Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7dd319be-2876-403e-ba86-24d27aaa8fc0/d9774c9f-9706-3c6d-aa0a-593b7d53ed97.roa
File:                     d9774c9f-9706-3c6d-aa0a-593b7d53ed97.roa (raw, json)
Hash identifier:          j+ql7RJ9PqynufQSpBL3wRMyrPMoNxscOQPZxgShaIU=
Subject key identifier:   22:D1:F1:CB:46:94:7B:37:3F:8F:54:90:82:3A:4B:3C:8C:E3:A9:F9
Certificate issuer:       /CN=7dd319be-2876-403e-ba86-24d27aaa8fc0
Certificate serial:       010D0C9F4328584D2644B3CA693A185062CCBD10
Authority key identifier: 16:AA:4C:89:91:D8:F2:EA:74:E2:70:1C:43:61:F4:D9:D9:6A:20:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7dd319be-2876-403e-ba86-24d27aaa8fc0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7dd319be-2876-403e-ba86-24d27aaa8fc0/d9774c9f-9706-3c6d-aa0a-593b7d53ed97.roa
Signing time:             Fri 13 Mar 2026 01:00:31 +0000
ROA not before:           Fri 13 Mar 2026 01:00:31 +0000
ROA not after:            Thu 11 Jun 2026 01:00:31 +0000
asID:                     203107
IP address blocks:        162.217.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7dd319be-2876-403e-ba86-24d27aaa8fc0/7dd319be-2876-403e-ba86-24d27aaa8fc0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7dd319be-2876-403e-ba86-24d27aaa8fc0/7dd319be-2876-403e-ba86-24d27aaa8fc0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7dd319be-2876-403e-ba86-24d27aaa8fc0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:26:44:b3:ca:69:3a:18:50:62:cc:bd:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dd319be-2876-403e-ba86-24d27aaa8fc0
        Validity
            Not Before: Mar 13 01:00:31 2026 GMT
            Not After : Jun 11 01:00:31 2026 GMT
        Subject: CN=e9e0964b-8a75-46d5-9968-427c9025f29b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:79:8d:af:fb:da:47:3a:0d:16:52:29:98:f6:
                    14:b2:03:b5:1d:c2:0f:8b:09:7f:97:a0:42:be:6e:
                    bc:57:93:a4:1b:fc:ef:01:d0:52:7c:8d:00:c4:d0:
                    be:21:a3:2f:dd:ac:d2:5e:32:11:52:57:ef:7b:16:
                    c6:3d:3f:af:dc:07:61:90:c4:39:f1:f9:66:8c:1d:
                    2f:ed:c5:f2:68:14:8b:36:c2:bf:ff:85:40:20:e7:
                    6c:57:81:b3:84:78:0f:f8:64:2e:a8:d0:b0:9d:64:
                    3f:98:a6:86:41:a2:ab:4d:e1:8d:fc:58:9a:39:f7:
                    64:2c:f1:b7:1f:b3:34:ad:ed:6e:34:63:32:d6:41:
                    79:1c:fe:5b:93:09:27:ba:48:56:0f:cb:25:39:de:
                    f4:5f:92:65:23:ce:3f:22:9c:16:f5:21:84:c9:1d:
                    3b:22:95:a6:b0:6c:1c:be:36:cc:a1:9b:cf:b4:4d:
                    34:9d:99:7f:1e:19:9f:00:50:4e:03:48:9c:9a:65:
                    a2:74:8a:5d:b0:a1:d7:11:a5:b8:f7:ac:7c:f7:f2:
                    cd:46:0f:a6:78:f8:b2:49:73:0f:d9:49:c4:1f:ff:
                    7f:1f:94:d3:d2:40:e3:b7:91:f8:8b:cb:9b:0f:21:
                    ca:53:10:97:dc:eb:f8:d4:0b:1b:2c:0f:b6:63:28:
                    ed:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:D1:F1:CB:46:94:7B:37:3F:8F:54:90:82:3A:4B:3C:8C:E3:A9:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7dd319be-2876-403e-ba86-24d27aaa8fc0/d9774c9f-9706-3c6d-aa0a-593b7d53ed97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7dd319be-2876-403e-ba86-24d27aaa8fc0/7dd319be-2876-403e-ba86-24d27aaa8fc0.crl

            X509v3 Authority Key Identifier:
                keyid:16:AA:4C:89:91:D8:F2:EA:74:E2:70:1C:43:61:F4:D9:D9:6A:20:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7dd319be-2876-403e-ba86-24d27aaa8fc0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.217.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:3d:b1:ef:19:55:03:83:54:e5:6b:4a:8f:5c:25:aa:95:77:
         6e:a3:10:4d:65:0c:13:2b:4d:97:9b:ae:9c:be:ef:e2:9f:a3:
         24:ff:3c:78:d7:96:bc:39:6e:63:c4:65:c4:a5:42:00:37:e9:
         75:2b:91:7d:1c:5c:7d:a2:60:ce:49:db:35:23:d1:97:ed:5f:
         fa:9a:06:f9:fd:d7:a0:a0:84:22:8a:13:d3:07:f4:d9:b3:a0:
         d3:21:60:86:5a:79:96:e1:4c:91:51:66:c4:8b:83:5a:46:61:
         45:8a:a0:7b:31:69:ab:b0:a8:3e:fe:7b:3d:7d:cb:45:73:43:
         20:07:43:17:1a:0b:fb:80:2b:f3:a7:b0:f4:2c:d7:1a:ea:e7:
         cc:da:5c:fc:49:7f:1e:e8:e0:db:a9:50:be:bb:c4:c6:34:fd:
         70:67:d9:e3:11:83:41:a8:ba:56:13:d2:f4:96:d8:17:43:5d:
         88:d0:4e:23:03:42:06:2b:26:5d:11:c2:9a:d1:5b:0c:e1:be:
         47:15:c2:02:ce:91:e6:b4:9d:cb:0d:3b:f4:a8:f5:07:a2:ca:
         93:e5:cc:85:58:f8:fe:26:4f:1a:66:88:e6:18:df:c9:25:60:
         d1:31:2c:15:9c:e2:b8:b2:65:70:a0:a7:4f:2f:1b:9d:b1:08:
         12:fd:94:7b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0mRLPKaToYUGLMvRAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2RkMzE5YmUtMjg3Ni00MDNlLWJhODYtMjRkMjdhYWE4
ZmMwMB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk
ZTllMDk2NGItOGE3NS00NmQ1LTk5NjgtNDI3YzkwMjVmMjliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnmNr/vaRzoNFlIpmPYUsgO1HcIPiwl/l6BC
vm68V5OkG/zvAdBSfI0AxNC+IaMv3azSXjIRUlfvexbGPT+v3AdhkMQ58flmjB0v
7cXyaBSLNsK//4VAIOdsV4GzhHgP+GQuqNCwnWQ/mKaGQaKrTeGN/FiaOfdkLPG3
H7M0re1uNGMy1kF5HP5bkwknukhWD8slOd70X5JlI84/IpwW9SGEyR07IpWmsGwc
vjbMoZvPtE00nZl/HhmfAFBOA0icmmWidIpdsKHXEaW496x89/LNRg+mePiySXMP
2UnEH/9/H5TT0kDjt5H4i8ubDyHKUxCX3Ov41AsbLA+2YyjtwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCLR8ctGlHs3P49UkII6SzyM46n5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83ZGQz
MTliZS0yODc2LTQwM2UtYmE4Ni0yNGQyN2FhYThmYzAvZDk3NzRjOWYtOTcwNi0z
YzZkLWFhMGEtNTkzYjdkNTNlZDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvN2RkMzE5YmUtMjg3Ni00MDNlLWJh
ODYtMjRkMjdhYWE4ZmMwLzdkZDMxOWJlLTI4NzYtNDAzZS1iYTg2LTI0ZDI3YWFh
OGZjMC5jcmwwHwYDVR0jBBgwFoAUFqpMiZHY8up04nAcQ2H02dlqIMwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS83ZGQzMTliZS0yODc2LTQwM2UtYmE4Ni0yNGQy
N2FhYThmYzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAotl1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACI9se8ZVQODVOVrSo9cJaqVd26jEE1lDBMrTZebrpy+7+KfoyT/PHjX
lrw5bmPEZcSlQgA36XUrkX0cXH2iYM5J2zUj0ZftX/qaBvn916CghCKKE9MH9Nmz
oNMhYIZaeZbhTJFRZsSLg1pGYUWKoHsxaauwqD7+ez19y0VzQyAHQxcaC/uAK/On
sPQs1xrq58zaXPxJfx7o4NupUL67xMY0/XBn2eMRg0GoulYT0vSW2BdDXYjQTiMD
QgYrJl0RwprRWwzhvkcVwgLOkea0ncsNO/So9QeiypPlzIVY+P4mTxpmiOYY38kl
YNExLBWc4riyZXCgp08vG52xCBL9lHs=
-----END CERTIFICATE-----
Generated at Thu Mar 19 15:33:15 2026 by rpki-client