Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/46baebeb-82f3-33ed-8090-de61ea0382c3.roa
File:                     46baebeb-82f3-33ed-8090-de61ea0382c3.roa (raw, json)
Hash identifier:          ecCNWSvid7pV3vXKvkyFnf0LwsVhckgpQ82rGeqUESg=
Subject key identifier:   4A:D1:A6:34:BF:0B:1C:78:87:BE:7D:07:44:26:7B:0C:9A:15:7A:AE
Certificate issuer:       /CN=69686900-f201-4b2c-a1c7-afb725abe47f
Certificate serial:       010D0C9F4328584D30CA9BAB718FC4B14D13D2C0
Authority key identifier: 46:CD:B7:E7:87:A9:20:32:5B:E6:E3:AA:56:58:59:CC:00:57:84:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/46baebeb-82f3-33ed-8090-de61ea0382c3.roa
Signing time:             Mon 16 Mar 2026 19:28:36 +0000
ROA not before:           Mon 16 Mar 2026 19:28:36 +0000
ROA not after:            Sun 14 Jun 2026 19:28:36 +0000
asID:                     7385
IP address blocks:        76.164.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:ca:9b:ab:71:8f:c4:b1:4d:13:d2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69686900-f201-4b2c-a1c7-afb725abe47f
        Validity
            Not Before: Mar 16 19:28:36 2026 GMT
            Not After : Jun 14 19:28:36 2026 GMT
        Subject: CN=047db658-e000-4dce-b53c-4e4ac69505c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:18:4f:92:14:c2:1b:0b:76:be:1c:0c:cb:ab:
                    00:09:0a:53:0d:fb:a6:1d:39:fd:4a:cf:ae:e3:50:
                    1a:2d:da:3f:3d:41:1b:b5:cb:e3:98:06:ff:e6:85:
                    97:4a:31:57:d3:3f:13:3e:43:c6:1f:12:e2:68:b1:
                    83:d2:0a:87:c0:5b:97:ef:95:cf:ed:ea:e8:c9:69:
                    c9:89:ad:35:99:b4:91:81:c9:fa:1b:a3:3c:f3:98:
                    f2:fe:6d:8b:fd:90:a7:43:38:23:57:3a:ac:a6:94:
                    ed:f5:89:b5:b6:db:16:0c:9b:e1:a3:56:51:9b:b8:
                    e3:c7:ae:3a:95:b0:7b:7c:98:d0:96:1a:3b:c5:13:
                    75:5a:ba:2a:c9:46:93:61:29:57:0d:1f:5a:12:51:
                    6d:2a:40:43:8c:24:c9:e3:a6:74:85:32:b3:49:88:
                    b6:9b:8c:34:12:0b:8b:bb:ce:6d:37:82:bf:02:72:
                    32:25:2a:dd:ce:9d:62:f0:b2:e0:0f:ae:eb:8d:9b:
                    70:33:ab:08:13:5e:6c:53:94:43:15:60:7f:6e:df:
                    ba:4a:33:6d:7e:16:4c:82:6f:56:46:43:01:6b:d2:
                    c2:d9:3b:79:35:26:46:30:c1:26:09:3b:79:20:29:
                    e6:52:51:9d:20:64:c3:02:45:cd:56:e9:82:02:aa:
                    8d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:D1:A6:34:BF:0B:1C:78:87:BE:7D:07:44:26:7B:0C:9A:15:7A:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/46baebeb-82f3-33ed-8090-de61ea0382c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.crl

            X509v3 Authority Key Identifier:
                keyid:46:CD:B7:E7:87:A9:20:32:5B:E6:E3:AA:56:58:59:CC:00:57:84:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.164.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:ea:45:ae:00:74:3e:0b:06:8b:1a:05:4f:9c:1d:98:cf:b3:
         64:80:4f:1d:93:72:31:14:62:39:76:22:f5:e0:7b:6a:5d:89:
         68:13:92:37:54:1c:bc:03:37:45:2b:a5:8f:82:c5:a3:bb:2e:
         a9:3d:87:8c:62:fd:4c:96:42:f7:2c:e7:f5:71:fc:c1:03:58:
         72:c3:4f:f1:38:7e:c7:08:e5:33:35:88:1c:2e:b8:35:f3:b7:
         99:04:0c:6d:49:7a:1d:2e:a3:08:62:13:d9:0c:cc:c3:c0:69:
         d9:0f:d3:06:c8:d9:c5:58:7b:7d:e0:f0:94:b5:6f:16:6c:30:
         27:d7:2d:5b:d8:91:9b:8f:9e:8c:e2:ca:69:3b:bf:7c:6d:1b:
         8f:7d:4b:ad:84:16:ac:e9:89:07:a0:de:5c:ae:5f:5d:6a:7b:
         7e:fb:bd:31:50:59:d3:3d:a1:b1:e0:9d:0d:18:44:ca:04:54:
         af:07:e4:21:1a:68:ff:30:6f:22:0c:31:85:f3:a5:9f:7a:55:
         e6:2c:9f:e9:20:57:04:c3:bf:8b:cf:87:8b:63:fa:1a:c1:59:
         56:ba:ed:61:58:01:03:95:53:db:15:28:f2:7f:b6:19:a3:10:
         67:40:d7:20:b0:2b:04:ed:f4:27:6d:38:86:3d:50:ee:69:05:
         f5:5d:67:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wypurcY/EsU0T0sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjk2ODY5MDAtZjIwMS00YjJjLWExYzctYWZiNzI1YWJl
NDdmMB4XDTI2MDMxNjE5MjgzNloXDTI2MDYxNDE5MjgzNlowLzEtMCsGA1UEAxMk
MDQ3ZGI2NTgtZTAwMC00ZGNlLWI1M2MtNGU0YWM2OTUwNWM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxhPkhTCGwt2vhwMy6sACQpTDfumHTn9Ss+u
41AaLdo/PUEbtcvjmAb/5oWXSjFX0z8TPkPGHxLiaLGD0gqHwFuX75XP7eroyWnJ
ia01mbSRgcn6G6M885jy/m2L/ZCnQzgjVzqsppTt9Ym1ttsWDJvho1ZRm7jjx646
lbB7fJjQlho7xRN1WroqyUaTYSlXDR9aElFtKkBDjCTJ46Z0hTKzSYi2m4w0EguL
u85tN4K/AnIyJSrdzp1i8LLgD67rjZtwM6sIE15sU5RDFWB/bt+6SjNtfhZMgm9W
RkMBa9LC2Tt5NSZGMMEmCTt5ICnmUlGdIGTDAkXNVumCAqqNeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFErRpjS/Cxx4h759B0QmewyaFXquMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82OTY4
NjkwMC1mMjAxLTRiMmMtYTFjNy1hZmI3MjVhYmU0N2YvNDZiYWViZWItODJmMy0z
M2VkLTgwOTAtZGU2MWVhMDM4MmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNjk2ODY5MDAtZjIwMS00YjJjLWEx
YzctYWZiNzI1YWJlNDdmLzY5Njg2OTAwLWYyMDEtNGIyYy1hMWM3LWFmYjcyNWFi
ZTQ3Zi5jcmwwHwYDVR0jBBgwFoAURs2354epIDJb5uOqVlhZzABXhPIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS82OTY4NjkwMC1mMjAxLTRiMmMtYTFjNy1hZmI3
MjVhYmU0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQETKQQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGDqRa4AdD4LBosaBU+cHZjPs2SATx2TcjEUYjl2IvXge2pdiWgTkjdU
HLwDN0UrpY+CxaO7Lqk9h4xi/UyWQvcs5/Vx/MEDWHLDT/E4fscI5TM1iBwuuDXz
t5kEDG1Jeh0uowhiE9kMzMPAadkP0wbI2cVYe33g8JS1bxZsMCfXLVvYkZuPnozi
ymk7v3xtG499S62EFqzpiQeg3lyuX11qe377vTFQWdM9obHgnQ0YRMoEVK8H5CEa
aP8wbyIMMYXzpZ96VeYsn+kgVwTDv4vPh4tj+hrBWVa67WFYAQOVU9sVKPJ/thmj
EGdA1yCwKwTt9CdtOIY9UO5pBfVdZ2g=
-----END CERTIFICATE-----
Generated at Fri Mar 20 08:53:54 2026 by rpki-client