Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13/c830fb64-4d0b-3d84-b469-62ceca3332da.roa
File:                     c830fb64-4d0b-3d84-b469-62ceca3332da.roa (raw, json)
Hash identifier:          G3TcrpTRIgc0Kh8veursaNOb7GqDzoZk3+LXUkGVL+0=
Subject key identifier:   22:FE:83:3A:4C:D3:B9:BA:FA:F3:A4:5B:89:6C:C7:71:0E:E1:92:20
Certificate issuer:       /CN=ffe165d0-a9ca-4c8e-88ee-cb831681df13
Certificate serial:       010D0C9F4328584E296F23FB911C31357B6F73A0
Authority key identifier: 1B:2F:DD:53:13:AE:F7:1A:E7:93:8C:9C:E6:EF:30:28:84:21:20:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13/c830fb64-4d0b-3d84-b469-62ceca3332da.roa
Signing time:             Sat 13 Jun 2026 21:00:12 +0000
ROA not before:           Sat 13 Jun 2026 21:00:12 +0000
ROA not after:            Fri 11 Sep 2026 21:00:12 +0000
asID:                     395861
IP address blocks:        52.144.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13/ffe165d0-a9ca-4c8e-88ee-cb831681df13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13/ffe165d0-a9ca-4c8e-88ee-cb831681df13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:29:6f:23:fb:91:1c:31:35:7b:6f:73:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffe165d0-a9ca-4c8e-88ee-cb831681df13
        Validity
            Not Before: Jun 13 21:00:12 2026 GMT
            Not After : Sep 11 21:00:12 2026 GMT
        Subject: CN=bf16dd7c-9496-4d9a-b3b2-65dbf76947e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ab:af:6e:44:91:7d:39:70:c0:dd:06:e1:0f:
                    3d:93:60:a6:b6:9e:2d:7c:3c:c3:3f:22:3e:3d:98:
                    78:82:34:3b:60:88:76:e5:c3:da:2f:28:1f:aa:33:
                    10:ec:7e:be:d9:00:65:26:b7:02:b3:93:9b:ce:3e:
                    cc:3d:96:4c:25:0d:f6:d0:a6:80:ee:ee:d4:ae:b3:
                    9e:56:4f:e8:c4:92:fb:1d:ec:e6:bb:5c:06:e7:5a:
                    aa:88:0f:30:7b:16:93:7e:49:35:05:39:6c:8c:36:
                    f5:00:ba:24:de:c2:f4:00:72:0a:ba:8d:11:0f:9d:
                    c7:7a:a2:7f:b3:76:a0:07:35:bb:46:47:c3:e2:a0:
                    5c:48:fb:b6:9c:f9:c8:68:47:8e:45:e2:45:9f:a4:
                    d6:54:2a:11:ae:28:cf:21:35:e5:3f:47:dc:e2:3d:
                    79:27:3c:ca:0c:4b:ee:bf:aa:fc:cc:a8:f0:fe:7e:
                    38:a9:d9:9f:12:5e:dc:c7:27:50:76:76:dc:d3:cc:
                    24:3f:91:0a:bc:03:1f:ef:6f:a5:16:f8:67:6a:bc:
                    b4:8b:0d:1b:32:c8:6b:e3:5e:97:48:2a:aa:ef:78:
                    e8:59:e7:fd:26:80:b2:ac:4f:33:4b:63:2b:36:9c:
                    11:4f:ab:a9:fc:bc:92:41:a9:7a:e2:16:52:02:b1:
                    22:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:FE:83:3A:4C:D3:B9:BA:FA:F3:A4:5B:89:6C:C7:71:0E:E1:92:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13/c830fb64-4d0b-3d84-b469-62ceca3332da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13/ffe165d0-a9ca-4c8e-88ee-cb831681df13.crl

            X509v3 Authority Key Identifier:
                keyid:1B:2F:DD:53:13:AE:F7:1A:E7:93:8C:9C:E6:EF:30:28:84:21:20:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.144.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:60:93:db:85:62:aa:d6:42:1e:b5:84:a3:b9:fb:45:5f:c7:
         95:44:7f:2f:85:16:63:ab:db:6e:e9:ca:bc:9d:9c:41:3b:a2:
         9a:f6:e7:7b:ff:d1:8a:d7:1c:44:ae:86:c8:ee:9f:6a:65:68:
         54:c8:fb:15:77:08:87:fd:9f:b2:9e:45:c6:c8:9c:4a:fa:57:
         9a:8a:7e:21:5b:11:ce:3a:ab:35:b6:fe:b0:f8:cd:ad:5f:f5:
         7f:d7:04:81:7a:3d:ba:ca:20:46:ac:6b:95:68:de:62:5d:1f:
         0e:08:ca:4d:53:64:e3:3a:15:e0:33:66:32:1e:5f:c0:99:e4:
         e6:a4:c2:72:56:a3:86:87:d8:bf:76:04:8d:aa:e4:f3:5a:ed:
         5c:50:b8:fe:69:64:45:14:1c:27:ce:86:ca:93:76:24:94:a2:
         c1:01:7e:61:47:62:ae:c6:31:7a:b6:75:49:0f:9d:72:f6:c4:
         fc:9b:85:63:82:3e:27:7a:0a:ff:9e:48:1c:53:a5:5f:0f:c5:
         4d:ab:3d:c6:c6:54:aa:b1:8e:8f:93:51:86:e0:8b:0f:d9:33:
         32:24:a6:d8:80:b3:cc:8d:4e:9e:de:83:9f:ad:74:a4:f2:bc:
         72:ea:17:82:d3:33:ea:12:f1:09:10:58:64:12:29:e5:73:94:
         c8:ad:ea:b4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4pbyP7kRwxNXtvc6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmZlMTY1ZDAtYTljYS00YzhlLTg4ZWUtY2I4MzE2ODFk
ZjEzMB4XDTI2MDYxMzIxMDAxMloXDTI2MDkxMTIxMDAxMlowLzEtMCsGA1UEAxMk
YmYxNmRkN2MtOTQ5Ni00ZDlhLWIzYjItNjVkYmY3Njk0N2U3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKuvbkSRfTlwwN0G4Q89k2Cmtp4tfDzDPyI+
PZh4gjQ7YIh25cPaLygfqjMQ7H6+2QBlJrcCs5Obzj7MPZZMJQ320KaA7u7UrrOe
Vk/oxJL7Hezmu1wG51qqiA8wexaTfkk1BTlsjDb1ALok3sL0AHIKuo0RD53HeqJ/
s3agBzW7RkfD4qBcSPu2nPnIaEeOReJFn6TWVCoRrijPITXlP0fc4j15JzzKDEvu
v6r8zKjw/n44qdmfEl7cxydQdnbc08wkP5EKvAMf72+lFvhnary0iw0bMshr416X
SCqq73joWef9JoCyrE8zS2MrNpwRT6up/LySQal64hZSArEipwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCL+gzpM07m6+vOkW4lsx3EO4ZIgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9mZmUx
NjVkMC1hOWNhLTRjOGUtODhlZS1jYjgzMTY4MWRmMTMvYzgzMGZiNjQtNGQwYi0z
ZDg0LWI0NjktNjJjZWNhMzMzMmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZmZlMTY1ZDAtYTljYS00YzhlLTg4
ZWUtY2I4MzE2ODFkZjEzL2ZmZTE2NWQwLWE5Y2EtNGM4ZS04OGVlLWNiODMxNjgx
ZGYxMy5jcmwwHwYDVR0jBBgwFoAUGy/dUxOu9xrnk4yc5u8wKIQhICswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS9mZmUxNjVkMC1hOWNhLTRjOGUtODhlZS1jYjgz
MTY4MWRmMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANJB4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGxgk9uFYqrWQh61hKO5+0Vfx5VEfy+FFmOr227pyrydnEE7opr253v/
0YrXHESuhsjun2plaFTI+xV3CIf9n7KeRcbInEr6V5qKfiFbEc46qzW2/rD4za1f
9X/XBIF6PbrKIEasa5Vo3mJdHw4Iyk1TZOM6FeAzZjIeX8CZ5OakwnJWo4aH2L92
BI2q5PNa7VxQuP5pZEUUHCfOhsqTdiSUosEBfmFHYq7GMXq2dUkPnXL2xPybhWOC
Pid6Cv+eSBxTpV8PxU2rPcbGVKqxjo+TUYbgiw/ZMzIkptiAs8yNTp7eg5+tdKTy
vHLqF4LTM+oS8QkQWGQSKeVzlMit6rQ=
-----END CERTIFICATE-----
Generated at Fri Jul 17 05:08:27 2026 by rpki-client