Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4adb3a17-68a1-323b-9cdd-2b5693c4bccb.roa
File:                     4adb3a17-68a1-323b-9cdd-2b5693c4bccb.roa (raw, json)
Hash identifier:          mpDFKBw63bwpm0OLeROIjiXGlXFiHrfQIrWVZJ1OTe4=
Subject key identifier:   43:BE:77:5B:89:FE:7A:16:4C:9D:CB:F0:2A:2C:07:1D:86:0A:E8:16
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584E0C1ECD097E5F4E941550A300
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4adb3a17-68a1-323b-9cdd-2b5693c4bccb.roa
Signing time:             Wed 03 Jun 2026 09:00:13 +0000
ROA not before:           Wed 03 Jun 2026 09:00:13 +0000
ROA not after:            Tue 01 Sep 2026 09:00:13 +0000
asID:                     36616
IP address blocks:        216.168.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0c:1e:cd:09:7e:5f:4e:94:15:50:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jun  3 09:00:13 2026 GMT
            Not After : Sep  1 09:00:13 2026 GMT
        Subject: CN=afb18e3e-b83f-4def-b6ff-08080deab2cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ce:25:d3:a9:8d:06:99:30:35:ac:2c:c9:99:
                    19:ce:c4:78:90:73:ec:d5:0d:17:92:d5:52:c7:63:
                    05:41:c9:70:d2:23:f7:59:64:95:7e:3c:3b:3e:dc:
                    2d:72:a7:ae:40:08:2c:94:bf:38:c7:52:c0:be:e6:
                    93:f7:76:4a:37:47:62:f2:d4:22:b1:cf:59:2a:8a:
                    54:61:b4:08:f4:8b:00:85:ce:93:7e:f3:30:52:be:
                    44:a0:b0:b0:ff:0c:95:41:bb:b0:cc:45:3e:ff:b1:
                    d2:a4:d6:e4:c2:c0:b6:2a:17:c1:09:c4:4f:4f:bb:
                    ac:4a:e2:01:45:91:9a:6d:37:7e:c1:77:be:69:f4:
                    a8:f2:f8:d0:88:6d:eb:c0:0d:2c:f1:6a:50:bd:4d:
                    f0:cf:23:1a:c8:35:fd:18:73:3b:ba:72:55:33:e2:
                    50:2e:00:28:58:1e:f5:67:bd:dd:52:70:c5:03:8e:
                    e4:fb:58:f5:b1:f9:a2:20:2d:22:cc:67:51:74:34:
                    0b:e1:fa:b1:ad:dc:bb:0d:ac:b0:ed:ff:32:92:ff:
                    ed:19:2f:fe:c3:b0:b8:0a:08:9f:b2:84:2b:28:1c:
                    61:7a:d6:5a:bd:c2:dc:0f:59:13:95:bd:04:7d:80:
                    93:57:fd:1e:63:63:1e:93:1b:a2:f2:56:e3:95:a1:
                    f0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:BE:77:5B:89:FE:7A:16:4C:9D:CB:F0:2A:2C:07:1D:86:0A:E8:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4adb3a17-68a1-323b-9cdd-2b5693c4bccb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.168.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:21:00:ae:26:de:b2:e1:50:d6:9c:5f:85:52:62:f6:cb:25:
         b3:e6:04:f5:af:b5:e2:e5:1d:bd:54:fd:30:9b:63:04:70:f2:
         03:4a:ce:67:9d:f9:7c:b0:26:2d:47:92:a4:b9:ae:cf:0f:d4:
         9d:ec:fa:03:be:95:be:b2:95:7e:4e:b0:9f:b0:68:32:fd:fb:
         02:d0:0f:51:57:d8:b2:48:11:1c:ec:b8:30:89:74:32:a5:c9:
         a0:c4:5e:4c:1d:f7:6b:8d:43:10:45:77:85:2d:59:07:0a:87:
         09:fe:87:39:9c:28:bc:43:b3:bb:a6:ba:9f:da:c3:db:fe:86:
         fc:f5:5d:e5:f4:0c:62:77:f7:b5:c8:92:dd:f0:b9:52:3f:a0:
         20:61:c5:fd:a7:6b:0d:24:9f:e9:9a:fd:21:9f:85:56:a5:5f:
         25:a1:8c:c0:fc:58:19:5b:a9:9b:a8:be:38:31:60:d5:ad:b6:
         a1:eb:2a:8b:31:bc:ad:63:a0:b5:75:f9:22:2e:c6:12:3a:2b:
         62:90:9e:a0:cd:b4:1d:3c:c4:58:25:a4:e9:62:c0:b0:d1:1d:
         97:66:51:89:b4:0b:c4:69:17:2d:0f:9e:93:a3:b9:47:88:8f:
         8d:36:b0:87:f8:6c:a0:57:8f:cb:c9:06:91:72:d5:5b:df:8c:
         d3:62:d4:d1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4MHs0Jfl9OlBVQowAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI2MDYwMzA5MDAxM1oXDTI2MDkwMTA5MDAxM1owLzEtMCsGA1UEAxMk
YWZiMThlM2UtYjgzZi00ZGVmLWI2ZmYtMDgwODBkZWFiMmNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq84l06mNBpkwNawsyZkZzsR4kHPs1Q0XktVS
x2MFQclw0iP3WWSVfjw7PtwtcqeuQAgslL84x1LAvuaT93ZKN0di8tQisc9ZKopU
YbQI9IsAhc6TfvMwUr5EoLCw/wyVQbuwzEU+/7HSpNbkwsC2KhfBCcRPT7usSuIB
RZGabTd+wXe+afSo8vjQiG3rwA0s8WpQvU3wzyMayDX9GHM7unJVM+JQLgAoWB71
Z73dUnDFA47k+1j1sfmiIC0izGdRdDQL4fqxrdy7Dayw7f8ykv/tGS/+w7C4Cgif
soQrKBxhetZavcLcD1kTlb0EfYCTV/0eY2Mekxui8lbjlaHwvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEO+d1uJ/noWTJ3L8CosBx2GCugWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGFkYjNhMTctNjhhMS0z
MjNiLTljZGQtMmI1NjkzYzRiY2NiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAwhAK4m3rLhUNacX4VSYvbLJbPmBPWvteLlHb1U/TCbYwRw8gNKzmed
+XywJi1HkqS5rs8P1J3s+gO+lb6ylX5OsJ+waDL9+wLQD1FX2LJIERzsuDCJdDKl
yaDEXkwd92uNQxBFd4UtWQcKhwn+hzmcKLxDs7umup/aw9v+hvz1XeX0DGJ397XI
kt3wuVI/oCBhxf2naw0kn+ma/SGfhValXyWhjMD8WBlbqZuovjgxYNWttqHrKosx
vK1joLV1+SIuxhI6K2KQnqDNtB08xFglpOliwLDRHZdmUYm0C8RpFy0PnpOjuUeI
j402sIf4bKBXj8vJBpFy1VvfjNNi1NE=
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:51:13 2026 by rpki-client