Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/4432433d-c4b1-3e44-82cc-f2a46a31efce.roa
File:                     4432433d-c4b1-3e44-82cc-f2a46a31efce.roa (raw, json)
Hash identifier:          ySSWGMpCuyIqp/fYKGPECoo+5byK3OXij+MJ+X9zI1E=
Subject key identifier:   A0:E4:05:4F:02:C1:84:24:74:2E:9A:19:F1:6A:CA:13:6F:26:12:5F
Certificate issuer:       /CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca
Certificate serial:       010D0C9F4328584CB551F752436154B94DA6C840
Authority key identifier: BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/4432433d-c4b1-3e44-82cc-f2a46a31efce.roa
Signing time:             Sat 31 Jan 2026 14:00:39 +0000
ROA not before:           Sat 31 Jan 2026 14:00:39 +0000
ROA not after:            Fri 01 May 2026 13:00:39 +0000
asID:                     399575
IP address blocks:        216.205.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b5:51:f7:52:43:61:54:b9:4d:a6:c8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca
        Validity
            Not Before: Jan 31 14:00:39 2026 GMT
            Not After : May  1 13:00:39 2026 GMT
        Subject: CN=1e0bec7b-0f98-4d54-930d-7f8fd01aaae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7e:d7:a9:68:18:71:3d:95:a8:ae:17:7b:57:
                    4d:0c:3f:60:74:24:91:62:65:14:ce:a4:ef:93:76:
                    0e:2f:3b:b5:00:86:b0:77:1e:18:bf:d4:a3:b1:a7:
                    3c:ec:b2:c1:c4:10:2b:6a:63:96:c4:5b:11:3b:8c:
                    83:bf:d0:a8:67:a8:21:4d:78:a8:78:22:c5:44:c7:
                    3c:ed:34:b1:b5:77:57:d2:d1:cf:cf:f4:52:6d:5f:
                    7d:80:91:43:e6:5d:64:ad:ec:f0:76:30:72:52:e3:
                    45:3a:90:6d:96:1f:01:f0:4e:a1:db:3b:2a:48:a8:
                    26:d2:38:fd:9d:50:c3:02:57:fb:42:b7:46:f1:25:
                    10:09:72:cf:82:26:a3:85:57:0c:5b:d5:3e:61:7a:
                    d0:f6:51:6b:a8:ee:75:78:52:2c:10:c7:d1:f3:a3:
                    fa:0a:00:d6:ea:75:68:72:05:f1:e3:78:81:75:0a:
                    90:f6:95:36:1a:f0:81:48:60:f0:1a:e7:d4:04:ba:
                    75:50:5f:8c:33:89:6c:0b:92:89:ce:7a:0b:fe:34:
                    ec:4f:3c:b5:4e:a3:c0:4b:0d:f4:cf:7f:bf:03:d7:
                    6f:ef:88:bd:5c:10:d5:b6:da:a1:91:66:97:f5:cf:
                    d4:cb:86:d5:9f:9f:d3:52:c8:51:58:98:a6:3a:13:
                    4e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:E4:05:4F:02:C1:84:24:74:2E:9A:19:F1:6A:CA:13:6F:26:12:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/4432433d-c4b1-3e44-82cc-f2a46a31efce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl

            X509v3 Authority Key Identifier:
                keyid:BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.205.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:a9:4f:55:45:37:21:b1:e6:fa:d0:37:78:62:39:71:cd:02:
         40:07:1a:e6:8f:19:f1:88:b4:44:b2:e1:38:1f:c3:33:b0:0d:
         0e:90:34:a1:d3:74:f3:8f:5a:aa:92:31:e2:1c:7b:73:59:84:
         da:16:37:2c:43:c3:c5:cb:be:78:a5:f2:8b:80:84:09:ff:18:
         3b:af:5f:a1:58:16:8c:3e:84:54:9a:a7:13:9e:8f:f0:fa:6e:
         41:7d:bb:76:d3:fe:98:28:92:85:d6:b2:ab:0b:ee:6c:fc:6b:
         5d:14:74:33:75:97:2a:70:df:23:d7:19:ef:f1:93:62:6c:d6:
         1c:81:60:dd:c0:d2:7d:dd:2b:e7:36:90:15:8a:23:17:cf:28:
         a5:70:aa:0e:d7:80:06:fc:5b:9d:c4:48:82:18:56:7e:30:61:
         27:ac:1b:d1:cf:15:ea:81:62:77:e7:4c:6e:8b:d3:ed:d8:f5:
         30:0f:33:f0:45:5e:69:5a:1e:ba:0c:bf:3c:58:c9:10:79:71:
         87:70:ab:b4:e8:92:6b:56:d5:74:cf:aa:f5:7b:f8:b9:b8:da:
         6d:72:5a:14:6d:32:0d:7a:70:da:5c:17:89:77:7b:dd:8f:12:
         b2:88:e0:3a:c9:00:e4:dc:4a:d8:58:8d:3b:2e:9b:b7:23:cd:
         29:e5:26:1a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy1UfdSQ2FUuU2myEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjVmODdmYzMtZmM3OS00ZGI5LTk1YmMtYjJkODRjNGNm
OGNhMB4XDTI2MDEzMTE0MDAzOVoXDTI2MDUwMTEzMDAzOVowLzEtMCsGA1UEAxMk
MWUwYmVjN2ItMGY5OC00ZDU0LTkzMGQtN2Y4ZmQwMWFhYWUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhX7XqWgYcT2VqK4Xe1dNDD9gdCSRYmUUzqTv
k3YOLzu1AIawdx4Yv9Sjsac87LLBxBAramOWxFsRO4yDv9CoZ6ghTXioeCLFRMc8
7TSxtXdX0tHPz/RSbV99gJFD5l1krezwdjByUuNFOpBtlh8B8E6h2zsqSKgm0jj9
nVDDAlf7QrdG8SUQCXLPgiajhVcMW9U+YXrQ9lFrqO51eFIsEMfR86P6CgDW6nVo
cgXx43iBdQqQ9pU2GvCBSGDwGufUBLp1UF+MM4lsC5KJznoL/jTsTzy1TqPASw30
z3+/A9dv74i9XBDVttqhkWaX9c/Uy4bVn5/TUshRWJimOhNO7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKDkBU8CwYQkdC6aGfFqyhNvJhJfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82NWY4
N2ZjMy1mYzc5LTRkYjktOTViYy1iMmQ4NGM0Y2Y4Y2EvNDQzMjQzM2QtYzRiMS0z
ZTQ0LTgyY2MtZjJhNDZhMzFlZmNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNjVmODdmYzMtZmM3OS00ZGI5LTk1
YmMtYjJkODRjNGNmOGNhLzY1Zjg3ZmMzLWZjNzktNGRiOS05NWJjLWIyZDg0YzRj
ZjhjYS5jcmwwHwYDVR0jBBgwFoAUu9W7tLEyrQwY0eYBEwMMwU00uMIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS82NWY4N2ZjMy1mYzc5LTRkYjktOTViYy1iMmQ4
NGM0Y2Y4Y2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2M1hMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE2pT1VFNyGx5vrQN3hiOXHNAkAHGuaPGfGItESy4TgfwzOwDQ6QNKHT
dPOPWqqSMeIce3NZhNoWNyxDw8XLvnil8ouAhAn/GDuvX6FYFow+hFSapxOej/D6
bkF9u3bT/pgokoXWsqsL7mz8a10UdDN1lypw3yPXGe/xk2Js1hyBYN3A0n3dK+c2
kBWKIxfPKKVwqg7XgAb8W53ESIIYVn4wYSesG9HPFeqBYnfnTG6L0+3Y9TAPM/BF
XmlaHroMvzxYyRB5cYdwq7TokmtW1XTPqvV7+Lm42m1yWhRtMg16cNpcF4l3e92P
ErKI4DrJAOTcSthYjTsum7cjzSnlJho=
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:26:58 2026 by rpki-client