Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6df533e4-991e-338e-beaa-9f33d62927ff.roa
File:                     6df533e4-991e-338e-beaa-9f33d62927ff.roa (raw, json)
Hash identifier:          AdVMjAl6gYEoCujDvBbXYCfYqrvdp8Phs8uN2s1qrqc=
Subject key identifier:   D6:7B:C0:49:D2:F4:BA:81:DC:3B:BE:98:2A:AF:08:80:C5:41:1D:F1
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584CCA4220F22FFFD75C1C1BBA80
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6df533e4-991e-338e-beaa-9f33d62927ff.roa
Signing time:             Sun 08 Feb 2026 02:00:32 +0000
ROA not before:           Sun 08 Feb 2026 02:00:32 +0000
ROA not after:            Sat 09 May 2026 01:00:32 +0000
asID:                     64267
IP address blocks:        216.230.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ca:42:20:f2:2f:ff:d7:5c:1c:1b:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Feb  8 02:00:32 2026 GMT
            Not After : May  9 01:00:32 2026 GMT
        Subject: CN=2ca8d3ad-ff10-47ad-a050-7a791ae1525d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:6a:17:73:2a:0e:da:fb:20:54:bf:d9:9e:74:
                    25:4d:8a:df:f3:8e:59:cc:9f:0d:f6:06:fa:09:59:
                    66:bb:c3:d3:17:a9:dc:92:55:51:7e:d7:75:77:0d:
                    a6:49:7f:89:90:41:a1:1a:8d:59:e0:1f:68:9f:a6:
                    c8:97:fa:a4:e2:db:45:17:44:64:2c:09:30:5b:ee:
                    5b:38:42:4b:9b:1d:cc:bd:a4:ec:04:3b:c5:e2:05:
                    2e:7b:17:e0:b9:0a:7b:d9:35:7b:72:72:66:af:b5:
                    32:2c:41:2a:95:5c:99:1f:6a:b7:b4:3c:81:79:60:
                    93:b5:03:c6:87:2f:e6:3a:69:9e:ee:ed:37:c2:03:
                    6e:89:fd:5a:ed:f1:d1:10:04:e1:b0:36:9d:8c:1c:
                    ff:80:75:44:bf:aa:bf:f1:90:94:dc:09:f6:dd:3f:
                    ec:ae:21:1e:0e:2a:da:9b:36:fe:6c:74:96:42:d4:
                    e7:ed:40:ae:91:f4:af:ec:9c:50:2f:b2:74:7e:2f:
                    f9:27:d8:8d:a3:6f:3b:90:f8:ee:46:36:ff:01:35:
                    d9:f7:78:b9:77:e2:86:7e:a9:9a:32:ce:fa:8c:72:
                    0d:26:9b:e6:fd:bc:d1:3e:c7:09:f0:99:72:93:7c:
                    93:79:d8:3f:e4:49:e5:ee:58:63:8d:29:cc:dc:6a:
                    ca:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:7B:C0:49:D2:F4:BA:81:DC:3B:BE:98:2A:AF:08:80:C5:41:1D:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6df533e4-991e-338e-beaa-9f33d62927ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.230.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:c9:ac:5d:57:19:76:04:5e:04:de:f8:8a:57:18:9f:42:05:
         fe:56:57:42:ca:37:24:28:9f:dd:ff:cc:34:8d:55:d7:80:ad:
         01:ee:ca:ee:8a:7c:dc:e5:83:86:4e:d2:a4:d5:0e:8b:ae:42:
         bb:33:87:21:cf:58:1a:0e:6c:08:b1:48:25:45:cd:e3:45:66:
         84:d5:7f:82:2a:8f:e7:7c:f7:07:74:db:ea:47:b5:6f:0f:0f:
         5b:72:1c:0e:c8:8c:f7:d9:7e:eb:8d:c8:0f:10:30:90:ee:a6:
         cf:a8:45:6f:0b:5d:67:b1:00:35:8c:d2:76:fd:6f:21:c1:fe:
         f6:33:e2:50:03:d9:f0:2d:8d:3e:a6:aa:26:a0:89:d4:0d:60:
         3d:92:85:85:70:b2:9f:29:19:dd:e8:49:a1:e4:da:8e:13:7e:
         26:c9:ed:6e:ba:c5:c8:e3:2a:d7:de:c0:61:ed:e1:cd:43:7b:
         82:8e:2d:a9:44:07:c6:fd:c5:76:ef:6c:83:69:fe:6f:5c:63:
         98:ef:1c:26:85:81:6e:fa:f9:69:eb:5b:78:13:71:43:af:2b:
         c0:1f:4c:85:3f:39:93:2c:b2:c6:d0:f4:41:7d:1a:33:b3:bb:
         50:ec:b5:6e:e9:a1:12:fd:8c:29:e3:18:94:18:a1:57:bc:b8:
         ea:5f:8f:66
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzKQiDyL//XXBwbuoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI2MDIwODAyMDAzMloXDTI2MDUwOTAxMDAzMlowLzEtMCsGA1UEAxMk
MmNhOGQzYWQtZmYxMC00N2FkLWEwNTAtN2E3OTFhZTE1MjVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32oXcyoO2vsgVL/ZnnQlTYrf845ZzJ8N9gb6
CVlmu8PTF6ncklVRftd1dw2mSX+JkEGhGo1Z4B9on6bIl/qk4ttFF0RkLAkwW+5b
OEJLmx3MvaTsBDvF4gUuexfguQp72TV7cnJmr7UyLEEqlVyZH2q3tDyBeWCTtQPG
hy/mOmme7u03wgNuif1a7fHREAThsDadjBz/gHVEv6q/8ZCU3An23T/sriEeDira
mzb+bHSWQtTn7UCukfSv7JxQL7J0fi/5J9iNo287kPjuRjb/ATXZ93i5d+KGfqma
Ms76jHINJpvm/bzRPscJ8Jlyk3yTedg/5Enl7lhjjSnM3GrKCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNZ7wEnS9LqB3Du+mCqvCIDFQR3xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNmRmNTMzZTQtOTkxZS0z
MzhlLWJlYWEtOWYzM2Q2MjkyN2ZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OYfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAzJrF1XGXYEXgTe+IpXGJ9CBf5WV0LKNyQon93/zDSNVdeArQHuyu6K
fNzlg4ZO0qTVDouuQrszhyHPWBoObAixSCVFzeNFZoTVf4Iqj+d89wd02+pHtW8P
D1tyHA7IjPfZfuuNyA8QMJDups+oRW8LXWexADWM0nb9byHB/vYz4lAD2fAtjT6m
qiagidQNYD2ShYVwsp8pGd3oSaHk2o4TfibJ7W66xcjjKtfewGHt4c1De4KOLalE
B8b9xXbvbINp/m9cY5jvHCaFgW76+WnrW3gTcUOvK8AfTIU/OZMsssbQ9EF9GjOz
u1DstW7poRL9jCnjGJQYoVe8uOpfj2Y=
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:35:10 2026 by rpki-client