Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/0b8fa757-4a53-31a5-9a91-dac11b836ffd.roa
File:                     0b8fa757-4a53-31a5-9a91-dac11b836ffd.roa (raw, json)
Hash identifier:          1lsdQ70pzEAfSJQD9yHovE4LVMx+2zRasYHb9X40pm4=
Subject key identifier:   3A:41:6C:29:9D:2F:FA:17:C7:B5:4E:78:25:52:A2:C1:E4:02:8A:FF
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584DE41B29F8779A1A3745565A80
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/0b8fa757-4a53-31a5-9a91-dac11b836ffd.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     16591
IP address blocks:        192.119.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:29:f8:77:9a:1a:37:45:56:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=4da9d4d0-5650-417e-8068-7f13f1a87aaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6e:fc:b7:20:55:7a:47:a0:34:36:5b:ee:b9:
                    24:dd:40:7f:40:83:8a:37:a3:58:06:22:e1:ca:e4:
                    76:bb:8f:1e:c4:72:ac:13:28:a8:61:96:e2:20:4c:
                    39:1d:3a:5b:44:09:25:0e:56:93:6a:4b:e8:38:94:
                    cc:e1:be:f6:14:bf:38:fd:8c:25:c0:0a:39:ad:d1:
                    c9:c5:5c:de:4a:76:57:5f:d7:e1:a5:4a:52:2a:86:
                    e3:13:e2:25:a1:5a:c8:73:a1:f5:15:fe:b4:40:84:
                    98:8e:e9:3c:fa:9e:6c:16:45:4c:31:53:fa:6a:f5:
                    ce:0a:2e:c4:6f:df:47:a8:52:61:b9:59:24:ed:6e:
                    2a:04:c6:9e:ff:8a:96:46:2b:71:b7:93:b0:2d:04:
                    69:90:c3:58:35:65:06:0c:7e:75:d3:4f:49:d8:e0:
                    28:ef:a0:65:5e:58:2e:18:f3:2c:07:7a:f4:80:b6:
                    e2:e5:2c:d6:92:6a:4d:f0:50:51:63:75:9d:01:a1:
                    d6:3c:9f:f0:09:8e:68:f6:b2:d0:6d:7a:cb:19:a3:
                    99:b2:9e:11:b9:a3:45:91:b3:dd:53:95:c7:89:de:
                    92:04:04:d3:5c:44:77:78:5f:a2:93:66:0c:6c:55:
                    7c:b9:c8:32:a7:3c:d7:ed:de:b0:b8:62:00:a3:04:
                    e4:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:41:6C:29:9D:2F:FA:17:C7:B5:4E:78:25:52:A2:C1:E4:02:8A:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/0b8fa757-4a53-31a5-9a91-dac11b836ffd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.119.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:e4:9f:51:0d:79:76:eb:13:3a:b6:19:4c:f6:35:d7:ac:a3:
         6b:cf:95:22:21:05:b0:ae:2b:bb:da:7f:34:2d:41:26:e1:04:
         5f:6f:4e:29:74:f5:f8:a5:d3:e3:c4:a2:aa:89:02:c2:f5:f6:
         c2:6c:de:1a:bd:a4:fb:8b:d2:74:85:3c:7b:50:a6:37:bb:62:
         40:8d:94:f9:85:48:8e:b8:c9:21:3f:86:a1:3f:d6:02:11:4d:
         d3:08:9f:3d:7f:89:fa:0a:c7:be:14:f2:6c:40:c0:30:76:c5:
         93:4e:17:50:c2:9e:fc:66:72:da:63:c0:91:80:cd:06:1f:73:
         b0:0a:69:d7:7a:87:4a:72:e5:b9:b9:61:fe:fc:35:58:b3:18:
         56:6f:fc:d5:ad:9c:d9:d9:69:34:ae:09:a9:0c:c2:7b:98:02:
         a7:fd:b0:8c:20:17:27:fd:ba:f5:ff:95:e1:0a:35:b2:9f:40:
         50:73:21:49:d5:7f:8b:30:e4:06:8c:23:4c:65:52:c2:a5:78:
         51:18:a0:53:ad:cc:9f:06:41:be:93:ce:16:98:3e:a7:16:d2:
         3f:56:65:20:ec:fc:5a:d9:9e:ce:75:3f:bf:5d:00:da:8b:f8:
         bd:d7:76:dd:9b:32:14:e0:79:f8:ce:93:04:0a:70:ce:c0:f3:
         98:51:a5:85
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3kGyn4d5oaN0VWWoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh
MzRlMB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk
NGRhOWQ0ZDAtNTY1MC00MTdlLTgwNjgtN2YxM2YxYTg3YWFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn278tyBVekegNDZb7rkk3UB/QIOKN6NYBiLh
yuR2u48exHKsEyioYZbiIEw5HTpbRAklDlaTakvoOJTM4b72FL84/YwlwAo5rdHJ
xVzeSnZXX9fhpUpSKobjE+IloVrIc6H1Ff60QISYjuk8+p5sFkVMMVP6avXOCi7E
b99HqFJhuVkk7W4qBMae/4qWRitxt5OwLQRpkMNYNWUGDH51009J2OAo76BlXlgu
GPMsB3r0gLbi5SzWkmpN8FBRY3WdAaHWPJ/wCY5o9rLQbXrLGaOZsp4RuaNFkbPd
U5XHid6SBATTXER3eF+ik2YMbFV8ucgypzzX7d6wuGIAowTkwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDpBbCmdL/oXx7VOeCVSosHkAor/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2
NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMGI4ZmE3NTctNGE1My0z
MWE1LTlhOTEtZGFjMTFiODM2ZmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj
MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5
YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0
MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwHcQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJHkn1ENeXbrEzq2GUz2Ndeso2vPlSIhBbCuK7vafzQtQSbhBF9vTil0
9fil0+PEoqqJAsL19sJs3hq9pPuL0nSFPHtQpje7YkCNlPmFSI64ySE/hqE/1gIR
TdMInz1/ifoKx74U8mxAwDB2xZNOF1DCnvxmctpjwJGAzQYfc7AKadd6h0py5bm5
Yf78NVizGFZv/NWtnNnZaTSuCakMwnuYAqf9sIwgFyf9uvX/leEKNbKfQFBzIUnV
f4sw5AaMI0xlUsKleFEYoFOtzJ8GQb6TzhaYPqcW0j9WZSDs/FrZns51P79dANqL
+L3Xdt2bMhTgefjOkwQKcM7A85hRpYU=
-----END CERTIFICATE-----
Generated at Fri May 22 17:38:53 2026 by rpki-client