Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/c6373672-771d-3946-baf4-d4e76c94aaf4.roa
File:                     c6373672-771d-3946-baf4-d4e76c94aaf4.roa (raw, json)
Hash identifier:          ebFa25uiBi0Okxm47rWWy+cy2tXlKWioGzxT64+TQTA=
Subject key identifier:   E7:26:7F:6E:D6:1C:62:F5:00:CF:AA:AF:41:9E:70:F3:4F:C3:2B:BC
Certificate issuer:       /CN=311f19cc-344e-48c5-a1f1-47593aa56b0d
Certificate serial:       010D0C9F4328584D7F9A7BEF2F7D6321FCAC7AC0
Authority key identifier: 4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/c6373672-771d-3946-baf4-d4e76c94aaf4.roa
Signing time:             Tue 14 Apr 2026 01:00:24 +0000
ROA not before:           Tue 14 Apr 2026 01:00:24 +0000
ROA not after:            Mon 13 Jul 2026 01:00:24 +0000
asID:                     6939
IP address blocks:        216.21.216.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7f:9a:7b:ef:2f:7d:63:21:fc:ac:7a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=311f19cc-344e-48c5-a1f1-47593aa56b0d
        Validity
            Not Before: Apr 14 01:00:24 2026 GMT
            Not After : Jul 13 01:00:24 2026 GMT
        Subject: CN=ced911d1-4c66-4fd5-ad55-ca4a0e001858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:51:06:65:64:2f:b7:68:99:2a:c4:dc:61:ae:
                    31:db:36:2f:b5:8c:6f:76:fd:87:4d:c7:2b:ba:97:
                    eb:6f:92:80:ec:a5:ef:89:7f:bf:c3:7f:bb:f7:6e:
                    7f:3a:f2:73:2d:69:8e:a5:b1:84:42:90:40:3c:12:
                    ba:ba:f8:35:c8:5d:c5:c7:ca:c8:5d:04:a7:71:28:
                    66:2e:5a:60:38:b6:cd:cb:ec:b1:65:25:3f:a6:a6:
                    f0:02:8d:0e:c8:10:23:7e:50:51:9c:c3:33:b0:ca:
                    70:f2:dc:c0:55:58:61:8c:88:11:a1:c5:a3:cb:e9:
                    ba:06:58:c7:91:12:9c:bf:3f:19:b5:28:25:c6:8b:
                    72:46:c9:d2:ec:77:b4:2b:76:fa:63:fb:05:9c:d3:
                    1f:6d:92:78:4d:2e:f4:35:6e:8a:7f:c5:04:20:24:
                    79:49:70:01:4b:5c:99:a6:92:9b:e0:71:df:9f:12:
                    ae:cf:d4:ec:6a:ef:92:25:ce:3a:21:82:ee:ad:9c:
                    4c:1b:32:d2:95:4d:31:e4:8d:21:05:98:90:21:4f:
                    66:72:d6:c6:99:49:51:41:44:ee:30:ba:83:7b:ba:
                    1e:aa:39:5c:72:97:03:f8:79:20:b7:ca:59:6c:b0:
                    10:f8:f7:2c:ae:3a:14:22:ee:eb:65:8e:5e:7d:93:
                    0a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:26:7F:6E:D6:1C:62:F5:00:CF:AA:AF:41:9E:70:F3:4F:C3:2B:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/c6373672-771d-3946-baf4-d4e76c94aaf4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.crl

            X509v3 Authority Key Identifier:
                keyid:4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.21.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:d9:76:68:49:e0:8f:d3:fc:d9:25:e5:d5:28:e3:b1:2d:06:
         a3:0f:7c:16:2a:f9:d5:14:fb:01:b8:02:29:98:60:a5:eb:90:
         c7:25:b4:bf:8c:94:45:c3:34:37:74:e5:0a:0d:7c:15:59:0e:
         7b:d8:1e:b6:97:86:3b:58:47:9e:e7:71:08:26:8a:dc:88:25:
         9a:99:a0:07:33:c9:85:53:2c:4f:96:c4:26:db:c5:69:16:26:
         58:7a:b9:7b:95:38:44:03:86:91:98:e8:5e:27:69:47:c5:6a:
         ed:62:4a:a8:e1:af:c9:8c:3d:5f:1b:8e:e1:12:46:4b:8a:37:
         d6:f4:ec:0e:1d:c3:a5:a0:2e:24:ee:6c:8a:c6:50:3b:8e:86:
         00:b5:fa:5a:b8:bb:9a:ec:cb:3b:ff:11:fa:de:78:77:0b:95:
         34:c9:e3:95:da:c4:3b:47:9b:20:bb:1d:6b:db:01:8f:cb:3a:
         56:7e:0d:e8:5e:5f:1c:a8:45:04:32:6e:a5:52:12:19:9c:7e:
         0f:91:da:fc:1e:d0:0c:ee:7e:c9:bb:55:b3:76:4b:48:3e:78:
         73:ba:4d:ab:03:c7:be:0a:62:6e:73:be:60:46:08:24:e4:bf:
         de:e9:ec:1a:85:99:46:41:9e:4d:5d:84:23:2d:00:fa:90:40:
         55:31:52:0e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/mnvvL31jIfysesAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzExZjE5Y2MtMzQ0ZS00OGM1LWExZjEtNDc1OTNhYTU2
YjBkMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk
Y2VkOTExZDEtNGM2Ni00ZmQ1LWFkNTUtY2E0YTBlMDAxODU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglEGZWQvt2iZKsTcYa4x2zYvtYxvdv2HTccr
upfrb5KA7KXviX+/w3+7925/OvJzLWmOpbGEQpBAPBK6uvg1yF3Fx8rIXQSncShm
LlpgOLbNy+yxZSU/pqbwAo0OyBAjflBRnMMzsMpw8tzAVVhhjIgRocWjy+m6BljH
kRKcvz8ZtSglxotyRsnS7He0K3b6Y/sFnNMfbZJ4TS70NW6Kf8UEICR5SXABS1yZ
ppKb4HHfnxKuz9Tsau+SJc46IYLurZxMGzLSlU0x5I0hBZiQIU9mctbGmUlRQUTu
MLqDe7oeqjlccpcD+Hkgt8pZbLAQ+PcsrjoUIu7rZY5efZMKLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOcmf27WHGL1AM+qr0GecPNPwyu8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMTFm
MTljYy0zNDRlLTQ4YzUtYTFmMS00NzU5M2FhNTZiMGQvYzYzNzM2NzItNzcxZC0z
OTQ2LWJhZjQtZDRlNzZjOTRhYWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzExZjE5Y2MtMzQ0ZS00OGM1LWEx
ZjEtNDc1OTNhYTU2YjBkLzMxMWYxOWNjLTM0NGUtNDhjNS1hMWYxLTQ3NTkzYWE1
NmIwZC5jcmwwHwYDVR0jBBgwFoAUTdZg5uF1ESmUCvKCwba2rQLZYH0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8zMTFmMTljYy0zNDRlLTQ4YzUtYTFmMS00NzU5
M2FhNTZiMGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2BXYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAvZdmhJ4I/T/Nkl5dUo47EtBqMPfBYq+dUU+wG4AimYYKXrkMcltL+M
lEXDNDd05QoNfBVZDnvYHraXhjtYR57ncQgmityIJZqZoAczyYVTLE+WxCbbxWkW
Jlh6uXuVOEQDhpGY6F4naUfFau1iSqjhr8mMPV8bjuESRkuKN9b07A4dw6WgLiTu
bIrGUDuOhgC1+lq4u5rsyzv/EfreeHcLlTTJ45XaxDtHmyC7HWvbAY/LOlZ+Dehe
XxyoRQQybqVSEhmcfg+R2vwe0Azufsm7VbN2S0g+eHO6TasDx74KYm5zvmBGCCTk
v97p7BqFmUZBnk1dhCMtAPqQQFUxUg4=
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:59:54 2026 by rpki-client