Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/5034db06-5467-3c16-bb8b-a83b40698845.roa
File:                     5034db06-5467-3c16-bb8b-a83b40698845.roa (raw, json)
Hash identifier:          YyvUvQImOhkd+ZXmhy6q1KhoaYg7+HXKMxm1+JzbhS0=
Subject key identifier:   2A:AC:FC:1E:5F:E8:02:3C:7C:88:43:65:EF:FF:19:27:4B:DD:27:0C
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584DFF8B2D57A520E7F6E1FFCF40
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/5034db06-5467-3c16-bb8b-a83b40698845.roa
Signing time:             Fri 29 May 2026 20:53:08 +0000
ROA not before:           Fri 29 May 2026 20:53:08 +0000
ROA not after:            Thu 27 Aug 2026 20:53:08 +0000
asID:                     206804
IP address blocks:        216.131.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ff:8b:2d:57:a5:20:e7:f6:e1:ff:cf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: May 29 20:53:08 2026 GMT
            Not After : Aug 27 20:53:08 2026 GMT
        Subject: CN=5059f600-6463-4d2a-b012-8bc653f69baf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:cd:49:0b:7a:34:42:57:66:a4:64:24:22:50:
                    96:d8:c1:be:38:4f:0d:d9:f6:ee:72:dd:11:63:c1:
                    96:66:02:22:36:bc:78:8f:7d:b6:01:64:dc:43:a5:
                    63:cc:fe:00:95:8b:92:ef:5d:4a:25:b4:0c:01:e4:
                    6a:f6:24:24:e3:dc:8e:4d:6b:20:66:97:a3:d6:90:
                    f3:b1:be:ec:20:22:93:28:fa:4b:3e:ee:40:06:9f:
                    f3:82:e5:3a:b9:da:2f:70:1e:a9:0b:5f:c5:e3:c2:
                    43:72:d6:74:bb:0e:0e:c5:99:f2:08:6f:b1:be:cb:
                    47:da:83:45:8e:90:7f:80:31:71:c7:a8:c9:fa:90:
                    08:30:3c:8b:47:25:9d:9e:9f:76:e6:ad:06:16:72:
                    7a:a5:38:8c:78:59:48:6f:08:0e:9d:f2:07:5d:87:
                    9a:2b:3c:5f:51:72:13:1d:1b:64:11:75:27:89:b9:
                    b6:e2:76:06:ed:31:e9:d4:db:3a:7a:ba:82:72:3a:
                    8f:b2:8a:7c:18:ac:ef:99:9f:03:5b:f7:b5:83:26:
                    fe:31:75:78:59:b5:a8:a3:d9:61:d2:4f:21:6d:63:
                    fb:78:4e:ce:38:cf:fd:19:e1:d7:25:91:ac:7d:30:
                    ca:b9:71:62:24:b7:8c:b9:65:3c:66:ab:65:a7:b2:
                    8d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:AC:FC:1E:5F:E8:02:3C:7C:88:43:65:EF:FF:19:27:4B:DD:27:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/5034db06-5467-3c16-bb8b-a83b40698845.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.131.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:84:95:41:2c:b3:a7:85:98:f1:3a:5d:98:38:53:6f:f1:ab:
         ea:66:7c:10:9d:30:b9:0d:42:ba:cd:5a:be:dc:88:7b:b5:d2:
         98:71:e1:fd:ef:bd:b2:f6:fe:b8:01:6a:0e:ec:88:5c:86:12:
         f9:11:e1:3d:3c:cb:17:90:e0:5e:ad:c6:c1:12:d5:25:9d:a7:
         0c:b4:e6:ce:1c:7a:2a:e4:b2:3f:c5:d2:9b:e1:92:10:ef:5d:
         b7:92:59:0d:e1:65:8c:f4:77:d4:98:98:8a:2f:4f:fa:41:99:
         c8:d2:8a:74:9c:ba:2e:d3:ef:bd:53:84:fd:8b:37:a8:b6:da:
         d0:46:cd:93:63:61:2c:4a:32:58:2e:6b:d1:cc:b2:52:ac:02:
         15:df:52:f9:d3:5f:ac:1e:e1:02:be:4b:41:8e:73:03:e2:7c:
         88:5d:c6:f4:99:52:4c:56:36:23:6e:e9:2a:b5:58:03:8f:42:
         03:0d:7d:4c:e1:59:cb:44:b5:4d:1b:70:8b:03:cb:04:f8:c0:
         1c:ca:ff:59:f5:08:fe:90:51:d6:08:a1:74:30:12:1e:f8:dd:
         60:bb:f8:d2:65:41:9f:e2:be:e0:72:20:fe:02:b2:80:38:e5:
         4c:88:61:97:46:bb:1e:80:22:f7:3c:be:f2:41:38:81:30:33:
         e7:66:f7:85
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3/iy1XpSDn9uH/z0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz
NmJhMB4XDTI2MDUyOTIwNTMwOFoXDTI2MDgyNzIwNTMwOFowLzEtMCsGA1UEAxMk
NTA1OWY2MDAtNjQ2My00ZDJhLWIwMTItOGJjNjUzZjY5YmFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlM1JC3o0QldmpGQkIlCW2MG+OE8N2fbuct0R
Y8GWZgIiNrx4j322AWTcQ6VjzP4AlYuS711KJbQMAeRq9iQk49yOTWsgZpej1pDz
sb7sICKTKPpLPu5ABp/zguU6udovcB6pC1/F48JDctZ0uw4OxZnyCG+xvstH2oNF
jpB/gDFxx6jJ+pAIMDyLRyWdnp925q0GFnJ6pTiMeFlIbwgOnfIHXYeaKzxfUXIT
HRtkEXUnibm24nYG7THp1Ns6erqCcjqPsop8GKzvmZ8DW/e1gyb+MXV4WbWoo9lh
0k8hbWP7eE7OOM/9GeHXJZGsfTDKuXFiJLeMuWU8Zqtlp7KNBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCqs/B5f6AI8fIhDZe//GSdL3ScMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy
NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvNTAzNGRiMDYtNTQ2Ny0z
YzE2LWJiOGItYTgzYjQwNjk4ODQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj
MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl
MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3
OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2IN5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFqElUEss6eFmPE6XZg4U2/xq+pmfBCdMLkNQrrNWr7ciHu10phx4f3v
vbL2/rgBag7siFyGEvkR4T08yxeQ4F6txsES1SWdpwy05s4ceirksj/F0pvhkhDv
XbeSWQ3hZYz0d9SYmIovT/pBmcjSinScui7T771ThP2LN6i22tBGzZNjYSxKMlgu
a9HMslKsAhXfUvnTX6we4QK+S0GOcwPifIhdxvSZUkxWNiNu6Sq1WAOPQgMNfUzh
WctEtU0bcIsDywT4wBzK/1n1CP6QUdYIoXQwEh743WC7+NJlQZ/ivuByIP4CsoA4
5UyIYZdGux6AIvc8vvJBOIEwM+dm94U=
-----END CERTIFICATE-----
Generated at Sat Jun 6 11:50:57 2026 by rpki-client