Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/c16ac108-f00b-38ec-94fa-667aefbfec15.roa
File:                     c16ac108-f00b-38ec-94fa-667aefbfec15.roa (raw, json)
Hash identifier:          5qCrFdDMW3KV0kQb3XJRPIjyyy6uanJBrOG2gIghliQ=
Subject key identifier:   43:7D:8F:DD:0E:B2:F9:AF:1B:8B:A1:24:74:F1:6E:68:03:0F:02:74
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584D2644C87D730B0F4769EF0800
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/c16ac108-f00b-38ec-94fa-667aefbfec15.roa
Signing time:             Fri 13 Mar 2026 01:00:31 +0000
ROA not before:           Fri 13 Mar 2026 01:00:31 +0000
ROA not after:            Thu 11 Jun 2026 01:00:31 +0000
asID:                     21928
IP address blocks:        169.224.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:26:44:c8:7d:73:0b:0f:47:69:ef:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Mar 13 01:00:31 2026 GMT
            Not After : Jun 11 01:00:31 2026 GMT
        Subject: CN=c92ea5c5-266a-4cbb-a87f-453e582bc412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fb:05:98:8f:4b:c6:bc:88:bb:4e:49:83:70:
                    be:65:9a:77:3b:44:dd:7c:6c:5b:af:95:ce:cd:5f:
                    48:5a:a7:2e:79:92:9e:42:43:a1:bd:fe:08:96:33:
                    0b:e1:5e:b9:5c:3f:49:57:f2:f7:e7:c5:4f:61:3f:
                    91:ea:f1:82:5b:11:f6:48:70:90:d5:48:2e:c5:0f:
                    27:3d:0b:f7:ff:16:5b:41:5e:f6:9e:0d:cd:14:7c:
                    23:e5:2f:5c:20:fe:27:c2:47:8b:ad:dd:5a:99:e4:
                    c0:90:19:81:fe:1d:67:f8:81:8e:70:d5:71:da:0d:
                    9b:a7:79:d0:b4:da:ec:63:9a:d6:df:cd:cb:bd:89:
                    2f:b7:e2:2c:c0:24:fd:45:8e:86:28:50:2b:7a:11:
                    90:0a:b9:b4:6e:7a:1d:62:27:36:b2:32:16:0e:4c:
                    70:22:b5:83:14:dd:ce:01:a5:85:77:ae:de:d5:4e:
                    ef:5b:17:b5:76:09:00:7c:c7:b0:a6:0b:2b:3c:e1:
                    76:17:ae:8e:34:20:ec:8a:4a:dc:7b:f9:d0:ed:55:
                    7c:0b:ca:63:80:48:02:02:17:b8:0d:68:70:c2:a1:
                    9d:18:81:dd:ec:c3:bf:ab:a2:3b:8e:27:b8:f9:4a:
                    25:86:b1:70:7a:ca:91:f3:b2:f1:3a:fe:bf:24:94:
                    63:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:7D:8F:DD:0E:B2:F9:AF:1B:8B:A1:24:74:F1:6E:68:03:0F:02:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/c16ac108-f00b-38ec-94fa-667aefbfec15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.224.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dc:9c:56:22:44:52:35:20:bd:b8:ba:38:17:40:82:a7:bb:01:
         be:d1:82:3a:8a:b1:79:3b:fd:b3:4b:8f:64:89:a6:bb:ad:bd:
         af:33:d8:1d:35:8c:14:99:9e:7a:ab:c8:86:b9:aa:38:17:9a:
         51:ec:db:65:3a:13:45:95:69:67:66:42:d0:19:8b:2a:b6:43:
         6f:ee:e5:97:58:09:1c:f8:a6:86:66:f5:85:3d:e0:c5:46:90:
         b6:e5:2e:75:47:ba:94:c4:b1:c7:14:01:0e:2e:ac:5c:bb:af:
         25:ae:0c:15:42:82:df:74:8d:ad:94:30:b3:b2:04:f4:5d:b1:
         25:e6:f6:83:d3:2a:c9:a9:1b:09:de:3d:60:4e:96:ec:5a:e0:
         cb:c1:71:61:23:7d:05:98:af:9a:93:31:a6:5d:c5:40:d4:eb:
         0d:09:cd:42:b7:53:2e:63:7c:92:e0:e0:90:ad:12:2d:ac:5f:
         b0:91:39:ed:54:51:08:97:ca:f9:f3:5e:31:b4:2b:6a:0b:d8:
         e0:0a:2b:dc:55:4e:91:0b:20:1a:f2:12:97:75:b4:3c:9b:75:
         d8:eb:02:a8:26:83:49:e5:1a:54:e7:b5:60:8d:39:56:5a:e2:
         5c:77:ef:0d:20:90:06:37:58:67:64:52:40:bc:7f:d7:c5:67:
         5d:b8:59:88
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0mRMh9cwsPR2nvCAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk
OWU3MB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk
YzkyZWE1YzUtMjY2YS00Y2JiLWE4N2YtNDUzZTU4MmJjNDEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/sFmI9LxryIu05Jg3C+ZZp3O0TdfGxbr5XO
zV9IWqcueZKeQkOhvf4IljML4V65XD9JV/L358VPYT+R6vGCWxH2SHCQ1UguxQ8n
PQv3/xZbQV72ng3NFHwj5S9cIP4nwkeLrd1ameTAkBmB/h1n+IGOcNVx2g2bp3nQ
tNrsY5rW383LvYkvt+IswCT9RY6GKFArehGQCrm0bnodYic2sjIWDkxwIrWDFN3O
AaWFd67e1U7vWxe1dgkAfMewpgsrPOF2F66ONCDsikrce/nQ7VV8C8pjgEgCAhe4
DWhwwqGdGIHd7MO/q6I7jie4+UolhrFwesqR87LxOv6/JJRjLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEN9j90OsvmvG4uhJHTxbmgDDwJ0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw
YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvYzE2YWMxMDgtZjAwYi0z
OGVjLTk0ZmEtNjY3YWVmYmZlYzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3
M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4
ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5
NDc5OGQ5ZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqeCHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANycViJEUjUgvbi6OBdAgqe7Ab7RgjqKsXk7/bNLj2SJprutva8z2B01
jBSZnnqryIa5qjgXmlHs22U6E0WVaWdmQtAZiyq2Q2/u5ZdYCRz4poZm9YU94MVG
kLblLnVHupTEsccUAQ4urFy7ryWuDBVCgt90ja2UMLOyBPRdsSXm9oPTKsmpGwne
PWBOluxa4MvBcWEjfQWYr5qTMaZdxUDU6w0JzUK3Uy5jfJLg4JCtEi2sX7CROe1U
UQiXyvnzXjG0K2oL2OAKK9xVTpELIBryEpd1tDybddjrAqgmg0nlGlTntWCNOVZa
4lx37w0gkAY3WGdkUkC8f9fFZ124WYg=
-----END CERTIFICATE-----
Generated at Sat Mar 21 17:55:50 2026 by rpki-client