Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80697166-ff16-4bb4-87a8-1050eb90593c/c1f707e3-581b-3a11-8a60-245b52060e4b.roa
File:                     c1f707e3-581b-3a11-8a60-245b52060e4b.roa (raw, json)
Hash identifier:          I81Xv3F9W3N+NCnoclVfjer6dqQVkxpH56RW7c5dTtY=
Subject key identifier:   64:9D:05:5D:07:AA:D1:94:A7:6B:65:8D:A6:8E:3B:DA:EE:7A:FB:B3
Certificate issuer:       /CN=80697166-ff16-4bb4-87a8-1050eb90593c
Certificate serial:       010D0C9F4328584E4559EB16D06B76F64C4AE800
Authority key identifier: 8A:5C:C2:0D:95:89:8B:CE:16:B6:4C:78:9D:B8:00:AE:AB:27:E0:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80697166-ff16-4bb4-87a8-1050eb90593c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80697166-ff16-4bb4-87a8-1050eb90593c/c1f707e3-581b-3a11-8a60-245b52060e4b.roa
Signing time:             Tue 23 Jun 2026 21:00:12 +0000
ROA not before:           Tue 23 Jun 2026 21:00:12 +0000
ROA not after:            Mon 21 Sep 2026 21:00:12 +0000
asID:                     399989
IP address blocks:        128.254.164.0/22 maxlen: 22
                          128.254.164.0/24 maxlen: 24
                          128.254.165.0/24 maxlen: 24
                          128.254.166.0/24 maxlen: 24
                          128.254.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80697166-ff16-4bb4-87a8-1050eb90593c/80697166-ff16-4bb4-87a8-1050eb90593c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80697166-ff16-4bb4-87a8-1050eb90593c/80697166-ff16-4bb4-87a8-1050eb90593c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80697166-ff16-4bb4-87a8-1050eb90593c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:45:59:eb:16:d0:6b:76:f6:4c:4a:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80697166-ff16-4bb4-87a8-1050eb90593c
        Validity
            Not Before: Jun 23 21:00:12 2026 GMT
            Not After : Sep 21 21:00:12 2026 GMT
        Subject: CN=b6d1e596-6477-440d-98ef-3a585cd6e8ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:18:2e:68:0b:c6:5e:ae:bd:86:4a:a6:a8:71:
                    c3:3a:43:8c:d6:50:6b:e3:cd:f1:19:e8:a4:c0:0e:
                    f8:9a:4f:00:b2:99:84:a1:b5:1b:f1:8f:9e:43:61:
                    e3:2c:34:51:4f:85:61:22:36:74:c1:ca:80:97:11:
                    25:43:df:26:cb:fd:68:88:66:98:08:09:ec:9c:53:
                    54:93:21:85:b3:18:b0:9b:8f:9b:fb:9f:fa:80:c1:
                    99:e4:cf:90:f5:1d:8f:f5:5b:84:eb:92:51:d3:ec:
                    89:f8:58:0a:6c:c4:12:7e:d6:a2:9a:d2:fd:f7:93:
                    19:5f:7b:20:cb:6a:e3:b2:ad:31:e4:93:87:57:4a:
                    c9:f0:11:b9:0c:1d:32:4d:dc:e6:04:88:9d:7d:76:
                    67:cb:75:97:07:32:0d:c8:8c:88:0c:56:cf:05:c3:
                    9f:7c:f0:60:bd:27:6b:f0:fe:fc:1a:64:f3:b9:20:
                    23:f9:ba:7a:1f:95:c4:76:87:bc:e5:a0:a5:fd:c0:
                    68:8f:7d:76:14:8d:d5:12:e2:00:a4:13:2a:9b:7d:
                    f4:dc:56:29:ce:d8:06:af:17:3b:70:7a:ce:37:7e:
                    1a:c5:c1:20:71:cd:9c:54:18:25:d6:9c:5f:28:e1:
                    4e:f8:d8:62:7c:ec:5a:d6:6b:6a:6e:70:00:ea:8a:
                    14:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:9D:05:5D:07:AA:D1:94:A7:6B:65:8D:A6:8E:3B:DA:EE:7A:FB:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80697166-ff16-4bb4-87a8-1050eb90593c/c1f707e3-581b-3a11-8a60-245b52060e4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80697166-ff16-4bb4-87a8-1050eb90593c/80697166-ff16-4bb4-87a8-1050eb90593c.crl

            X509v3 Authority Key Identifier:
                keyid:8A:5C:C2:0D:95:89:8B:CE:16:B6:4C:78:9D:B8:00:AE:AB:27:E0:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80697166-ff16-4bb4-87a8-1050eb90593c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:86:d3:0e:98:27:4c:fc:a5:ec:0f:19:c1:0f:fe:1a:fa:72:
         cb:ba:7b:51:ae:1a:ab:db:51:f2:ec:9a:5a:b1:47:aa:80:2e:
         ed:4a:f2:b3:14:f5:28:e6:87:11:46:31:87:82:e5:b4:37:95:
         bd:80:df:7b:38:3e:3d:11:4a:3f:1d:da:ab:97:47:4d:41:e3:
         75:f3:bf:e8:b6:6a:68:89:2b:34:9f:ec:9d:bb:2f:c5:8a:ff:
         cb:b1:e1:33:40:e5:f9:42:a2:a6:90:f0:58:06:a7:69:f8:2f:
         82:74:6e:84:89:ed:23:c5:7e:41:8a:ae:eb:4a:00:58:2c:bb:
         64:d8:01:e4:7f:44:e4:90:db:34:0c:86:0d:25:a2:21:a5:0d:
         65:ea:0b:6e:96:f2:4a:43:78:11:11:65:fe:ad:08:f2:35:d5:
         bd:db:f3:69:36:75:06:9e:fd:27:fc:bd:19:b0:c6:9f:45:72:
         88:03:bb:97:df:c7:d0:a0:44:ba:cf:71:97:51:a4:31:2d:02:
         f4:20:61:7d:a1:86:d8:3d:59:62:09:f5:2b:4c:46:75:a6:cc:
         56:14:89:0e:ec:59:c8:0b:0a:67:90:4b:47:b7:3d:59:31:b8:
         0b:7f:fa:f9:4e:88:35:26:84:ae:8b:1d:8d:23:f3:a8:cb:e6:
         87:ff:b6:a2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5FWesW0Gt29kxK6AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODA2OTcxNjYtZmYxNi00YmI0LTg3YTgtMTA1MGViOTA1
OTNjMB4XDTI2MDYyMzIxMDAxMloXDTI2MDkyMTIxMDAxMlowLzEtMCsGA1UEAxMk
YjZkMWU1OTYtNjQ3Ny00NDBkLTk4ZWYtM2E1ODVjZDZlOGVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBguaAvGXq69hkqmqHHDOkOM1lBr483xGeik
wA74mk8AspmEobUb8Y+eQ2HjLDRRT4VhIjZ0wcqAlxElQ98my/1oiGaYCAnsnFNU
kyGFsxiwm4+b+5/6gMGZ5M+Q9R2P9VuE65JR0+yJ+FgKbMQSftaimtL995MZX3sg
y2rjsq0x5JOHV0rJ8BG5DB0yTdzmBIidfXZny3WXBzINyIyIDFbPBcOffPBgvSdr
8P78GmTzuSAj+bp6H5XEdoe85aCl/cBoj312FI3VEuIApBMqm3303FYpztgGrxc7
cHrON34axcEgcc2cVBgl1pxfKOFO+NhifOxa1mtqbnAA6ooUVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGSdBV0HqtGUp2tljaaOO9ruevuzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MDY5
NzE2Ni1mZjE2LTRiYjQtODdhOC0xMDUwZWI5MDU5M2MvYzFmNzA3ZTMtNTgxYi0z
YTExLThhNjAtMjQ1YjUyMDYwZTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODA2OTcxNjYtZmYxNi00YmI0LTg3
YTgtMTA1MGViOTA1OTNjLzgwNjk3MTY2LWZmMTYtNGJiNC04N2E4LTEwNTBlYjkw
NTkzYy5jcmwwHwYDVR0jBBgwFoAUilzCDZWJi84Wtkx4nbgArqsn4KwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy84MDY5NzE2Ni1mZjE2LTRiYjQtODdhOC0xMDUw
ZWI5MDU5M2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgP6kMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHSG0w6YJ0z8pewPGcEP/hr6csu6e1GuGqvbUfLsmlqxR6qALu1K8rMU
9SjmhxFGMYeC5bQ3lb2A33s4Pj0RSj8d2quXR01B43Xzv+i2amiJKzSf7J27L8WK
/8ux4TNA5flCoqaQ8FgGp2n4L4J0boSJ7SPFfkGKrutKAFgsu2TYAeR/ROSQ2zQM
hg0loiGlDWXqC26W8kpDeBERZf6tCPI11b3b82k2dQae/Sf8vRmwxp9FcogDu5ff
x9CgRLrPcZdRpDEtAvQgYX2hhtg9WWIJ9StMRnWmzFYUiQ7sWcgLCmeQS0e3PVkx
uAt/+vlOiDUmhK6LHY0j86jL5of/tqI=
-----END CERTIFICATE-----
Generated at Sat Jul 18 03:43:18 2026 by rpki-client