
                keyid:CB:9B:E6:BA:B1:5B:9D:D9:68:F2:58:51:A5:6A:0E:33:A4:70:3D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/23c8a875-2ccd-4122-812d-c7afe70035e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.75.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:72:3f:6d:e9:16:0f:56:77:ff:f4:df:58:c7:c6:1b:e8:d0:
         ec:ae:c9:fc:d4:1c:8c:87:21:9a:81:22:8d:95:f4:e1:ee:57:
         0c:6e:4f:88:91:29:0d:eb:e4:7a:56:db:ef:b1:7a:91:1b:7e:
         96:ce:4f:ba:69:93:f9:09:0b:4c:97:13:5e:cf:53:11:e6:fb:
         4f:bb:7e:a1:29:90:f5:3a:bb:66:0b:7c:c8:1d:d3:88:45:c8:
         cc:9b:d7:70:45:47:ca:0a:c3:2b:05:f3:d0:ba:41:13:df:b1:
         8e:12:56:e5:1f:06:1f:b0:82:f8:c0:16:a8:25:98:c4:6f:af:
         2d:86:e8:96:33:c1:2c:9a:c7:d8:12:c3:8f:95:f9:a9:c8:ff:
         96:46:4f:09:c7:47:e4:ab:32:84:85:33:93:24:9f:ba:11:03:
         68:38:18:63:3d:19:4d:9a:77:a4:80:65:d8:01:fa:20:dd:8e:
         66:26:22:6e:e8:4d:13:7a:34:36:0d:92:53:b1:bd:f4:0b:a9:
         44:10:9f:b1:5c:03:19:05:8f:dc:d8:60:df:8e:63:aa:ee:d2:
         2c:47:de:9c:b8:1d:b9:5c:c1:d9:b4:05:b2:e3:96:26:47:a4:
         a0:40:96:61:d0:84:dd:9b:07:87:dd:9a:5a:a3:93:19:85:53:
         1c:51:05:23
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGlCBME4ycMvVwQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjNjOGE4NzUtMmNjZC00MTIyLTgxMmQtYzdhZmU3MDAz
NWU2MB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk
NzY2ODZhMmMtODc0Zi00ZmE1LTk3ZDEtNzU3YjU2ZmYwOGIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9qUXJwRehjFxIyc02ZkXelAIzOURGeU61q1
HGnJVvRXon+3CGFaB+DJBlilnZdHJxmd+EhYqczzje3oEzrgcTnWmB23xf/+Zlx/
KuHVUC1PQjXec57f0wmt+LHN9mIR88mf6oAwsHJUnLWWQuvmXbGwkVNbxeLvFSpP
5DAG7+VFh4LwCXoNcK6enK4rILIHaSY9mFVmt800nPYtdhbUwoPpizazHXlrHVVG
EJ2wNUP1yPVo1dYtFW57TR2AwP/j36w00gnMFLgiHoP4/G567++niFaVF7zIiBxU
wA+QfsRjb/frC43767UPsRZrrj02xsZv2RMn6rJrJ0CPdDhExwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMxmp3rqXJsjf6FgKbsJWouCIjISMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yM2M4
YTg3NS0yY2NkLTQxMjItODEyZC1jN2FmZTcwMDM1ZTYvNDJlMzRhMzAtNjg2Ny0z
ZGE5LThkOWItOWVjZmE2MjQ3MjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjNjOGE4NzUtMmNjZC00MTIyLTgx
MmQtYzdhZmU3MDAzNWU2LzIzYzhhODc1LTJjY2QtNDEyMi04MTJkLWM3YWZlNzAw
MzVlNi5jcmwwHwYDVR0jBBgwFoAUy5vmurFbndlo8lhRpWoOM6RwPcMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yM2M4YTg3NS0yY2NkLTQxMjItODEyZC1jN2Fm
ZTcwMDM1ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2EtgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAClyP23pFg9Wd//031jHxhvo0OyuyfzUHIyHIZqBIo2V9OHuVwxuT4iR
KQ3r5HpW2++xepEbfpbOT7ppk/kJC0yXE17PUxHm+0+7fqEpkPU6u2YLfMgd04hF
yMyb13BFR8oKwysF89C6QRPfsY4SVuUfBh+wgvjAFqglmMRvry2G6JYzwSyax9gS
w4+V+anI/5ZGTwnHR+SrMoSFM5Mkn7oRA2g4GGM9GU2ad6SAZdgB+iDdjmYmIm7o
TRN6NDYNklOxvfQLqUQQn7FcAxkFj9zYYN+OY6ru0ixH3py4Hblcwdm0BbLjliZH
pKBAlmHQhN2bB4fdmlqjkxmFUxxRBSM=
-----END CERTIFICATE-----
Generated at Tue Apr 7 10:33:48 2026 by rpki-client