Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/bb82a73d-b97e-38d8-8669-e5c01c82cf5a.roa
File:                     bb82a73d-b97e-38d8-8669-e5c01c82cf5a.roa (raw, json)
Hash identifier:          mlDf1mmgT5hLIfVVkD42VR2qKAULupb/lKLIQx4x41E=
Subject key identifier:   B6:12:86:7F:75:7C:E9:64:CC:98:BB:15:01:2A:37:95:F0:EF:39:07
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584CBDB202C35DB15D8544FB44E0
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/bb82a73d-b97e-38d8-8669-e5c01c82cf5a.roa
Signing time:             Tue 03 Feb 2026 14:00:39 +0000
ROA not before:           Tue 03 Feb 2026 14:00:39 +0000
ROA not after:            Mon 04 May 2026 13:00:39 +0000
asID:                     174
IP address blocks:        216.227.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bd:b2:02:c3:5d:b1:5d:85:44:fb:44:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Feb  3 14:00:39 2026 GMT
            Not After : May  4 13:00:39 2026 GMT
        Subject: CN=67c44458-1bdb-4944-96a7-30ee40b8562f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7a:96:03:11:d8:b7:de:96:b2:fb:ba:4f:3e:
                    18:29:ba:1e:49:8e:0b:46:1e:a3:a4:2f:4d:3d:7a:
                    89:cb:38:32:91:92:e9:ac:74:43:ef:cd:b9:57:52:
                    42:0f:2f:73:f9:8a:8e:08:d6:b7:e0:c0:b6:38:07:
                    97:d3:06:1c:7a:ba:22:ad:ec:a3:1c:4e:a5:c4:04:
                    25:ad:51:f8:cf:4e:d3:a7:7e:47:c3:4a:2b:d5:03:
                    1a:17:a9:25:0c:f0:8a:1e:60:7f:44:9d:b7:2b:e1:
                    96:ac:34:20:38:09:bd:d7:35:dc:4d:24:0d:5a:b4:
                    64:37:b1:21:d3:60:5c:8c:67:17:58:38:ba:ad:15:
                    b7:4c:7e:bd:c3:e7:8f:c9:14:76:6d:b4:df:08:b0:
                    f4:9f:fd:33:ca:c1:e5:59:40:ff:12:46:11:fe:0d:
                    00:e0:8c:fc:27:ad:05:4d:0b:56:e0:de:96:4d:09:
                    ed:6e:48:ae:dc:f5:4a:be:b4:c8:cb:3d:c0:c9:90:
                    69:a2:b8:17:cd:1a:af:7f:0a:b6:53:34:a7:b2:b6:
                    3d:32:1d:9b:54:be:24:44:b5:38:0e:52:7d:20:91:
                    f2:6d:64:ba:29:c1:19:ec:e5:b6:66:5a:1c:ee:7b:
                    c6:46:f2:57:f5:28:ec:41:a0:5e:40:a2:73:68:f5:
                    73:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:12:86:7F:75:7C:E9:64:CC:98:BB:15:01:2A:37:95:F0:EF:39:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/bb82a73d-b97e-38d8-8669-e5c01c82cf5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.227.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:24:0e:31:6a:23:86:3f:35:52:d6:9c:20:d8:ab:6f:09:a4:
         2f:af:4a:24:61:b1:80:11:24:5c:9e:8d:08:9d:13:7e:fa:2f:
         f6:e7:cc:c5:2d:8e:46:45:3c:9f:51:58:b0:21:ba:30:72:28:
         a8:59:cf:7e:04:a3:ed:fa:cb:91:fe:35:c9:88:46:ba:ff:1e:
         3f:98:72:88:13:4f:dc:e4:a5:ab:1c:39:f1:d4:43:39:0b:75:
         53:49:ee:82:dc:7b:c6:6f:a0:1d:7c:1d:87:e1:4f:42:4c:ca:
         00:47:1c:f8:a8:ee:f1:fb:d0:11:d8:fe:e4:9e:65:75:45:60:
         90:92:ce:e3:a4:38:af:77:c6:a8:1b:fb:e3:c1:de:04:fb:24:
         79:ab:34:51:3e:9e:d9:16:24:54:f8:8c:69:93:ee:f9:12:31:
         db:a7:34:79:26:ed:73:ec:5c:52:12:20:b5:63:68:ea:a2:5e:
         f3:d7:c0:e8:37:ac:2a:61:46:9d:45:26:d1:ff:77:88:32:0e:
         f9:55:cb:10:fb:9c:89:23:f7:20:1e:0f:24:13:0f:ea:ae:00:
         9a:99:b4:6d:8f:fc:7d:1a:e1:12:14:ec:2a:51:49:77:8a:cf:
         0c:d9:3d:7d:e1:af:c2:da:99:6a:e9:93:db:78:73:fe:05:29:
         b4:3e:97:e4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy9sgLDXbFdhUT7ROAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm
ZDgwMB4XDTI2MDIwMzE0MDAzOVoXDTI2MDUwNDEzMDAzOVowLzEtMCsGA1UEAxMk
NjdjNDQ0NTgtMWJkYi00OTQ0LTk2YTctMzBlZTQwYjg1NjJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXqWAxHYt96Wsvu6Tz4YKboeSY4LRh6jpC9N
PXqJyzgykZLprHRD7825V1JCDy9z+YqOCNa34MC2OAeX0wYceroireyjHE6lxAQl
rVH4z07Tp35Hw0or1QMaF6klDPCKHmB/RJ23K+GWrDQgOAm91zXcTSQNWrRkN7Eh
02BcjGcXWDi6rRW3TH69w+ePyRR2bbTfCLD0n/0zysHlWUD/EkYR/g0A4Iz8J60F
TQtW4N6WTQntbkiu3PVKvrTIyz3AyZBporgXzRqvfwq2UzSnsrY9Mh2bVL4kRLU4
DlJ9IJHybWS6KcEZ7OW2Zloc7nvGRvJX9SjsQaBeQKJzaPVzEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLYShn91fOlkzJi7FQEqN5Xw7zkHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm
NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvYmI4MmE3M2QtYjk3ZS0z
OGQ4LTg2NjktZTVjMDFjODJjZjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3
MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0
ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3
OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OOCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANEkDjFqI4Y/NVLWnCDYq28JpC+vSiRhsYARJFyejQidE376L/bnzMUt
jkZFPJ9RWLAhujByKKhZz34Eo+36y5H+NcmIRrr/Hj+YcogTT9zkpascOfHUQzkL
dVNJ7oLce8ZvoB18HYfhT0JMygBHHPio7vH70BHY/uSeZXVFYJCSzuOkOK93xqgb
++PB3gT7JHmrNFE+ntkWJFT4jGmT7vkSMdunNHkm7XPsXFISILVjaOqiXvPXwOg3
rCphRp1FJtH/d4gyDvlVyxD7nIkj9yAeDyQTD+quAJqZtG2P/H0a4RIU7CpRSXeK
zwzZPX3hr8LamWrpk9t4c/4FKbQ+l+Q=
-----END CERTIFICATE-----
Generated at Thu Feb 26 09:27:13 2026 by rpki-client