Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/988454ca-96f4-3cee-bbde-cef59d93d902.roa
File:                     988454ca-96f4-3cee-bbde-cef59d93d902.roa (raw, json)
Hash identifier:          3qfVLdYqGFIaOWg3Fr1w/qztgDOzVlsA1JWm0aA6kzM=
Subject key identifier:   23:2D:B0:C0:DE:3F:E5:2A:4B:4D:78:EA:FA:9C:5E:D5:33:58:00:17
Certificate issuer:       /CN=f767ea16-72b4-402a-9b2f-7583fe390bb7
Certificate serial:       010D0C9F4328584D59EA71DE769E4614C9019600
Authority key identifier: 7A:C6:2E:73:FB:82:27:31:62:5F:C0:8E:76:FB:20:55:A6:05:B9:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/988454ca-96f4-3cee-bbde-cef59d93d902.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     14773
IP address blocks:        206.82.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:71:de:76:9e:46:14:c9:01:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f767ea16-72b4-402a-9b2f-7583fe390bb7
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=2c928ede-277d-4dc4-9f29-095d66f6e623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2a:5b:94:c4:7a:f8:43:3f:38:2a:a3:db:3f:
                    de:f0:45:eb:16:7c:ef:70:4b:fa:3b:9b:b1:d5:6d:
                    cf:6d:c1:42:f6:35:fc:f6:6a:9e:8f:78:be:e5:0f:
                    76:c5:de:7c:bb:fe:6e:a6:f1:e1:d0:68:43:6e:f1:
                    cd:47:8c:30:36:e0:b0:33:a1:ff:0c:1a:ed:a5:ef:
                    01:ee:6e:fd:9c:19:af:ac:19:70:70:dd:2a:ab:28:
                    52:a9:62:bd:47:5d:2d:b8:ab:81:96:80:54:34:20:
                    b5:8b:4a:82:58:0b:f9:40:d3:af:23:78:18:00:75:
                    67:7c:97:d7:25:67:ac:ad:2b:94:73:48:54:98:db:
                    10:8a:01:9c:72:0d:73:7e:5c:f1:dd:6a:fc:5e:d6:
                    b9:c9:f9:9c:c1:1a:d3:58:88:88:6b:3e:fb:8f:cb:
                    07:e8:79:af:a3:52:b2:f1:63:c1:d5:73:e0:e2:d6:
                    7d:62:98:2a:f4:fb:d2:3c:e8:bf:68:da:cc:9b:f3:
                    26:8d:69:38:07:32:ea:d0:60:cc:fa:ab:0f:8f:9c:
                    49:d6:cd:f9:dd:a9:95:52:01:73:96:95:85:69:3d:
                    dc:ba:d6:0c:c4:48:f5:89:2a:c3:57:bb:1e:38:da:
                    0f:b0:da:21:c6:ed:97:53:45:12:36:5a:ea:94:2b:
                    e8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:2D:B0:C0:DE:3F:E5:2A:4B:4D:78:EA:FA:9C:5E:D5:33:58:00:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/988454ca-96f4-3cee-bbde-cef59d93d902.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.crl

            X509v3 Authority Key Identifier:
                keyid:7A:C6:2E:73:FB:82:27:31:62:5F:C0:8E:76:FB:20:55:A6:05:B9:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.82.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:92:e3:c5:ca:a9:d2:28:83:9e:2f:72:ce:bb:08:2e:8b:56:
         75:5a:21:4b:7f:28:84:e7:23:43:2a:26:db:cf:9b:8c:e5:1d:
         36:06:c7:1e:6f:d8:07:84:8e:1c:91:0d:be:22:21:5b:fe:1d:
         97:81:7c:9f:b7:c5:bd:e2:cc:93:96:a5:be:6c:fd:76:b2:42:
         ad:c4:2e:34:58:a4:42:0c:95:d7:90:21:34:1b:9b:6d:4a:2e:
         50:77:ed:f9:c3:7e:81:19:e9:b4:f6:8d:14:88:a4:ca:ab:31:
         1c:08:36:21:50:18:29:6e:aa:a4:0e:9b:94:eb:70:0a:77:97:
         77:19:dd:b8:a2:ae:4e:d5:40:9f:30:cb:fc:2f:90:09:32:57:
         8a:74:08:e2:09:5e:c8:dd:78:29:34:e6:b4:be:d4:98:e5:4e:
         72:16:fc:9c:cc:16:9d:ff:3d:4f:e2:14:48:96:2d:1d:7b:d4:
         d9:04:83:4d:7d:97:c5:bb:8c:b0:fe:5f:d3:76:3c:14:3b:5a:
         b7:be:41:41:a5:a9:fc:7c:a2:22:5c:56:13:de:b5:6b:e9:92:
         a7:d3:82:4b:aa:ae:d6:23:b3:bb:6a:24:b6:47:4c:ef:34:53:
         d7:0e:b7:ce:4a:55:08:53:03:01:31:87:ce:4e:9a:00:44:a3:
         7b:a2:df:c4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6nHedp5GFMkBlgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjc2N2VhMTYtNzJiNC00MDJhLTliMmYtNzU4M2ZlMzkw
YmI3MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk
MmM5MjhlZGUtMjc3ZC00ZGM0LTlmMjktMDk1ZDY2ZjZlNjIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzypblMR6+EM/OCqj2z/e8EXrFnzvcEv6O5ux
1W3PbcFC9jX89mqej3i+5Q92xd58u/5upvHh0GhDbvHNR4wwNuCwM6H/DBrtpe8B
7m79nBmvrBlwcN0qqyhSqWK9R10tuKuBloBUNCC1i0qCWAv5QNOvI3gYAHVnfJfX
JWesrSuUc0hUmNsQigGccg1zflzx3Wr8Xta5yfmcwRrTWIiIaz77j8sH6Hmvo1Ky
8WPB1XPg4tZ9Ypgq9PvSPOi/aNrMm/MmjWk4BzLq0GDM+qsPj5xJ1s353amVUgFz
lpWFaT3cutYMxEj1iSrDV7seONoPsNohxu2XU0USNlrqlCvo0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCMtsMDeP+UqS0146vqcXtUzWAAXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mNzY3
ZWExNi03MmI0LTQwMmEtOWIyZi03NTgzZmUzOTBiYjcvOTg4NDU0Y2EtOTZmNC0z
Y2VlLWJiZGUtY2VmNTlkOTNkOTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjc2N2VhMTYtNzJiNC00MDJhLTli
MmYtNzU4M2ZlMzkwYmI3L2Y3NjdlYTE2LTcyYjQtNDAyYS05YjJmLTc1ODNmZTM5
MGJiNy5jcmwwHwYDVR0jBBgwFoAUesYuc/uCJzFiX8COdvsgVaYFuSkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9mNzY3ZWExNi03MmI0LTQwMmEtOWIyZi03NTgz
ZmUzOTBiYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzlIQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADCS48XKqdIog54vcs67CC6LVnVaIUt/KITnI0MqJtvPm4zlHTYGxx5v
2AeEjhyRDb4iIVv+HZeBfJ+3xb3izJOWpb5s/XayQq3ELjRYpEIMldeQITQbm21K
LlB37fnDfoEZ6bT2jRSIpMqrMRwINiFQGCluqqQOm5TrcAp3l3cZ3biirk7VQJ8w
y/wvkAkyV4p0COIJXsjdeCk05rS+1JjlTnIW/JzMFp3/PU/iFEiWLR171NkEg019
l8W7jLD+X9N2PBQ7Wre+QUGlqfx8oiJcVhPetWvpkqfTgkuqrtYjs7tqJLZHTO80
U9cOt85KVQhTAwExh85OmgBEo3ui38Q=
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:08:22 2026 by rpki-client