Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/432de1aa-0852-3e3b-87a9-c4fe7d7e1228.roa
File:                     432de1aa-0852-3e3b-87a9-c4fe7d7e1228.roa (raw, json)
Hash identifier:          GSuqc3XuPd/izt8HCY3p0w5lhlqRbbEwn1p1k68diOY=
Subject key identifier:   B8:A0:C7:FB:88:CE:0D:12:8B:01:7F:09:1D:9F:14:CA:66:FB:87:66
Certificate issuer:       /CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
Certificate serial:       010D0C9F4328584CB551EA28089458EADE280580
Authority key identifier: CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/432de1aa-0852-3e3b-87a9-c4fe7d7e1228.roa
Signing time:             Sat 31 Jan 2026 14:00:39 +0000
ROA not before:           Sat 31 Jan 2026 14:00:39 +0000
ROA not after:            Fri 01 May 2026 13:00:39 +0000
asID:                     13213
IP address blocks:        216.119.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b5:51:ea:28:08:94:58:ea:de:28:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
        Validity
            Not Before: Jan 31 14:00:39 2026 GMT
            Not After : May  1 13:00:39 2026 GMT
        Subject: CN=c9e26b8e-46b0-4b37-b80d-bf26f1591215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:0d:d5:1f:02:f9:50:96:43:16:e2:fa:c0:9d:
                    44:27:4e:bf:c3:ee:22:8a:f9:a1:46:bf:dd:a3:50:
                    fd:99:2f:6f:75:ea:4f:e3:ab:68:be:cc:64:fa:cd:
                    c1:3e:96:67:b7:57:9d:b8:3e:e0:dc:98:5c:da:3c:
                    38:48:35:7f:2d:55:0b:0b:eb:13:c6:d2:be:1f:3b:
                    dd:c8:c2:7e:02:aa:c8:ab:40:69:da:99:0a:54:3f:
                    c9:93:fc:2a:51:c7:42:05:e3:41:38:4d:b6:e7:fd:
                    87:0e:b2:3a:ff:01:06:ec:d1:9a:a8:a5:0a:9a:87:
                    3f:0e:89:4d:ae:57:52:a0:1d:66:8e:4a:9c:c2:6e:
                    6f:aa:91:a2:ea:6f:1b:49:19:43:57:86:79:ed:8d:
                    ca:39:aa:fd:89:6b:3c:56:a1:a3:55:30:c0:75:da:
                    50:1a:7b:01:b4:7e:9d:84:1b:42:9a:35:0e:ca:dc:
                    70:61:8d:5c:f1:cc:3c:4e:90:c0:85:58:25:b3:5d:
                    b4:cc:e4:04:b4:84:b8:39:82:7a:da:f6:a5:d6:51:
                    39:34:ed:75:41:77:fd:a7:a1:cc:94:f1:64:e6:25:
                    bb:23:ec:9c:68:69:aa:61:ec:6b:65:43:40:b5:71:
                    a2:82:31:0e:bd:ac:a9:4a:37:28:80:cf:b8:68:6f:
                    30:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:A0:C7:FB:88:CE:0D:12:8B:01:7F:09:1D:9F:14:CA:66:FB:87:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/432de1aa-0852-3e3b-87a9-c4fe7d7e1228.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl

            X509v3 Authority Key Identifier:
                keyid:CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.119.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:bc:90:74:f6:5d:bc:ad:71:45:cf:3f:bc:38:77:2b:03:f0:
         86:08:dc:5c:98:d0:46:42:d9:9f:4e:7d:be:4d:73:48:b2:4f:
         28:d2:5e:01:95:59:3d:5d:cc:b7:dd:8c:62:bb:88:37:2d:49:
         06:65:97:58:69:f7:9b:4a:70:cd:b1:55:79:af:2c:17:5f:76:
         f5:b1:03:ee:af:de:6f:29:f4:63:2b:9a:61:cc:fd:52:ba:32:
         d8:93:72:75:cf:50:dc:38:dc:0c:5b:1b:0d:f2:14:32:36:93:
         41:ae:52:bd:ef:60:03:2a:93:3f:cf:b3:58:64:26:de:39:e0:
         da:12:2d:a8:e7:b5:9b:fa:5b:85:57:eb:4a:86:54:d7:c8:1f:
         2f:c9:d0:4b:93:72:61:9a:4e:88:40:5a:d8:2c:d8:99:34:a1:
         44:a3:00:d3:53:b1:ca:b5:2c:24:1c:33:22:ae:67:ae:1e:4a:
         aa:27:a4:16:b4:65:5e:82:b0:71:49:3e:01:e2:82:be:62:7b:
         e0:20:0a:cd:a3:cb:ff:8b:f4:90:3f:67:00:f1:df:55:9f:e4:
         89:ce:53:28:a4:b8:09:ac:33:eb:66:33:08:88:2f:fe:b6:ef:
         c5:17:89:10:22:30:7e:c9:95:c2:13:70:c6:4d:e5:ab:32:a9:
         a1:c3:71:24
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy1UeooCJRY6t4oBYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0MDdjZDgtYzgzMC00OWU2LTlkYjQtN2RkYWM3NWVi
MDNmMB4XDTI2MDEzMTE0MDAzOVoXDTI2MDUwMTEzMDAzOVowLzEtMCsGA1UEAxMk
YzllMjZiOGUtNDZiMC00YjM3LWI4MGQtYmYyNmYxNTkxMjE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9w3VHwL5UJZDFuL6wJ1EJ06/w+4iivmhRr/d
o1D9mS9vdepP46tovsxk+s3BPpZnt1eduD7g3Jhc2jw4SDV/LVULC+sTxtK+Hzvd
yMJ+AqrIq0Bp2pkKVD/Jk/wqUcdCBeNBOE225/2HDrI6/wEG7NGaqKUKmoc/DolN
rldSoB1mjkqcwm5vqpGi6m8bSRlDV4Z57Y3KOar9iWs8VqGjVTDAddpQGnsBtH6d
hBtCmjUOytxwYY1c8cw8TpDAhVgls120zOQEtIS4OYJ62val1lE5NO11QXf9p6HM
lPFk5iW7I+ycaGmqYexrZUNAtXGigjEOvaypSjcogM+4aG8wEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLigx/uIzg0SiwF/CR2fFMpm+4dmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81MTQw
N2NkOC1jODMwLTQ5ZTYtOWRiNC03ZGRhYzc1ZWIwM2YvNDMyZGUxYWEtMDg1Mi0z
ZTNiLTg3YTktYzRmZTdkN2UxMjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTE0MDdjZDgtYzgzMC00OWU2LTlk
YjQtN2RkYWM3NWViMDNmLzUxNDA3Y2Q4LWM4MzAtNDllNi05ZGI0LTdkZGFjNzVl
YjAzZi5jcmwwHwYDVR0jBBgwFoAUy7XVgkiqTdjWioVCA8Spu4nGVq4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81MTQwN2NkOC1jODMwLTQ5ZTYtOWRiNC03ZGRh
Yzc1ZWIwM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2HeQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFi8kHT2XbytcUXPP7w4dysD8IYI3FyY0EZC2Z9Ofb5Nc0iyTyjSXgGV
WT1dzLfdjGK7iDctSQZll1hp95tKcM2xVXmvLBdfdvWxA+6v3m8p9GMrmmHM/VK6
MtiTcnXPUNw43AxbGw3yFDI2k0GuUr3vYAMqkz/Ps1hkJt454NoSLajntZv6W4VX
60qGVNfIHy/J0EuTcmGaTohAWtgs2Jk0oUSjANNTscq1LCQcMyKuZ64eSqonpBa0
ZV6CsHFJPgHigr5ie+AgCs2jy/+L9JA/ZwDx31Wf5InOUyikuAmsM+tmMwiIL/62
78UXiRAiMH7JlcITcMZN5asyqaHDcSQ=
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:49:37 2026 by rpki-client