Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfba3e15-3fe1-4634-8e3b-838e9f2ae647/a54a8459-0e0e-3ac7-a09c-54965f63560e.roa
File:                     a54a8459-0e0e-3ac7-a09c-54965f63560e.roa (raw, json)
Hash identifier:          Rn8VAx94ltSSudx9tbBPeBI+jFqO7LfUf4SxZ9IpHDw=
Subject key identifier:   16:9A:8A:80:51:3D:E3:2D:75:05:C0:9C:E2:2C:30:94:20:30:CF:75
Certificate issuer:       /CN=cfba3e15-3fe1-4634-8e3b-838e9f2ae647
Certificate serial:       010D0C9F4328584E15E4868BFD8E35E2789BD880
Authority key identifier: 17:8A:2C:4A:22:5C:75:BB:7A:7B:F4:B0:8E:30:51:B7:20:11:35:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfba3e15-3fe1-4634-8e3b-838e9f2ae647.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfba3e15-3fe1-4634-8e3b-838e9f2ae647/a54a8459-0e0e-3ac7-a09c-54965f63560e.roa
Signing time:             Sat 06 Jun 2026 21:00:13 +0000
ROA not before:           Sat 06 Jun 2026 21:00:13 +0000
ROA not after:            Fri 04 Sep 2026 21:00:13 +0000
asID:                     30562
IP address blocks:        168.100.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfba3e15-3fe1-4634-8e3b-838e9f2ae647/cfba3e15-3fe1-4634-8e3b-838e9f2ae647.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfba3e15-3fe1-4634-8e3b-838e9f2ae647/cfba3e15-3fe1-4634-8e3b-838e9f2ae647.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfba3e15-3fe1-4634-8e3b-838e9f2ae647.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:15:e4:86:8b:fd:8e:35:e2:78:9b:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfba3e15-3fe1-4634-8e3b-838e9f2ae647
        Validity
            Not Before: Jun  6 21:00:13 2026 GMT
            Not After : Sep  4 21:00:13 2026 GMT
        Subject: CN=82e70f75-0263-4c83-8a41-3f9b5b2d8411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:2a:b2:cb:1e:fe:c8:50:80:09:70:ce:f7:c6:
                    dd:d2:76:f4:2a:40:5f:c5:ec:82:3b:ed:0b:a4:58:
                    f4:01:d6:c2:e5:7c:57:12:29:24:39:83:a8:26:bc:
                    03:8d:66:8e:4b:61:e8:34:7e:ad:62:2b:a5:f7:49:
                    fd:76:dc:4c:1b:06:02:0a:4d:76:98:f3:62:96:3c:
                    cc:19:56:74:d2:ff:f6:38:5f:b9:2b:41:4c:db:a9:
                    c1:78:b5:4d:53:92:c2:cb:53:d4:51:be:76:51:2f:
                    71:9e:d2:40:e0:25:21:4b:88:fa:26:b3:21:7e:30:
                    53:50:4b:03:cf:04:27:2d:39:b8:d7:36:17:a8:45:
                    0f:0c:61:11:ed:0e:17:0f:e5:62:51:fe:b0:e9:84:
                    43:58:f5:7f:aa:c5:6a:5a:83:4b:5c:0a:70:13:ce:
                    74:18:28:01:26:82:c9:92:28:79:5c:bd:7e:51:99:
                    9b:d4:62:16:2f:19:a7:09:4e:e5:ff:85:15:80:91:
                    6b:cb:60:66:f5:4d:32:00:cc:94:e7:e7:97:00:95:
                    77:98:a4:0f:16:33:14:94:c6:b7:3f:a6:05:32:d5:
                    55:cf:d5:a5:9f:50:bf:2c:7d:6f:35:a9:1e:af:2d:
                    ba:e1:74:f3:3b:62:49:61:1d:5c:48:2b:0f:f0:50:
                    26:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:9A:8A:80:51:3D:E3:2D:75:05:C0:9C:E2:2C:30:94:20:30:CF:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfba3e15-3fe1-4634-8e3b-838e9f2ae647/a54a8459-0e0e-3ac7-a09c-54965f63560e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfba3e15-3fe1-4634-8e3b-838e9f2ae647/cfba3e15-3fe1-4634-8e3b-838e9f2ae647.crl

            X509v3 Authority Key Identifier:
                keyid:17:8A:2C:4A:22:5C:75:BB:7A:7B:F4:B0:8E:30:51:B7:20:11:35:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfba3e15-3fe1-4634-8e3b-838e9f2ae647.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.100.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:3b:a7:b7:85:f8:7c:98:01:0f:74:25:ec:3a:5a:87:5f:8c:
         26:0c:36:8c:6f:cc:a6:4d:ad:48:56:e1:03:e1:61:11:98:e5:
         0d:05:31:1f:11:8a:46:e6:76:5b:ef:8f:08:87:37:41:e2:3b:
         de:49:9e:91:0d:6a:5f:12:c7:19:ca:66:4a:01:2b:f4:92:af:
         85:c2:a6:49:52:af:17:f3:ed:73:7c:f8:95:cc:af:79:44:51:
         1d:f3:ba:79:94:78:26:a3:5c:c5:82:66:04:2d:75:34:fb:5b:
         00:39:3d:41:09:a8:b3:c9:7c:57:5a:2f:68:45:9e:1c:87:c9:
         81:aa:f2:5b:18:07:47:b2:44:13:7d:00:d6:b0:67:0d:2c:54:
         67:c1:f7:b2:45:be:99:02:a0:03:ed:b4:88:0e:71:0d:ba:3a:
         7e:b6:59:fa:b0:03:dd:15:c5:ea:34:fc:9b:52:ef:28:80:4c:
         ba:18:60:29:35:9e:07:6d:36:1b:8a:9f:51:0d:63:b2:ed:53:
         04:9f:04:67:11:c0:5e:6b:0d:37:6a:01:dc:60:24:a8:4c:28:
         3d:7c:cd:77:e2:88:8f:0b:02:66:4e:36:9a:ad:3f:a4:82:31:
         22:0a:82:dd:95:6d:c1:87:9d:d2:39:07:87:0c:d4:ce:15:e4:
         4c:84:9c:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4V5IaL/Y414nib2IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2ZiYTNlMTUtM2ZlMS00NjM0LThlM2ItODM4ZTlmMmFl
NjQ3MB4XDTI2MDYwNjIxMDAxM1oXDTI2MDkwNDIxMDAxM1owLzEtMCsGA1UEAxMk
ODJlNzBmNzUtMDI2My00YzgzLThhNDEtM2Y5YjViMmQ4NDExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSqyyx7+yFCACXDO98bd0nb0KkBfxeyCO+0L
pFj0AdbC5XxXEikkOYOoJrwDjWaOS2HoNH6tYiul90n9dtxMGwYCCk12mPNiljzM
GVZ00v/2OF+5K0FM26nBeLVNU5LCy1PUUb52US9xntJA4CUhS4j6JrMhfjBTUEsD
zwQnLTm41zYXqEUPDGER7Q4XD+ViUf6w6YRDWPV/qsVqWoNLXApwE850GCgBJoLJ
kih5XL1+UZmb1GIWLxmnCU7l/4UVgJFry2Bm9U0yAMyU5+eXAJV3mKQPFjMUlMa3
P6YFMtVVz9Wln1C/LH1vNakery264XTzO2JJYR1cSCsP8FAm+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBaaioBRPeMtdQXAnOIsMJQgMM91MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZmJh
M2UxNS0zZmUxLTQ2MzQtOGUzYi04MzhlOWYyYWU2NDcvYTU0YTg0NTktMGUwZS0z
YWM3LWEwOWMtNTQ5NjVmNjM1NjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2ZiYTNlMTUtM2ZlMS00NjM0LThl
M2ItODM4ZTlmMmFlNjQ3L2NmYmEzZTE1LTNmZTEtNDYzNC04ZTNiLTgzOGU5ZjJh
ZTY0Ny5jcmwwHwYDVR0jBBgwFoAUF4osSiJcdbt6e/SwjjBRtyARNSowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZmJhM2UxNS0zZmUxLTQ2MzQtOGUzYi04Mzhl
OWYyYWU2NDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqGSrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHs7p7eF+HyYAQ90Jew6WodfjCYMNoxvzKZNrUhW4QPhYRGY5Q0FMR8R
ikbmdlvvjwiHN0HiO95JnpENal8SxxnKZkoBK/SSr4XCpklSrxfz7XN8+JXMr3lE
UR3zunmUeCajXMWCZgQtdTT7WwA5PUEJqLPJfFdaL2hFnhyHyYGq8lsYB0eyRBN9
ANawZw0sVGfB97JFvpkCoAPttIgOcQ26On62WfqwA90Vxeo0/JtS7yiATLoYYCk1
ngdtNhuKn1ENY7LtUwSfBGcRwF5rDTdqAdxgJKhMKD18zXfiiI8LAmZONpqtP6SC
MSIKgt2VbcGHndI5B4cM1M4V5EyEnFQ=
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:55:24 2026 by rpki-client