Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/9f76300f-640d-3304-89f9-8fc6ab183840.roa
File:                     9f76300f-640d-3304-89f9-8fc6ab183840.roa (raw, json)
Hash identifier:          W3WHtatgDqnC/LF6Px6XFBbYtnyXVAL80kzALVP9D6c=
Subject key identifier:   F1:6A:D5:C0:34:6A:3A:68:E8:D5:4B:8B:EB:1C:4C:4C:69:64:28:E4
Certificate issuer:       /CN=0f950b17-8345-41e7-bf75-5481729a0012
Certificate serial:       010D0C9F4328584D5A9EECD7782F5D92783A8400
Authority key identifier: 56:3C:2B:FC:3E:FC:B4:79:C4:82:D7:6A:DE:DE:73:30:B0:B3:B6:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/9f76300f-640d-3304-89f9-8fc6ab183840.roa
Signing time:             Tue 31 Mar 2026 19:04:32 +0000
ROA not before:           Tue 31 Mar 2026 19:04:32 +0000
ROA not after:            Mon 29 Jun 2026 19:04:32 +0000
asID:                     32723
IP address blocks:        216.6.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5a:9e:ec:d7:78:2f:5d:92:78:3a:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f950b17-8345-41e7-bf75-5481729a0012
        Validity
            Not Before: Mar 31 19:04:32 2026 GMT
            Not After : Jun 29 19:04:32 2026 GMT
        Subject: CN=691927f3-2469-4f09-968f-b882acc6acc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:2b:f9:33:d5:8f:e4:20:15:27:54:96:75:a6:
                    85:f5:b2:c3:18:ca:dc:b7:d7:d4:27:4e:fc:40:88:
                    c8:ab:b8:1d:a7:4f:49:4d:3a:0b:29:b2:e2:3d:77:
                    31:e6:74:07:87:a5:8b:57:52:fa:df:8b:25:1d:e7:
                    f6:55:0a:ef:4e:dc:22:7d:21:db:e6:c9:7a:12:5f:
                    6a:d5:53:bf:84:66:e6:47:a8:78:28:78:ae:20:18:
                    23:82:c9:be:04:bc:2a:2b:4e:c0:85:6c:8d:a9:01:
                    16:81:75:7b:a7:a1:80:6b:3e:a1:7c:27:a4:49:d4:
                    f2:57:4a:c5:f8:7d:a2:70:07:c5:67:31:af:92:a9:
                    01:88:4c:58:79:b5:aa:1c:e7:20:cb:2e:86:2f:83:
                    69:79:1d:ae:d5:b2:1d:36:cc:64:1b:32:a2:96:61:
                    56:29:2c:87:b1:1a:05:f0:9f:f6:fa:b7:c5:b2:6e:
                    f4:3c:2a:8d:fb:26:8a:e4:9a:ab:b5:52:83:f7:95:
                    11:0e:01:c7:8c:3a:e7:b5:fa:b0:ab:99:db:12:5f:
                    36:53:0f:e0:d3:f1:86:5c:25:10:08:8a:8d:68:d8:
                    e5:73:e7:09:cc:c5:9a:92:0f:14:22:1b:bd:b3:b3:
                    06:cb:0a:99:34:8e:cc:c7:09:49:c8:e6:35:47:ae:
                    5d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:6A:D5:C0:34:6A:3A:68:E8:D5:4B:8B:EB:1C:4C:4C:69:64:28:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/9f76300f-640d-3304-89f9-8fc6ab183840.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.crl

            X509v3 Authority Key Identifier:
                keyid:56:3C:2B:FC:3E:FC:B4:79:C4:82:D7:6A:DE:DE:73:30:B0:B3:B6:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.6.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:ce:31:e8:d4:f2:1c:8f:22:fb:c6:ef:00:72:73:9a:66:a7:
         de:f0:fe:3c:9c:01:ac:95:e1:d5:a5:c4:60:c1:75:70:c2:82:
         87:fa:af:ec:44:49:aa:26:92:9e:6b:57:b4:6d:fc:9e:36:a5:
         1a:49:1e:fd:8d:78:ac:dc:6a:0e:52:3e:a1:e4:97:32:18:35:
         32:65:09:3f:be:5f:ff:57:f7:b0:82:20:69:f7:7b:90:cf:03:
         b5:f7:30:3d:89:05:ea:63:8e:29:83:0c:46:4c:14:6a:2f:f9:
         f9:bf:1d:79:e6:d1:97:6f:9e:87:19:47:fa:13:ad:66:47:75:
         8c:f6:6b:36:b8:6f:d9:9e:62:30:87:f3:9c:bc:64:92:d7:05:
         f6:7a:90:2c:a4:43:a9:63:7c:99:92:3a:58:ca:51:7d:3f:94:
         f5:cf:1c:96:d9:bc:a3:92:35:07:83:df:11:c6:d5:fc:6d:17:
         42:00:69:0d:e9:c6:bb:fe:4e:1c:3c:2e:9f:02:56:62:a1:f8:
         10:82:79:b3:c2:ef:ca:79:71:c1:56:83:ea:e5:65:83:9e:40:
         cd:a1:59:07:a3:3e:c5:e8:21:28:bf:c7:8a:e7:5e:8a:f7:e7:
         c1:24:d9:1d:2d:a7:7d:76:9a:78:1d:10:fc:13:53:7c:f8:7c:
         69:a3:4b:1b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1anuzXeC9dkng6hAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGY5NTBiMTctODM0NS00MWU3LWJmNzUtNTQ4MTcyOWEw
MDEyMB4XDTI2MDMzMTE5MDQzMloXDTI2MDYyOTE5MDQzMlowLzEtMCsGA1UEAxMk
NjkxOTI3ZjMtMjQ2OS00ZjA5LTk2OGYtYjg4MmFjYzZhY2M3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiv5M9WP5CAVJ1SWdaaF9bLDGMrct9fUJ078
QIjIq7gdp09JTToLKbLiPXcx5nQHh6WLV1L634slHef2VQrvTtwifSHb5sl6El9q
1VO/hGbmR6h4KHiuIBgjgsm+BLwqK07AhWyNqQEWgXV7p6GAaz6hfCekSdTyV0rF
+H2icAfFZzGvkqkBiExYebWqHOcgyy6GL4NpeR2u1bIdNsxkGzKilmFWKSyHsRoF
8J/2+rfFsm70PCqN+yaK5JqrtVKD95URDgHHjDrntfqwq5nbEl82Uw/g0/GGXCUQ
CIqNaNjlc+cJzMWakg8UIhu9s7MGywqZNI7MxwlJyOY1R65dxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPFq1cA0ajpo6NVLi+scTExpZCjkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZjk1
MGIxNy04MzQ1LTQxZTctYmY3NS01NDgxNzI5YTAwMTIvOWY3NjMwMGYtNjQwZC0z
MzA0LTg5ZjktOGZjNmFiMTgzODQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGY5NTBiMTctODM0NS00MWU3LWJm
NzUtNTQ4MTcyOWEwMDEyLzBmOTUwYjE3LTgzNDUtNDFlNy1iZjc1LTU0ODE3Mjlh
MDAxMi5jcmwwHwYDVR0jBBgwFoAUVjwr/D78tHnEgtdq3t5zMLCztmAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZjk1MGIxNy04MzQ1LTQxZTctYmY3NS01NDgx
NzI5YTAwMTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2AaTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAErOMejU8hyPIvvG7wByc5pmp97w/jycAayV4dWlxGDBdXDCgof6r+xE
Saomkp5rV7Rt/J42pRpJHv2NeKzcag5SPqHklzIYNTJlCT++X/9X97CCIGn3e5DP
A7X3MD2JBepjjimDDEZMFGov+fm/HXnm0ZdvnocZR/oTrWZHdYz2aza4b9meYjCH
85y8ZJLXBfZ6kCykQ6ljfJmSOljKUX0/lPXPHJbZvKOSNQeD3xHG1fxtF0IAaQ3p
xrv+Thw8Lp8CVmKh+BCCebPC78p5ccFWg+rlZYOeQM2hWQejPsXoISi/x4rnXor3
58Ek2R0tp312mngdEPwTU3z4fGmjSxs=
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:16:31 2026 by rpki-client