Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/5fbc700e-9fc9-314d-b424-083af6f592c8.roa
File:                     5fbc700e-9fc9-314d-b424-083af6f592c8.roa (raw, json)
Hash identifier:          EmUdIy/gIZ1vOJLFDeluxXKSBis0yrucbKovSJOvBZk=
Subject key identifier:   B2:07:80:72:06:AA:BE:F9:57:F7:AC:3E:11:8F:8F:C7:26:A9:4D:C7
Certificate issuer:       /CN=a1f49b6f-a170-485e-8c07-d518b906c6ae
Certificate serial:       010D0C9F4328584D8EF566B55844BD13694B4500
Authority key identifier: 5F:D6:DB:12:03:6D:54:0E:FB:5F:55:5F:C1:4A:FC:20:D9:54:A6:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/5fbc700e-9fc9-314d-b424-083af6f592c8.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     25637
IP address blocks:        69.165.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/a1f49b6f-a170-485e-8c07-d518b906c6ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/a1f49b6f-a170-485e-8c07-d518b906c6ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Apr 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:66:b5:58:44:bd:13:69:4b:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1f49b6f-a170-485e-8c07-d518b906c6ae
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=61b6e8a5-2e97-461c-9380-f33afc8a204f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5b:ef:bd:6f:95:89:53:dc:e2:09:ee:58:3e:
                    c2:0e:59:fd:eb:0a:a1:20:2d:3d:e2:ac:8f:cc:f8:
                    56:51:52:54:08:24:77:61:a8:8d:ad:07:08:9b:66:
                    70:f9:31:e9:8b:bf:7e:a6:32:a0:6d:06:70:d1:68:
                    7d:ea:66:df:19:0a:c5:2d:87:55:17:70:89:f6:8c:
                    ce:7f:bb:ab:07:9e:a7:55:c7:33:1c:a3:a5:66:97:
                    8f:9c:ab:0f:82:d3:81:b1:be:d2:da:7f:e2:f4:49:
                    fa:33:96:54:52:1a:ed:dd:c3:d9:f6:bd:50:eb:f3:
                    69:7b:24:3a:11:8d:a5:41:21:37:a0:00:45:3f:f5:
                    58:6c:8f:e9:19:df:18:b4:ce:a9:aa:43:4e:98:fc:
                    89:89:94:01:60:74:99:9a:54:fb:d7:f6:3f:3b:09:
                    2f:78:e8:65:96:e6:fc:98:b2:84:cd:e0:79:89:7c:
                    bc:33:09:72:71:28:68:d9:b3:5f:a5:a2:ed:2b:93:
                    95:21:85:31:06:8e:39:98:4e:21:04:dc:93:1e:b1:
                    2e:03:fb:ec:91:7f:cf:6c:96:2c:74:1e:27:0f:12:
                    34:bc:c5:0c:f8:64:86:71:6f:7a:c8:a3:44:20:c4:
                    67:a6:5d:b7:5c:78:dc:e4:4a:0f:30:f6:c4:8f:a2:
                    6a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:07:80:72:06:AA:BE:F9:57:F7:AC:3E:11:8F:8F:C7:26:A9:4D:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/5fbc700e-9fc9-314d-b424-083af6f592c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/a1f49b6f-a170-485e-8c07-d518b906c6ae.crl

            X509v3 Authority Key Identifier:
                keyid:5F:D6:DB:12:03:6D:54:0E:FB:5F:55:5F:C1:4A:FC:20:D9:54:A6:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.165.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:bb:6a:7a:22:47:45:51:84:04:f5:dc:8b:b5:0a:4b:62:7d:
         df:a9:75:0a:b9:50:a2:bf:88:ac:bb:2c:7c:70:0f:98:50:8b:
         09:de:92:75:3d:0f:54:ab:9f:48:4a:4b:8e:29:15:98:06:6a:
         8d:af:8b:cd:e7:59:c7:bb:47:65:df:7a:b6:7b:3f:9b:60:d9:
         99:da:6a:40:93:ed:34:02:67:d1:1b:a0:e6:0a:25:71:6f:dd:
         44:9c:f9:bb:f1:ed:17:fc:2a:50:ab:48:82:4b:86:76:02:c4:
         9a:0a:be:fe:5d:a0:52:1e:12:12:c0:9e:7d:ac:a7:73:d5:d8:
         64:2a:74:ca:e3:37:12:34:1b:20:9b:86:42:6a:69:01:ef:8f:
         6f:00:b1:9e:c6:61:9a:61:a7:1c:37:53:57:39:e5:f5:39:71:
         d4:3c:84:25:86:40:bb:98:e3:89:b2:59:d3:39:7c:03:1b:c4:
         cd:3d:b3:7a:61:c1:ff:fa:9b:85:18:48:95:13:e5:52:10:a1:
         3e:29:8b:b2:a5:68:1e:b5:a3:52:e3:b7:0a:83:9e:67:64:26:
         97:1a:cf:62:7a:91:f6:94:f3:df:c0:70:81:77:f4:2c:fc:4a:
         5a:03:49:da:3f:ee:ab:74:bb:e7:a6:b9:1b:10:3b:ff:ec:44:
         83:32:84:49
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9Wa1WES9E2lLRQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTFmNDliNmYtYTE3MC00ODVlLThjMDctZDUxOGI5MDZj
NmFlMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk
NjFiNmU4YTUtMmU5Ny00NjFjLTkzODAtZjMzYWZjOGEyMDRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFvvvW+ViVPc4gnuWD7CDln96wqhIC094qyP
zPhWUVJUCCR3YaiNrQcIm2Zw+THpi79+pjKgbQZw0Wh96mbfGQrFLYdVF3CJ9ozO
f7urB56nVcczHKOlZpePnKsPgtOBsb7S2n/i9En6M5ZUUhrt3cPZ9r1Q6/NpeyQ6
EY2lQSE3oABFP/VYbI/pGd8YtM6pqkNOmPyJiZQBYHSZmlT71/Y/OwkveOhllub8
mLKEzeB5iXy8MwlycSho2bNfpaLtK5OVIYUxBo45mE4hBNyTHrEuA/vskX/PbJYs
dB4nDxI0vMUM+GSGcW96yKNEIMRnpl23XHjc5EoPMPbEj6JqcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLIHgHIGqr75V/esPhGPj8cmqU3HMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hMWY0
OWI2Zi1hMTcwLTQ4NWUtOGMwNy1kNTE4YjkwNmM2YWUvNWZiYzcwMGUtOWZjOS0z
MTRkLWI0MjQtMDgzYWY2ZjU5MmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTFmNDliNmYtYTE3MC00ODVlLThj
MDctZDUxOGI5MDZjNmFlL2ExZjQ5YjZmLWExNzAtNDg1ZS04YzA3LWQ1MThiOTA2
YzZhZS5jcmwwHwYDVR0jBBgwFoAUX9bbEgNtVA77X1VfwUr8INlUplQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9hMWY0OWI2Zi1hMTcwLTQ4NWUtOGMwNy1kNTE4
YjkwNmM2YWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERaUQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADO7anoiR0VRhAT13Iu1Cktifd+pdQq5UKK/iKy7LHxwD5hQiwneknU9
D1Srn0hKS44pFZgGao2vi83nWce7R2XferZ7P5tg2ZnaakCT7TQCZ9EboOYKJXFv
3USc+bvx7Rf8KlCrSIJLhnYCxJoKvv5doFIeEhLAnn2sp3PV2GQqdMrjNxI0GyCb
hkJqaQHvj28AsZ7GYZphpxw3U1c55fU5cdQ8hCWGQLuY44myWdM5fAMbxM09s3ph
wf/6m4UYSJUT5VIQoT4pi7KlaB61o1LjtwqDnmdkJpcaz2J6kfaU89/AcIF39Cz8
SloDSdo/7qt0u+emuRsQO//sRIMyhEk=
-----END CERTIFICATE-----
Generated at Mon Apr 20 21:03:07 2026 by rpki-client