Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd/c8823d7b-5ece-3489-b72b-ced743ec137b.roa
File:                     c8823d7b-5ece-3489-b72b-ced743ec137b.roa (raw, json)
Hash identifier:          Ivm/MiIQeD6p9Q97gxe7aVeHUWlRtVelp25LBgzCBsw=
Subject key identifier:   09:39:E2:C4:B2:C6:FC:77:AE:54:98:61:FA:3D:3F:B6:D6:E4:E5:8C
Certificate issuer:       /CN=1cf30977-73f6-4522-b061-66f0061f58dd
Certificate serial:       010D0C9F4328584DDA55C839E770CE73DA591D00
Authority key identifier: 8C:7B:72:58:A8:E7:5D:32:06:BA:47:53:70:B1:0C:36:80:A3:7F:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd/c8823d7b-5ece-3489-b72b-ced743ec137b.roa
Signing time:             Sat 16 May 2026 13:00:31 +0000
ROA not before:           Sat 16 May 2026 13:00:31 +0000
ROA not after:            Fri 14 Aug 2026 13:00:31 +0000
asID:                     395660
IP address blocks:        162.106.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd/1cf30977-73f6-4522-b061-66f0061f58dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd/1cf30977-73f6-4522-b061-66f0061f58dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:da:55:c8:39:e7:70:ce:73:da:59:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cf30977-73f6-4522-b061-66f0061f58dd
        Validity
            Not Before: May 16 13:00:31 2026 GMT
            Not After : Aug 14 13:00:31 2026 GMT
        Subject: CN=b129a55f-abd6-4586-a5a2-644076e878f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e7:d3:04:53:e0:60:6c:7b:5c:1a:6d:65:1c:
                    9a:fe:f6:46:6f:0c:6f:ff:68:30:d5:d7:a4:93:a8:
                    fe:83:f4:1d:cc:6b:d6:27:06:63:db:b0:03:25:8b:
                    9c:40:bf:b8:cd:dd:a3:0a:eb:9d:a7:ed:e6:f6:35:
                    a4:7d:38:98:1c:69:df:46:04:f9:e7:b3:09:23:b1:
                    79:31:bb:c1:d4:c1:bf:2d:92:ef:43:2e:80:73:c8:
                    80:b0:9c:71:7f:5f:a7:12:86:77:a6:8f:fd:da:f4:
                    ea:d5:00:96:55:35:27:ff:e5:51:6a:9e:73:3f:da:
                    dc:8d:a8:c6:43:fa:f2:d9:e9:dd:ca:56:fe:0a:56:
                    23:9a:7c:2d:e4:38:38:f3:1d:36:34:a5:74:00:da:
                    d4:bf:32:fe:ae:d1:9c:bd:8b:23:7a:cd:64:fe:75:
                    c6:10:98:e3:b3:55:bf:6e:ab:ea:3b:81:d0:2a:8f:
                    9e:41:7c:3c:5a:68:68:73:63:34:06:99:bf:d1:d8:
                    72:66:4c:4a:46:7c:24:dd:22:1a:a5:73:a8:72:36:
                    81:ca:f4:1d:76:25:48:ef:d2:e4:d1:bd:bb:25:38:
                    59:1e:96:f4:57:ae:ad:e8:e9:38:0a:90:64:85:65:
                    ec:85:0f:ba:25:e0:3f:30:f2:e1:22:5b:c7:32:d1:
                    27:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:39:E2:C4:B2:C6:FC:77:AE:54:98:61:FA:3D:3F:B6:D6:E4:E5:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd/c8823d7b-5ece-3489-b72b-ced743ec137b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd/1cf30977-73f6-4522-b061-66f0061f58dd.crl

            X509v3 Authority Key Identifier:
                keyid:8C:7B:72:58:A8:E7:5D:32:06:BA:47:53:70:B1:0C:36:80:A3:7F:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.106.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:7d:9a:5f:8e:eb:24:a5:e1:bd:54:d2:c2:88:16:11:8e:22:
         80:aa:b0:91:b4:3e:f2:00:62:d5:6e:a7:70:4c:41:87:42:5f:
         e9:a3:ee:70:2a:af:c1:da:48:d3:cc:67:b9:e0:2d:2a:c9:de:
         44:db:a9:b4:fe:12:0a:bf:e6:25:31:c1:e7:eb:3c:15:cd:57:
         aa:ac:87:76:23:e4:fb:b9:f6:05:b9:b5:e7:c9:e7:2b:d9:36:
         bb:0d:d1:26:ce:c3:ca:7d:1a:51:51:5c:18:98:7c:41:de:77:
         05:f2:91:bd:62:aa:51:51:05:8b:ab:76:f0:73:9a:6f:7c:f1:
         14:6f:3b:23:83:c8:f9:e1:f3:f3:fc:f4:e6:bd:97:b2:56:b5:
         22:32:f2:53:2b:11:47:4e:87:77:4b:11:41:b5:9f:7f:f1:45:
         76:23:b7:2c:42:71:c4:cf:95:01:c9:66:18:43:91:e4:b8:31:
         f2:88:68:f9:1d:77:10:1d:b6:f1:4a:37:80:6f:4d:7e:d1:79:
         6f:ab:e2:22:5f:dc:73:d7:3e:7c:96:a1:dd:d8:29:c4:12:4b:
         0d:1e:dd:d9:5c:3f:e0:93:23:e7:3e:a5:da:c5:9e:ed:45:9c:
         b3:a6:ce:dd:b9:86:03:ef:4f:4a:21:cc:f0:a8:55:24:a7:64:
         61:a5:d0:0f
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE3aVcg553DOc9pZHQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWNmMzA5NzctNzNmNi00NTIyLWIwNjEtNjZmMDA2MWY1
OGRkMB4XDTI2MDUxNjEzMDAzMVoXDTI2MDgxNDEzMDAzMVowLzEtMCsGA1UEAxMk
YjEyOWE1NWYtYWJkNi00NTg2LWE1YTItNjQ0MDc2ZTg3OGYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+fTBFPgYGx7XBptZRya/vZGbwxv/2gw1dek
k6j+g/QdzGvWJwZj27ADJYucQL+4zd2jCuudp+3m9jWkfTiYHGnfRgT557MJI7F5
MbvB1MG/LZLvQy6Ac8iAsJxxf1+nEoZ3po/92vTq1QCWVTUn/+VRap5zP9rcjajG
Q/ry2endylb+ClYjmnwt5Dg48x02NKV0ANrUvzL+rtGcvYsjes1k/nXGEJjjs1W/
bqvqO4HQKo+eQXw8Wmhoc2M0Bpm/0dhyZkxKRnwk3SIapXOocjaByvQddiVI79Lk
0b27JThZHpb0V66t6Ok4CpBkhWXshQ+6JeA/MPLhIlvHMtEngwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFAk54sSyxvx3rlSYYfo9P7bW5OWMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xY2Yz
MDk3Ny03M2Y2LTQ1MjItYjA2MS02NmYwMDYxZjU4ZGQvYzg4MjNkN2ItNWVjZS0z
NDg5LWI3MmItY2VkNzQzZWMxMzdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMWNmMzA5NzctNzNmNi00NTIyLWIw
NjEtNjZmMDA2MWY1OGRkLzFjZjMwOTc3LTczZjYtNDUyMi1iMDYxLTY2ZjAwNjFm
NThkZC5jcmwwHwYDVR0jBBgwFoAUjHtyWKjnXTIGukdTcLEMNoCjf6UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8xY2YzMDk3Ny03M2Y2LTQ1MjItYjA2MS02NmYw
MDYxZjU4ZGQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAomowVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAIn2aX47rJKXhvVTSwogWEY4igKqwkbQ+8gBi1W6ncExBh0Jf6aPucCqv
wdpI08xnueAtKsneRNuptP4SCr/mJTHB5+s8Fc1XqqyHdiPk+7n2Bbm158nnK9k2
uw3RJs7Dyn0aUVFcGJh8Qd53BfKRvWKqUVEFi6t28HOab3zxFG87I4PI+eHz8/z0
5r2Xsla1IjLyUysRR06Hd0sRQbWff/FFdiO3LEJxxM+VAclmGEOR5Lgx8oho+R13
EB228Uo3gG9NftF5b6viIl/cc9c+fJah3dgpxBJLDR7d2Vw/4JMj5z6l2sWe7UWc
s6bO3bmGA+9PSiHM8KhVJKdkYaXQDw==
-----END CERTIFICATE-----
Generated at Fri May 22 17:40:57 2026 by rpki-client