Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/0d21ef0d-eada-37df-ba95-470d970f6b7c.roa
File:                     0d21ef0d-eada-37df-ba95-470d970f6b7c.roa (raw, json)
Hash identifier:          FRDubn2A2dXqDaFlPeP0zmyM92/lob3+xicln2k2zTY=
Subject key identifier:   A6:A8:43:8D:1F:D6:17:86:4B:A9:F3:D5:53:90:47:64:35:29:07:E9
Certificate issuer:       /CN=b3b07b0c-a30d-4cac-9123-4d459839ea53
Certificate serial:       010D0C9F4328584EC0A729C8706A18374F1B8FE8
Authority key identifier: 59:24:E7:34:C0:E9:1A:2B:B8:76:B7:09:36:1F:7C:7F:77:37:22:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/0d21ef0d-eada-37df-ba95-470d970f6b7c.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        165.1.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/b3b07b0c-a30d-4cac-9123-4d459839ea53.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/b3b07b0c-a30d-4cac-9123-4d459839ea53.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:29:c8:70:6a:18:37:4f:1b:8f:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3b07b0c-a30d-4cac-9123-4d459839ea53
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=68206e9c-0a16-4e9d-a0a4-ac2e0e47c466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e2:4b:77:38:55:b2:e6:31:ee:b2:fc:9f:65:
                    ed:d8:58:6f:06:41:9b:a9:d8:c3:d8:45:66:76:d0:
                    c1:aa:93:b3:75:9f:b8:56:4b:4b:04:27:4e:38:62:
                    ff:e3:33:c4:65:d4:e3:3b:1c:02:ca:30:75:71:1a:
                    4d:81:bd:70:74:2e:16:61:22:cc:43:6e:2d:6a:34:
                    13:c1:f3:ea:e8:ba:a4:4c:66:35:6d:cb:ac:9b:b3:
                    e1:48:31:4d:4d:bf:fe:46:5e:ca:80:8b:54:c6:7d:
                    bf:74:ad:5f:78:54:67:88:08:53:90:0d:57:45:45:
                    da:81:69:49:7e:65:49:26:a6:60:3b:39:f3:4b:9c:
                    b0:71:d4:b7:df:5e:2a:fb:2c:1b:d7:f9:ce:08:88:
                    bd:70:48:de:09:de:23:f7:eb:23:ee:f6:9f:36:c4:
                    65:6c:5f:d8:88:2a:8a:c4:57:20:15:07:e1:ea:d4:
                    04:aa:e6:79:50:a6:a5:c2:7e:53:38:27:2b:29:89:
                    fe:87:66:6f:fd:44:5e:8f:3f:41:5e:a1:d5:75:6e:
                    a2:70:fb:a2:6f:88:2d:09:97:58:a3:81:d9:35:5c:
                    b9:79:39:f3:c7:3f:9b:fb:1a:c5:13:65:0c:52:5e:
                    06:18:09:0e:aa:39:29:7b:d7:cd:ef:ad:04:0e:98:
                    94:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A8:43:8D:1F:D6:17:86:4B:A9:F3:D5:53:90:47:64:35:29:07:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/0d21ef0d-eada-37df-ba95-470d970f6b7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/b3b07b0c-a30d-4cac-9123-4d459839ea53.crl

            X509v3 Authority Key Identifier:
                keyid:59:24:E7:34:C0:E9:1A:2B:B8:76:B7:09:36:1F:7C:7F:77:37:22:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.1.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:fa:5f:07:88:cc:f1:ae:a3:b8:58:fd:cf:fd:11:3b:34:27:
         81:1c:56:12:ec:6d:4b:9c:97:82:f1:97:00:1e:62:ea:b9:50:
         82:55:32:b5:aa:f9:71:f4:7b:0b:75:00:89:34:48:12:56:86:
         85:3c:36:64:03:82:83:e8:1d:43:0d:ac:2b:5e:1c:ed:28:17:
         cf:b6:67:20:0a:e8:41:19:12:c3:f0:71:9a:02:98:b9:b7:b1:
         d6:9a:ce:f4:52:a5:e5:d2:ce:c0:27:f5:7f:d0:9c:57:77:22:
         93:86:61:fb:e8:73:a5:28:03:b3:20:0b:63:6e:0b:aa:b3:f3:
         f7:83:51:2d:fd:ba:d6:bd:bf:42:f7:49:63:e1:01:ce:5b:d0:
         28:a8:01:7b:d5:1c:12:b7:fe:db:4b:7d:0c:f9:8b:39:36:ce:
         58:4f:15:6e:6e:45:08:63:50:86:e6:86:49:89:8d:be:4f:24:
         f1:aa:14:1b:b0:21:2f:d5:b4:26:a1:fd:81:08:66:07:f5:e7:
         3d:f7:df:76:d4:88:80:9c:86:94:94:9b:4f:bd:a5:cd:e0:79:
         c7:0a:88:98:13:21:14:dd:ff:21:8a:b1:67:8d:ad:75:73:20:
         c6:a7:d2:04:c5:b2:e6:46:fe:b3:57:ed:8b:81:9e:f4:2c:82:
         6e:d7:e0:18
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ApynIcGoYN08bj+gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjNiMDdiMGMtYTMwZC00Y2FjLTkxMjMtNGQ0NTk4Mzll
YTUzMB4XDTI2MDgwNzAxMDAxMloXDTI2MTEwNTAyMDAxMlowLzEtMCsGA1UEAxMk
NjgyMDZlOWMtMGExNi00ZTlkLWEwYTQtYWMyZTBlNDdjNDY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+JLdzhVsuYx7rL8n2Xt2FhvBkGbqdjD2EVm
dtDBqpOzdZ+4VktLBCdOOGL/4zPEZdTjOxwCyjB1cRpNgb1wdC4WYSLMQ24tajQT
wfPq6LqkTGY1bcusm7PhSDFNTb/+Rl7KgItUxn2/dK1feFRniAhTkA1XRUXagWlJ
fmVJJqZgOznzS5ywcdS3314q+ywb1/nOCIi9cEjeCd4j9+sj7vafNsRlbF/YiCqK
xFcgFQfh6tQEquZ5UKalwn5TOCcrKYn+h2Zv/URejz9BXqHVdW6icPuib4gtCZdY
o4HZNVy5eTnzxz+b+xrFE2UMUl4GGAkOqjkpe9fN760EDpiU7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKaoQ40f1heGS6nz1VOQR2Q1KQfpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iM2Iw
N2IwYy1hMzBkLTRjYWMtOTEyMy00ZDQ1OTgzOWVhNTMvMGQyMWVmMGQtZWFkYS0z
N2RmLWJhOTUtNDcwZDk3MGY2YjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjNiMDdiMGMtYTMwZC00Y2FjLTkx
MjMtNGQ0NTk4MzllYTUzL2IzYjA3YjBjLWEzMGQtNGNhYy05MTIzLTRkNDU5ODM5
ZWE1My5jcmwwHwYDVR0jBBgwFoAUWSTnNMDpGiu4drcJNh98f3c3It8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9iM2IwN2IwYy1hMzBkLTRjYWMtOTEyMy00ZDQ1
OTgzOWVhNTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCpQEQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACP6XweIzPGuo7hY/c/9ETs0J4EcVhLsbUucl4LxlwAeYuq5UIJVMrWq
+XH0ewt1AIk0SBJWhoU8NmQDgoPoHUMNrCteHO0oF8+2ZyAK6EEZEsPwcZoCmLm3
sdaazvRSpeXSzsAn9X/QnFd3IpOGYfvoc6UoA7MgC2NuC6qz8/eDUS39uta9v0L3
SWPhAc5b0CioAXvVHBK3/ttLfQz5izk2zlhPFW5uRQhjUIbmhkmJjb5PJPGqFBuw
IS/VtCah/YEIZgf15z3333bUiICchpSUm0+9pc3geccKiJgTIRTd/yGKsWeNrXVz
IMan0gTFsuZG/rNX7YuBnvQsgm7X4Bg=
-----END CERTIFICATE-----
Generated at Fri Aug 21 00:18:36 2026 by rpki-client