Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/9ba10a08-a075-3c34-a1d5-ad8726527e46.roa
File:                     9ba10a08-a075-3c34-a1d5-ad8726527e46.roa (raw, json)
Hash identifier:          VapxYW1ZcxtpJi7jtEpHGg0GAaqkXpLlxQnsRgE9i4g=
Subject key identifier:   5B:49:9B:7A:7F:9F:33:D3:0C:67:8C:B7:5E:79:B0:96:A4:56:8C:63
Certificate issuer:       /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959
Certificate serial:       010D0C9F4328584DDA55CB3CC58BEF44FFF95680
Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/9ba10a08-a075-3c34-a1d5-ad8726527e46.roa
Signing time:             Sat 16 May 2026 13:00:31 +0000
ROA not before:           Sat 16 May 2026 13:00:31 +0000
ROA not after:            Fri 14 Aug 2026 13:00:31 +0000
asID:                     398420
IP address blocks:        216.246.218.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:da:55:cb:3c:c5:8b:ef:44:ff:f9:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959
        Validity
            Not Before: May 16 13:00:31 2026 GMT
            Not After : Aug 14 13:00:31 2026 GMT
        Subject: CN=46d251f1-fa86-491f-a2d9-645014303759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ec:d0:1f:1e:ef:8d:c2:47:df:7e:f7:a3:0f:
                    27:c1:4e:25:fe:21:c4:80:0a:66:c5:48:b2:84:e4:
                    9d:85:1c:e5:d1:a5:f0:9b:94:4b:2c:6e:9a:35:a4:
                    b1:c0:7f:43:37:f4:fa:9f:cc:40:de:f8:7c:a9:10:
                    e9:86:6e:93:4e:28:c8:37:32:dd:43:6a:9f:a9:40:
                    cd:96:08:2f:f5:89:7e:38:79:69:d3:b2:9e:af:e0:
                    d2:8a:35:42:46:93:89:ab:b0:8a:d1:9c:42:7a:7e:
                    b6:ca:c6:13:95:96:df:3a:97:a9:ab:aa:e9:5c:62:
                    46:1e:e2:32:81:81:c0:5c:97:1b:05:dc:b6:86:d9:
                    4c:3a:b8:b5:7b:4b:d8:20:be:54:4b:cb:e5:b0:8d:
                    8b:f2:d1:1e:0f:34:61:dc:f4:38:6e:57:36:cb:19:
                    a0:6e:9a:6e:5c:fc:d3:aa:c9:cc:95:ff:87:ef:24:
                    af:0d:fe:cc:de:74:80:d0:a9:f3:1b:60:d5:ed:8a:
                    b2:da:d6:c6:9b:8e:09:9e:e8:0a:10:49:46:0e:f3:
                    2b:86:4c:41:7a:ad:62:f9:23:b8:1b:cb:2e:f2:ee:
                    be:28:3d:36:8e:fe:92:d1:91:57:b4:b6:54:64:00:
                    5e:a6:bc:f7:fd:0c:12:f4:22:ed:1e:99:09:be:27:
                    09:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:49:9B:7A:7F:9F:33:D3:0C:67:8C:B7:5E:79:B0:96:A4:56:8C:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/9ba10a08-a075-3c34-a1d5-ad8726527e46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl

            X509v3 Authority Key Identifier:
                keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.218.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:f3:2a:ef:c0:2f:e2:9c:a5:af:d8:0d:72:04:ec:ce:3b:bf:
         04:9b:e7:d7:9d:69:b0:b7:8b:9b:6a:df:02:ba:a9:84:c5:91:
         7b:63:08:29:8e:a5:31:57:d3:03:d0:da:59:9a:b0:56:8f:53:
         c7:ef:6f:33:9f:d8:0b:c3:17:9e:ca:68:2d:b0:2a:24:df:33:
         e6:b0:01:7c:b9:f5:13:1a:eb:c3:a6:01:63:08:ee:ff:cd:4a:
         6e:ff:52:c3:84:ea:32:a7:9a:d7:8b:c8:fe:5f:ff:94:74:48:
         56:db:0b:4f:27:77:74:20:49:b6:40:98:ae:5e:4a:0c:72:26:
         a1:b7:a8:8c:5d:ed:2c:36:b9:04:ce:d0:96:ad:85:4c:f5:cb:
         66:79:db:ff:ac:48:44:5a:4d:0f:d5:bd:b4:36:59:3a:e5:93:
         40:73:7d:59:a9:3d:57:95:60:99:f6:71:f7:92:27:cf:b2:33:
         08:0e:26:23:54:45:4e:bf:3c:82:29:d6:ae:04:33:38:4c:0c:
         cf:d6:bd:16:a5:34:3c:d7:77:f5:6e:cc:f8:ff:9d:45:d1:e6:
         92:f5:43:04:92:b3:4c:4f:55:57:44:20:6f:48:11:23:3f:c4:
         67:a2:36:71:f1:6a:32:5e:11:d2:86:8a:a8:99:41:07:4c:94:
         56:ab:47:85
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3aVcs8xYvvRP/5VoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3
OTU5MB4XDTI2MDUxNjEzMDAzMVoXDTI2MDgxNDEzMDAzMVowLzEtMCsGA1UEAxMk
NDZkMjUxZjEtZmE4Ni00OTFmLWEyZDktNjQ1MDE0MzAzNzU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluzQHx7vjcJH3373ow8nwU4l/iHEgApmxUiy
hOSdhRzl0aXwm5RLLG6aNaSxwH9DN/T6n8xA3vh8qRDphm6TTijINzLdQ2qfqUDN
lggv9Yl+OHlp07Ker+DSijVCRpOJq7CK0ZxCen62ysYTlZbfOpepq6rpXGJGHuIy
gYHAXJcbBdy2htlMOri1e0vYIL5US8vlsI2L8tEeDzRh3PQ4blc2yxmgbppuXPzT
qsnMlf+H7ySvDf7M3nSA0KnzG2DV7Yqy2tbGm44JnugKEElGDvMrhkxBeq1i+SO4
G8su8u6+KD02jv6S0ZFXtLZUZABeprz3/QwS9CLtHpkJvicJzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFtJm3p/nzPTDGeMt155sJakVoxjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz
ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvOWJhMTBhMDgtYTA3NS0z
YzM0LWExZDUtYWQ4NzI2NTI3ZTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0
ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0
Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw
M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2PbaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABzzKu/AL+Kcpa/YDXIE7M47vwSb59edabC3i5tq3wK6qYTFkXtjCCmO
pTFX0wPQ2lmasFaPU8fvbzOf2AvDF57KaC2wKiTfM+awAXy59RMa68OmAWMI7v/N
Sm7/UsOE6jKnmteLyP5f/5R0SFbbC08nd3QgSbZAmK5eSgxyJqG3qIxd7Sw2uQTO
0JathUz1y2Z52/+sSERaTQ/VvbQ2WTrlk0BzfVmpPVeVYJn2cfeSJ8+yMwgOJiNU
RU6/PIIp1q4EMzhMDM/WvRalNDzXd/VuzPj/nUXR5pL1QwSSs0xPVVdEIG9IESM/
xGeiNnHxajJeEdKGiqiZQQdMlFarR4U=
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:10:43 2026 by rpki-client