Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8fc16ce1-170e-3d8c-a522-d5dae32f871f.roa
File:                     8fc16ce1-170e-3d8c-a522-d5dae32f871f.roa (raw, json)
Hash identifier:          0s9xp2LMyLtGBfFiagwzgYCm5VNv7SCLyq5nXgjwhAQ=
Subject key identifier:   5F:26:8C:C9:28:B6:1C:8D:F8:EC:C5:7B:C4:BD:86:DA:20:AF:CE:60
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F9A686951F6F0453B9C882200
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8fc16ce1-170e-3d8c-a522-d5dae32f871f.roa
Signing time:             Sat 24 Oct 2026 01:00:12 +0000
ROA not before:           Sat 24 Oct 2026 01:00:12 +0000
ROA not after:            Fri 22 Jan 2027 02:00:12 +0000
asID:                     136373
IP address blocks:        154.22.16.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9a:68:69:51:f6:f0:45:3b:9c:88:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct 24 01:00:12 2026 GMT
            Not After : Jan 22 02:00:12 2027 GMT
        Subject: CN=feb65d2d-19a6-47bf-bb33-7a2c90de2df1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e6:21:f2:0f:43:69:6a:5b:32:c0:eb:dc:77:
                    dd:1e:d1:c0:a4:fb:fe:4d:ac:35:87:78:f0:ea:53:
                    07:72:35:41:78:42:a9:b5:00:86:60:90:49:25:f6:
                    71:f8:1b:98:43:be:e5:df:ac:cc:63:91:5a:eb:f9:
                    e8:5e:bf:10:f8:9c:81:fe:56:ea:73:17:13:72:1f:
                    d1:6e:6b:8a:72:f4:9c:ab:80:58:e8:c7:c1:19:17:
                    83:cc:84:1f:41:2d:e1:de:58:5d:23:04:bf:e8:32:
                    37:a3:12:a8:db:dc:93:61:70:99:63:58:bc:b8:30:
                    5a:5b:c1:f0:42:78:bf:3e:88:b8:63:31:c6:3d:4b:
                    c3:79:30:a4:75:ad:00:7a:ec:b8:de:93:72:e3:3b:
                    4d:13:19:ca:52:57:fb:96:2d:b0:63:5b:f3:d1:7a:
                    3c:33:98:4a:d1:17:a1:2d:93:b3:43:2f:e3:3c:c6:
                    be:27:ec:3b:1b:1f:d4:6b:be:02:6c:d6:86:d9:34:
                    41:be:bc:7f:52:af:12:36:af:f1:5a:db:ad:d2:a2:
                    a2:01:ef:49:55:aa:46:cd:cb:46:ab:16:ca:17:57:
                    b5:c5:64:5d:47:e0:ca:82:63:d1:4f:cf:88:ad:df:
                    69:e0:67:75:fa:39:fd:61:a9:6c:49:0a:2b:09:54:
                    af:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:26:8C:C9:28:B6:1C:8D:F8:EC:C5:7B:C4:BD:86:DA:20:AF:CE:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8fc16ce1-170e-3d8c-a522-d5dae32f871f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.22.16.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:02:14:b7:d1:2c:2d:21:f1:e1:85:88:7f:c4:4d:fc:62:9a:
         7a:37:b6:10:4e:62:16:ef:cb:57:bd:b9:ab:b4:09:8a:35:f1:
         42:a8:41:08:4d:39:0c:3b:e7:cf:a9:12:4a:e5:e2:69:ee:01:
         99:4d:1a:41:7a:05:19:a0:7b:b5:2f:05:51:68:d4:2d:38:31:
         22:e0:48:c5:cd:87:6c:24:91:cd:3f:f7:a4:68:12:8f:79:69:
         ac:af:52:b0:ac:48:4d:c6:64:d3:a9:ae:f2:62:14:c5:a1:8a:
         79:4c:b3:df:2c:0d:ae:53:49:78:af:5d:92:fb:89:e9:e6:89:
         9f:39:60:6c:12:bb:e8:b4:55:70:7b:32:17:bd:de:67:f0:6a:
         21:0e:e4:12:c3:0d:89:2b:45:3b:6a:2f:85:1f:0b:27:a0:11:
         99:5b:51:f4:65:5d:ea:61:21:0a:76:7c:97:e9:f8:f0:68:e4:
         4d:09:60:b3:57:4f:d6:64:29:aa:c3:bf:79:25:53:e4:20:1c:
         26:b3:3d:e8:bf:8e:1d:4e:4d:a3:63:46:65:dd:d3:09:ee:c5:
         65:64:4e:54:37:05:c9:25:d4:3e:55:bd:23:d5:5d:04:0b:3e:
         44:44:0c:4b:0d:90:e2:83:2e:65:0c:ba:bb:cf:4a:ff:f0:7b:
         d0:2e:b1:7c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+aaGlR9vBFO5yIIgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MTAyNDAxMDAxMloXDTI3MDEyMjAyMDAxMlowLzEtMCsGA1UEAxMk
ZmViNjVkMmQtMTlhNi00N2JmLWJiMzMtN2EyYzkwZGUyZGYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeYh8g9DaWpbMsDr3HfdHtHApPv+Taw1h3jw
6lMHcjVBeEKptQCGYJBJJfZx+BuYQ77l36zMY5Fa6/noXr8Q+JyB/lbqcxcTch/R
bmuKcvScq4BY6MfBGReDzIQfQS3h3lhdIwS/6DI3oxKo29yTYXCZY1i8uDBaW8Hw
Qni/Poi4YzHGPUvDeTCkda0Aeuy43pNy4ztNExnKUlf7li2wY1vz0Xo8M5hK0Reh
LZOzQy/jPMa+J+w7Gx/Ua74CbNaG2TRBvrx/Uq8SNq/xWtut0qKiAe9JVapGzctG
qxbKF1e1xWRdR+DKgmPRT8+Ird9p4Gd1+jn9YalsSQorCVSvVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF8mjMkothyN+OzFe8S9htogr85gMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOGZjMTZjZTEtMTcwZS0z
ZDhjLWE1MjItZDVkYWUzMmY4NzFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmhYQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC8CFLfRLC0h8eGFiH/ETfximno3thBOYhbvy1e9uau0CYo18UKoQQhN
OQw758+pEkrl4mnuAZlNGkF6BRmge7UvBVFo1C04MSLgSMXNh2wkkc0/96RoEo95
aayvUrCsSE3GZNOprvJiFMWhinlMs98sDa5TSXivXZL7ienmiZ85YGwSu+i0VXB7
Mhe93mfwaiEO5BLDDYkrRTtqL4UfCyegEZlbUfRlXephIQp2fJfp+PBo5E0JYLNX
T9ZkKarDv3klU+QgHCazPei/jh1OTaNjRmXd0wnuxWVkTlQ3Bckl1D5VvSPVXQQL
PkREDEsNkOKDLmUMurvPSv/we9AusXw=
-----END CERTIFICATE-----
Generated at Wed Oct 28 10:31:07 2026 by rpki-client