Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/c3771ffc-3d14-338a-8f08-18085a6790e9.roa
File:                     c3771ffc-3d14-338a-8f08-18085a6790e9.roa (raw, json)
Hash identifier:          A73LejFQ1HGqlJgKKW3Ek9uarKekroRrNVkq587VgtU=
Subject key identifier:   E6:BF:04:F5:E5:2C:6F:3F:A1:05:A9:5A:E1:96:B4:22:C7:D1:8E:CA
Certificate issuer:       /CN=1add3b23-5fb0-4412-be17-98450d352516
Certificate serial:       010D0C9F4328584DEDE0987791C1C5170A3B5240
Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/c3771ffc-3d14-338a-8f08-18085a6790e9.roa
Signing time:             Sat 23 May 2026 13:00:31 +0000
ROA not before:           Sat 23 May 2026 13:00:31 +0000
ROA not after:            Fri 21 Aug 2026 13:00:31 +0000
asID:                     15327
IP address blocks:        216.151.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ed:e0:98:77:91:c1:c5:17:0a:3b:52:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516
        Validity
            Not Before: May 23 13:00:31 2026 GMT
            Not After : Aug 21 13:00:31 2026 GMT
        Subject: CN=b4efd35b-9552-40f9-814b-9b4f4b4a823e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:22:d2:d7:b6:c4:63:dc:f7:76:54:8d:e9:1e:
                    55:fd:21:0c:0a:a5:18:5e:a2:ca:18:72:14:4c:1d:
                    24:9e:10:c3:4a:3c:8a:ee:c6:5f:f0:64:f0:18:94:
                    c8:f3:fd:c1:e2:7d:7b:e4:89:aa:b3:4b:f6:3b:46:
                    b9:a6:56:97:df:8d:6e:c7:e4:f9:94:ae:07:98:54:
                    42:0f:da:f0:6d:9a:0e:60:6a:54:7d:21:5e:47:7b:
                    a0:5b:ba:6f:fd:26:68:bd:77:59:03:96:7b:0c:5e:
                    4a:ff:74:99:d0:67:d2:05:a3:27:bd:8c:8c:72:f5:
                    e7:87:1f:10:ef:f9:0d:9c:15:72:f5:24:cb:2e:54:
                    ec:af:45:6d:06:42:ad:20:ad:21:0e:75:ca:25:6f:
                    5b:cd:fe:a3:99:a4:3f:99:4c:33:93:f2:89:bf:3f:
                    44:c6:93:6f:25:52:5d:ff:2b:c5:b6:38:86:5d:38:
                    f0:6c:ac:b3:1b:32:87:48:f0:dd:67:23:31:51:58:
                    b6:9e:25:1d:a8:b4:20:41:f0:e3:84:39:c1:79:9f:
                    6d:fc:61:bd:1a:d8:58:fe:86:74:e1:b4:b4:d1:68:
                    89:ed:e2:c6:dc:96:42:46:d9:80:77:29:b2:19:59:
                    42:b4:1d:77:b2:f0:26:38:c7:c4:ad:29:58:4e:85:
                    25:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:BF:04:F5:E5:2C:6F:3F:A1:05:A9:5A:E1:96:B4:22:C7:D1:8E:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/c3771ffc-3d14-338a-8f08-18085a6790e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl

            X509v3 Authority Key Identifier:
                keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.151.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:f5:ca:c9:df:53:31:a7:23:3b:ab:60:86:11:ee:10:51:88:
         e4:0f:48:ad:d6:33:16:c0:13:cd:80:28:06:3a:cc:3b:e0:8c:
         9e:98:b4:01:02:07:f4:16:78:66:04:47:30:ac:aa:e2:3e:1d:
         3c:8f:b0:ea:0b:69:8e:80:a0:b6:53:17:f6:65:e1:89:a6:38:
         b4:fc:31:b0:fb:cf:4c:49:fc:c7:ff:32:60:be:12:fe:48:ad:
         61:96:ee:5f:f7:11:6c:59:a9:55:48:64:d5:40:1f:2b:63:14:
         8c:3f:65:ce:16:b1:de:97:b6:af:0d:44:e3:81:76:a5:97:30:
         98:cc:31:35:1d:8a:fa:2f:a9:69:ba:89:35:10:eb:99:ee:75:
         30:b4:31:b5:15:a7:74:e8:ae:04:1d:4f:48:3f:08:97:00:a5:
         98:9a:a0:c4:60:a7:f4:78:81:2f:ad:98:28:2b:dc:48:35:93:
         4a:8c:1f:12:6c:c2:05:98:e6:33:66:ea:bf:66:b0:0d:65:db:
         88:9d:df:58:f3:00:0d:2c:96:4f:ea:9e:29:ef:98:d7:50:db:
         66:3f:84:9c:b4:f1:56:57:2b:fe:a8:94:d1:d8:e6:5a:21:6e:
         a7:14:ca:3e:3c:4b:09:c0:b4:88:c9:4c:1a:55:f9:34:8a:d8:
         91:31:2d:5b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3t4Jh3kcHFFwo7UkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy
NTE2MB4XDTI2MDUyMzEzMDAzMVoXDTI2MDgyMTEzMDAzMVowLzEtMCsGA1UEAxMk
YjRlZmQzNWItOTU1Mi00MGY5LTgxNGItOWI0ZjRiNGE4MjNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyLS17bEY9z3dlSN6R5V/SEMCqUYXqLKGHIU
TB0knhDDSjyK7sZf8GTwGJTI8/3B4n175Imqs0v2O0a5plaX341ux+T5lK4HmFRC
D9rwbZoOYGpUfSFeR3ugW7pv/SZovXdZA5Z7DF5K/3SZ0GfSBaMnvYyMcvXnhx8Q
7/kNnBVy9STLLlTsr0VtBkKtIK0hDnXKJW9bzf6jmaQ/mUwzk/KJvz9ExpNvJVJd
/yvFtjiGXTjwbKyzGzKHSPDdZyMxUVi2niUdqLQgQfDjhDnBeZ9t/GG9GthY/oZ0
4bS00WiJ7eLG3JZCRtmAdymyGVlCtB13svAmOMfErSlYToUlTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOa/BPXlLG8/oQWpWuGWtCLH0Y7KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk
M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvYzM3NzFmZmMtM2QxNC0z
MzhhLThmMDgtMTgwODVhNjc5MGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl
MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1
MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1
MGQzNTI1MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JdVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAD1ysnfUzGnIzurYIYR7hBRiOQPSK3WMxbAE82AKAY6zDvgjJ6YtAEC
B/QWeGYERzCsquI+HTyPsOoLaY6AoLZTF/Zl4YmmOLT8MbD7z0xJ/Mf/MmC+Ev5I
rWGW7l/3EWxZqVVIZNVAHytjFIw/Zc4Wsd6Xtq8NROOBdqWXMJjMMTUdivovqWm6
iTUQ65nudTC0MbUVp3TorgQdT0g/CJcApZiaoMRgp/R4gS+tmCgr3Eg1k0qMHxJs
wgWY5jNm6r9msA1l24id31jzAA0slk/qninvmNdQ22Y/hJy08VZXK/6olNHY5loh
bqcUyj48SwnAtIjJTBpV+TSK2JExLVs=
-----END CERTIFICATE-----
Generated at Fri Jun 12 12:43:15 2026 by rpki-client