Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/88e6bfd7-3571-39f4-907b-8e5977091f1f.roa
File:                     88e6bfd7-3571-39f4-907b-8e5977091f1f.roa (raw, json)
Hash identifier:          //DaQO27l0NlqsSJEhVhBxYGN9aujTkQGuvi8a4CU5M=
Subject key identifier:   65:D0:9F:9E:74:73:C5:DE:EC:27:74:73:B2:33:0A:9E:95:5D:CC:48
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584E059B424BA714DEE274481600
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/88e6bfd7-3571-39f4-907b-8e5977091f1f.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     174
IP address blocks:        216.131.106.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:42:4b:a7:14:de:e2:74:48:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=5d725613-5439-4503-99b9-d61cce662a27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f7:65:f0:25:0f:1d:64:66:75:66:59:99:bb:
                    78:41:c6:7e:f1:0a:47:83:c1:03:31:57:fc:bc:ba:
                    15:b7:d1:ae:40:d0:43:5c:33:bd:26:4b:2f:92:9b:
                    ea:47:ad:3e:c0:fa:35:04:d6:04:f1:1b:2f:c5:50:
                    18:91:8e:2d:a9:4c:94:d2:d7:30:bd:3e:c0:a5:74:
                    e3:43:a8:cb:2e:f6:00:fc:be:fb:29:ee:1a:8f:6b:
                    a1:0e:ee:c1:26:4a:b2:8f:78:13:8f:b9:46:e7:0c:
                    2d:e9:65:2a:d0:7d:c2:bb:3c:c8:28:a3:60:5e:b9:
                    28:38:e7:a8:79:15:9a:88:3e:3c:02:5b:d9:20:c9:
                    9a:21:7e:a9:2c:02:cb:52:7e:53:49:03:1e:95:db:
                    79:d5:60:a4:76:cd:b0:32:f1:80:73:70:27:72:53:
                    5a:be:02:75:80:69:f7:a8:96:bf:00:75:54:37:c7:
                    b3:bb:28:47:95:31:ab:b3:d0:9e:a9:a8:65:41:46:
                    78:8b:8b:36:0c:ee:e6:84:1c:fe:63:c2:5f:22:d3:
                    2d:8d:ba:3a:17:97:85:f1:9e:fa:c9:8f:8b:ba:0a:
                    f2:d0:4e:c4:a0:3b:67:22:0e:20:e0:12:b7:8f:98:
                    50:95:b9:e7:3b:b5:eb:1f:28:60:81:3e:65:01:d2:
                    19:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:D0:9F:9E:74:73:C5:DE:EC:27:74:73:B2:33:0A:9E:95:5D:CC:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/88e6bfd7-3571-39f4-907b-8e5977091f1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.131.106.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:fe:4b:1f:a3:24:66:19:21:91:fa:a4:4a:e3:57:9d:0e:d4:
         74:08:4a:23:13:53:93:78:42:90:fa:c5:85:c7:39:fb:fd:49:
         e8:90:c6:f0:a3:6b:c1:0c:69:df:bc:12:be:a3:fa:a3:dc:97:
         fb:59:70:a5:e8:4d:6d:f7:87:8e:f1:ac:b9:bb:1c:25:8d:3b:
         36:f7:34:94:bf:ff:bb:66:17:51:a4:78:ef:16:bc:bd:91:3a:
         30:62:e1:46:3e:e5:12:3e:5d:bc:dd:03:cb:dd:36:70:45:c9:
         bb:50:8e:00:a1:82:ce:51:77:94:5b:5a:dd:e5:48:90:37:e0:
         2c:de:71:e2:e7:c5:63:2f:a7:82:cd:43:9f:31:a1:fc:ca:47:
         a3:f6:8f:d6:be:42:43:d3:09:2c:20:6d:8d:ab:9a:ca:f0:6f:
         75:3d:7a:b8:6f:60:82:fe:7f:8a:be:20:e2:ab:e1:71:52:a1:
         5b:bb:2f:aa:67:1d:4d:61:3a:74:3f:1b:c7:df:f3:06:88:ca:
         7b:80:7d:44:30:8c:1f:08:e7:02:15:53:79:66:0f:5b:5b:07:
         7d:08:be:e5:66:46:92:72:15:df:bb:cc:8b:5f:17:05:21:db:
         88:6c:1c:ff:6f:0d:13:4f:4c:c2:02:51:85:61:88:c3:5f:ee:
         5a:0c:dc:62
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm0JLpxTe4nRIFgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz
NmJhMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk
NWQ3MjU2MTMtNTQzOS00NTAzLTk5YjktZDYxY2NlNjYyYTI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPdl8CUPHWRmdWZZmbt4QcZ+8QpHg8EDMVf8
vLoVt9GuQNBDXDO9JksvkpvqR60+wPo1BNYE8RsvxVAYkY4tqUyU0tcwvT7ApXTj
Q6jLLvYA/L77Ke4aj2uhDu7BJkqyj3gTj7lG5wwt6WUq0H3CuzzIKKNgXrkoOOeo
eRWaiD48AlvZIMmaIX6pLALLUn5TSQMeldt51WCkds2wMvGAc3AnclNavgJ1gGn3
qJa/AHVUN8ezuyhHlTGrs9CeqahlQUZ4i4s2DO7mhBz+Y8JfItMtjbo6F5eF8Z76
yY+Lugry0E7EoDtnIg4g4BK3j5hQlbnnO7XrHyhggT5lAdIZdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGXQn550c8Xe7Cd0c7IzCp6VXcxIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy
NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvODhlNmJmZDctMzU3MS0z
OWY0LTkwN2ItOGU1OTc3MDkxZjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj
MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl
MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3
OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2INqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB7+Sx+jJGYZIZH6pErjV50O1HQISiMTU5N4QpD6xYXHOfv9SeiQxvCj
a8EMad+8Er6j+qPcl/tZcKXoTW33h47xrLm7HCWNOzb3NJS//7tmF1GkeO8WvL2R
OjBi4UY+5RI+XbzdA8vdNnBFybtQjgChgs5Rd5RbWt3lSJA34CzeceLnxWMvp4LN
Q58xofzKR6P2j9a+QkPTCSwgbY2rmsrwb3U9erhvYIL+f4q+IOKr4XFSoVu7L6pn
HU1hOnQ/G8ff8waIynuAfUQwjB8I5wIVU3lmD1tbB30IvuVmRpJyFd+7zItfFwUh
24hsHP9vDRNPTMICUYVhiMNf7loM3GI=
-----END CERTIFICATE-----
Generated at Sat Jun 6 13:39:37 2026 by rpki-client