Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/f016cdd3-f47d-3ee5-b70c-efb1b8bf43d0.roa
File:                     f016cdd3-f47d-3ee5-b70c-efb1b8bf43d0.roa (raw, json)
Hash identifier:          M3pKiJwYgVAvP+sqFVjnadzYM7ZDL9GlUaAjALGiUow=
Subject key identifier:   6D:4E:06:33:4B:04:53:42:3C:94:52:11:E5:5D:F6:97:FA:AC:C6:E8
Certificate issuer:       /CN=209f0328-0af3-4de3-a043-8072346acdf7
Certificate serial:       010D0C9F4328584ED001E5DFFE4F2E93DD2149C0
Authority key identifier: B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/f016cdd3-f47d-3ee5-b70c-efb1b8bf43d0.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     7782
IP address blocks:        198.163.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:e5:df:fe:4f:2e:93:dd:21:49:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=209f0328-0af3-4de3-a043-8072346acdf7
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=11991877-d597-428a-8084-1ce3d09c3e58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a8:61:69:27:9f:a1:02:03:73:91:77:0c:b1:
                    54:ab:4e:09:e8:ba:f5:12:b1:08:42:04:ed:a0:a2:
                    7e:5b:59:4c:25:40:c8:69:df:c1:68:4b:98:e5:7c:
                    ae:9f:5d:de:68:81:64:12:78:e0:4b:9b:3f:3b:5d:
                    86:63:4a:b6:90:b7:93:40:44:8f:db:e7:c6:27:a5:
                    97:90:92:ea:e2:f4:1e:2d:9f:d5:49:d1:8c:14:e3:
                    83:07:1a:64:2d:2f:a4:10:3d:6b:41:6b:15:f1:3a:
                    45:37:72:2f:df:4d:43:10:37:65:e1:10:11:40:54:
                    58:56:d7:b5:18:86:45:ac:86:b6:cb:6a:6c:d4:92:
                    6d:e8:71:c3:9d:00:1b:38:8f:06:09:19:62:c3:c5:
                    35:f1:5e:91:ea:d8:e8:f9:93:a1:57:de:23:ea:f4:
                    9a:8f:b7:c7:40:a3:b6:1a:d1:26:9e:e3:c2:76:65:
                    6d:c5:06:7f:c8:07:f0:f8:74:f8:eb:27:79:c1:bb:
                    d3:d3:7b:cf:21:16:12:0b:34:80:df:d7:8a:6a:c6:
                    a9:de:41:54:a4:54:56:24:58:12:db:f0:7e:8a:b4:
                    cd:a2:69:fb:69:0f:db:3b:33:df:82:50:25:ef:99:
                    fc:d9:77:51:50:91:f0:b7:1d:ac:07:36:e3:77:9d:
                    6f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:4E:06:33:4B:04:53:42:3C:94:52:11:E5:5D:F6:97:FA:AC:C6:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/f016cdd3-f47d-3ee5-b70c-efb1b8bf43d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl

            X509v3 Authority Key Identifier:
                keyid:B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.163.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:2e:f0:0e:23:a8:08:31:56:ec:10:36:b5:0a:e8:4e:ec:f0:
         a2:a9:bd:73:55:be:1e:4e:b1:40:d1:5d:7d:6f:16:b5:a4:6a:
         95:b9:ba:80:32:46:b6:5a:f3:15:71:fe:d0:77:3a:f5:be:84:
         a2:d8:7b:67:bf:06:f8:b3:ab:31:b2:6a:2c:ab:7a:15:8c:17:
         04:82:cf:ba:6e:36:ac:22:98:1d:bf:71:04:34:31:9d:db:9c:
         e3:2d:c0:46:3f:46:ed:0f:da:ad:47:89:39:67:c1:8d:3a:9d:
         f1:b5:d0:14:ac:64:17:d6:02:73:62:48:50:03:47:0a:9c:7a:
         15:13:1e:d7:b7:f4:69:05:a7:fc:a1:eb:7b:68:fa:8c:aa:16:
         1e:91:8d:8e:dd:9b:dc:69:fc:82:06:d3:49:82:ec:e8:92:77:
         6f:3d:18:0b:eb:5b:98:63:43:dd:b6:a0:75:31:73:62:20:a7:
         c4:ab:c5:a1:c1:30:7c:7d:72:c3:c8:87:17:51:ed:b5:73:6b:
         24:92:2b:e2:f6:4b:bf:76:19:7e:17:81:26:20:87:da:25:78:
         99:83:fe:3f:1f:5c:eb:28:79:9f:6c:90:35:66:04:bb:17:4a:
         24:39:2e:4e:30:7b:44:a2:fb:37:4e:30:90:68:32:3a:1e:30:
         99:f9:3a:84
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7QAeXf/k8uk90hScAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjA5ZjAzMjgtMGFmMy00ZGUzLWEwNDMtODA3MjM0NmFj
ZGY3MB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk
MTE5OTE4NzctZDU5Ny00MjhhLTgwODQtMWNlM2QwOWMzZTU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqhhaSefoQIDc5F3DLFUq04J6Lr1ErEIQgTt
oKJ+W1lMJUDIad/BaEuY5Xyun13eaIFkEnjgS5s/O12GY0q2kLeTQESP2+fGJ6WX
kJLq4vQeLZ/VSdGMFOODBxpkLS+kED1rQWsV8TpFN3Iv301DEDdl4RARQFRYVte1
GIZFrIa2y2ps1JJt6HHDnQAbOI8GCRliw8U18V6R6tjo+ZOhV94j6vSaj7fHQKO2
GtEmnuPCdmVtxQZ/yAfw+HT46yd5wbvT03vPIRYSCzSA39eKasap3kFUpFRWJFgS
2/B+irTNomn7aQ/bOzPfglAl75n82XdRUJHwtx2sBzbjd51vPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG1OBjNLBFNCPJRSEeVd9pf6rMboMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlm
MDMyOC0wYWYzLTRkZTMtYTA0My04MDcyMzQ2YWNkZjcvZjAxNmNkZDMtZjQ3ZC0z
ZWU1LWI3MGMtZWZiMWI4YmY0M2QwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjA5ZjAzMjgtMGFmMy00ZGUzLWEw
NDMtODA3MjM0NmFjZGY3LzIwOWYwMzI4LTBhZjMtNGRlMy1hMDQzLTgwNzIzNDZh
Y2RmNy5jcmwwHwYDVR0jBBgwFoAUsoIq0bI2KU20SE/OQcx6IpRLZAcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlmMDMyOC0wYWYzLTRkZTMtYTA0My04MDcy
MzQ2YWNkZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxqMgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEcu8A4jqAgxVuwQNrUK6E7s8KKpvXNVvh5OsUDRXX1vFrWkapW5uoAy
RrZa8xVx/tB3OvW+hKLYe2e/BvizqzGyaiyrehWMFwSCz7puNqwimB2/cQQ0MZ3b
nOMtwEY/Ru0P2q1HiTlnwY06nfG10BSsZBfWAnNiSFADRwqcehUTHte39GkFp/yh
63to+oyqFh6RjY7dm9xp/IIG00mC7OiSd289GAvrW5hjQ922oHUxc2Igp8SrxaHB
MHx9csPIhxdR7bVzaySSK+L2S792GX4XgSYgh9oleJmD/j8fXOsoeZ9skDVmBLsX
SiQ5Lk4we0Si+zdOMJBoMjoeMJn5OoQ=
-----END CERTIFICATE-----
Generated at Sat Sep 19 11:48:46 2026 by rpki-client