Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/fab751c3-5070-3404-a031-06397c719220.roa
File:                     fab751c3-5070-3404-a031-06397c719220.roa (raw, json)
Hash identifier:          Ym1NqdN4x0ykegq31WrkFl87XIXD6gZnQ4Pc5HYFIFA=
Subject key identifier:   A5:AE:41:C0:EB:32:44:CF:50:EC:0A:DD:A1:BD:2E:E2:5C:06:A8:9A
Certificate issuer:       /CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
Certificate serial:       010D0C9F4328584E1FA99F8F0AA60A9FF45A2B00
Authority key identifier: DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/fab751c3-5070-3404-a031-06397c719220.roa
Signing time:             Wed 10 Jun 2026 09:00:13 +0000
ROA not before:           Wed 10 Jun 2026 09:00:13 +0000
ROA not after:            Tue 08 Sep 2026 09:00:13 +0000
asID:                     1403
IP address blocks:        216.25.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1f:a9:9f:8f:0a:a6:0a:9f:f4:5a:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
        Validity
            Not Before: Jun 10 09:00:13 2026 GMT
            Not After : Sep  8 09:00:13 2026 GMT
        Subject: CN=fe3e2d1b-d14e-4aa4-adbd-d2ca75012898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:39:3a:17:b9:15:b4:d4:a9:eb:6e:31:ad:04:
                    fe:1a:69:d6:d6:de:5f:09:91:c2:03:c3:29:3c:68:
                    5d:15:ef:76:04:cd:3d:1e:84:bf:75:fe:9d:6c:19:
                    51:97:71:d2:f5:30:84:bb:3a:a6:8a:d1:ae:5e:d8:
                    f7:8b:08:bb:3f:c8:69:d5:64:b9:ce:b4:2b:76:fe:
                    8f:0b:2f:28:25:c5:4d:fc:6e:88:f3:9c:84:12:a1:
                    91:de:f7:2b:1a:69:22:fa:95:80:9c:58:bc:dd:1e:
                    c6:ee:e9:4b:63:82:b4:f5:d1:89:50:c8:0f:7b:a9:
                    aa:0e:1f:63:70:90:0e:43:47:ff:3d:d4:6f:23:2e:
                    b6:12:d2:92:93:ea:e7:96:38:20:3f:ab:54:46:e1:
                    10:6c:6a:08:d7:32:42:45:ec:9b:6b:3e:cd:b2:8e:
                    19:0f:f5:77:98:db:11:6d:70:24:af:10:8a:08:63:
                    57:90:aa:97:93:d8:f3:9b:98:a3:61:8f:ea:88:1d:
                    8b:50:6a:b0:5b:86:96:bc:b5:f7:91:67:80:42:9a:
                    89:4c:b9:f7:eb:93:42:15:27:24:e6:4f:66:bb:07:
                    7a:09:f9:22:7b:08:aa:b3:41:b0:0b:79:8f:b7:dd:
                    af:6c:11:64:1a:99:77:9f:8f:0b:36:50:d2:27:0e:
                    1f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:AE:41:C0:EB:32:44:CF:50:EC:0A:DD:A1:BD:2E:E2:5C:06:A8:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/fab751c3-5070-3404-a031-06397c719220.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl

            X509v3 Authority Key Identifier:
                keyid:DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.25.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:2a:27:00:db:3c:dd:85:8b:d3:70:a1:55:ea:bd:07:b9:60:
         f2:45:31:3d:c3:d7:72:f3:f9:00:d8:ef:e0:4e:52:38:e7:06:
         57:71:1c:22:a5:35:f4:b6:c9:b1:bb:ea:22:99:c2:45:5a:15:
         f6:19:48:78:29:9d:55:45:64:cc:ee:5e:8a:86:f9:c6:93:2c:
         35:5c:23:3b:e5:68:19:37:7f:f6:2f:d8:1a:c1:31:19:06:f6:
         1f:18:dc:80:45:32:0f:6c:bf:d6:2e:24:83:2f:ad:c5:20:7d:
         bc:6d:29:38:d9:33:92:18:1e:0e:7a:35:8f:1d:c1:96:e3:f9:
         71:0a:92:8a:22:55:20:a1:18:85:79:15:56:b5:7d:96:0b:5a:
         21:9c:ad:64:b7:3e:cb:54:09:3f:b4:72:ac:7a:c8:07:c9:0d:
         c3:13:1d:78:aa:5f:3f:7c:30:cc:77:3b:57:5f:17:dc:30:5d:
         6d:11:fb:dd:69:c4:60:b2:e8:25:b0:86:f7:fc:03:36:6c:a9:
         46:ed:1c:98:7f:cb:59:0b:74:50:02:7c:8c:17:18:6a:39:11:
         9b:33:87:e7:dd:19:87:df:6b:d8:67:f5:cb:31:91:41:3d:37:
         ae:77:d2:71:8e:b3:ca:f8:dd:f5:03:ce:01:25:94:59:8a:17:
         1a:16:6b:3c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4fqZ+PCqYKn/RaKwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjg0YWI1MmQtOTE1ZS00ZDhhLWIzN2ItNDk2ZWE0OWM2
Nzk4MB4XDTI2MDYxMDA5MDAxM1oXDTI2MDkwODA5MDAxM1owLzEtMCsGA1UEAxMk
ZmUzZTJkMWItZDE0ZS00YWE0LWFkYmQtZDJjYTc1MDEyODk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDk6F7kVtNSp624xrQT+GmnW1t5fCZHCA8Mp
PGhdFe92BM09HoS/df6dbBlRl3HS9TCEuzqmitGuXtj3iwi7P8hp1WS5zrQrdv6P
Cy8oJcVN/G6I85yEEqGR3vcrGmki+pWAnFi83R7G7ulLY4K09dGJUMgPe6mqDh9j
cJAOQ0f/PdRvIy62EtKSk+rnljggP6tURuEQbGoI1zJCReybaz7Nso4ZD/V3mNsR
bXAkrxCKCGNXkKqXk9jzm5ijYY/qiB2LUGqwW4aWvLX3kWeAQpqJTLn365NCFSck
5k9muwd6Cfkiewiqs0GwC3mPt92vbBFkGpl3n48LNlDSJw4fBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKWuQcDrMkTPUOwK3aG9LuJcBqiaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iODRh
YjUyZC05MTVlLTRkOGEtYjM3Yi00OTZlYTQ5YzY3OTgvZmFiNzUxYzMtNTA3MC0z
NDA0LWEwMzEtMDYzOTdjNzE5MjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjg0YWI1MmQtOTE1ZS00ZDhhLWIz
N2ItNDk2ZWE0OWM2Nzk4L2I4NGFiNTJkLTkxNWUtNGQ4YS1iMzdiLTQ5NmVhNDlj
Njc5OC5jcmwwHwYDVR0jBBgwFoAU3bUy71MQu1ndgStV6Nv35hADJHwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iODRhYjUyZC05MTVlLTRkOGEtYjM3Yi00OTZl
YTQ5YzY3OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2BnwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD8qJwDbPN2Fi9NwoVXqvQe5YPJFMT3D13Lz+QDY7+BOUjjnBldxHCKl
NfS2ybG76iKZwkVaFfYZSHgpnVVFZMzuXoqG+caTLDVcIzvlaBk3f/Yv2BrBMRkG
9h8Y3IBFMg9sv9YuJIMvrcUgfbxtKTjZM5IYHg56NY8dwZbj+XEKkooiVSChGIV5
FVa1fZYLWiGcrWS3PstUCT+0cqx6yAfJDcMTHXiqXz98MMx3O1dfF9wwXW0R+91p
xGCy6CWwhvf8AzZsqUbtHJh/y1kLdFACfIwXGGo5EZszh+fdGYffa9hn9csxkUE9
N6530nGOs8r43fUDzgEllFmKFxoWazw=
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:08:49 2026 by rpki-client