Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5/b1b6f463-ecda-3aea-b723-e98a3572acb7.roa
File:                     b1b6f463-ecda-3aea-b723-e98a3572acb7.roa (raw, json)
Hash identifier:          Ukcjp/v93ykwSH2CM+mre2fDmaZfAIuwzvvAQUO+d9A=
Subject key identifier:   12:B4:D8:A0:79:A2:12:88:4F:C9:49:F5:96:9A:A9:94:78:0E:F7:51
Certificate issuer:       /CN=57202e8d-d671-4fe3-bfa9-605e2ca32aa5
Certificate serial:       010D0C9F4328584F1467955ED71D6DA65A156780
Authority key identifier: 0A:70:00:4A:1A:A0:5C:A6:C4:C7:35:57:D7:4D:96:DF:DD:09:4C:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5/b1b6f463-ecda-3aea-b723-e98a3572acb7.roa
Signing time:             Sun 06 Sep 2026 01:00:11 +0000
ROA not before:           Sun 06 Sep 2026 01:00:11 +0000
ROA not after:            Sat 05 Dec 2026 02:00:11 +0000
asID:                     7311
IP address blocks:        216.126.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5/57202e8d-d671-4fe3-bfa9-605e2ca32aa5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5/57202e8d-d671-4fe3-bfa9-605e2ca32aa5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:14:67:95:5e:d7:1d:6d:a6:5a:15:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57202e8d-d671-4fe3-bfa9-605e2ca32aa5
        Validity
            Not Before: Sep  6 01:00:11 2026 GMT
            Not After : Dec  5 02:00:11 2026 GMT
        Subject: CN=463ef214-e157-4864-85df-bd63898b8d6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:bf:11:a6:d9:c6:92:fb:1f:c3:25:18:53:f8:
                    b5:de:03:66:44:7e:01:51:94:e8:52:cd:cc:cc:46:
                    b0:fc:73:e9:f7:38:d2:4a:a4:c4:76:a0:54:8c:2e:
                    2b:2e:d9:4b:de:a5:2a:06:a7:bb:c1:f7:3d:10:25:
                    9e:64:90:eb:f0:8f:c9:81:32:5b:a9:c5:3b:db:77:
                    b5:7b:9d:e9:60:89:d8:27:f9:f2:ea:b3:48:2b:35:
                    92:e1:12:b0:2b:81:a4:25:93:9b:6d:ef:62:a2:dd:
                    67:dc:fa:87:0c:1a:6e:10:57:7f:c2:de:3b:6e:00:
                    da:be:63:17:6a:5b:5e:60:5d:45:63:d5:a8:c6:0f:
                    0e:9f:93:85:2c:0a:d7:a7:b5:12:e3:51:c6:eb:1b:
                    ee:6f:92:42:9e:f7:ea:07:22:ec:6f:99:4e:b1:82:
                    60:45:a9:f7:6b:55:3a:c0:13:bc:15:d1:50:c8:26:
                    7d:c2:1e:20:fa:7a:20:5d:8a:b1:d3:11:52:b4:ff:
                    52:c2:ad:ab:ff:cb:5b:c0:4a:77:b3:7f:04:fa:34:
                    61:3c:d1:61:82:a2:ce:b6:4e:b3:e4:2b:36:90:13:
                    35:8a:c8:86:5a:d7:a6:5e:b3:12:8e:ec:c6:f8:dc:
                    9e:28:7f:35:7a:da:6b:00:19:65:84:02:a0:43:10:
                    cf:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:B4:D8:A0:79:A2:12:88:4F:C9:49:F5:96:9A:A9:94:78:0E:F7:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5/b1b6f463-ecda-3aea-b723-e98a3572acb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5/57202e8d-d671-4fe3-bfa9-605e2ca32aa5.crl

            X509v3 Authority Key Identifier:
                keyid:0A:70:00:4A:1A:A0:5C:A6:C4:C7:35:57:D7:4D:96:DF:DD:09:4C:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.126.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:85:be:bf:55:a4:31:ac:3b:e0:d1:34:39:62:2c:fa:69:99:
         2d:25:cf:9b:36:9e:b9:ba:25:9e:68:31:27:ae:9b:78:ca:17:
         ca:10:34:6c:52:77:2c:86:ff:e5:c6:68:0a:c2:20:c9:3e:87:
         af:16:02:3a:ad:3a:fd:9b:56:22:24:be:a8:0b:21:24:f4:10:
         b7:04:29:78:ef:ee:bf:b0:cf:51:e5:e4:01:6f:67:66:b0:b0:
         22:84:57:81:82:1b:e8:af:99:a1:41:4f:11:9c:57:30:cf:9d:
         41:4c:f7:2d:b0:01:23:e3:cc:d7:00:b2:a9:07:10:85:73:47:
         2f:3a:10:f3:6c:1c:e8:6c:a6:27:75:05:84:b5:1f:d3:57:da:
         49:39:ef:77:97:9a:76:f4:9b:61:80:21:1a:2e:2b:22:dd:51:
         8e:1d:92:e5:e8:06:03:71:71:c1:6c:7f:ec:17:d8:51:0e:a1:
         73:df:0a:de:c0:ac:e2:2e:9f:65:d9:a6:cf:8d:74:8c:0c:61:
         3a:1c:67:0d:4d:91:b7:d0:d9:80:b8:07:a2:84:21:e9:5b:53:
         6f:86:89:c0:56:6e:f6:16:0c:c1:a8:6e:13:36:44:8a:44:b8:
         70:3f:b9:39:bc:db:46:78:8a:cf:07:e0:1d:a6:2b:9a:e4:47:
         64:34:8d:37
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UZ5Ve1x1tploVZ4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTcyMDJlOGQtZDY3MS00ZmUzLWJmYTktNjA1ZTJjYTMy
YWE1MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk
NDYzZWYyMTQtZTE1Ny00ODY0LTg1ZGYtYmQ2Mzg5OGI4ZDZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzL8RptnGkvsfwyUYU/i13gNmRH4BUZToUs3M
zEaw/HPp9zjSSqTEdqBUjC4rLtlL3qUqBqe7wfc9ECWeZJDr8I/JgTJbqcU723e1
e53pYInYJ/ny6rNIKzWS4RKwK4GkJZObbe9iot1n3PqHDBpuEFd/wt47bgDavmMX
alteYF1FY9Woxg8On5OFLArXp7US41HG6xvub5JCnvfqByLsb5lOsYJgRan3a1U6
wBO8FdFQyCZ9wh4g+nogXYqx0xFStP9Swq2r/8tbwEp3s38E+jRhPNFhgqLOtk6z
5Cs2kBM1isiGWtemXrMSjuzG+NyeKH81etprABllhAKgQxDPJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBK02KB5ohKIT8lJ9ZaaqZR4DvdRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81NzIw
MmU4ZC1kNjcxLTRmZTMtYmZhOS02MDVlMmNhMzJhYTUvYjFiNmY0NjMtZWNkYS0z
YWVhLWI3MjMtZTk4YTM1NzJhY2I3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTcyMDJlOGQtZDY3MS00ZmUzLWJm
YTktNjA1ZTJjYTMyYWE1LzU3MjAyZThkLWQ2NzEtNGZlMy1iZmE5LTYwNWUyY2Ez
MmFhNS5jcmwwHwYDVR0jBBgwFoAUCnAAShqgXKbExzVX102W390JTPswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81NzIwMmU4ZC1kNjcxLTRmZTMtYmZhOS02MDVl
MmNhMzJhYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2H5IMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGyFvr9VpDGsO+DRNDliLPppmS0lz5s2nrm6JZ5oMSeum3jKF8oQNGxS
dyyG/+XGaArCIMk+h68WAjqtOv2bViIkvqgLIST0ELcEKXjv7r+wz1Hl5AFvZ2aw
sCKEV4GCG+ivmaFBTxGcVzDPnUFM9y2wASPjzNcAsqkHEIVzRy86EPNsHOhspid1
BYS1H9NX2kk573eXmnb0m2GAIRouKyLdUY4dkuXoBgNxccFsf+wX2FEOoXPfCt7A
rOIun2XZps+NdIwMYTocZw1NkbfQ2YC4B6KEIelbU2+GicBWbvYWDMGobhM2RIpE
uHA/uTm820Z4is8H4B2mK5rkR2Q0jTc=
-----END CERTIFICATE-----
Generated at Wed Sep 23 04:30:14 2026 by rpki-client