Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/745e9c30-c5a0-35df-a75f-41f0b5a726dc.roa
File:                     745e9c30-c5a0-35df-a75f-41f0b5a726dc.roa (raw, json)
Hash identifier:          1VMNNJot8CrcHlAc9ItRVqj1BUYhwYGVlHywmr85IGY=
Subject key identifier:   CD:CB:0E:CA:36:D6:94:3B:B3:3D:F4:87:76:F6:0E:2B:7A:25:40:0B
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F4328584DBBA04B0EB5EF4FC683415000
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/745e9c30-c5a0-35df-a75f-41f0b5a726dc.roa
Signing time:             Tue 05 May 2026 13:00:31 +0000
ROA not before:           Tue 05 May 2026 13:00:31 +0000
ROA not after:            Mon 03 Aug 2026 13:00:31 +0000
asID:                     53505
IP address blocks:        216.234.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bb:a0:4b:0e:b5:ef:4f:c6:83:41:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: May  5 13:00:31 2026 GMT
            Not After : Aug  3 13:00:31 2026 GMT
        Subject: CN=dba91019-ac40-4a56-b8fd-416270ec167c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:9f:65:61:9b:31:bd:2e:ea:93:d8:09:25:75:
                    55:6d:d4:ce:29:b9:9a:86:38:9a:e3:aa:6c:d4:23:
                    61:71:d0:78:48:71:52:db:d9:7c:ea:94:0b:3b:ed:
                    f8:62:82:d5:93:a5:3a:ff:f1:29:48:a1:6b:29:32:
                    32:fa:2d:85:54:93:96:c0:b5:cb:83:2b:36:a3:2a:
                    37:0e:89:66:c7:c8:af:80:e5:cf:db:bd:c3:27:c8:
                    bf:b8:75:a5:33:82:5e:1d:b0:a9:e2:6d:f5:6f:db:
                    6a:4a:f5:67:75:0d:db:e4:c0:ed:39:ec:4a:f0:02:
                    d0:fd:d2:60:58:51:4d:3e:85:79:e0:e4:2f:8b:85:
                    66:e4:e2:71:9a:36:af:ce:7a:18:a8:92:ae:9a:92:
                    be:11:67:d5:1e:b1:41:7f:6b:33:06:19:ae:b9:4c:
                    bd:cf:ba:ad:4d:b6:62:09:14:64:9f:37:11:fc:e6:
                    d7:fb:40:3f:7e:77:73:d1:6e:bc:0b:96:74:20:57:
                    2c:88:16:b0:61:ec:50:64:09:51:ff:3f:47:5f:2b:
                    6a:6b:a9:61:55:f4:72:d9:4e:d7:0e:a6:1d:ee:37:
                    3d:83:76:2b:2a:4c:0f:06:19:db:86:cf:0f:d0:fc:
                    61:6b:73:cf:51:59:7e:e3:8d:e8:29:ad:c2:15:56:
                    21:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:CB:0E:CA:36:D6:94:3B:B3:3D:F4:87:76:F6:0E:2B:7A:25:40:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/745e9c30-c5a0-35df-a75f-41f0b5a726dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier:
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.234.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:18:7e:0a:f2:d6:15:a6:72:36:6a:cf:73:96:dc:df:f2:0c:
         15:7b:08:a8:e0:a0:92:b5:54:5a:1e:7c:43:49:ab:d1:53:9b:
         f7:42:f8:cd:37:96:b4:63:9a:06:05:98:86:da:4e:3e:08:50:
         04:ca:d5:73:31:63:6e:18:e5:33:ae:f6:00:ec:44:51:86:ab:
         55:da:49:ea:c8:84:21:2e:f1:53:f6:12:5f:aa:26:c0:39:d1:
         22:ba:bd:32:0b:24:6a:12:63:48:30:5d:b7:ba:9f:e9:e0:b6:
         9c:6a:46:85:5b:4f:c7:10:d6:b4:35:60:37:7e:00:f7:7d:9f:
         96:90:c7:f9:3a:c6:aa:ae:c2:e2:71:b5:7d:b3:e2:45:83:71:
         0b:49:f5:95:d7:aa:2d:b7:70:8f:c2:62:b1:d0:8b:85:87:6a:
         8f:b1:f9:39:e3:09:c4:60:0a:a8:85:02:de:3c:25:eb:05:97:
         16:47:f9:55:41:f5:65:40:9d:0d:2f:db:81:8e:d4:4b:7e:72:
         08:e2:93:82:38:08:30:d5:56:15:56:de:f6:c9:fa:4d:74:b8:
         3d:a5:06:24:10:c5:62:fa:7c:1e:40:58:2e:9f:1a:68:66:4f:
         60:65:f5:03:88:d4:04:46:55:6f:48:2d:64:c5:b4:4e:32:19:
         26:50:17:87
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE27oEsOte9PxoNBUAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzQyNjk3NmUtZmJmYi00YWQ4LWEyOGEtYTI1ZjViMDY3
MWRlMB4XDTI2MDUwNTEzMDAzMVoXDTI2MDgwMzEzMDAzMVowLzEtMCsGA1UEAxMk
ZGJhOTEwMTktYWM0MC00YTU2LWI4ZmQtNDE2MjcwZWMxNjdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZ9lYZsxvS7qk9gJJXVVbdTOKbmahjia46ps
1CNhcdB4SHFS29l86pQLO+34YoLVk6U6//EpSKFrKTIy+i2FVJOWwLXLgys2oyo3
Dolmx8ivgOXP273DJ8i/uHWlM4JeHbCp4m31b9tqSvVndQ3b5MDtOexK8ALQ/dJg
WFFNPoV54OQvi4Vm5OJxmjavznoYqJKumpK+EWfVHrFBf2szBhmuuUy9z7qtTbZi
CRRknzcR/ObX+0A/fndz0W68C5Z0IFcsiBawYexQZAlR/z9HXytqa6lhVfRy2U7X
DqYd7jc9g3YrKkwPBhnbhs8P0Pxha3PPUVl+443oKa3CFVYhyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM3LDso21pQ7sz30h3b2Dit6JUALMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2
OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVmNWIwNjcxZGUvNzQ1ZTljMzAtYzVhMC0z
NWRmLWE3NWYtNDFmMGI1YTcyNmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQyNjk3NmUtZmJmYi00YWQ4LWEy
OGEtYTI1ZjViMDY3MWRlL2M0MjY5NzZlLWZiZmItNGFkOC1hMjhhLWEyNWY1YjA2
NzFkZS5jcmwwHwYDVR0jBBgwFoAUUDCuGBTUosBlcB/1dCB21IYNZG8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVm
NWIwNjcxZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OpzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALAYfgry1hWmcjZqz3OW3N/yDBV7CKjgoJK1VFoefENJq9FTm/dC+M03
lrRjmgYFmIbaTj4IUATK1XMxY24Y5TOu9gDsRFGGq1XaSerIhCEu8VP2El+qJsA5
0SK6vTILJGoSY0gwXbe6n+ngtpxqRoVbT8cQ1rQ1YDd+APd9n5aQx/k6xqquwuJx
tX2z4kWDcQtJ9ZXXqi23cI/CYrHQi4WHao+x+TnjCcRgCqiFAt48JesFlxZH+VVB
9WVAnQ0v24GO1Et+cgjik4I4CDDVVhVW3vbJ+k10uD2lBiQQxWL6fB5AWC6fGmhm
T2Bl9QOI1ARGVW9ILWTFtE4yGSZQF4c=
-----END CERTIFICATE-----
Generated at Wed May 13 09:55:12 2026 by rpki-client