Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/7fd155e7-23a1-31e5-8943-3860335773e4.roa
File:                     7fd155e7-23a1-31e5-8943-3860335773e4.roa (raw, json)
Hash identifier:          DXPY/YOyWcSI1bUcjV0TCTm49cWc0AUgLnlYmdCGans=
Subject key identifier:   8C:D8:D7:CE:40:C8:A4:A9:0D:4F:C2:CD:F1:01:BF:1E:E3:1C:9F:7E
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F4328584DE41B61B85D8C54757AAFC480
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/7fd155e7-23a1-31e5-8943-3860335773e4.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     10794
IP address blocks:        171.161.16.0/22 maxlen: 22
                          171.161.16.0/24 maxlen: 24
                          171.161.17.0/24 maxlen: 24
                          171.161.18.0/24 maxlen: 24
                          171.161.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:61:b8:5d:8c:54:75:7a:af:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=f929c02b-a9db-4d01-a8e1-0cebe2bda2d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:1a:87:1c:cb:9e:97:3a:3e:b3:38:59:1e:80:
                    70:fa:24:ff:6c:c9:e7:1b:a0:cc:44:c6:40:0a:d4:
                    a0:b3:ff:c6:0a:7d:6c:5f:cc:c6:d8:24:54:bf:ae:
                    65:de:0f:53:51:92:db:70:64:dc:70:d3:d3:8f:08:
                    fe:58:1d:52:0f:19:45:bd:2c:79:17:c6:d1:28:14:
                    af:23:51:cb:b5:00:d6:66:9e:4d:a3:bb:73:f5:80:
                    47:00:76:93:44:03:b5:82:86:2a:7a:98:f8:f5:93:
                    92:44:12:29:0d:c5:9e:b0:eb:4f:50:64:10:bb:b7:
                    1c:5f:a8:48:cb:a4:33:be:a3:63:45:46:d9:4e:37:
                    57:bc:15:7d:86:b1:84:ea:68:a4:da:b9:a9:84:cc:
                    45:b1:6e:f9:ec:27:0b:b0:40:18:73:cc:fd:ce:c6:
                    62:41:a1:ba:9a:7d:cc:a6:4a:2f:9f:37:c1:3a:48:
                    18:2c:47:e2:5d:40:d0:81:ff:ba:99:20:67:b9:75:
                    e8:7b:2d:03:fc:24:60:53:eb:38:33:0a:22:89:7f:
                    a6:16:49:a8:b8:d0:1c:f2:9c:af:b1:99:98:ae:68:
                    c0:60:b8:cf:0a:58:4e:94:82:f5:1b:be:4d:29:b8:
                    67:3b:55:0d:72:94:a7:d7:d6:d8:ea:3c:7d:13:b6:
                    76:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:D8:D7:CE:40:C8:A4:A9:0D:4F:C2:CD:F1:01:BF:1E:E3:1C:9F:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/7fd155e7-23a1-31e5-8943-3860335773e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.161.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:b1:ec:b7:06:96:5a:f5:a8:56:f9:20:32:4e:5f:53:0c:0a:
         81:61:4d:f0:25:b9:5a:52:e3:ae:8c:9e:23:6b:b5:a3:27:39:
         56:b8:43:2d:29:b2:08:18:bc:df:68:2f:34:03:6a:65:45:90:
         9a:b9:36:33:dc:5f:65:63:20:69:18:62:91:12:37:63:02:e8:
         2b:be:9f:b7:4d:ab:c7:be:d1:2c:e3:fa:3f:64:62:34:40:f3:
         c1:28:53:c6:63:d4:f9:3e:e8:e4:5a:94:ea:fd:a4:f5:15:ab:
         6e:5a:26:6c:b2:74:71:48:b6:bd:37:fb:d8:e2:3f:3c:66:75:
         0f:fc:b0:01:7f:3e:dd:70:7b:ca:62:ea:1c:29:56:c0:e3:07:
         28:2c:7b:9b:83:7f:25:b6:8d:e4:ae:f4:3c:fd:8f:10:69:70:
         4f:58:9b:43:35:60:86:f2:ad:41:5e:8a:8a:95:9f:4c:07:0b:
         57:f6:c2:9c:fa:81:1d:8c:5f:f0:fc:e9:4f:b5:7a:ae:b5:d8:
         8d:5e:2b:a5:77:53:75:f5:ee:71:db:cb:14:7d:8d:35:95:7b:
         97:ed:3e:65:d1:b2:87:2b:b6:ce:54:e7:df:4f:d6:cc:af:6e:
         cb:dc:5b:2d:0c:b1:8f:d0:6c:8f:75:2b:82:64:12:1d:5d:3e:
         9e:b4:9e:2f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3kG2G4XYxUdXqvxIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh
MWEwMB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk
ZjkyOWMwMmItYTlkYi00ZDAxLWE4ZTEtMGNlYmUyYmRhMmQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RqHHMuelzo+szhZHoBw+iT/bMnnG6DMRMZA
CtSgs//GCn1sX8zG2CRUv65l3g9TUZLbcGTccNPTjwj+WB1SDxlFvSx5F8bRKBSv
I1HLtQDWZp5No7tz9YBHAHaTRAO1goYqepj49ZOSRBIpDcWesOtPUGQQu7ccX6hI
y6QzvqNjRUbZTjdXvBV9hrGE6mik2rmphMxFsW757CcLsEAYc8z9zsZiQaG6mn3M
pkovnzfBOkgYLEfiXUDQgf+6mSBnuXXoey0D/CRgU+s4MwoiiX+mFkmouNAc8pyv
sZmYrmjAYLjPClhOlIL1G75NKbhnO1UNcpSn19bY6jx9E7Z2LQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIzY185AyKSpDU/CzfEBvx7jHJ9+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5
YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvN2ZkMTU1ZTctMjNhMS0z
MWU1LTg5NDMtMzg2MDMzNTc3M2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm
MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi
YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm
YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCq6EQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIyx7LcGllr1qFb5IDJOX1MMCoFhTfAluVpS466MniNrtaMnOVa4Qy0p
sggYvN9oLzQDamVFkJq5NjPcX2VjIGkYYpESN2MC6Cu+n7dNq8e+0Szj+j9kYjRA
88EoU8Zj1Pk+6ORalOr9pPUVq25aJmyydHFItr03+9jiPzxmdQ/8sAF/Pt1we8pi
6hwpVsDjBygse5uDfyW2jeSu9Dz9jxBpcE9Ym0M1YIbyrUFeioqVn0wHC1f2wpz6
gR2MX/D86U+1eq612I1eK6V3U3X17nHbyxR9jTWVe5ftPmXRsocrts5U599P1syv
bsvcWy0MsY/QbI91K4JkEh1dPp60ni8=
-----END CERTIFICATE-----
Generated at Thu May 21 18:33:32 2026 by rpki-client