Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/16e491c1-8970-3a5b-b6a1-cf6180795207.roa
File:                     16e491c1-8970-3a5b-b6a1-cf6180795207.roa (raw, json)
Hash identifier:          vGJ3OUJTXCO+I9SdYi6mRWseq+RZpSa3UNXXo7/q8OY=
Subject key identifier:   34:1E:97:FF:F4:D6:6F:AD:63:FF:CB:1C:3D:8B:B8:4C:17:96:0D:0E
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584EAA51F4A3ECBD369171C7F4C0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/16e491c1-8970-3a5b-b6a1-cf6180795207.roa
Signing time:             Thu 30 Jul 2026 01:00:12 +0000
ROA not before:           Thu 30 Jul 2026 01:00:12 +0000
ROA not after:            Wed 28 Oct 2026 01:00:12 +0000
asID:                     36492
IP address blocks:        64.9.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 25 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:aa:51:f4:a3:ec:bd:36:91:71:c7:f4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 30 01:00:12 2026 GMT
            Not After : Oct 28 01:00:12 2026 GMT
        Subject: CN=f30624f4-3b2d-4383-b544-91a3216706ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:fd:aa:d0:d5:a7:a6:77:20:02:12:cc:97:6c:
                    78:f4:d6:70:05:85:3b:03:cb:e0:c0:54:76:e4:98:
                    2c:16:35:18:d1:c2:96:2c:8a:50:ae:7a:92:6a:c5:
                    29:f9:68:85:5e:bd:77:ed:a0:94:8a:73:03:16:6a:
                    8a:7e:27:d3:21:97:3b:bc:d4:47:22:68:8f:5c:6f:
                    7d:2e:9b:48:a4:4f:a9:b9:b0:a7:54:0a:96:61:48:
                    41:27:41:b5:a6:a1:61:ac:4f:d3:bd:07:57:aa:ae:
                    86:74:4d:a4:a3:91:64:38:84:0b:9c:19:3f:72:f2:
                    dd:ce:2d:6d:7d:bb:5a:69:1c:34:63:e6:20:13:00:
                    21:b3:e2:db:ac:83:36:f3:14:ed:fa:bb:b9:28:46:
                    a3:ea:50:53:5a:8d:4a:27:05:1d:85:d1:90:ad:40:
                    27:23:26:42:ea:32:13:15:6c:ab:c3:69:4b:b8:99:
                    8d:3f:2e:87:13:2a:e3:92:16:54:5f:d1:eb:f2:9a:
                    22:97:2f:55:de:c3:1e:7e:65:9a:7d:f7:e7:3f:71:
                    eb:5b:6c:95:72:0f:62:52:b7:3e:02:e5:06:c0:61:
                    a0:2f:5a:b8:ec:fe:80:1c:9c:32:cb:a9:06:b2:51:
                    c1:9a:6f:32:28:e1:72:b1:25:40:8d:85:ca:4e:68:
                    0d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:1E:97:FF:F4:D6:6F:AD:63:FF:CB:1C:3D:8B:B8:4C:17:96:0D:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/16e491c1-8970-3a5b-b6a1-cf6180795207.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:7d:c0:85:6e:b9:79:16:cc:11:6e:8c:93:d4:e2:a3:e1:2f:
         14:c4:e4:59:b7:04:4d:be:19:4b:2d:89:5c:0a:fe:98:7e:df:
         4e:6c:e6:77:c0:0c:6b:37:7e:3f:c0:f1:dd:b8:7d:1d:5e:08:
         be:a6:2e:b3:08:61:06:44:d4:ef:be:c4:c4:89:7a:f8:d9:fb:
         d7:a1:e5:a0:b5:96:f4:d6:e8:4b:88:1a:82:29:b9:14:d0:3f:
         f5:fc:dc:33:46:e1:2a:58:85:92:a8:d8:5f:ec:df:34:9e:a0:
         8f:5b:04:ba:a6:42:89:f9:f1:bc:2f:8f:8d:91:c7:38:fc:9a:
         4b:b4:46:0f:1f:de:31:93:f3:d9:a2:4a:b4:90:ca:ae:f6:95:
         35:3b:23:78:71:dd:86:45:be:88:4d:0f:17:bd:68:a4:cb:6a:
         7d:2f:90:ad:8c:0c:2f:ea:87:74:ab:14:ae:37:f3:a8:47:7a:
         ff:53:8a:7e:64:17:5d:3d:a2:2c:3d:f3:e1:04:44:ca:2b:4c:
         ae:57:b2:34:d6:48:1f:13:7d:dd:4d:8b:42:0c:41:cf:b4:e1:
         ee:fa:4f:56:59:2c:68:c8:8d:a9:83:e4:78:8f:9b:03:87:90:
         46:d7:4e:0c:0e:af:92:4b:44:16:74:bd:5b:18:01:da:60:5e:
         3c:f5:a6:bb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6qUfSj7L02kXHH9MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI2MDczMDAxMDAxMloXDTI2MTAyODAxMDAxMlowLzEtMCsGA1UEAxMk
ZjMwNjI0ZjQtM2IyZC00MzgzLWI1NDQtOTFhMzIxNjcwNmVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoP2q0NWnpncgAhLMl2x49NZwBYU7A8vgwFR2
5JgsFjUY0cKWLIpQrnqSasUp+WiFXr137aCUinMDFmqKfifTIZc7vNRHImiPXG99
LptIpE+pubCnVAqWYUhBJ0G1pqFhrE/TvQdXqq6GdE2ko5FkOIQLnBk/cvLdzi1t
fbtaaRw0Y+YgEwAhs+LbrIM28xTt+ru5KEaj6lBTWo1KJwUdhdGQrUAnIyZC6jIT
FWyrw2lLuJmNPy6HEyrjkhZUX9Hr8poily9V3sMefmWafffnP3HrW2yVcg9iUrc+
AuUGwGGgL1q47P6AHJwyy6kGslHBmm8yKOFysSVAjYXKTmgNOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDQel//01m+tY//LHD2LuEwXlg0OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvMTZlNDkxYzEtODk3MC0z
YTViLWI2YTEtY2Y2MTgwNzk1MjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQAnvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKB9wIVuuXkWzBFujJPU4qPhLxTE5Fm3BE2+GUstiVwK/ph+305s5nfA
DGs3fj/A8d24fR1eCL6mLrMIYQZE1O++xMSJevjZ+9eh5aC1lvTW6EuIGoIpuRTQ
P/X83DNG4SpYhZKo2F/s3zSeoI9bBLqmQon58bwvj42Rxzj8mku0Rg8f3jGT89mi
SrSQyq72lTU7I3hx3YZFvohNDxe9aKTLan0vkK2MDC/qh3SrFK4386hHev9Tin5k
F109oiw98+EERMorTK5XsjTWSB8Tfd1Ni0IMQc+04e76T1ZZLGjIjamD5HiPmwOH
kEbXTgwOr5JLRBZ0vVsYAdpgXjz1prs=
-----END CERTIFICATE-----
Generated at Sat Aug 22 19:31:05 2026 by rpki-client