Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/516dc6e4-52c8-3677-9d52-90ff280aac87.roa
File:                     516dc6e4-52c8-3677-9d52-90ff280aac87.roa (raw, json)
Hash identifier:          5n3mHdyw2wxwvFsiRFeVCvwKtXkn4gZF+bCmENAbkZk=
Subject key identifier:   41:94:F4:54:8F:47:5C:3D:97:80:69:90:0C:7E:40:4C:92:22:A0:1D
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E059B5313C605AD9905DBB1C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/516dc6e4-52c8-3677-9d52-90ff280aac87.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     30036
IP address blocks:        173.16.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:53:13:c6:05:ad:99:05:db:b1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=e7cdefea-1c97-42be-9ff6-c09774a7c413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:23:ea:39:1b:22:ad:e5:fe:cf:d4:4b:f0:5c:
                    7d:31:4f:ea:c8:7f:69:74:97:48:f5:0f:c9:b3:6e:
                    06:b5:30:7c:57:11:0c:2c:b6:24:7d:dd:e3:b4:0d:
                    b7:20:9d:12:6a:4a:bc:01:75:32:05:f1:6b:34:2d:
                    f6:98:24:e3:94:a0:47:ff:f2:41:9f:b9:08:69:93:
                    60:c8:58:27:27:cd:8e:b8:07:f2:29:83:1a:cf:00:
                    86:18:52:6e:af:a9:30:a7:a1:14:17:9f:e4:22:e0:
                    e6:2f:28:9a:81:b8:1a:3e:d8:15:25:ea:33:77:52:
                    6e:bf:d5:a6:1e:a0:1d:d7:c2:0f:8e:aa:b9:e6:5f:
                    8c:ae:a8:1e:20:a9:88:46:3a:69:95:67:8e:d4:02:
                    97:8a:ac:b7:5f:97:3d:06:96:5c:91:d0:f4:5c:f2:
                    76:8b:a5:8c:a3:e4:1e:27:a4:66:96:0c:66:0a:8f:
                    dd:7d:f7:f1:88:ee:0f:98:7e:c7:bb:c7:3e:a2:9d:
                    fb:0e:4f:5d:81:6d:a4:5d:49:ba:40:b7:ea:4f:56:
                    8b:c4:90:18:35:88:c7:d4:a1:90:ce:f3:39:32:04:
                    f2:c1:64:cc:88:dd:01:a5:37:73:0c:c3:ec:3c:1e:
                    68:76:0e:ea:da:78:41:a1:b7:f8:ed:50:5f:78:0f:
                    22:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:94:F4:54:8F:47:5C:3D:97:80:69:90:0C:7E:40:4C:92:22:A0:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/516dc6e4-52c8-3677-9d52-90ff280aac87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.16.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:db:3c:7e:a6:7c:0d:3d:83:6e:d9:72:5f:99:5f:0e:cd:e0:
         e7:00:b3:c1:b1:5d:bd:3d:cc:17:8a:19:01:a2:74:94:23:ba:
         40:df:74:16:72:6a:9a:95:29:8f:dc:51:32:db:63:0f:e2:06:
         24:58:ac:7f:0a:3c:b7:d4:c1:8d:9a:02:25:ab:90:27:b1:c5:
         a5:4e:ee:2c:d3:76:cc:c3:e2:ab:e3:2c:32:31:b7:74:9e:ea:
         7f:86:97:6b:f4:16:38:8e:a7:f8:2e:26:00:a7:a2:1b:a6:07:
         1a:8c:89:26:f7:0c:b0:14:6a:0b:a8:08:fd:54:28:5f:56:fd:
         6a:fa:60:18:b1:a0:88:58:3c:42:45:7d:2c:6d:92:de:5d:0f:
         30:5c:15:e6:3a:eb:98:60:08:0f:5c:f8:ae:b1:9a:a6:23:44:
         cc:a6:aa:78:70:31:f9:80:10:45:b1:0f:5b:13:44:a3:0e:7d:
         67:d3:8c:f1:c1:1b:d9:e4:89:cd:3e:21:5d:c2:cd:c1:25:98:
         39:f3:34:d9:9c:c2:4d:87:ec:bf:22:3d:d5:f4:60:1e:50:06:
         8c:c2:be:e9:8c:cf:d1:bb:e1:0d:0f:9a:21:5d:86:37:d4:0e:
         7e:f4:f2:60:06:b9:48:da:07:8e:79:29:58:c6:0e:2b:3c:ce:
         7f:b6:1d:8d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm1MTxgWtmQXbscAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk
ZTdjZGVmZWEtMWM5Ny00MmJlLTlmZjYtYzA5Nzc0YTdjNDEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCPqORsireX+z9RL8Fx9MU/qyH9pdJdI9Q/J
s24GtTB8VxEMLLYkfd3jtA23IJ0Sakq8AXUyBfFrNC32mCTjlKBH//JBn7kIaZNg
yFgnJ82OuAfyKYMazwCGGFJur6kwp6EUF5/kIuDmLyiagbgaPtgVJeozd1Juv9Wm
HqAd18IPjqq55l+MrqgeIKmIRjpplWeO1AKXiqy3X5c9BpZckdD0XPJ2i6WMo+Qe
J6RmlgxmCo/dfffxiO4PmH7Hu8c+op37Dk9dgW2kXUm6QLfqT1aLxJAYNYjH1KGQ
zvM5MgTywWTMiN0BpTdzDMPsPB5odg7q2nhBobf47VBfeA8iYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEGU9FSPR1w9l4BpkAx+QEySIqAdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNTE2ZGM2ZTQtNTJjOC0z
Njc3LTlkNTItOTBmZjI4MGFhYzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRA0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADfbPH6mfA09g27Zcl+ZXw7N4OcAs8GxXb09zBeKGQGidJQjukDfdBZy
apqVKY/cUTLbYw/iBiRYrH8KPLfUwY2aAiWrkCexxaVO7izTdszD4qvjLDIxt3Se
6n+Gl2v0FjiOp/guJgCnohumBxqMiSb3DLAUaguoCP1UKF9W/Wr6YBixoIhYPEJF
fSxtkt5dDzBcFeY665hgCA9c+K6xmqYjRMymqnhwMfmAEEWxD1sTRKMOfWfTjPHB
G9nkic0+IV3CzcElmDnzNNmcwk2H7L8iPdX0YB5QBozCvumMz9G74Q0PmiFdhjfU
Dn708mAGuUjaB455KVjGDis8zn+2HY0=
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:12:53 2026 by rpki-client