Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/aacfb0a5-efcd-3c8f-b9c3-b137882e9b45.roa
File:                     aacfb0a5-efcd-3c8f-b9c3-b137882e9b45.roa (raw, json)
Hash identifier:          G1foXPlu8URKmk+MMhBx/oKcTayPsp4zu8lpgJD8Bt0=
Subject key identifier:   68:16:88:34:2D:AE:8D:44:AC:B7:CE:10:C9:5D:B7:E0:9C:34:53:BA
Certificate issuer:       /CN=16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c
Certificate serial:       010D0C9F4328584C50D12B61729B4F9C3E723680
Authority key identifier: 4F:A9:33:ED:DC:41:9C:63:FA:6F:09:B9:13:1F:E5:7F:8E:41:88:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/aacfb0a5-efcd-3c8f-b9c3-b137882e9b45.roa
Signing time:             Fri 26 Dec 2025 14:00:39 +0000
ROA not before:           Fri 26 Dec 2025 14:00:39 +0000
ROA not after:            Thu 26 Mar 2026 13:00:39 +0000
asID:                     17185
IP address blocks:        74.115.168.0/21 maxlen: 24
                          173.195.144.0/20 maxlen: 24
                          199.16.48.0/21 maxlen: 24
                          208.72.236.0/22 maxlen: 24
                          208.82.128.0/22 maxlen: 24
                          208.88.48.0/21 maxlen: 24
                          2604:bf00::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:50:d1:2b:61:72:9b:4f:9c:3e:72:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c
        Validity
            Not Before: Dec 26 14:00:39 2025 GMT
            Not After : Mar 26 13:00:39 2026 GMT
        Subject: CN=2f29e135-a663-4648-a619-a526bdfa34d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f8:19:bc:32:b5:03:fb:fd:6e:8c:27:b9:83:
                    c3:70:3c:44:ed:9d:78:5b:fe:3e:87:67:51:6c:63:
                    60:2d:65:b9:60:c1:6d:f4:43:e2:70:30:de:9e:71:
                    80:17:03:63:1d:1f:a4:21:5c:f7:30:a5:b8:a7:ae:
                    96:48:93:ba:1e:32:40:cc:22:3e:7c:b1:f5:16:f2:
                    c3:a1:de:2b:1d:c4:08:45:c5:a4:cf:5a:b4:27:b4:
                    67:83:dc:82:ff:a2:de:50:69:ab:7d:83:f5:26:87:
                    60:97:3b:eb:45:68:8d:ae:6f:fa:b8:ed:f5:8d:a8:
                    f5:95:c9:8c:84:95:12:fd:30:da:88:58:f2:4d:2f:
                    d0:d9:f4:1a:42:6c:b5:b4:06:88:a0:37:e4:f8:1c:
                    6d:fe:c4:85:0a:0c:7d:56:72:74:ce:d5:dd:a0:2b:
                    6d:a1:5e:33:3d:1c:ec:14:8c:fb:d0:ff:05:c0:70:
                    3e:48:0a:6a:5d:39:35:ae:47:b9:4e:ff:54:cc:5e:
                    e2:c9:1c:6f:0a:fb:13:a1:6c:6d:00:2a:a2:ab:13:
                    2e:e4:b3:92:28:09:b2:8c:cf:52:1b:f5:40:67:f1:
                    5b:8b:e5:3b:fb:dd:c2:5a:98:04:21:6c:23:6a:87:
                    15:36:c5:a4:81:a6:00:f2:7f:f9:c2:1c:bf:4f:7a:
                    2b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:16:88:34:2D:AE:8D:44:AC:B7:CE:10:C9:5D:B7:E0:9C:34:53:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/aacfb0a5-efcd-3c8f-b9c3-b137882e9b45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.crl

            X509v3 Authority Key Identifier:
                keyid:4F:A9:33:ED:DC:41:9C:63:FA:6F:09:B9:13:1F:E5:7F:8E:41:88:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.115.168.0/21
                  173.195.144.0/20
                  199.16.48.0/21
                  208.72.236.0/22
                  208.82.128.0/22
                  208.88.48.0/21
                IPv6:
                  2604:bf00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:c1:8c:70:2a:e6:e0:6b:d1:ed:1e:ae:87:e8:ca:07:fe:e5:
         aa:c5:65:fc:8e:5e:11:2e:4a:57:03:79:a7:68:7c:87:eb:10:
         ad:84:bb:63:98:57:21:88:9f:91:6a:84:b5:a6:a1:77:b6:7c:
         48:e9:10:30:73:4e:cc:b8:59:cb:8a:4c:41:7d:58:72:e9:1f:
         9b:55:46:d8:2d:61:b9:20:e9:4a:a9:67:61:69:50:1d:79:16:
         2d:c4:68:68:ab:99:a7:0b:20:9e:0e:f7:8b:ec:37:6b:c3:6c:
         09:4e:e5:88:14:96:b0:29:af:60:4a:bb:6d:14:eb:33:0e:fb:
         18:78:d3:65:ea:60:1b:67:66:04:4a:e3:07:2f:7f:7a:f9:48:
         1c:6b:fa:4c:ba:6f:13:03:e8:fb:eb:c9:65:85:b2:56:82:cd:
         4a:be:9d:85:f1:fe:ca:6e:a3:df:6b:e8:86:51:d4:aa:85:e6:
         60:9e:03:2e:b3:75:d8:0e:34:60:41:ec:36:51:55:24:da:9f:
         15:e3:b4:23:68:9a:cd:33:b8:05:87:50:9e:8e:b0:dd:aa:ee:
         99:e8:92:12:b2:24:cd:a2:9a:20:2b:3e:08:19:1b:0d:e3:8e:
         2d:e3:dc:58:4d:b1:be:5b:ab:67:8b:f8:8f:9c:21:5e:47:65:
         ab:0b:8f:f7
-----BEGIN CERTIFICATE-----
MIIGcDCCBVigAwIBAgIUAQ0Mn0MoWExQ0SthcptPnD5yNoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTZlOGNhMGItMGY1ZS00MDY3LWFjZDctMmJiYjQwMDhl
ZDFjMB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk
MmYyOWUxMzUtYTY2My00NjQ4LWE2MTktYTUyNmJkZmEzNGQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/gZvDK1A/v9bownuYPDcDxE7Z14W/4+h2dR
bGNgLWW5YMFt9EPicDDennGAFwNjHR+kIVz3MKW4p66WSJO6HjJAzCI+fLH1FvLD
od4rHcQIRcWkz1q0J7Rng9yC/6LeUGmrfYP1JodglzvrRWiNrm/6uO31jaj1lcmM
hJUS/TDaiFjyTS/Q2fQaQmy1tAaIoDfk+Bxt/sSFCgx9VnJ0ztXdoCttoV4zPRzs
FIz70P8FwHA+SApqXTk1rke5Tv9UzF7iyRxvCvsToWxtACqiqxMu5LOSKAmyjM9S
G/VAZ/Fbi+U7+93CWpgEIWwjaocVNsWkgaYA8n/5why/T3orlQIDAQABo4IDgjCC
A34wHQYDVR0OBBYEFGgWiDQtro1ErLfOEMldt+CcNFO6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xNmU4
Y2EwYi0wZjVlLTQwNjctYWNkNy0yYmJiNDAwOGVkMWMvYWFjZmIwYTUtZWZjZC0z
YzhmLWI5YzMtYjEzNzg4MmU5YjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTZlOGNhMGItMGY1ZS00MDY3LWFj
ZDctMmJiYjQwMDhlZDFjLzE2ZThjYTBiLTBmNWUtNDA2Ny1hY2Q3LTJiYmI0MDA4
ZWQxYy5jcmwwHwYDVR0jBBgwFoAUT6kz7dxBnGP6bwm5Ex/lf45BiBowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xNmU4Y2EwYi0wZjVlLTQwNjctYWNkNy0yYmJi
NDAwOGVkMWMuY2VyMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQDSnOoAwQE
rcOQAwQDxxAwAwQC0EjsAwQC0FKAAwQD0FgwMA0EAgACMAcDBQAmBL8AMFQGA1Ud
IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu
YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD
ggEBACDBjHAq5uBr0e0erofoygf+5arFZfyOXhEuSlcDeadofIfrEK2Eu2OYVyGI
n5FqhLWmoXe2fEjpEDBzTsy4WcuKTEF9WHLpH5tVRtgtYbkg6UqpZ2FpUB15Fi3E
aGirmacLIJ4O94vsN2vDbAlO5YgUlrApr2BKu20U6zMO+xh402XqYBtnZgRK4wcv
f3r5SBxr+ky6bxMD6PvryWWFslaCzUq+nYXx/spuo99r6IZR1KqF5mCeAy6zddgO
NGBB7DZRVSTanxXjtCNoms0zuAWHUJ6OsN2q7pnokhKyJM2imiArPggZGw3jji3j
3FhNsb5bq2eL+I+cIV5HZasLj/c=
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:56:46 2026 by rpki-client