Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7/34f3aa16-2afb-39bb-a7ec-0cc8797e324a.roa
File:                     34f3aa16-2afb-39bb-a7ec-0cc8797e324a.roa (raw, json)
Hash identifier:          9nOZ6le5j0Qsr11JSVBQeZFX/75ylb1qrWh/pCQ9Qbg=
Subject key identifier:   E5:02:AE:7E:85:0B:6E:3E:6E:7F:37:A1:C2:0A:27:ED:9B:CE:AD:6D
Certificate issuer:       /CN=b2456e11-ca83-4345-8884-0becc0831fb7
Certificate serial:       010D0C9F4328584DA11AC0633901BB92A2B6A300
Authority key identifier: E8:0D:FA:19:40:E1:CD:5A:C6:10:AE:B8:44:D8:0B:05:C4:18:0B:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7/34f3aa16-2afb-39bb-a7ec-0cc8797e324a.roa
Signing time:             Sun 26 Apr 2026 01:00:25 +0000
ROA not before:           Sun 26 Apr 2026 01:00:25 +0000
ROA not after:            Sat 25 Jul 2026 01:00:25 +0000
asID:                     16509
IP address blocks:        216.181.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7/b2456e11-ca83-4345-8884-0becc0831fb7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7/b2456e11-ca83-4345-8884-0becc0831fb7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 May 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a1:1a:c0:63:39:01:bb:92:a2:b6:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2456e11-ca83-4345-8884-0becc0831fb7
        Validity
            Not Before: Apr 26 01:00:25 2026 GMT
            Not After : Jul 25 01:00:25 2026 GMT
        Subject: CN=3331dadc-cfc7-42e9-9509-8d8d1d1d74e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a6:16:6c:f4:5a:39:6f:d3:94:e8:ac:18:70:
                    8b:31:fb:88:0e:36:c1:27:e5:d5:7b:f4:64:f9:51:
                    c9:e5:fb:91:d2:ec:0f:af:57:32:41:7a:bc:ee:ea:
                    22:a3:6c:80:4b:79:f5:eb:d6:43:ff:71:c5:ba:3b:
                    f9:0f:a0:15:b8:19:73:d3:06:c6:bf:84:de:20:01:
                    6a:e0:f8:20:96:88:73:32:2a:cd:eb:ca:fa:27:fb:
                    76:72:62:8f:2f:28:24:ea:45:09:a4:d0:96:46:52:
                    73:a4:7d:02:e7:fa:6c:ca:34:a4:62:24:e7:99:1c:
                    26:00:4f:03:b8:89:ae:50:29:0c:57:0e:00:15:ad:
                    61:62:55:7b:d8:16:b2:c5:e8:3c:4e:5b:41:99:07:
                    6c:fc:ef:cb:92:11:38:55:96:e3:bd:ac:1e:07:35:
                    2a:a0:8b:0d:2e:9e:06:1f:63:f7:c9:a0:b8:0d:35:
                    d0:71:45:b0:4c:9d:40:78:76:5b:cb:77:df:69:52:
                    f1:01:23:63:c0:6a:02:0d:4b:8f:98:b3:ce:f8:27:
                    fd:ff:da:08:ff:f0:b8:75:44:e2:9a:c9:11:2a:bd:
                    8b:78:6d:3d:dc:7d:63:dd:1e:52:e8:92:23:f0:72:
                    3d:11:a3:f2:95:99:58:6d:85:6e:2c:f9:1c:e6:ec:
                    17:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:02:AE:7E:85:0B:6E:3E:6E:7F:37:A1:C2:0A:27:ED:9B:CE:AD:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7/34f3aa16-2afb-39bb-a7ec-0cc8797e324a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7/b2456e11-ca83-4345-8884-0becc0831fb7.crl

            X509v3 Authority Key Identifier:
                keyid:E8:0D:FA:19:40:E1:CD:5A:C6:10:AE:B8:44:D8:0B:05:C4:18:0B:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.181.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:e0:b2:90:18:e1:db:87:12:25:f8:7f:76:bd:6d:cc:f7:72:
         22:3b:20:d9:18:a9:ea:95:e8:8b:ea:81:a2:07:27:b6:e0:c6:
         4f:5c:df:b7:af:a5:c4:1e:33:d3:76:0a:a4:95:af:6b:2f:fc:
         11:a6:dc:ec:54:7e:cc:43:a7:5b:db:73:a7:d3:a7:69:ee:4f:
         13:7e:c3:97:91:21:0c:f0:bf:83:54:37:80:8e:f2:58:24:c4:
         a5:8d:3a:f5:90:15:4d:67:36:13:17:6e:65:b6:89:0c:c3:70:
         b1:de:37:b9:e4:a5:f9:dd:cc:12:74:36:30:13:61:c5:50:29:
         7b:bc:62:6a:05:39:f6:10:24:d5:16:14:7f:6e:86:d9:d0:2b:
         1a:46:5c:92:ae:ac:8f:b8:75:32:65:83:c4:94:9a:1c:6a:10:
         9f:79:99:bc:8c:ee:72:33:5e:01:f1:59:65:9a:77:07:2d:74:
         f0:f1:82:08:77:8b:80:4b:05:79:bb:12:b9:93:82:56:fe:1f:
         5a:87:bb:d8:49:d2:aa:b6:f4:cd:b5:05:8b:f9:27:39:0e:f3:
         06:c0:cc:6d:ed:07:01:92:b4:64:b6:40:24:6b:99:d7:2a:cd:
         8e:a3:d6:0c:78:44:9d:28:8e:af:ba:ed:41:2f:1a:40:a0:7f:
         c4:76:06:8a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2hGsBjOQG7kqK2owAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjI0NTZlMTEtY2E4My00MzQ1LTg4ODQtMGJlY2MwODMx
ZmI3MB4XDTI2MDQyNjAxMDAyNVoXDTI2MDcyNTAxMDAyNVowLzEtMCsGA1UEAxMk
MzMzMWRhZGMtY2ZjNy00MmU5LTk1MDktOGQ4ZDFkMWQ3NGUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKYWbPRaOW/TlOisGHCLMfuIDjbBJ+XVe/Rk
+VHJ5fuR0uwPr1cyQXq87uoio2yAS3n169ZD/3HFujv5D6AVuBlz0wbGv4TeIAFq
4PgglohzMirN68r6J/t2cmKPLygk6kUJpNCWRlJzpH0C5/psyjSkYiTnmRwmAE8D
uImuUCkMVw4AFa1hYlV72Bayxeg8TltBmQds/O/LkhE4VZbjvaweBzUqoIsNLp4G
H2P3yaC4DTXQcUWwTJ1AeHZby3ffaVLxASNjwGoCDUuPmLPO+Cf9/9oI//C4dUTi
mskRKr2LeG093H1j3R5S6JIj8HI9EaPylZlYbYVuLPkc5uwXRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOUCrn6FC24+bn83ocIKJ+2bzq1tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iMjQ1
NmUxMS1jYTgzLTQzNDUtODg4NC0wYmVjYzA4MzFmYjcvMzRmM2FhMTYtMmFmYi0z
OWJiLWE3ZWMtMGNjODc5N2UzMjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjI0NTZlMTEtY2E4My00MzQ1LTg4
ODQtMGJlY2MwODMxZmI3L2IyNDU2ZTExLWNhODMtNDM0NS04ODg0LTBiZWNjMDgz
MWZiNy5jcmwwHwYDVR0jBBgwFoAU6A36GUDhzVrGEK64RNgLBcQYCxUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9iMjQ1NmUxMS1jYTgzLTQzNDUtODg4NC0wYmVj
YzA4MzFmYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2LUTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEngspAY4duHEiX4f3a9bcz3ciI7INkYqeqV6IvqgaIHJ7bgxk9c37ev
pcQeM9N2CqSVr2sv/BGm3OxUfsxDp1vbc6fTp2nuTxN+w5eRIQzwv4NUN4CO8lgk
xKWNOvWQFU1nNhMXbmW2iQzDcLHeN7nkpfndzBJ0NjATYcVQKXu8YmoFOfYQJNUW
FH9uhtnQKxpGXJKurI+4dTJlg8SUmhxqEJ95mbyM7nIzXgHxWWWadwctdPDxggh3
i4BLBXm7ErmTglb+H1qHu9hJ0qq29M21BYv5JzkO8wbAzG3tBwGStGS2QCRrmdcq
zY6j1gx4RJ0ojq+67UEvGkCgf8R2Boo=
-----END CERTIFICATE-----
Generated at Sun May 3 15:32:32 2026 by rpki-client