Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/48cee6b0-7654-319d-bfa6-7bbe1d8aa46b.roa
File:                     48cee6b0-7654-319d-bfa6-7bbe1d8aa46b.roa (raw, json)
Hash identifier:          bDIu4YxIuRrFFxUp88WsfzaNYFt+MkmO0dnO5FQSLKo=
Subject key identifier:   78:B5:B1:6D:50:42:55:B5:80:76:2A:99:E0:02:73:3D:0A:AD:03:42
Certificate issuer:       /CN=34592396-ac3d-4a48-97f1-caed65436525
Certificate serial:       010D0C9F4328584D5CBA5B9788C416DF3ED51800
Authority key identifier: E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/48cee6b0-7654-319d-bfa6-7bbe1d8aa46b.roa
Signing time:             Wed 01 Apr 2026 13:11:26 +0000
ROA not before:           Wed 01 Apr 2026 13:11:26 +0000
ROA not after:            Tue 30 Jun 2026 13:11:26 +0000
asID:                     4515
IP address blocks:        216.38.170.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5c:ba:5b:97:88:c4:16:df:3e:d5:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34592396-ac3d-4a48-97f1-caed65436525
        Validity
            Not Before: Apr  1 13:11:26 2026 GMT
            Not After : Jun 30 13:11:26 2026 GMT
        Subject: CN=c6c04ec9-2e05-41ee-9648-ade32a28d6a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:66:68:0c:75:75:91:70:3b:b8:40:c8:fd:63:
                    1b:d7:d4:32:f2:a7:2e:c6:27:43:d3:a9:5f:4b:20:
                    5c:8d:a5:e4:78:20:93:c8:8b:bb:af:9c:6c:14:7f:
                    03:01:96:30:b1:48:07:57:a3:24:1b:e0:84:e1:78:
                    0f:fd:c6:89:03:6a:50:36:f2:10:4f:c3:13:f5:44:
                    71:96:7f:3a:63:41:24:7a:52:ac:60:97:59:1a:7c:
                    ca:7a:52:12:c5:25:cf:2c:cf:71:5e:8c:01:46:a2:
                    cf:c7:47:ff:67:1b:6b:aa:08:f2:42:87:3c:14:81:
                    e5:99:6d:6f:1a:5e:4c:ca:52:7c:68:88:af:96:ec:
                    a0:f3:54:d8:3e:89:aa:be:b9:11:08:bd:fe:a6:3f:
                    d5:62:6f:e8:bd:e5:07:04:0d:cb:db:59:f3:01:de:
                    b0:98:fe:61:63:49:4e:e1:7a:ff:7b:40:77:57:16:
                    59:37:d9:ac:2c:ea:d3:d0:be:4e:cb:59:a1:7e:bc:
                    f3:a3:3c:d5:36:c9:9c:28:06:a9:95:0e:97:b6:a3:
                    72:4b:4d:ac:1b:e2:22:29:74:5b:79:81:ee:5d:e1:
                    9c:ec:44:f9:20:48:08:a6:de:33:9f:23:bd:c3:a9:
                    f8:51:59:d5:5f:12:58:3f:35:8a:1e:19:ad:85:b9:
                    1a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:B5:B1:6D:50:42:55:B5:80:76:2A:99:E0:02:73:3D:0A:AD:03:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/48cee6b0-7654-319d-bfa6-7bbe1d8aa46b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl

            X509v3 Authority Key Identifier:
                keyid:E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.38.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:5b:4d:c1:f9:39:1e:59:d6:a2:bf:26:dc:95:f2:13:60:0b:
         1b:00:fe:21:de:f1:aa:27:72:e1:53:7c:78:73:e4:6a:d1:0d:
         78:3d:c7:2e:97:a2:74:d2:6b:9d:d8:80:05:64:55:ae:3f:d8:
         0d:9f:ff:69:5b:b6:92:f5:4f:76:36:e7:b7:2c:fe:45:1e:85:
         6d:ee:bb:32:9e:31:09:5b:b8:1e:cc:f1:4d:56:64:7d:77:63:
         32:28:94:9e:61:1c:27:40:6c:3e:6b:e9:59:fe:58:7a:ea:75:
         ce:d8:06:8a:2d:20:0b:b3:a3:e1:6f:89:3b:b3:f5:3d:d8:9f:
         2d:36:41:87:09:1a:9d:69:0c:b4:e2:ff:c5:28:63:69:d6:e3:
         bb:e5:6a:03:81:7c:e4:ff:de:a6:65:02:ee:8c:60:4b:e2:6e:
         9a:e4:cc:1d:88:33:49:99:50:89:aa:d8:d5:72:ea:93:43:96:
         c4:e9:1b:60:ce:9a:8a:a9:3f:44:55:4e:52:2c:65:4e:1b:7d:
         fd:07:c8:eb:73:74:1b:82:88:22:03:3d:c2:72:83:77:40:b6:
         c6:b5:fc:c0:0b:37:3b:5e:0f:c4:c2:99:46:c8:cf:e6:5e:b1:
         6d:d4:86:13:77:91:be:92:6e:cb:ae:48:9b:a7:7b:e7:d6:11:
         a7:85:70:35
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1culuXiMQW3z7VGAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzQ1OTIzOTYtYWMzZC00YTQ4LTk3ZjEtY2FlZDY1NDM2
NTI1MB4XDTI2MDQwMTEzMTEyNloXDTI2MDYzMDEzMTEyNlowLzEtMCsGA1UEAxMk
YzZjMDRlYzktMmUwNS00MWVlLTk2NDgtYWRlMzJhMjhkNmEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4WZoDHV1kXA7uEDI/WMb19Qy8qcuxidD06lf
SyBcjaXkeCCTyIu7r5xsFH8DAZYwsUgHV6MkG+CE4XgP/caJA2pQNvIQT8MT9URx
ln86Y0EkelKsYJdZGnzKelISxSXPLM9xXowBRqLPx0f/ZxtrqgjyQoc8FIHlmW1v
Gl5MylJ8aIivluyg81TYPomqvrkRCL3+pj/VYm/oveUHBA3L21nzAd6wmP5hY0lO
4Xr/e0B3VxZZN9msLOrT0L5Oy1mhfrzzozzVNsmcKAaplQ6XtqNyS02sG+IiKXRb
eYHuXeGc7ET5IEgIpt4znyO9w6n4UVnVXxJYPzWKHhmthbkadQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHi1sW1QQlW1gHYqmeACcz0KrQNCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNDU5
MjM5Ni1hYzNkLTRhNDgtOTdmMS1jYWVkNjU0MzY1MjUvNDhjZWU2YjAtNzY1NC0z
MTlkLWJmYTYtN2JiZTFkOGFhNDZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzQ1OTIzOTYtYWMzZC00YTQ4LTk3
ZjEtY2FlZDY1NDM2NTI1LzM0NTkyMzk2LWFjM2QtNGE0OC05N2YxLWNhZWQ2NTQz
NjUyNS5jcmwwHwYDVR0jBBgwFoAU4Pkf4Q9Z7oe8umGKzul0yYPhQUEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNDU5MjM5Ni1hYzNkLTRhNDgtOTdmMS1jYWVk
NjU0MzY1MjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2CaqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD1bTcH5OR5Z1qK/JtyV8hNgCxsA/iHe8aoncuFTfHhz5GrRDXg9xy6X
onTSa53YgAVkVa4/2A2f/2lbtpL1T3Y257cs/kUehW3uuzKeMQlbuB7M8U1WZH13
YzIolJ5hHCdAbD5r6Vn+WHrqdc7YBootIAuzo+FviTuz9T3Yny02QYcJGp1pDLTi
/8UoY2nW47vlagOBfOT/3qZlAu6MYEvibprkzB2IM0mZUImq2NVy6pNDlsTpG2DO
moqpP0RVTlIsZU4bff0HyOtzdBuCiCIDPcJyg3dAtsa1/MALNzteD8TCmUbIz+Ze
sW3UhhN3kb6SbsuuSJune+fWEaeFcDU=
-----END CERTIFICATE-----
Generated at Mon Apr 13 17:34:06 2026 by rpki-client