Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/bb6e7d90-75ce-3d1a-88e9-674e0647f9bd.roa
File:                     bb6e7d90-75ce-3d1a-88e9-674e0647f9bd.roa (raw, json)
Hash identifier:          gF8mT8aQ/iGByF64BJbF9SUkbKQZUPBFTgDyY6DRSxQ=
Subject key identifier:   D2:57:47:B4:5A:3A:D2:F4:2D:A4:2A:23:83:20:32:98:47:DC:C1:0D
Certificate issuer:       /CN=c554a280-22a1-477c-97bf-f23a7f33a0c0
Certificate serial:       010D0C9F4328584D5E1A5033A764304B976F73C0
Authority key identifier: BC:0E:50:C6:09:1A:EE:F3:D5:CA:17:87:86:B6:A9:50:1D:DC:59:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/bb6e7d90-75ce-3d1a-88e9-674e0647f9bd.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     33185
IP address blocks:        104.167.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c554a280-22a1-477c-97bf-f23a7f33a0c0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c554a280-22a1-477c-97bf-f23a7f33a0c0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:50:33:a7:64:30:4b:97:6f:73:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c554a280-22a1-477c-97bf-f23a7f33a0c0
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=fd43b074-858f-40ed-aff0-0dcd96d049e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2d:9c:f0:e0:ad:4d:6f:5e:c0:35:c7:86:2b:
                    62:c4:a5:66:be:7b:fa:b7:00:6c:68:ae:ab:63:b5:
                    c9:1b:57:f0:cc:cc:19:8b:7e:df:8d:79:1b:0c:22:
                    5b:82:c4:bd:da:99:ce:76:92:c5:f5:0b:16:77:52:
                    74:ac:71:0d:dc:f7:d8:fa:6a:30:00:d6:20:96:c1:
                    e4:a1:75:95:61:b6:26:76:25:3d:a3:fc:08:c7:0b:
                    5d:f8:d3:f7:62:63:88:aa:53:77:8c:07:dc:ba:71:
                    65:d3:b9:ce:9a:21:fb:5d:03:4c:a0:ec:bc:e3:38:
                    9d:c4:b1:9c:fa:72:b6:8c:c5:aa:2c:2e:0f:16:32:
                    4f:e2:25:06:a3:e4:d5:d5:81:5f:e4:41:a4:e1:f9:
                    2e:7d:5b:e7:a7:9c:6f:4d:a2:fb:7c:2f:0d:ff:17:
                    28:16:b5:ca:69:78:27:7b:d5:e0:07:25:09:72:99:
                    b9:09:bf:c9:b9:cc:a3:e0:bd:25:47:30:34:bf:8d:
                    cf:a4:94:d6:20:4d:f6:69:e8:28:bc:d7:b9:94:d7:
                    b3:19:3c:5b:c9:74:c0:41:ea:79:bf:47:7e:9a:47:
                    55:53:6b:b6:e3:58:b6:ac:88:db:5f:16:67:55:c0:
                    55:e0:f5:8f:27:14:a1:c0:e9:f2:c9:70:f5:c0:f7:
                    0d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:57:47:B4:5A:3A:D2:F4:2D:A4:2A:23:83:20:32:98:47:DC:C1:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/bb6e7d90-75ce-3d1a-88e9-674e0647f9bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c554a280-22a1-477c-97bf-f23a7f33a0c0.crl

            X509v3 Authority Key Identifier:
                keyid:BC:0E:50:C6:09:1A:EE:F3:D5:CA:17:87:86:B6:A9:50:1D:DC:59:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.167.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e3:f9:e0:f6:91:5d:94:cf:20:31:3c:53:c7:a5:b6:71:aa:4c:
         51:64:41:7f:a2:63:4f:79:c0:49:df:af:69:31:23:d1:77:f6:
         74:4a:f4:09:a7:47:d4:ac:f3:bc:25:95:62:0d:bc:96:af:a1:
         1e:06:09:0f:99:79:26:37:74:e0:da:c7:49:84:6e:e9:98:36:
         60:01:78:c2:5e:17:9b:f0:5c:7a:9d:c3:ac:27:66:ea:60:b7:
         50:4c:b3:84:a6:3a:d7:48:3d:52:c8:e1:3e:32:49:30:dc:0c:
         2b:20:5f:b9:8f:b9:99:00:78:94:0c:e5:44:d9:68:65:f0:81:
         cc:ea:41:d7:d1:e6:c2:1e:fd:ee:80:f2:25:25:88:95:90:42:
         4a:cc:26:d4:a0:ed:a9:4c:bc:50:ce:e2:5f:13:de:25:f9:3f:
         e8:b1:b6:48:d3:9d:ea:57:2b:d8:b2:91:51:b9:c7:21:84:79:
         2f:42:ea:1f:00:4e:42:72:7d:8b:2f:a0:51:23:ab:be:ae:a2:
         cb:13:11:48:87:20:e0:ab:62:c5:3a:2c:cc:44:2e:c6:2a:38:
         36:fb:25:c6:05:0a:6f:47:71:00:ae:a2:70:88:fa:d5:52:83:
         3b:1f:46:18:46:ff:ac:9b:d0:84:9f:97:ac:0b:14:bd:ed:93:
         a1:b8:cb:8e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGlAzp2QwS5dvc8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzU1NGEyODAtMjJhMS00NzdjLTk3YmYtZjIzYTdmMzNh
MGMwMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk
ZmQ0M2IwNzQtODU4Zi00MGVkLWFmZjAtMGRjZDk2ZDA0OWU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyi2c8OCtTW9ewDXHhitixKVmvnv6twBsaK6r
Y7XJG1fwzMwZi37fjXkbDCJbgsS92pnOdpLF9QsWd1J0rHEN3PfY+mowANYglsHk
oXWVYbYmdiU9o/wIxwtd+NP3YmOIqlN3jAfcunFl07nOmiH7XQNMoOy84zidxLGc
+nK2jMWqLC4PFjJP4iUGo+TV1YFf5EGk4fkufVvnp5xvTaL7fC8N/xcoFrXKaXgn
e9XgByUJcpm5Cb/Jucyj4L0lRzA0v43PpJTWIE32aegovNe5lNezGTxbyXTAQep5
v0d+mkdVU2u241i2rIjbXxZnVcBV4PWPJxShwOnyyXD1wPcNCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNJXR7RaOtL0LaQqI4MgMphH3MENMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jNTU0
YTI4MC0yMmExLTQ3N2MtOTdiZi1mMjNhN2YzM2EwYzAvYmI2ZTdkOTAtNzVjZS0z
ZDFhLTg4ZTktNjc0ZTA2NDdmOWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYzU1NGEyODAtMjJhMS00NzdjLTk3
YmYtZjIzYTdmMzNhMGMwL2M1NTRhMjgwLTIyYTEtNDc3Yy05N2JmLWYyM2E3ZjMz
YTBjMC5jcmwwHwYDVR0jBBgwFoAUvA5Qxgka7vPVyheHhrapUB3cWcEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9jNTU0YTI4MC0yMmExLTQ3N2MtOTdiZi1mMjNh
N2YzM2EwYzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaKfYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAOP54PaRXZTPIDE8U8eltnGqTFFkQX+iY095wEnfr2kxI9F39nRK9Amn
R9Ss87wllWINvJavoR4GCQ+ZeSY3dODax0mEbumYNmABeMJeF5vwXHqdw6wnZupg
t1BMs4SmOtdIPVLI4T4ySTDcDCsgX7mPuZkAeJQM5UTZaGXwgczqQdfR5sIe/e6A
8iUliJWQQkrMJtSg7alMvFDO4l8T3iX5P+ixtkjTnepXK9iykVG5xyGEeS9C6h8A
TkJyfYsvoFEjq76uossTEUiHIOCrYsU6LMxELsYqODb7JcYFCm9HcQCuonCI+tVS
gzsfRhhG/6yb0ISfl6wLFL3tk6G4y44=
-----END CERTIFICATE-----
Generated at Thu Apr 9 05:37:57 2026 by rpki-client