Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/550a151e-c18d-35ce-90a4-5c8c0337abb6.roa
File:                     550a151e-c18d-35ce-90a4-5c8c0337abb6.roa (raw, json)
Hash identifier:          OyM92NAmgK2k2KQWtDwd+OI1v79F3rbYpa/8EHVLKuc=
Subject key identifier:   7A:EB:74:47:38:A6:32:D8:2B:33:51:E6:8E:59:89:EB:3B:7A:8F:73
Certificate issuer:       /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959
Certificate serial:       010D0C9F4328584F4F081707233734CE20FD7880
Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/550a151e-c18d-35ce-90a4-5c8c0337abb6.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     398420
IP address blocks:        216.246.216.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:08:17:07:23:37:34:ce:20:fd:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=877d6b47-c32b-4157-9bbd-3a103f19f4ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:74:14:3c:96:7b:d4:1d:9e:f5:7c:f5:32:24:
                    8e:79:a1:d5:20:61:69:ff:13:a0:a4:b9:6f:18:e0:
                    6d:ba:f7:97:55:53:ad:88:cb:84:c4:10:08:5d:4f:
                    e9:fa:0d:4e:8f:6d:e3:6b:76:a9:95:a6:15:84:42:
                    f9:bd:62:64:d9:f2:83:e6:32:6a:2f:96:54:53:ef:
                    81:cc:fe:59:63:c6:dd:2c:6a:af:22:24:0a:6d:9c:
                    a6:7a:89:09:a7:8a:77:78:b4:8f:53:40:ac:d7:cb:
                    cd:af:9f:2b:c9:94:8e:ab:9a:d4:5e:dc:78:e5:69:
                    9e:d8:65:7e:35:e3:ed:50:9f:cd:d8:38:21:45:0b:
                    f2:bc:4e:5a:a7:1e:aa:bf:54:b4:1e:0a:17:b5:1b:
                    71:10:9f:7a:5f:27:68:4f:5b:a1:fd:d4:c6:48:71:
                    f9:41:c2:f6:96:9a:7f:7f:d5:b8:ce:88:02:29:fc:
                    2d:e1:8c:81:ed:7e:ad:fd:b0:cf:33:63:ea:18:37:
                    78:83:5c:92:4a:0a:5e:fd:4e:f9:b5:e6:72:c4:6f:
                    db:83:d8:23:5c:16:70:a0:75:62:db:9f:11:26:ec:
                    b9:23:56:ca:71:70:3b:af:fe:34:d7:57:0a:11:d8:
                    07:ca:c6:91:b9:57:12:b1:49:a3:8d:44:b7:61:c6:
                    bd:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:EB:74:47:38:A6:32:D8:2B:33:51:E6:8E:59:89:EB:3B:7A:8F:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/550a151e-c18d-35ce-90a4-5c8c0337abb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl

            X509v3 Authority Key Identifier:
                keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:a8:21:2b:cc:4a:2a:aa:81:97:74:bf:6a:86:4f:88:b4:81:
         2e:57:ea:49:bd:cb:ab:64:5c:d4:ab:5c:af:a4:1b:68:21:25:
         24:67:44:bf:53:0f:60:6a:7c:c8:79:82:91:10:de:44:ef:c8:
         13:29:dd:ee:e9:73:57:eb:d1:61:38:bb:93:59:62:c6:72:18:
         6b:4b:d1:a3:d4:e0:18:f9:58:44:6b:00:68:b7:4f:30:f0:e6:
         52:27:54:f6:c2:cf:f6:16:79:04:24:ca:67:5c:3e:87:95:6b:
         dd:9c:ef:1f:54:32:50:55:72:f6:f4:8c:0d:4c:af:59:7c:b8:
         c9:59:07:cf:e9:19:f4:3a:7e:f1:9e:d2:86:69:cf:5c:89:f7:
         f4:e1:2a:0a:b4:44:e2:46:e5:6a:27:81:5a:d7:9c:9d:9a:05:
         d9:8d:02:4f:4b:df:90:c7:66:44:3c:fc:9a:bf:7a:30:62:6e:
         b2:5e:fe:35:f5:84:05:56:65:5e:54:7d:8e:93:f5:e0:7f:d9:
         5c:5d:33:f9:4b:92:ab:97:c2:75:1f:d6:f1:d8:7c:ee:a2:f0:
         5a:61:e7:71:d5:4e:32:de:ea:b0:fc:eb:ab:c4:ca:cd:0e:88:
         ba:ad:5d:2c:70:9d:15:38:e3:64:47:2f:64:f7:4b:6c:9e:3a:
         95:53:d6:bd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9PCBcHIzc0ziD9eIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3
OTU5MB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk
ODc3ZDZiNDctYzMyYi00MTU3LTliYmQtM2ExMDNmMTlmNGNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3XQUPJZ71B2e9Xz1MiSOeaHVIGFp/xOgpLlv
GOBtuveXVVOtiMuExBAIXU/p+g1Oj23ja3aplaYVhEL5vWJk2fKD5jJqL5ZUU++B
zP5ZY8bdLGqvIiQKbZymeokJp4p3eLSPU0Cs18vNr58ryZSOq5rUXtx45Wme2GV+
NePtUJ/N2DghRQvyvE5apx6qv1S0HgoXtRtxEJ96XydoT1uh/dTGSHH5QcL2lpp/
f9W4zogCKfwt4YyB7X6t/bDPM2PqGDd4g1ySSgpe/U75teZyxG/bg9gjXBZwoHVi
258RJuy5I1bKcXA7r/4011cKEdgHysaRuVcSsUmjjUS3Yca99QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHrrdEc4pjLYKzNR5o5Zies7eo9zMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz
ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvNTUwYTE1MWUtYzE4ZC0z
NWNlLTkwYTQtNWM4YzAzMzdhYmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0
ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0
Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw
M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2PbYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI+oISvMSiqqgZd0v2qGT4i0gS5X6km9y6tkXNSrXK+kG2ghJSRnRL9T
D2BqfMh5gpEQ3kTvyBMp3e7pc1fr0WE4u5NZYsZyGGtL0aPU4Bj5WERrAGi3TzDw
5lInVPbCz/YWeQQkymdcPoeVa92c7x9UMlBVcvb0jA1Mr1l8uMlZB8/pGfQ6fvGe
0oZpz1yJ9/ThKgq0ROJG5WongVrXnJ2aBdmNAk9L35DHZkQ8/Jq/ejBibrJe/jX1
hAVWZV5UfY6T9eB/2VxdM/lLkquXwnUf1vHYfO6i8Fph53HVTjLe6rD866vEys0O
iLqtXSxwnRU442RHL2T3S2yeOpVT1r0=
-----END CERTIFICATE-----
Generated at Fri Oct 2 04:55:07 2026 by rpki-client