Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bc10da1-0b13-46f5-80e3-b3f9165c5507/01367070-4cc1-358a-89dd-232d2710c097.roa
File:                     01367070-4cc1-358a-89dd-232d2710c097.roa (raw, json)
Hash identifier:          Pzx9Lg+NQ42dRK8bAVF3PjoAUPsjRU/5OH2J9Im/5Ls=
Subject key identifier:   D3:DF:45:F0:48:A0:08:EE:AB:8E:C3:30:2F:F4:67:68:AB:11:E1:76
Certificate issuer:       /CN=7bc10da1-0b13-46f5-80e3-b3f9165c5507
Certificate serial:       010D0C9F4328584D0BDD0934186EF12173A97DA0
Authority key identifier: 8D:61:B1:45:94:3C:FF:FE:45:A6:E3:F9:3A:23:B1:1C:1E:03:EF:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bc10da1-0b13-46f5-80e3-b3f9165c5507.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bc10da1-0b13-46f5-80e3-b3f9165c5507/01367070-4cc1-358a-89dd-232d2710c097.roa
Signing time:             Tue 03 Mar 2026 14:00:40 +0000
ROA not before:           Tue 03 Mar 2026 14:00:40 +0000
ROA not after:            Mon 01 Jun 2026 13:00:40 +0000
asID:                     271
IP address blocks:        198.162.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bc10da1-0b13-46f5-80e3-b3f9165c5507/7bc10da1-0b13-46f5-80e3-b3f9165c5507.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bc10da1-0b13-46f5-80e3-b3f9165c5507/7bc10da1-0b13-46f5-80e3-b3f9165c5507.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bc10da1-0b13-46f5-80e3-b3f9165c5507.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0b:dd:09:34:18:6e:f1:21:73:a9:7d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bc10da1-0b13-46f5-80e3-b3f9165c5507
        Validity
            Not Before: Mar  3 14:00:40 2026 GMT
            Not After : Jun  1 13:00:40 2026 GMT
        Subject: CN=132f1fe2-bbdf-4e3b-9675-4d3e98d25da7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2a:75:33:ec:ff:c8:a9:eb:24:74:16:46:cc:
                    68:31:9c:36:16:6c:96:06:fd:64:b1:a4:70:db:b9:
                    2c:29:72:46:eb:ab:ae:91:5f:50:42:d7:6d:a5:72:
                    a5:f9:51:2b:06:76:16:99:2f:ed:27:f9:28:8e:71:
                    49:cc:24:ca:94:b0:a3:e1:13:79:41:ad:4c:c4:1d:
                    f1:12:d9:23:37:05:78:9e:ad:66:7c:f6:81:6d:03:
                    92:39:da:b6:40:18:73:07:be:68:ab:17:ee:49:21:
                    85:09:2e:93:2a:a0:12:92:e9:02:ef:0e:07:ec:07:
                    8d:22:0f:a1:66:01:de:87:ca:0e:32:18:fc:5a:96:
                    c2:d8:a3:5a:ba:d4:4e:9f:aa:74:10:6d:49:14:5e:
                    e8:4a:a5:cb:7c:af:fe:c7:df:29:49:1d:21:40:e6:
                    85:8e:e4:ec:d9:b0:56:f1:51:7c:2a:74:07:5f:13:
                    24:01:b1:5c:2f:c2:c8:80:54:6b:71:5f:15:ce:82:
                    c9:7a:ff:59:66:96:b3:b9:f2:34:23:31:f8:ad:cf:
                    2d:ee:5b:85:e2:b7:e8:c3:ab:6f:f5:a6:96:98:29:
                    06:07:7b:e6:68:b0:57:4f:1e:35:93:78:05:b3:61:
                    ad:3b:d4:b9:29:b1:63:6d:34:8a:29:49:91:88:73:
                    8a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:DF:45:F0:48:A0:08:EE:AB:8E:C3:30:2F:F4:67:68:AB:11:E1:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bc10da1-0b13-46f5-80e3-b3f9165c5507/01367070-4cc1-358a-89dd-232d2710c097.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bc10da1-0b13-46f5-80e3-b3f9165c5507/7bc10da1-0b13-46f5-80e3-b3f9165c5507.crl

            X509v3 Authority Key Identifier:
                keyid:8D:61:B1:45:94:3C:FF:FE:45:A6:E3:F9:3A:23:B1:1C:1E:03:EF:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bc10da1-0b13-46f5-80e3-b3f9165c5507.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.162.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:3f:20:91:b3:c4:c6:de:41:45:6e:02:3e:8c:2d:d4:4e:43:
         5c:8a:5e:63:e2:9d:df:9e:72:76:e3:19:97:d4:bd:db:ff:57:
         33:7d:82:e4:8a:de:c2:98:81:92:7e:0d:ee:fa:b9:f7:ed:85:
         82:7c:62:d9:2c:7e:d4:78:c4:f6:f2:f8:14:93:21:06:1b:ca:
         ba:00:75:8f:a5:6b:e9:1a:9b:a8:50:53:8b:8d:57:cb:26:7d:
         9c:0b:5a:32:48:f9:43:f0:0b:dd:3d:e0:44:57:7c:76:bc:8f:
         51:df:2b:32:de:8d:6a:de:d2:d6:db:41:5d:1e:54:35:0f:35:
         ce:07:0e:8b:ce:f0:02:e1:bc:b1:4c:76:f2:ea:21:00:ea:da:
         44:22:d4:52:dd:55:1f:5b:1d:b7:5e:92:39:10:4e:62:7e:07:
         c9:59:c0:ca:8c:c1:29:93:d1:14:6c:46:15:e7:55:e3:a7:c1:
         01:9f:d1:12:58:a5:c6:c8:ee:2e:cd:f5:36:db:47:89:e7:f0:
         27:9c:9c:92:38:6a:15:3f:64:bd:c4:dd:8b:87:f4:87:6d:b2:
         2e:ea:10:c4:90:fc:c4:ea:10:94:33:07:12:27:cb:2f:22:05:
         e3:60:66:23:e8:98:5a:9a:d1:a9:f5:2a:43:a2:36:56:f4:1b:
         b2:29:04:76
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0L3Qk0GG7xIXOpfaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2JjMTBkYTEtMGIxMy00NmY1LTgwZTMtYjNmOTE2NWM1
NTA3MB4XDTI2MDMwMzE0MDA0MFoXDTI2MDYwMTEzMDA0MFowLzEtMCsGA1UEAxMk
MTMyZjFmZTItYmJkZi00ZTNiLTk2NzUtNGQzZTk4ZDI1ZGE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvip1M+z/yKnrJHQWRsxoMZw2FmyWBv1ksaRw
27ksKXJG66uukV9QQtdtpXKl+VErBnYWmS/tJ/kojnFJzCTKlLCj4RN5Qa1MxB3x
EtkjNwV4nq1mfPaBbQOSOdq2QBhzB75oqxfuSSGFCS6TKqASkukC7w4H7AeNIg+h
ZgHeh8oOMhj8WpbC2KNautROn6p0EG1JFF7oSqXLfK/+x98pSR0hQOaFjuTs2bBW
8VF8KnQHXxMkAbFcL8LIgFRrcV8VzoLJev9ZZpazufI0IzH4rc8t7luF4rfow6tv
9aaWmCkGB3vmaLBXTx41k3gFs2GtO9S5KbFjbTSKKUmRiHOKVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNPfRfBIoAjuq47DMC/0Z2irEeF2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83YmMx
MGRhMS0wYjEzLTQ2ZjUtODBlMy1iM2Y5MTY1YzU1MDcvMDEzNjcwNzAtNGNjMS0z
NThhLTg5ZGQtMjMyZDI3MTBjMDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvN2JjMTBkYTEtMGIxMy00NmY1LTgw
ZTMtYjNmOTE2NWM1NTA3LzdiYzEwZGExLTBiMTMtNDZmNS04MGUzLWIzZjkxNjVj
NTUwNy5jcmwwHwYDVR0jBBgwFoAUjWGxRZQ8//5FpuP5OiOxHB4D7xcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83YmMxMGRhMS0wYjEzLTQ2ZjUtODBlMy1iM2Y5
MTY1YzU1MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExqJgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACk/IJGzxMbeQUVuAj6MLdROQ1yKXmPind+ecnbjGZfUvdv/VzN9guSK
3sKYgZJ+De76uffthYJ8YtksftR4xPby+BSTIQYbyroAdY+la+kam6hQU4uNV8sm
fZwLWjJI+UPwC9094ERXfHa8j1HfKzLejWre0tbbQV0eVDUPNc4HDovO8ALhvLFM
dvLqIQDq2kQi1FLdVR9bHbdekjkQTmJ+B8lZwMqMwSmT0RRsRhXnVeOnwQGf0RJY
pcbI7i7N9TbbR4nn8CecnJI4ahU/ZL3E3YuH9Idtsi7qEMSQ/MTqEJQzBxInyy8i
BeNgZiPomFqa0an1KkOiNlb0G7IpBHY=
-----END CERTIFICATE-----
Generated at Mon Mar 16 15:12:20 2026 by rpki-client