Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/80ca88fd-748b-398c-994d-51d5dfc053ba.roa
File:                     80ca88fd-748b-398c-994d-51d5dfc053ba.roa (raw, json)
Hash identifier:          Qw32xHM8tLZrIjl9oQRtz6NEohitOZEYbRceJXN29UY=
Subject key identifier:   58:82:F6:D0:94:ED:A3:54:42:3C:9A:A7:90:56:34:FA:33:FC:D8:B5
Certificate issuer:       /CN=8a57b69a-d683-4350-83d4-e449c0242b7d
Certificate serial:       010D0C9F4328584DF4DB5CFBFB37B9248AA51880
Authority key identifier: 38:8D:06:A4:B8:D5:B5:2E:32:40:F9:04:97:CD:53:11:DC:85:6F:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/80ca88fd-748b-398c-994d-51d5dfc053ba.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     55134
IP address blocks:        172.111.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/8a57b69a-d683-4350-83d4-e449c0242b7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/8a57b69a-d683-4350-83d4-e449c0242b7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:5c:fb:fb:37:b9:24:8a:a5:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a57b69a-d683-4350-83d4-e449c0242b7d
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=92140346-46d8-4c93-b872-9d05f1867b32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c4:2c:35:ca:65:4f:58:b1:27:f8:5f:e3:53:
                    f0:dd:22:23:f2:3e:b2:37:61:49:02:53:f8:9f:4b:
                    24:68:d0:a9:a3:b1:d5:cf:37:07:10:9f:7e:61:52:
                    25:ab:dc:61:28:de:68:a8:36:77:09:3b:0a:53:d3:
                    c9:bf:4b:46:3e:b1:f3:aa:95:40:ee:96:c5:30:bd:
                    63:c1:02:f6:3b:8a:9c:c6:82:10:3a:d0:b7:83:f4:
                    59:ad:fa:91:cf:1a:02:a6:42:f6:c3:10:a3:29:e6:
                    d5:93:82:ea:5c:f3:8b:f0:03:c9:bd:ea:92:72:1d:
                    2a:a8:d9:c7:f6:3d:9e:3b:8f:db:0b:b0:a7:c6:b8:
                    6d:35:02:cc:0f:8d:06:88:86:cf:ad:7b:3f:10:ab:
                    b5:32:7b:2d:32:37:7d:7e:3a:6a:33:93:c7:7e:2d:
                    77:34:02:26:2d:e3:a7:c8:24:22:e8:08:c7:1a:6b:
                    3c:30:5e:08:86:2e:5f:73:42:df:32:ad:20:8d:9c:
                    52:fa:68:8e:d7:91:eb:d9:16:60:11:cc:32:ac:1a:
                    c7:78:24:e8:8e:ee:97:51:0f:9a:df:88:c5:7d:f6:
                    cb:3e:2c:e4:6c:89:a5:d0:01:0c:c3:35:30:72:99:
                    f9:d2:67:f9:13:64:af:52:81:0f:77:bc:5c:c5:7e:
                    7c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:82:F6:D0:94:ED:A3:54:42:3C:9A:A7:90:56:34:FA:33:FC:D8:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/80ca88fd-748b-398c-994d-51d5dfc053ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/8a57b69a-d683-4350-83d4-e449c0242b7d.crl

            X509v3 Authority Key Identifier:
                keyid:38:8D:06:A4:B8:D5:B5:2E:32:40:F9:04:97:CD:53:11:DC:85:6F:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:e8:47:dc:d4:69:f4:8b:91:e4:6e:11:0b:ed:ce:af:7a:ca:
         dc:1f:f8:14:3f:97:5f:d6:70:94:30:d5:36:67:ef:c7:10:02:
         3b:1e:23:e0:8d:9c:09:86:20:0c:fa:7b:15:b1:2b:78:d8:61:
         96:ff:ed:fa:e1:8a:19:1b:6e:41:1d:c3:9f:37:77:5d:66:50:
         23:a4:bc:c2:67:7a:34:cf:9c:aa:b5:0a:5a:68:3e:22:ff:43:
         ab:87:51:54:e6:9a:88:c9:30:cb:e9:ee:b8:ef:08:5c:10:ec:
         b3:40:2d:af:e0:ef:34:0d:64:6e:64:35:9a:d7:79:af:ec:7f:
         b8:1d:6d:99:1f:2a:19:eb:1b:71:30:61:3a:df:7c:32:a0:00:
         3d:58:08:f9:72:35:d0:1b:5f:63:b3:d6:02:aa:c8:5c:03:fc:
         17:7b:fd:3e:92:b7:d9:82:ab:ed:24:20:92:b7:ec:33:86:61:
         09:76:d1:ec:41:3d:8e:df:2f:f4:2d:7c:41:06:c7:c0:ee:d1:
         44:75:30:72:7f:af:50:ba:7a:3a:b3:32:89:66:3f:ad:85:d2:
         47:90:80:a4:ef:c0:50:45:b1:69:3d:65:09:3a:37:c7:17:0e:
         e7:ff:00:b4:fb:30:45:19:dd:33:79:60:0b:6c:e5:76:35:26:
         62:45:1f:ce
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3021z7+ze5JIqlGIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGE1N2I2OWEtZDY4My00MzUwLTgzZDQtZTQ0OWMwMjQy
YjdkMB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk
OTIxNDAzNDYtNDZkOC00YzkzLWI4NzItOWQwNWYxODY3YjMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicQsNcplT1ixJ/hf41Pw3SIj8j6yN2FJAlP4
n0skaNCpo7HVzzcHEJ9+YVIlq9xhKN5oqDZ3CTsKU9PJv0tGPrHzqpVA7pbFML1j
wQL2O4qcxoIQOtC3g/RZrfqRzxoCpkL2wxCjKebVk4LqXPOL8APJveqSch0qqNnH
9j2eO4/bC7CnxrhtNQLMD40GiIbPrXs/EKu1MnstMjd9fjpqM5PHfi13NAImLeOn
yCQi6AjHGms8MF4Ihi5fc0LfMq0gjZxS+miO15Hr2RZgEcwyrBrHeCToju6XUQ+a
34jFffbLPizkbIml0AEMwzUwcpn50mf5E2SvUoEPd7xcxX58BQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFiC9tCU7aNUQjyap5BWNPoz/Ni1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YTU3
YjY5YS1kNjgzLTQzNTAtODNkNC1lNDQ5YzAyNDJiN2QvODBjYTg4ZmQtNzQ4Yi0z
OThjLTk5NGQtNTFkNWRmYzA1M2JhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGE1N2I2OWEtZDY4My00MzUwLTgz
ZDQtZTQ0OWMwMjQyYjdkLzhhNTdiNjlhLWQ2ODMtNDM1MC04M2Q0LWU0NDljMDI0
MmI3ZC5jcmwwHwYDVR0jBBgwFoAUOI0GpLjVtS4yQPkEl81TEdyFbwkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YTU3YjY5YS1kNjgzLTQzNTAtODNkNC1lNDQ5
YzAyNDJiN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrG8QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABzoR9zUafSLkeRuEQvtzq96ytwf+BQ/l1/WcJQw1TZn78cQAjseI+CN
nAmGIAz6exWxK3jYYZb/7frhihkbbkEdw583d11mUCOkvMJnejTPnKq1ClpoPiL/
Q6uHUVTmmojJMMvp7rjvCFwQ7LNALa/g7zQNZG5kNZrXea/sf7gdbZkfKhnrG3Ew
YTrffDKgAD1YCPlyNdAbX2Oz1gKqyFwD/Bd7/T6St9mCq+0kIJK37DOGYQl20exB
PY7fL/QtfEEGx8Du0UR1MHJ/r1C6ejqzMolmP62F0keQgKTvwFBFsWk9ZQk6N8cX
Duf/ALT7MEUZ3TN5YAts5XY1JmJFH84=
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:33:13 2026 by rpki-client