Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3568e153-bb9a-3142-b886-5e86d1911256.roa
File:                     3568e153-bb9a-3142-b886-5e86d1911256.roa (raw, json)
Hash identifier:          2+w6ZHjFWCZZB/U+m485FgQZMmUIfnQgkc9IfFRVWrU=
Subject key identifier:   AD:21:22:27:87:D8:7F:C1:E8:8F:BF:4E:27:6A:88:92:B1:A8:28:84
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584CEBC211343A3F393366685B20
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3568e153-bb9a-3142-b886-5e86d1911256.roa
Signing time:             Fri 20 Feb 2026 02:00:32 +0000
ROA not before:           Fri 20 Feb 2026 02:00:32 +0000
ROA not after:            Thu 21 May 2026 01:00:32 +0000
asID:                     23473
IP address blocks:        216.171.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:eb:c2:11:34:3a:3f:39:33:66:68:5b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Feb 20 02:00:32 2026 GMT
            Not After : May 21 01:00:32 2026 GMT
        Subject: CN=893c42c2-271a-4122-aa8c-1cf62620d833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:9d:17:e3:7a:3c:7f:2c:89:c1:44:56:0f:c2:
                    ec:42:a9:c5:7b:4c:3d:be:e7:14:cb:ad:da:af:0a:
                    e6:cf:22:3d:93:bd:cf:88:c9:19:41:ce:9c:05:55:
                    72:a1:1e:96:87:95:21:59:5c:07:ab:2d:e2:fb:03:
                    05:38:71:f9:da:d7:df:c3:bd:80:52:49:42:01:c6:
                    b2:4d:a2:20:16:c0:a5:02:80:21:08:1a:f2:55:f4:
                    b4:84:92:60:6e:f6:7c:26:8b:a9:bd:b7:b9:ae:48:
                    aa:59:87:be:76:90:05:05:3c:7f:99:3c:e4:5d:3c:
                    67:cf:24:c0:28:12:55:5e:23:3e:51:fb:8a:e0:2c:
                    f0:06:c2:3a:b3:f4:bd:6f:a7:d6:42:2e:a5:3f:95:
                    fd:c0:db:a3:6b:71:d9:b9:56:9f:f8:54:cd:94:fe:
                    80:87:40:25:b2:08:99:b5:ee:a5:38:17:c3:25:56:
                    e5:06:90:08:8b:7d:77:2b:0a:6d:9d:5c:be:20:7c:
                    98:82:e8:80:f0:c8:44:d3:54:91:77:a0:77:17:ba:
                    1b:bc:2e:3a:54:05:46:e9:37:06:22:d9:7d:12:32:
                    1e:6b:9a:7f:4c:29:09:2d:10:d5:a1:23:11:da:f7:
                    41:1e:75:3e:0d:85:f2:7f:1e:39:bd:6f:e0:cd:d1:
                    e0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:21:22:27:87:D8:7F:C1:E8:8F:BF:4E:27:6A:88:92:B1:A8:28:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3568e153-bb9a-3142-b886-5e86d1911256.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.171.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:97:13:07:a1:04:ba:87:65:55:86:b3:86:96:b4:6a:32:a2:
         74:4a:7c:ee:0f:8a:ff:ab:3f:2a:17:ca:c8:8e:1d:cd:81:fe:
         37:00:60:4d:f2:40:f8:ab:31:ad:83:85:f4:49:d1:06:81:2b:
         cb:d8:19:02:8e:c8:b2:db:3b:b3:fd:5a:3a:01:57:3a:df:44:
         23:70:03:ae:83:23:19:06:bf:a3:3d:d6:1a:4c:97:d9:7d:40:
         22:1c:9d:4b:e1:dd:32:63:e5:f7:6e:c6:d8:9b:62:ab:d4:c1:
         92:d2:7e:bf:e5:b7:7f:07:2c:40:49:23:6b:86:7f:4e:38:b6:
         87:48:9a:23:02:d1:67:43:5e:31:f9:79:42:df:f7:48:b2:db:
         ae:46:87:e7:e5:43:e6:4d:46:12:82:c3:1d:d5:42:e5:c2:ac:
         a5:56:4b:49:61:ee:12:07:22:6f:10:46:53:4d:df:b5:66:e8:
         60:37:dc:46:1f:fd:d8:6e:96:25:81:3b:6a:df:d0:73:79:07:
         67:05:08:f1:6a:34:7d:42:23:f0:8c:b3:f0:5d:15:c7:6d:1c:
         06:1e:df:97:c1:c9:b3:bb:7b:2d:c3:7a:ed:b0:05:2a:c8:26:
         5d:21:fb:6c:3b:a1:ad:f2:82:4b:a3:3f:79:f6:fb:d0:9e:78:
         d1:51:6e:5b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzrwhE0Oj85M2ZoWyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm
ZTJhMB4XDTI2MDIyMDAyMDAzMloXDTI2MDUyMTAxMDAzMlowLzEtMCsGA1UEAxMk
ODkzYzQyYzItMjcxYS00MTIyLWFhOGMtMWNmNjI2MjBkODMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA650X43o8fyyJwURWD8LsQqnFe0w9vucUy63a
rwrmzyI9k73PiMkZQc6cBVVyoR6Wh5UhWVwHqy3i+wMFOHH52tffw72AUklCAcay
TaIgFsClAoAhCBryVfS0hJJgbvZ8Joupvbe5rkiqWYe+dpAFBTx/mTzkXTxnzyTA
KBJVXiM+UfuK4CzwBsI6s/S9b6fWQi6lP5X9wNuja3HZuVaf+FTNlP6Ah0AlsgiZ
te6lOBfDJVblBpAIi313KwptnVy+IHyYguiA8MhE01SRd6B3F7obvC46VAVG6TcG
Itl9EjIea5p/TCkJLRDVoSMR2vdBHnU+DYXyfx45vW/gzdHgRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK0hIieH2H/B6I+/TidqiJKxqCiEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5
MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMzU2OGUxNTMtYmI5YS0z
MTQyLWI4ODYtNWU4NmQxOTExMjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2
ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw
ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh
ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KsqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB+XEwehBLqHZVWGs4aWtGoyonRKfO4Piv+rPyoXysiOHc2B/jcAYE3y
QPirMa2DhfRJ0QaBK8vYGQKOyLLbO7P9WjoBVzrfRCNwA66DIxkGv6M91hpMl9l9
QCIcnUvh3TJj5fduxtibYqvUwZLSfr/lt38HLEBJI2uGf044todImiMC0WdDXjH5
eULf90iy265Gh+flQ+ZNRhKCwx3VQuXCrKVWS0lh7hIHIm8QRlNN37Vm6GA33EYf
/dhuliWBO2rf0HN5B2cFCPFqNH1CI/CMs/BdFcdtHAYe35fBybO7ey3Deu2wBSrI
Jl0h+2w7oa3ygkujP3n2+9CeeNFRbls=
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:07:16 2026 by rpki-client