Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1/97e930b1-4743-3c5c-bcbf-6fe22de3a9f1.roa
File:                     97e930b1-4743-3c5c-bcbf-6fe22de3a9f1.roa (raw, json)
Hash identifier:          hWfwkyzl13ZyuxklsCvg5VI6PezhxnY6QkysFBQP7Wo=
Subject key identifier:   B4:24:77:99:00:BE:0A:D6:CB:46:43:9A:60:80:F7:C6:5E:AC:C8:0C
Certificate issuer:       /CN=00b089f9-bcf9-4483-badb-c4cf8ca6f9e1
Certificate serial:       010D0C9F4328584DA815886EBBDDBED7DDFA3540
Authority key identifier: 63:78:09:E9:4C:B7:72:04:58:F4:A5:9E:8F:7B:B4:91:9A:DF:36:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1/97e930b1-4743-3c5c-bcbf-6fe22de3a9f1.roa
Signing time:             Tue 28 Apr 2026 13:00:30 +0000
ROA not before:           Tue 28 Apr 2026 13:00:30 +0000
ROA not after:            Mon 27 Jul 2026 13:00:30 +0000
asID:                     27370
IP address blocks:        216.163.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a8:15:88:6e:bb:dd:be:d7:dd:fa:35:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00b089f9-bcf9-4483-badb-c4cf8ca6f9e1
        Validity
            Not Before: Apr 28 13:00:30 2026 GMT
            Not After : Jul 27 13:00:30 2026 GMT
        Subject: CN=53914133-34ce-4d67-b772-023155105ad3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f0:0d:d1:3e:d0:82:9a:16:9a:d9:51:54:41:
                    22:9e:f2:e0:cd:5e:37:87:0c:cd:71:13:95:ca:bb:
                    68:b7:dd:c3:67:cc:eb:75:5d:52:6b:32:e1:38:7e:
                    1a:26:5d:19:87:0f:20:43:89:d7:1d:55:06:82:ef:
                    06:fb:5c:bc:d7:1a:8b:d1:10:b9:f6:8e:09:d8:13:
                    56:a3:6a:6f:e4:10:5f:21:3d:28:69:03:8a:8f:91:
                    b1:ba:ab:ce:89:bf:75:9b:f7:29:fa:ae:ce:de:53:
                    ec:7a:7d:c0:d5:93:17:2e:95:1c:f2:66:94:bd:c2:
                    e8:15:00:bc:8d:7b:10:a9:75:91:1f:72:09:1c:45:
                    82:39:52:e6:d9:c0:65:d1:e7:76:d7:6b:f4:00:11:
                    24:83:2d:49:e3:6c:06:d7:bb:69:65:06:ea:22:a0:
                    9d:dc:97:de:31:71:22:c4:fe:1b:58:8f:2d:30:75:
                    9c:f5:a5:1a:c5:8d:dd:e9:34:38:f4:35:67:61:4c:
                    79:7e:31:d6:53:fb:76:a7:34:18:cc:60:22:19:b9:
                    e2:3d:fd:72:89:25:6f:1e:1d:2a:35:64:71:ce:d2:
                    8c:8a:ad:22:c1:d1:09:5a:89:f6:eb:cc:5d:ce:fd:
                    99:97:ba:23:ba:0b:5f:72:3c:52:9a:35:59:1d:dd:
                    6b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:24:77:99:00:BE:0A:D6:CB:46:43:9A:60:80:F7:C6:5E:AC:C8:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1/97e930b1-4743-3c5c-bcbf-6fe22de3a9f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1.crl

            X509v3 Authority Key Identifier:
                keyid:63:78:09:E9:4C:B7:72:04:58:F4:A5:9E:8F:7B:B4:91:9A:DF:36:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.163.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:cf:9a:ec:79:16:68:d0:4d:1b:46:fc:b1:98:93:21:a0:5d:
         1b:a9:99:0a:9e:dd:e1:ae:68:1a:35:da:48:49:8d:48:dc:74:
         31:de:1d:ae:42:78:f1:96:74:3a:6a:c2:8b:db:ce:f7:64:a6:
         34:ff:09:0b:f7:b7:52:5e:39:fd:0a:10:7a:d0:45:1c:5a:12:
         c6:11:4d:95:89:95:e7:06:e3:fe:da:29:36:58:b6:00:f4:e8:
         c3:21:2c:be:50:da:48:93:b8:fc:18:cb:7d:49:cb:91:86:67:
         4e:48:bb:32:4a:0f:0c:f3:48:67:15:26:4a:99:2f:64:84:a5:
         b4:ea:18:db:79:3a:39:6e:d2:4a:13:5e:fe:dd:35:7a:3b:6b:
         d6:b7:c3:8b:39:28:2b:8b:db:47:eb:b1:f3:17:cf:66:1e:3c:
         d0:89:70:c6:09:90:43:2a:d6:2f:8d:c3:65:0c:51:aa:a9:5a:
         76:39:33:ef:d4:77:52:17:23:1d:be:8f:1a:66:c1:69:65:99:
         16:f0:87:67:92:74:9c:32:55:ad:fa:12:e7:5b:ca:a6:2c:64:
         ef:a0:45:ef:c5:94:f0:4d:89:ce:14:86:23:43:cf:83:c6:78:
         9d:0e:7b:2d:a4:2e:9d:98:ec:c2:c8:67:43:7a:85:3e:0f:aa:
         d7:75:28:82
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2oFYhuu92+1936NUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDBiMDg5ZjktYmNmOS00NDgzLWJhZGItYzRjZjhjYTZm
OWUxMB4XDTI2MDQyODEzMDAzMFoXDTI2MDcyNzEzMDAzMFowLzEtMCsGA1UEAxMk
NTM5MTQxMzMtMzRjZS00ZDY3LWI3NzItMDIzMTU1MTA1YWQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/AN0T7QgpoWmtlRVEEinvLgzV43hwzNcROV
yrtot93DZ8zrdV1SazLhOH4aJl0Zhw8gQ4nXHVUGgu8G+1y81xqL0RC59o4J2BNW
o2pv5BBfIT0oaQOKj5GxuqvOib91m/cp+q7O3lPsen3A1ZMXLpUc8maUvcLoFQC8
jXsQqXWRH3IJHEWCOVLm2cBl0ed212v0ABEkgy1J42wG17tpZQbqIqCd3JfeMXEi
xP4bWI8tMHWc9aUaxY3d6TQ49DVnYUx5fjHWU/t2pzQYzGAiGbniPf1yiSVvHh0q
NWRxztKMiq0iwdEJWon268xdzv2Zl7ojugtfcjxSmjVZHd1r3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLQkd5kAvgrWy0ZDmmCA98ZerMgMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wMGIw
ODlmOS1iY2Y5LTQ0ODMtYmFkYi1jNGNmOGNhNmY5ZTEvOTdlOTMwYjEtNDc0My0z
YzVjLWJjYmYtNmZlMjJkZTNhOWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMDBiMDg5ZjktYmNmOS00NDgzLWJh
ZGItYzRjZjhjYTZmOWUxLzAwYjA4OWY5LWJjZjktNDQ4My1iYWRiLWM0Y2Y4Y2E2
ZjllMS5jcmwwHwYDVR0jBBgwFoAUY3gJ6Uy3cgRY9KWej3u0kZrfNoQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8wMGIwODlmOS1iY2Y5LTQ0ODMtYmFkYi1jNGNm
OGNhNmY5ZTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2KPcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH3Pmux5FmjQTRtG/LGYkyGgXRupmQqe3eGuaBo12khJjUjcdDHeHa5C
ePGWdDpqwovbzvdkpjT/CQv3t1JeOf0KEHrQRRxaEsYRTZWJlecG4/7aKTZYtgD0
6MMhLL5Q2kiTuPwYy31Jy5GGZ05IuzJKDwzzSGcVJkqZL2SEpbTqGNt5Ojlu0koT
Xv7dNXo7a9a3w4s5KCuL20frsfMXz2YePNCJcMYJkEMq1i+Nw2UMUaqpWnY5M+/U
d1IXIx2+jxpmwWllmRbwh2eSdJwyVa36EudbyqYsZO+gRe/FlPBNic4UhiNDz4PG
eJ0Oey2kLp2Y7MLIZ0N6hT4Pqtd1KII=
-----END CERTIFICATE-----
Generated at Wed Apr 29 15:33:08 2026 by rpki-client