Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/ab9d146f-4763-3573-9705-a049fbe4ccbd.roa
File:                     ab9d146f-4763-3573-9705-a049fbe4ccbd.roa (raw, json)
Hash identifier:          xLzfOWwNEJYaTC1LVJ1sUPs91cg5aemBGvc1bpLT3go=
Subject key identifier:   FD:59:56:D1:03:35:DA:6D:A1:AB:F3:72:CE:95:FC:8A:D5:F3:FF:E3
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584C87419FB0C4218469E97BA800
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/ab9d146f-4763-3573-9705-a049fbe4ccbd.roa
Signing time:             Thu 15 Jan 2026 02:00:31 +0000
ROA not before:           Thu 15 Jan 2026 02:00:31 +0000
ROA not after:            Wed 15 Apr 2026 01:00:31 +0000
asID:                     4997
IP address blocks:        216.222.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:87:41:9f:b0:c4:21:84:69:e9:7b:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Jan 15 02:00:31 2026 GMT
            Not After : Apr 15 01:00:31 2026 GMT
        Subject: CN=c249bc1e-d40f-4e38-b130-7ae19c459c47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:77:2e:d0:0c:38:ed:a7:a7:3e:3d:40:d0:28:
                    0a:cd:e7:ab:7a:3a:1f:f5:20:9c:50:04:2f:eb:15:
                    49:9c:07:e5:d9:2d:70:2f:51:58:d8:cd:4b:ae:ee:
                    95:a4:01:f9:b3:61:bc:61:65:c9:af:13:11:62:34:
                    0e:0d:71:be:87:e8:2a:74:76:fc:f6:ae:68:25:2b:
                    28:ce:3f:18:62:58:23:0a:87:61:00:de:41:6d:43:
                    3d:44:88:b8:9f:3a:d5:b6:4f:7e:05:71:20:71:b0:
                    11:d0:20:a3:0c:13:fc:a4:6f:d6:63:57:33:3b:71:
                    40:ec:ef:67:0a:bd:f3:f7:e8:51:42:3a:ce:62:00:
                    90:06:51:e4:95:86:b1:94:3d:94:d3:72:f4:df:ba:
                    b7:45:0c:8a:28:f1:b5:35:a8:aa:12:69:49:f6:15:
                    b0:c2:59:18:dd:66:ee:c5:0a:d0:66:73:8e:ff:e9:
                    0f:56:8d:c7:b5:b3:34:0d:70:91:c3:70:ce:1b:7e:
                    31:6e:45:2d:b9:08:f3:58:8e:d1:10:d1:60:ec:f2:
                    75:45:50:53:7d:c9:d5:5c:c8:1f:0d:88:5e:cd:23:
                    5a:d6:10:0f:28:eb:8c:2b:25:5a:bc:fc:65:4b:53:
                    40:3b:7f:bb:15:56:d9:b6:ed:f4:43:b1:28:9e:44:
                    51:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:59:56:D1:03:35:DA:6D:A1:AB:F3:72:CE:95:FC:8A:D5:F3:FF:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/ab9d146f-4763-3573-9705-a049fbe4ccbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.222.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:31:63:af:20:65:24:63:90:28:11:82:34:77:37:59:51:9a:
         df:ae:16:8c:d3:df:9e:24:83:c6:8d:e5:1b:69:dc:32:58:5e:
         54:04:e4:84:f4:c4:9c:2c:6e:c1:26:02:20:6d:5c:74:8f:a8:
         d7:ce:4f:31:0e:56:52:67:69:98:9b:e7:33:7e:30:de:b1:52:
         f4:b7:63:29:ae:5c:f4:f9:2d:f2:36:c6:16:43:52:48:05:fd:
         27:1f:e6:69:fa:b2:1e:3f:50:d2:f0:26:20:60:36:41:54:b1:
         cf:7c:85:38:8b:1e:d4:3a:b5:99:b1:ee:e1:ec:0c:1a:64:03:
         b2:9c:42:bd:f8:57:92:66:e8:ea:91:32:cc:d5:0c:a7:41:e6:
         da:89:58:ad:c1:09:2f:a1:09:59:9e:b0:11:a4:b0:74:ea:19:
         93:47:0e:3b:e5:f9:e7:19:ee:ff:63:82:ea:32:07:cf:25:2f:
         5a:db:59:c5:7a:85:a3:50:0d:11:6e:aa:87:d4:92:5e:5c:32:
         7c:e9:16:c5:7f:d6:f3:ba:72:cf:9a:ad:e7:26:04:2f:14:d5:
         7c:ac:c9:b0:38:80:cc:ff:8a:38:8a:39:1e:1b:e5:fc:7d:7e:
         97:45:4c:d8:2f:7c:cb:46:6f:d2:18:cb:b9:8a:fc:6e:ad:c6:
         25:8a:83:67
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyHQZ+wxCGEael7qAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI2MDExNTAyMDAzMVoXDTI2MDQxNTAxMDAzMVowLzEtMCsGA1UEAxMk
YzI0OWJjMWUtZDQwZi00ZTM4LWIxMzAtN2FlMTljNDU5YzQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHcu0Aw47aenPj1A0CgKzeerejof9SCcUAQv
6xVJnAfl2S1wL1FY2M1Lru6VpAH5s2G8YWXJrxMRYjQODXG+h+gqdHb89q5oJSso
zj8YYlgjCodhAN5BbUM9RIi4nzrVtk9+BXEgcbAR0CCjDBP8pG/WY1czO3FA7O9n
Cr3z9+hRQjrOYgCQBlHklYaxlD2U03L037q3RQyKKPG1NaiqEmlJ9hWwwlkY3Wbu
xQrQZnOO/+kPVo3HtbM0DXCRw3DOG34xbkUtuQjzWI7RENFg7PJ1RVBTfcnVXMgf
DYhezSNa1hAPKOuMKyVavPxlS1NAO3+7FVbZtu30Q7EonkRR5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP1ZVtEDNdptoavzcs6V/IrV8//jMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvYWI5ZDE0NmYtNDc2My0z
NTczLTk3MDUtYTA0OWZiZTRjY2JkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2N4wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAL8xY68gZSRjkCgRgjR3N1lRmt+uFozT354kg8aN5Rtp3DJYXlQE5IT0
xJwsbsEmAiBtXHSPqNfOTzEOVlJnaZib5zN+MN6xUvS3YymuXPT5LfI2xhZDUkgF
/Scf5mn6sh4/UNLwJiBgNkFUsc98hTiLHtQ6tZmx7uHsDBpkA7KcQr34V5Jm6OqR
MszVDKdB5tqJWK3BCS+hCVmesBGksHTqGZNHDjvl+ecZ7v9jguoyB88lL1rbWcV6
haNQDRFuqofUkl5cMnzpFsV/1vO6cs+arecmBC8U1XysybA4gMz/ijiKOR4b5fx9
fpdFTNgvfMtGb9IYy7mK/G6txiWKg2c=
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:54:48 2026 by rpki-client