Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a8443d1-5c7c-44eb-822c-62a1a1423a2b/31dd128e-6217-30ff-8b1a-469e384a6d67.roa
File:                     31dd128e-6217-30ff-8b1a-469e384a6d67.roa (raw, json)
Hash identifier:          vI6WohGyYhGkdiTht7saXSIc6q5SFhCy/AVrTo70Y2I=
Subject key identifier:   89:5E:12:91:F7:2D:CB:4D:58:CF:6C:24:17:B1:F5:49:68:35:85:D9
Certificate issuer:       /CN=8a8443d1-5c7c-44eb-822c-62a1a1423a2b
Certificate serial:       010D0C9F4328584DD1F5B70C36201E530B8148C0
Authority key identifier: 32:CB:80:43:03:D9:69:B6:1D:11:4D:8B:CD:61:3D:96:35:20:0B:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a8443d1-5c7c-44eb-822c-62a1a1423a2b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a8443d1-5c7c-44eb-822c-62a1a1423a2b/31dd128e-6217-30ff-8b1a-469e384a6d67.roa
Signing time:             Wed 13 May 2026 13:00:31 +0000
ROA not before:           Wed 13 May 2026 13:00:31 +0000
ROA not after:            Tue 11 Aug 2026 13:00:31 +0000
asID:                     54004
IP address blocks:        162.118.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a8443d1-5c7c-44eb-822c-62a1a1423a2b/8a8443d1-5c7c-44eb-822c-62a1a1423a2b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a8443d1-5c7c-44eb-822c-62a1a1423a2b/8a8443d1-5c7c-44eb-822c-62a1a1423a2b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a8443d1-5c7c-44eb-822c-62a1a1423a2b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d1:f5:b7:0c:36:20:1e:53:0b:81:48:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a8443d1-5c7c-44eb-822c-62a1a1423a2b
        Validity
            Not Before: May 13 13:00:31 2026 GMT
            Not After : Aug 11 13:00:31 2026 GMT
        Subject: CN=e9de1864-1ee5-4524-97b5-8601003907a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2a:6e:69:f2:00:4c:3a:08:99:8d:ea:5f:46:
                    98:ec:46:ec:56:a4:e7:58:c1:88:cb:aa:d4:8d:14:
                    f8:b4:bc:58:76:f8:a9:3e:a1:6f:a4:ca:66:88:b7:
                    b4:fb:5b:c4:ee:c8:27:61:27:e1:9f:f7:89:7d:d6:
                    36:92:0d:76:fa:14:45:ea:db:5d:aa:96:50:0a:8f:
                    99:fa:da:cf:39:06:9b:c8:27:e4:a2:51:7d:24:5d:
                    1a:17:b3:b1:85:47:9a:4d:f5:b5:e0:15:2f:5a:54:
                    0d:72:06:ed:7b:71:56:96:7f:0d:4e:60:51:7f:63:
                    12:51:83:46:b5:ff:93:44:cf:c6:da:b2:a1:6d:1e:
                    92:ff:43:99:21:5d:f2:0a:6c:5c:15:aa:0b:cf:74:
                    3e:4a:d6:d6:ab:5c:21:60:a2:b1:26:c5:cc:bd:f0:
                    d5:0b:95:30:9b:b7:6e:b5:40:de:72:6a:22:98:2a:
                    37:d5:69:ff:30:2e:0e:9a:a4:81:55:45:c0:80:8c:
                    c7:29:51:db:3f:a8:8e:2a:c5:0a:40:9d:0c:a1:bd:
                    5e:b3:54:95:1c:8f:5d:bc:cb:79:8a:03:61:1e:e7:
                    85:e1:e6:e1:06:51:d9:f3:77:00:46:fb:3c:4e:b8:
                    7c:17:61:cc:30:2f:18:bf:74:a2:39:dd:09:71:94:
                    bb:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:5E:12:91:F7:2D:CB:4D:58:CF:6C:24:17:B1:F5:49:68:35:85:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a8443d1-5c7c-44eb-822c-62a1a1423a2b/31dd128e-6217-30ff-8b1a-469e384a6d67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a8443d1-5c7c-44eb-822c-62a1a1423a2b/8a8443d1-5c7c-44eb-822c-62a1a1423a2b.crl

            X509v3 Authority Key Identifier:
                keyid:32:CB:80:43:03:D9:69:B6:1D:11:4D:8B:CD:61:3D:96:35:20:0B:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a8443d1-5c7c-44eb-822c-62a1a1423a2b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.118.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:ca:c3:23:99:ee:4d:11:9a:a9:26:e5:b4:96:4c:e2:dc:9e:
         5f:20:78:df:c7:3a:84:79:75:94:44:63:1c:43:4f:68:42:cb:
         ea:5d:76:c9:e9:1e:b5:35:1d:a0:45:a4:75:40:62:60:e5:12:
         3f:b7:09:a7:af:87:b6:ce:d9:ea:35:6b:83:83:f6:07:34:08:
         cc:72:33:7d:57:17:8b:8e:77:53:9c:e2:da:dd:5d:6b:ac:dd:
         75:48:f2:46:64:fe:4e:3e:f8:db:1d:e1:b5:e2:1a:bd:64:8b:
         4d:93:ab:87:71:1e:6b:7d:fc:59:9b:26:b4:cb:00:e9:31:f1:
         e1:e7:4d:17:ed:96:c1:b9:bf:71:86:23:6f:82:6b:c9:d9:69:
         44:72:ef:2c:d5:8b:3d:d0:8d:bb:26:82:d6:a3:a3:9e:86:7f:
         5f:fe:08:50:ea:26:2f:e7:07:e9:d0:ab:c3:5a:f9:68:65:15:
         76:e5:28:66:ca:5a:d8:37:2b:83:56:dd:da:82:8d:19:c8:71:
         1d:5a:27:19:f2:02:9d:92:88:a7:ae:5c:85:21:e7:26:a1:a4:
         36:23:67:da:aa:67:4c:d9:cc:5c:bf:27:1d:cb:0a:e2:48:61:
         b4:23:f5:4f:24:1c:da:63:ff:37:f9:56:21:74:a2:ff:44:fb:
         5e:0e:79:22
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3R9bcMNiAeUwuBSMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGE4NDQzZDEtNWM3Yy00NGViLTgyMmMtNjJhMWExNDIz
YTJiMB4XDTI2MDUxMzEzMDAzMVoXDTI2MDgxMTEzMDAzMVowLzEtMCsGA1UEAxMk
ZTlkZTE4NjQtMWVlNS00NTI0LTk3YjUtODYwMTAwMzkwN2EzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApypuafIATDoImY3qX0aY7EbsVqTnWMGIy6rU
jRT4tLxYdvipPqFvpMpmiLe0+1vE7sgnYSfhn/eJfdY2kg12+hRF6ttdqpZQCo+Z
+trPOQabyCfkolF9JF0aF7OxhUeaTfW14BUvWlQNcgbte3FWln8NTmBRf2MSUYNG
tf+TRM/G2rKhbR6S/0OZIV3yCmxcFaoLz3Q+StbWq1whYKKxJsXMvfDVC5Uwm7du
tUDecmoimCo31Wn/MC4OmqSBVUXAgIzHKVHbP6iOKsUKQJ0Mob1es1SVHI9dvMt5
igNhHueF4ebhBlHZ83cARvs8Trh8F2HMMC8Yv3SiOd0JcZS73wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIleEpH3LctNWM9sJBex9UloNYXZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84YTg0
NDNkMS01YzdjLTQ0ZWItODIyYy02MmExYTE0MjNhMmIvMzFkZDEyOGUtNjIxNy0z
MGZmLThiMWEtNDY5ZTM4NGE2ZDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGE4NDQzZDEtNWM3Yy00NGViLTgy
MmMtNjJhMWExNDIzYTJiLzhhODQ0M2QxLTVjN2MtNDRlYi04MjJjLTYyYTFhMTQy
M2EyYi5jcmwwHwYDVR0jBBgwFoAUMsuAQwPZabYdEU2LzWE9ljUgC8UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi84YTg0NDNkMS01YzdjLTQ0ZWItODIyYy02MmEx
YTE0MjNhMmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDonYQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHPKwyOZ7k0Rmqkm5bSWTOLcnl8geN/HOoR5dZREYxxDT2hCy+pddsnp
HrU1HaBFpHVAYmDlEj+3Caevh7bO2eo1a4OD9gc0CMxyM31XF4uOd1Oc4trdXWus
3XVI8kZk/k4++Nsd4bXiGr1ki02Tq4dxHmt9/FmbJrTLAOkx8eHnTRftlsG5v3GG
I2+Ca8nZaURy7yzViz3Qjbsmgtajo56Gf1/+CFDqJi/nB+nQq8Na+WhlFXblKGbK
Wtg3K4NW3dqCjRnIcR1aJxnyAp2SiKeuXIUh5yahpDYjZ9qqZ0zZzFy/Jx3LCuJI
YbQj9U8kHNpj/zf5ViF0ov9E+14OeSI=
-----END CERTIFICATE-----
Generated at Sat Jun 6 15:51:44 2026 by rpki-client