Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/0dfbfe87-cbf2-3203-99a9-79dae9f09d50.roa
File:                     0dfbfe87-cbf2-3203-99a9-79dae9f09d50.roa (raw, json)
Hash identifier:          qLjXVSqhp1+aErQWkCFlGpJ9C9LjYpkLJXWRBZE0uA0=
Subject key identifier:   60:DB:34:1C:DC:3C:82:EF:8C:F6:BD:28:1F:9B:1D:49:5D:3E:A3:D1
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F4328584F1B624A97ACBF5B6DC548C880
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/0dfbfe87-cbf2-3203-99a9-79dae9f09d50.roa
Signing time:             Tue 08 Sep 2026 13:00:12 +0000
ROA not before:           Tue 08 Sep 2026 13:00:12 +0000
ROA not after:            Mon 07 Dec 2026 14:00:12 +0000
asID:                     16696
IP address blocks:        216.120.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1b:62:4a:97:ac:bf:5b:6d:c5:48:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Sep  8 13:00:12 2026 GMT
            Not After : Dec  7 14:00:12 2026 GMT
        Subject: CN=58e185b5-4579-4470-a7a7-bd67d3674d5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:70:28:ed:ae:dc:a3:1d:c2:47:f1:eb:d2:26:
                    7a:df:1e:f3:63:47:b9:48:17:b3:79:a7:91:dc:ec:
                    d0:d8:78:5a:56:f6:a9:61:97:3f:d0:1b:c3:a6:d3:
                    0d:2b:f0:68:a9:cd:a5:7a:09:12:4b:43:0a:59:27:
                    1e:19:f1:b9:b7:ce:8c:3f:1c:1f:8d:4b:f7:fc:82:
                    ec:c9:51:19:a2:ae:87:b2:1d:0e:1e:9a:9e:da:65:
                    40:b3:84:4c:4d:34:e6:eb:76:96:6e:db:c9:c3:66:
                    cd:ac:fb:27:6c:a4:39:cc:7c:f2:cb:4c:14:ba:39:
                    34:10:df:53:28:53:55:f7:3e:6f:74:c5:e0:e8:ae:
                    92:b5:a0:cd:73:5f:a1:5f:d8:17:63:e9:3b:64:7c:
                    7d:eb:64:20:93:fa:93:fd:23:ed:9c:4c:8b:45:22:
                    f3:8a:61:e2:e4:52:22:e0:6d:a1:9b:ea:e9:b1:1b:
                    57:8c:92:47:ae:93:88:12:b6:f8:32:e6:d7:89:4d:
                    22:75:11:2b:d4:0e:54:e7:87:50:c0:75:bd:bc:ca:
                    2a:99:d9:c7:90:d1:6a:34:f7:94:31:55:9e:24:44:
                    b5:69:d2:e2:68:3d:45:6c:57:4e:ed:06:0f:17:77:
                    96:fd:d3:d9:e2:eb:4c:74:35:64:a6:24:ed:bd:2e:
                    a8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:DB:34:1C:DC:3C:82:EF:8C:F6:BD:28:1F:9B:1D:49:5D:3E:A3:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/0dfbfe87-cbf2-3203-99a9-79dae9f09d50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.120.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:f3:f9:84:a5:40:31:52:48:53:c6:26:a5:a8:3e:c7:4d:33:
         a9:c4:a1:35:c0:2b:ee:86:34:f9:96:6b:d9:e0:a8:d1:cb:89:
         fc:69:6c:7a:8a:cc:72:7f:41:ee:e2:07:6d:eb:af:7d:69:a2:
         7c:c1:44:7e:15:72:bc:1b:19:20:6c:8b:28:5a:a0:9d:37:14:
         6e:af:ea:f3:87:93:15:72:a0:ac:70:73:0e:76:9a:70:95:1e:
         ff:b4:b6:12:cb:6e:10:fa:a4:a7:62:d0:3d:fe:52:ba:84:13:
         67:06:3b:72:21:46:49:f0:c6:76:52:3b:6c:ef:71:0e:30:40:
         99:7b:b5:28:b1:08:ba:09:20:1a:e3:b6:66:eb:cb:20:c9:d8:
         97:34:94:ef:cc:3c:1c:c1:b3:d0:e3:40:c6:40:99:2c:a0:f8:
         c9:13:51:a3:98:49:e5:53:f8:d7:da:48:b0:7f:7a:99:25:07:
         88:71:0a:1a:fd:f1:5a:eb:3e:a8:db:dc:81:ae:7d:45:b2:a1:
         10:7f:7f:2f:c7:25:3f:28:7b:85:ea:14:30:1a:29:3f:89:04:
         43:fa:cc:0a:83:03:94:74:55:a0:86:9f:44:5a:9a:eb:93:4d:
         40:d7:28:49:73:8c:41:57:70:5d:ae:e9:96:9f:0b:70:59:e8:
         1a:b6:07:fa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bYkqXrL9bbcVIyIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm
YzYwMB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk
NThlMTg1YjUtNDU3OS00NDcwLWE3YTctYmQ2N2QzNjc0ZDVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnAo7a7cox3CR/Hr0iZ63x7zY0e5SBezeaeR
3OzQ2HhaVvapYZc/0BvDptMNK/Boqc2legkSS0MKWSceGfG5t86MPxwfjUv3/ILs
yVEZoq6Hsh0OHpqe2mVAs4RMTTTm63aWbtvJw2bNrPsnbKQ5zHzyy0wUujk0EN9T
KFNV9z5vdMXg6K6StaDNc1+hX9gXY+k7ZHx962Qgk/qT/SPtnEyLRSLzimHi5FIi
4G2hm+rpsRtXjJJHrpOIErb4MubXiU0idREr1A5U54dQwHW9vMoqmdnHkNFqNPeU
MVWeJES1adLiaD1FbFdO7QYPF3eW/dPZ4utMdDVkpiTtvS6olwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGDbNBzcPILvjPa9KB+bHUldPqPRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl
OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvMGRmYmZlODctY2JmMi0z
MjAzLTk5YTktNzlkYWU5ZjA5ZDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz
YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh
ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1
YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2HirMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACzz+YSlQDFSSFPGJqWoPsdNM6nEoTXAK+6GNPmWa9ngqNHLifxpbHqK
zHJ/Qe7iB23rr31ponzBRH4VcrwbGSBsiyhaoJ03FG6v6vOHkxVyoKxwcw52mnCV
Hv+0thLLbhD6pKdi0D3+UrqEE2cGO3IhRknwxnZSO2zvcQ4wQJl7tSixCLoJIBrj
tmbryyDJ2Jc0lO/MPBzBs9DjQMZAmSyg+MkTUaOYSeVT+NfaSLB/epklB4hxChr9
8VrrPqjb3IGufUWyoRB/fy/HJT8oe4XqFDAaKT+JBEP6zAqDA5R0VaCGn0RamuuT
TUDXKElzjEFXcF2u6ZafC3BZ6Bq2B/o=
-----END CERTIFICATE-----
Generated at Thu Sep 24 08:18:01 2026 by rpki-client