Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/aa82061b-7dd9-4431-8ac6-3670653205c6/71ef8d97-0dea-3d53-bcc2-9a3bd515d382.roa
File:                     71ef8d97-0dea-3d53-bcc2-9a3bd515d382.roa (raw, json)
Hash identifier:          q7Bd0mxZjHOqGs600Y+yXUsSpay59w5vhFvGoaFwKh8=
Subject key identifier:   64:9C:1B:AF:6C:B7:54:1A:FC:80:CB:C1:90:47:93:24:9D:8C:65:49
Certificate issuer:       /CN=aa82061b-7dd9-4431-8ac6-3670653205c6
Certificate serial:       010D0C9F4328584EFCACEC254BBCB233372810C0
Authority key identifier: 7A:BF:18:DA:C9:A0:05:7E:9A:42:7F:FE:86:FC:0F:E8:3E:98:D5:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/aa82061b-7dd9-4431-8ac6-3670653205c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/aa82061b-7dd9-4431-8ac6-3670653205c6/71ef8d97-0dea-3d53-bcc2-9a3bd515d382.roa
Signing time:             Fri 28 Aug 2026 13:00:12 +0000
ROA not before:           Fri 28 Aug 2026 13:00:12 +0000
ROA not after:            Thu 26 Nov 2026 14:00:12 +0000
asID:                     46621
IP address blocks:        216.162.16.0/20 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/aa82061b-7dd9-4431-8ac6-3670653205c6/aa82061b-7dd9-4431-8ac6-3670653205c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/aa82061b-7dd9-4431-8ac6-3670653205c6/aa82061b-7dd9-4431-8ac6-3670653205c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/aa82061b-7dd9-4431-8ac6-3670653205c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fc:ac:ec:25:4b:bc:b2:33:37:28:10:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa82061b-7dd9-4431-8ac6-3670653205c6
        Validity
            Not Before: Aug 28 13:00:12 2026 GMT
            Not After : Nov 26 14:00:12 2026 GMT
        Subject: CN=ad47699f-0f13-4a80-a3a2-13dffa654288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:56:df:81:5b:bb:e6:18:fa:f4:82:ac:20:d5:
                    74:be:97:7d:7d:a0:e3:0e:19:59:cc:71:fb:11:af:
                    2c:b1:18:21:e3:a6:c4:b0:2b:a5:f9:fb:b3:60:a0:
                    11:c6:62:1a:81:bf:92:f6:8c:20:f7:55:da:44:e8:
                    64:b1:c8:8b:6d:bd:91:2b:4e:ce:c6:f8:5e:cd:7b:
                    f8:96:fd:6a:27:3b:c9:d7:c1:f3:7d:2f:3b:1a:b4:
                    1e:f3:04:fa:98:3a:28:f7:f9:d7:6c:51:3f:2c:58:
                    96:69:99:61:fc:c1:67:70:4a:00:61:31:44:e6:33:
                    46:17:02:da:68:3e:a8:91:74:79:0d:e3:03:65:9c:
                    d3:a0:9a:09:6d:01:0c:5c:85:fa:81:c8:4d:e2:00:
                    45:c1:ad:18:07:34:e9:cb:03:63:35:1a:4d:b1:da:
                    b9:1e:b1:9e:e6:ad:25:11:e5:c9:80:49:eb:5e:76:
                    f6:b0:4e:33:15:cb:8c:4f:e3:c0:83:e0:fe:5a:9c:
                    5e:6d:48:f6:3f:38:29:b9:bd:dd:7f:b3:79:8d:8f:
                    f8:3b:b5:2c:e7:de:d8:52:23:e8:e4:ac:35:dc:7d:
                    f9:30:2e:02:d2:cc:a7:26:71:78:b3:f1:a7:7c:a6:
                    d6:01:11:ae:fa:6f:f0:8e:d6:36:b4:f3:5b:20:ef:
                    a9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:9C:1B:AF:6C:B7:54:1A:FC:80:CB:C1:90:47:93:24:9D:8C:65:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/aa82061b-7dd9-4431-8ac6-3670653205c6/71ef8d97-0dea-3d53-bcc2-9a3bd515d382.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/aa82061b-7dd9-4431-8ac6-3670653205c6/aa82061b-7dd9-4431-8ac6-3670653205c6.crl

            X509v3 Authority Key Identifier:
                keyid:7A:BF:18:DA:C9:A0:05:7E:9A:42:7F:FE:86:FC:0F:E8:3E:98:D5:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/aa82061b-7dd9-4431-8ac6-3670653205c6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.162.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:1e:73:98:1d:6d:3c:90:a2:e0:85:b0:5e:f7:89:b9:a0:83:
         41:42:97:f7:4c:97:33:ea:9c:19:ec:7c:d6:6a:7f:89:7d:76:
         fb:2a:2f:e4:c7:60:c0:9a:2a:b4:08:e0:79:c6:de:3e:83:e5:
         49:87:aa:74:92:3f:1f:bb:6e:b5:2c:5f:c7:74:f4:e5:22:fe:
         29:f9:10:c9:1d:9b:c5:50:25:aa:d5:33:96:7b:5a:e8:24:4d:
         a1:cf:93:d3:4c:e1:23:52:f9:69:6e:58:b0:5c:d9:70:7b:f2:
         39:75:47:46:54:95:bf:7e:35:d8:93:60:0a:39:3d:74:e2:6d:
         f7:35:5c:53:21:24:0a:43:c3:ed:5c:e1:58:51:4a:fc:03:bb:
         01:e1:40:74:43:16:38:3a:46:ab:25:f3:80:57:01:65:bd:0d:
         0f:80:27:c6:2d:a9:91:52:5f:05:2b:13:83:eb:9b:5a:b9:04:
         53:16:5b:30:e6:59:66:37:bc:8d:0b:93:12:d0:37:af:0b:1d:
         c8:47:c3:aa:34:98:ac:0d:5d:38:32:ab:53:00:9e:95:e5:8b:
         05:97:e8:49:f7:57:9b:d0:47:6c:be:d5:ed:01:75:04:f9:06:
         c0:14:1f:0f:f2:60:9b:bc:f9:8f:4f:a0:71:ec:de:bf:24:0d:
         2a:0f:d3:79
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE78rOwlS7yyMzcoEMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWE4MjA2MWItN2RkOS00NDMxLThhYzYtMzY3MDY1MzIw
NWM2MB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk
YWQ0NzY5OWYtMGYxMy00YTgwLWEzYTItMTNkZmZhNjU0Mjg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlbfgVu75hj69IKsINV0vpd9faDjDhlZzHH7
Ea8ssRgh46bEsCul+fuzYKARxmIagb+S9owg91XaROhksciLbb2RK07OxvhezXv4
lv1qJzvJ18HzfS87GrQe8wT6mDoo9/nXbFE/LFiWaZlh/MFncEoAYTFE5jNGFwLa
aD6okXR5DeMDZZzToJoJbQEMXIX6gchN4gBFwa0YBzTpywNjNRpNsdq5HrGe5q0l
EeXJgEnrXnb2sE4zFcuMT+PAg+D+WpxebUj2Pzgpub3df7N5jY/4O7Us597YUiPo
5Kw13H35MC4C0synJnF4s/GnfKbWARGu+m/wjtY2tPNbIO+pBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGScG69st1Qa/IDLwZBHkySdjGVJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hYTgy
MDYxYi03ZGQ5LTQ0MzEtOGFjNi0zNjcwNjUzMjA1YzYvNzFlZjhkOTctMGRlYS0z
ZDUzLWJjYzItOWEzYmQ1MTVkMzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYWE4MjA2MWItN2RkOS00NDMxLThh
YzYtMzY3MDY1MzIwNWM2L2FhODIwNjFiLTdkZDktNDQzMS04YWM2LTM2NzA2NTMy
MDVjNi5jcmwwHwYDVR0jBBgwFoAUer8Y2smgBX6aQn/+hvwP6D6Y1T8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9hYTgyMDYxYi03ZGQ5LTQ0MzEtOGFjNi0zNjcw
NjUzMjA1YzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2KIQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACwec5gdbTyQouCFsF73ibmgg0FCl/dMlzPqnBnsfNZqf4l9dvsqL+TH
YMCaKrQI4HnG3j6D5UmHqnSSPx+7brUsX8d09OUi/in5EMkdm8VQJarVM5Z7Wugk
TaHPk9NM4SNS+WluWLBc2XB78jl1R0ZUlb9+NdiTYAo5PXTibfc1XFMhJApDw+1c
4VhRSvwDuwHhQHRDFjg6Rqsl84BXAWW9DQ+AJ8YtqZFSXwUrE4Prm1q5BFMWWzDm
WWY3vI0LkxLQN68LHchHw6o0mKwNXTgyq1MAnpXliwWX6En3V5vQR2y+1e0BdQT5
BsAUHw/yYJu8+Y9PoHHs3r8kDSoP03k=
-----END CERTIFICATE-----
Generated at Sun Oct 11 01:05:10 2026 by rpki-client