Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b60fd368-cb50-418b-8840-57c8491066b3/66e5d8e5-1ee1-326d-b7de-a3af15977309.roa
File:                     66e5d8e5-1ee1-326d-b7de-a3af15977309.roa (raw, json)
Hash identifier:          WhDbYcPhhuJkbHmCccN7WWWj5zbEMsmpt86WSP3nVEc=
Subject key identifier:   C7:50:07:8D:3B:1B:B3:3E:1F:CC:DC:03:84:7A:D2:EF:E8:77:F3:A9
Certificate issuer:       /CN=b60fd368-cb50-418b-8840-57c8491066b3
Certificate serial:       010D0C9F4328584CEAA588CBDBD2CF2E3507BD20
Authority key identifier: 8E:1C:4F:B6:E2:B8:B8:5D:C8:2D:ED:E4:80:47:C3:86:1B:5C:9D:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b60fd368-cb50-418b-8840-57c8491066b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b60fd368-cb50-418b-8840-57c8491066b3/66e5d8e5-1ee1-326d-b7de-a3af15977309.roa
Signing time:             Thu 19 Feb 2026 16:27:19 +0000
ROA not before:           Thu 19 Feb 2026 16:27:19 +0000
ROA not after:            Wed 20 May 2026 15:27:19 +0000
asID:                     398754
IP address blocks:        134.231.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b60fd368-cb50-418b-8840-57c8491066b3/b60fd368-cb50-418b-8840-57c8491066b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b60fd368-cb50-418b-8840-57c8491066b3/b60fd368-cb50-418b-8840-57c8491066b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b60fd368-cb50-418b-8840-57c8491066b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:a5:88:cb:db:d2:cf:2e:35:07:bd:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b60fd368-cb50-418b-8840-57c8491066b3
        Validity
            Not Before: Feb 19 16:27:19 2026 GMT
            Not After : May 20 15:27:19 2026 GMT
        Subject: CN=2eea3980-672b-485b-943b-17445527423a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d6:4b:2a:3a:46:2d:1d:56:15:22:20:e4:f6:
                    92:4c:91:10:f7:bd:4f:cd:d0:5b:54:75:c2:71:09:
                    d8:69:3b:5a:b2:46:c6:2b:95:61:3a:3e:0d:d4:30:
                    fd:3f:18:a1:66:64:66:96:78:f6:58:25:b2:06:5a:
                    00:be:bd:d8:a9:3f:27:84:b1:a3:30:6a:75:38:03:
                    dc:61:ad:62:00:15:95:d8:b5:71:6c:e2:e9:cd:d9:
                    25:9f:90:e8:91:7e:1a:ff:55:84:27:91:84:2e:40:
                    60:c8:ae:41:19:0b:56:c7:08:51:ca:1a:b7:61:ef:
                    2b:87:0c:f8:d5:84:02:91:ad:a6:14:f9:f1:18:32:
                    cf:37:e6:79:c9:94:51:89:d8:19:cb:45:a9:da:09:
                    72:81:da:6d:ed:15:63:57:30:5c:e1:63:c8:f6:43:
                    62:9f:4c:f6:56:bd:76:98:19:b7:22:1d:c3:bb:7d:
                    e2:5d:4d:be:30:12:50:5b:7d:cf:b5:fd:b3:a9:d8:
                    7c:58:4c:40:8e:87:a1:dc:dd:e5:2f:ee:5d:c9:a3:
                    36:48:86:f3:cd:10:55:1d:41:43:e2:f9:71:f3:54:
                    53:e0:81:98:bf:df:aa:97:04:49:a2:c2:55:1e:ae:
                    de:42:ad:25:3f:43:71:17:22:85:a0:32:89:3b:1f:
                    1f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:50:07:8D:3B:1B:B3:3E:1F:CC:DC:03:84:7A:D2:EF:E8:77:F3:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b60fd368-cb50-418b-8840-57c8491066b3/66e5d8e5-1ee1-326d-b7de-a3af15977309.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b60fd368-cb50-418b-8840-57c8491066b3/b60fd368-cb50-418b-8840-57c8491066b3.crl

            X509v3 Authority Key Identifier:
                keyid:8E:1C:4F:B6:E2:B8:B8:5D:C8:2D:ED:E4:80:47:C3:86:1B:5C:9D:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b60fd368-cb50-418b-8840-57c8491066b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.231.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:28:30:bd:7a:b1:17:6d:7e:f3:56:ea:b8:02:28:6d:fb:b8:
         95:5d:d1:13:67:9e:68:ad:ec:17:21:f4:95:24:6b:7e:2f:fe:
         26:c6:8a:4e:24:72:e5:19:ed:e8:79:58:44:20:82:67:ef:48:
         62:75:5f:86:68:48:e8:4b:30:15:56:fa:29:e6:90:01:59:b5:
         e4:47:bc:85:f8:cd:0d:91:59:d0:e9:4a:02:58:08:7d:92:86:
         45:a6:8f:20:b8:42:1b:0b:2a:0b:11:95:c6:44:46:31:08:ff:
         ca:2d:0e:a3:41:84:50:b9:71:7f:1d:51:b2:01:4f:f2:ee:0f:
         80:80:ef:14:87:9b:da:b7:fb:cf:6a:b9:f0:d8:3e:0e:20:5a:
         de:af:1b:f8:2f:ef:65:23:72:99:95:7e:76:1c:a6:6f:f9:ca:
         ba:f0:73:40:f2:a1:92:fa:03:01:3f:67:1d:51:63:bf:2a:ff:
         58:60:fc:66:ab:8f:78:85:d4:4d:02:51:70:1c:7f:b7:9a:e9:
         0b:40:b9:3b:d8:77:7b:10:3f:46:d7:19:9b:2a:f7:c2:1c:ac:
         cc:8a:90:5d:45:46:5e:8e:09:66:77:41:59:29:f3:fc:16:d9:
         3f:89:00:bc:41:b2:3b:fe:18:db:cd:25:8c:c7:2e:78:43:1f:
         84:33:d6:e2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzqpYjL29LPLjUHvSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjYwZmQzNjgtY2I1MC00MThiLTg4NDAtNTdjODQ5MTA2
NmIzMB4XDTI2MDIxOTE2MjcxOVoXDTI2MDUyMDE1MjcxOVowLzEtMCsGA1UEAxMk
MmVlYTM5ODAtNjcyYi00ODViLTk0M2ItMTc0NDU1Mjc0MjNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3tZLKjpGLR1WFSIg5PaSTJEQ971PzdBbVHXC
cQnYaTtaskbGK5VhOj4N1DD9PxihZmRmlnj2WCWyBloAvr3YqT8nhLGjMGp1OAPc
Ya1iABWV2LVxbOLpzdkln5DokX4a/1WEJ5GELkBgyK5BGQtWxwhRyhq3Ye8rhwz4
1YQCka2mFPnxGDLPN+Z5yZRRidgZy0Wp2glygdpt7RVjVzBc4WPI9kNin0z2Vr12
mBm3Ih3Du33iXU2+MBJQW33Ptf2zqdh8WExAjoeh3N3lL+5dyaM2SIbzzRBVHUFD
4vlx81RT4IGYv9+qlwRJosJVHq7eQq0lP0NxFyKFoDKJOx8fHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMdQB407G7M+H8zcA4R60u/od/OpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iNjBm
ZDM2OC1jYjUwLTQxOGItODg0MC01N2M4NDkxMDY2YjMvNjZlNWQ4ZTUtMWVlMS0z
MjZkLWI3ZGUtYTNhZjE1OTc3MzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjYwZmQzNjgtY2I1MC00MThiLTg4
NDAtNTdjODQ5MTA2NmIzL2I2MGZkMzY4LWNiNTAtNDE4Yi04ODQwLTU3Yzg0OTEw
NjZiMy5jcmwwHwYDVR0jBBgwFoAUjhxPtuK4uF3ILe3kgEfDhhtcnYowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9iNjBmZDM2OC1jYjUwLTQxOGItODg0MC01N2M4
NDkxMDY2YjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEhucQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABIoML16sRdtfvNW6rgCKG37uJVd0RNnnmit7Bch9JUka34v/ibGik4k
cuUZ7eh5WEQggmfvSGJ1X4ZoSOhLMBVW+inmkAFZteRHvIX4zQ2RWdDpSgJYCH2S
hkWmjyC4QhsLKgsRlcZERjEI/8otDqNBhFC5cX8dUbIBT/LuD4CA7xSHm9q3+89q
ufDYPg4gWt6vG/gv72UjcpmVfnYcpm/5yrrwc0DyoZL6AwE/Zx1RY78q/1hg/Gar
j3iF1E0CUXAcf7ea6QtAuTvYd3sQP0bXGZsq98IcrMyKkF1FRl6OCWZ3QVkp8/wW
2T+JALxBsjv+GNvNJYzHLnhDH4Qz1uI=
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:06:21 2026 by rpki-client