Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2916be5f-e760-3390-9c4a-1284a9ab4794.roa
File:                     2916be5f-e760-3390-9c4a-1284a9ab4794.roa (raw, json)
Hash identifier:          hCu9/uPsSHCoMnpT81yZijttVV5c7L4FgqKuhF8xr/o=
Subject key identifier:   21:08:B3:FE:F2:F8:D2:62:E9:8E:CB:97:44:F9:C9:87:E0:0A:F4:AF
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E48249B9EC5E2861876D38540
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2916be5f-e760-3390-9c4a-1284a9ab4794.roa
Signing time:             Wed 24 Jun 2026 21:00:12 +0000
ROA not before:           Wed 24 Jun 2026 21:00:12 +0000
ROA not after:            Tue 22 Sep 2026 21:00:12 +0000
asID:                     13335
IP address blocks:        108.162.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:48:24:9b:9e:c5:e2:86:18:76:d3:85:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun 24 21:00:12 2026 GMT
            Not After : Sep 22 21:00:12 2026 GMT
        Subject: CN=04b379d1-1268-420c-902b-61bf118b62f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:69:4b:14:13:d2:76:56:4e:dd:2c:8c:33:5c:
                    9b:99:73:8a:a5:18:93:00:1e:f6:a7:c3:a1:48:7a:
                    c7:37:69:0f:7a:d8:b2:48:e5:0d:c6:86:06:8d:7e:
                    e4:99:5e:99:6e:3f:27:b4:33:cb:06:f2:26:ca:e3:
                    85:eb:1e:1f:7d:35:7f:ab:24:c6:43:86:6e:5c:cc:
                    67:c3:4c:2b:01:4f:1b:22:98:5e:5c:70:01:9c:6b:
                    b0:3a:ec:e7:8c:29:8a:84:fb:43:72:5e:fa:d3:31:
                    01:24:43:54:ee:f7:48:aa:04:67:88:ae:00:0c:95:
                    0d:4b:06:c3:36:8f:16:bd:5d:d3:b9:c0:00:4e:97:
                    fe:20:d6:76:77:fc:fd:a7:16:93:11:de:32:3e:6b:
                    a9:b4:d0:df:c7:0a:96:e9:e1:42:e5:99:12:7f:93:
                    b8:06:bc:2b:60:88:33:6f:3e:a3:11:7a:6f:2d:81:
                    2c:09:e8:f1:b5:2b:aa:5a:6a:c5:ac:5a:73:32:38:
                    0d:7e:ed:f6:39:04:08:22:e4:cd:4e:3b:74:e8:ef:
                    94:a4:ed:9d:f0:db:4f:93:a0:e4:c8:d6:db:a6:ba:
                    f4:66:fe:7e:f7:14:54:d2:bf:05:6f:88:7d:8c:95:
                    c6:d6:54:0d:53:77:e7:35:e2:c6:7c:a9:5e:0c:15:
                    12:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:08:B3:FE:F2:F8:D2:62:E9:8E:CB:97:44:F9:C9:87:E0:0A:F4:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2916be5f-e760-3390-9c4a-1284a9ab4794.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.162.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:8c:af:54:89:2b:be:8c:e0:b4:56:76:2c:02:8f:33:b7:cb:
         80:0a:a5:c2:33:86:08:a0:7a:b6:37:05:9c:99:31:f7:ca:c7:
         59:a1:3d:cf:8f:b9:7c:a0:5f:2e:60:ba:05:35:6a:28:8d:b0:
         80:4c:09:2d:04:4e:9b:23:95:e9:5c:a0:45:a8:b9:59:90:7b:
         eb:1a:30:66:e8:c8:cd:7d:9f:9a:58:c8:6d:b1:b3:58:81:68:
         59:4a:8c:b2:8f:0a:ef:13:9c:39:79:6e:f5:20:8b:b7:09:c2:
         4b:0b:fb:12:33:d2:ff:da:3b:fc:c5:75:37:0b:03:ae:a7:b2:
         94:5a:80:bc:ab:93:4d:85:a9:c8:f4:36:29:0d:52:03:61:7f:
         28:fc:85:90:34:a2:5b:0a:5a:b3:02:ce:85:bd:97:57:64:25:
         1a:ab:d0:c8:c1:9a:34:88:17:c1:53:54:78:73:e5:68:ea:3c:
         01:fb:06:3a:8d:d7:c1:4f:e9:3b:d4:a6:0c:b4:3b:ea:e8:61:
         73:ee:f4:99:e4:7f:fd:3a:83:73:f3:db:08:15:a7:fe:a3:05:
         f1:8c:ff:56:31:05:f0:f7:eb:c7:67:dc:1d:d3:fb:47:57:d4:
         9d:4d:85:25:9d:8d:8c:e0:b8:47:8a:89:5a:cf:62:21:c1:56:
         9d:b4:7e:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5IJJuexeKGGHbThUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDYyNDIxMDAxMloXDTI2MDkyMjIxMDAxMlowLzEtMCsGA1UEAxMk
MDRiMzc5ZDEtMTI2OC00MjBjLTkwMmItNjFiZjExOGI2MmY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWlLFBPSdlZO3SyMM1ybmXOKpRiTAB72p8Oh
SHrHN2kPetiySOUNxoYGjX7kmV6Zbj8ntDPLBvImyuOF6x4ffTV/qyTGQ4ZuXMxn
w0wrAU8bIpheXHABnGuwOuznjCmKhPtDcl760zEBJENU7vdIqgRniK4ADJUNSwbD
No8WvV3TucAATpf+INZ2d/z9pxaTEd4yPmuptNDfxwqW6eFC5ZkSf5O4BrwrYIgz
bz6jEXpvLYEsCejxtSuqWmrFrFpzMjgNfu32OQQIIuTNTjt06O+UpO2d8NtPk6Dk
yNbbprr0Zv5+9xRU0r8Fb4h9jJXG1lQNU3fnNeLGfKleDBUSmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCEIs/7y+NJi6Y7Ll0T5yYfgCvSvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjkxNmJlNWYtZTc2MC0z
MzkwLTljNGEtMTI4NGE5YWI0Nzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKL0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK2Mr1SJK76M4LRWdiwCjzO3y4AKpcIzhgigerY3BZyZMffKx1mhPc+P
uXygXy5gugU1aiiNsIBMCS0ETpsjlelcoEWouVmQe+saMGboyM19n5pYyG2xs1iB
aFlKjLKPCu8TnDl5bvUgi7cJwksL+xIz0v/aO/zFdTcLA66nspRagLyrk02Fqcj0
NikNUgNhfyj8hZA0olsKWrMCzoW9l1dkJRqr0MjBmjSIF8FTVHhz5WjqPAH7BjqN
18FP6TvUpgy0O+roYXPu9Jnkf/06g3Pz2wgVp/6jBfGM/1YxBfD368dn3B3T+0dX
1J1NhSWdjYzguEeKiVrPYiHBVp20fjQ=
-----END CERTIFICATE-----
Generated at Sat Jul 18 00:49:18 2026 by rpki-client