Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/71bd7075-7aff-3438-b2aa-83d3ecd6993a.roa
File:                     71bd7075-7aff-3438-b2aa-83d3ecd6993a.roa (raw, json)
Hash identifier:          nMXENKoBuNLG59MzoCaDl7/CoSa/F+mC7pilcGcCUQ4=
Subject key identifier:   E3:FB:E4:80:32:F2:DB:EA:14:F0:26:B7:3C:42:83:76:9E:DA:34:82
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D6515029471D3780E4857BA00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/71bd7075-7aff-3438-b2aa-83d3ecd6993a.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     30036
IP address blocks:        107.167.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:02:94:71:d3:78:0e:48:57:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=904fd0d5-b75e-46fa-9ab5-bbd5ac4f3428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e6:12:a2:4f:00:1f:f5:87:0b:fc:0d:24:64:
                    4d:20:fa:c7:f2:9b:32:b8:03:fb:8d:c2:b1:bd:ff:
                    d5:66:50:d6:03:ba:29:bd:ba:b8:0d:71:3e:e5:53:
                    91:d2:45:4a:d1:85:c1:eb:3e:4f:d7:c6:a3:0c:01:
                    5d:74:9d:f7:0b:f6:fd:7c:26:80:8d:93:3a:08:72:
                    48:d8:c9:33:f2:9a:5c:e8:e2:3c:28:0d:27:44:6e:
                    15:db:0e:47:c2:85:d4:7f:a3:c9:7b:db:c8:82:3b:
                    d2:57:5b:28:34:ba:53:a5:a9:e9:b6:d8:15:23:3d:
                    e4:ee:b6:af:36:53:5a:31:07:6f:62:49:da:96:6a:
                    ba:0f:5d:d9:64:dd:55:f4:c5:ac:26:57:63:c9:bc:
                    2e:ed:65:33:91:81:9a:ef:57:db:e6:69:87:6c:fb:
                    ce:c5:2e:43:2c:4f:f5:51:26:a4:aa:3c:db:bb:6d:
                    53:a8:77:c3:dd:3e:95:7e:dd:dc:b7:48:34:b4:d6:
                    33:e8:07:e2:f8:87:69:50:87:0b:bd:9d:e2:2a:30:
                    c8:24:49:11:9a:97:3e:7e:da:71:28:d2:af:a1:d2:
                    ef:86:e5:26:dc:eb:63:38:4a:cd:92:21:68:64:fe:
                    24:1f:d3:6d:91:cf:1b:1b:e1:d9:b8:d6:9d:7d:14:
                    10:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:FB:E4:80:32:F2:DB:EA:14:F0:26:B7:3C:42:83:76:9E:DA:34:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/71bd7075-7aff-3438-b2aa-83d3ecd6993a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.167.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:d0:c2:8c:b3:0f:3f:17:5e:53:46:22:62:c4:a1:c6:d4:56:
         3c:4e:e4:8e:cd:23:6c:69:c3:55:d9:eb:89:22:7a:fc:6b:ba:
         15:4b:07:96:6d:6a:1a:7b:7b:89:d7:6e:1f:f6:91:31:62:7d:
         c7:6b:57:d7:50:a9:4c:55:8c:ea:34:fa:2c:8a:96:d1:89:86:
         7a:35:cd:f2:6b:a5:30:4e:c7:f2:c6:35:59:7a:8d:9b:99:50:
         7c:81:8a:28:f1:9c:71:84:ed:dd:8e:a9:0c:bd:51:43:c1:12:
         f0:33:34:cb:4d:89:b3:ed:09:ca:83:5a:85:7f:3b:76:59:eb:
         69:34:d4:76:8b:86:15:13:c2:96:1d:68:bd:2f:17:38:e9:36:
         6e:d5:a0:67:19:67:11:58:0b:b1:2b:95:79:e1:01:19:57:c1:
         52:83:1c:d7:90:07:cf:34:12:9a:67:a4:dd:17:24:02:36:3f:
         2f:bc:86:20:12:60:32:09:fe:5a:db:4b:0e:42:7a:36:32:14:
         98:49:f8:2e:c8:6e:f3:66:7d:aa:d2:5c:19:69:a4:d7:75:13:
         aa:2c:f5:01:c4:a2:38:7e:0a:31:c8:a7:5a:28:40:e6:5a:69:
         bc:cc:89:e7:f9:6f:f2:cc:cb:05:9d:74:b1:9c:5a:43:99:f0:
         c0:d0:48:10
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFQKUcdN4DkhXugAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk
OTA0ZmQwZDUtYjc1ZS00NmZhLTlhYjUtYmJkNWFjNGYzNDI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeYSok8AH/WHC/wNJGRNIPrH8psyuAP7jcKx
vf/VZlDWA7opvbq4DXE+5VOR0kVK0YXB6z5P18ajDAFddJ33C/b9fCaAjZM6CHJI
2Mkz8ppc6OI8KA0nRG4V2w5HwoXUf6PJe9vIgjvSV1soNLpTpanpttgVIz3k7rav
NlNaMQdvYknalmq6D13ZZN1V9MWsJldjybwu7WUzkYGa71fb5mmHbPvOxS5DLE/1
USakqjzbu21TqHfD3T6Vft3ct0g0tNYz6Afi+IdpUIcLvZ3iKjDIJEkRmpc+ftpx
KNKvodLvhuUm3OtjOErNkiFoZP4kH9Ntkc8bG+HZuNadfRQQXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOP75IAy8tvqFPAmtzxCg3ae2jSCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNzFiZDcwNzUtN2FmZi0z
NDM4LWIyYWEtODNkM2VjZDY5OTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa6fBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIDQwoyzDz8XXlNGImLEocbUVjxO5I7NI2xpw1XZ64kievxruhVLB5Zt
ahp7e4nXbh/2kTFifcdrV9dQqUxVjOo0+iyKltGJhno1zfJrpTBOx/LGNVl6jZuZ
UHyBiijxnHGE7d2OqQy9UUPBEvAzNMtNibPtCcqDWoV/O3ZZ62k01HaLhhUTwpYd
aL0vFzjpNm7VoGcZZxFYC7ErlXnhARlXwVKDHNeQB880EppnpN0XJAI2Py+8hiAS
YDIJ/lrbSw5CejYyFJhJ+C7IbvNmfarSXBlppNd1E6os9QHEojh+CjHIp1ooQOZa
abzMief5b/LMywWddLGcWkOZ8MDQSBA=
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:44:42 2026 by rpki-client