Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/1fdaf3ab-265e-3ecb-ab8e-50dec3ff9a04.roa
File:                     1fdaf3ab-265e-3ecb-ab8e-50dec3ff9a04.roa (raw, json)
Hash identifier:          Xs94EWC5TA3zXLdsqN1I3QhUlW2JmRZ/MA1XBN+w0pE=
Subject key identifier:   7E:66:49:4C:0B:9A:44:D0:A6:B7:FD:E4:85:D7:F2:70:88:33:07:A8
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584E10101CAD4297EC0977914A80
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/1fdaf3ab-265e-3ecb-ab8e-50dec3ff9a04.roa
Signing time:             Thu 04 Jun 2026 18:53:55 +0000
ROA not before:           Thu 04 Jun 2026 18:53:55 +0000
ROA not after:            Wed 02 Sep 2026 18:53:55 +0000
asID:                     3503
IP address blocks:        216.24.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:10:1c:ad:42:97:ec:09:77:91:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Jun  4 18:53:55 2026 GMT
            Not After : Sep  2 18:53:55 2026 GMT
        Subject: CN=bf9d7983-c08f-45f1-a2f8-32e46cb29dfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:39:89:c1:0f:6c:e1:ec:c5:55:9d:cd:bf:fc:
                    d4:6e:dd:1a:3c:6f:54:6b:84:da:af:b3:28:76:3e:
                    b4:21:31:be:d4:7f:a7:26:6a:a8:4a:99:eb:1a:42:
                    7d:99:38:6c:0f:a0:1f:c0:38:da:d1:26:69:00:44:
                    62:c5:62:23:b1:c3:13:d1:4a:98:8b:de:ad:4f:5c:
                    34:47:7d:19:7d:94:d7:8a:95:26:e3:f1:8f:37:28:
                    5f:e8:6d:2f:ec:4f:ae:20:4c:b4:d2:76:44:4a:38:
                    ca:c0:73:a5:4e:8c:b5:cd:b8:d4:40:d2:1d:c9:e2:
                    be:94:1e:ac:7e:3e:7d:c6:6b:5f:cb:56:29:45:3a:
                    09:d2:4c:a8:09:00:64:f2:46:14:1c:c1:3a:b5:0b:
                    14:bc:31:81:f3:12:34:c2:5a:f3:79:67:3c:32:5b:
                    0a:77:e8:6c:fd:bf:7b:f1:7a:38:90:ca:14:54:ee:
                    b6:3f:28:94:4a:0d:28:5a:f5:27:83:0f:86:b5:89:
                    8d:02:2f:34:de:96:d7:ee:5e:0a:35:9d:de:15:c2:
                    e8:ba:9d:b3:2e:1c:c4:ca:48:62:f0:46:d3:80:7b:
                    38:cb:9e:70:2f:7c:7e:d2:05:20:c2:ec:9b:bb:d7:
                    a8:5e:dc:26:2f:5e:36:3e:ca:49:85:34:14:55:c5:
                    86:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:66:49:4C:0B:9A:44:D0:A6:B7:FD:E4:85:D7:F2:70:88:33:07:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/1fdaf3ab-265e-3ecb-ab8e-50dec3ff9a04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.24.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:ae:c3:fb:ba:13:0e:1f:48:5c:35:9d:94:54:85:8d:01:ef:
         d7:70:7b:8d:17:a0:1b:f2:ab:97:a8:74:91:bc:f3:36:09:4c:
         38:28:95:13:69:c6:00:53:52:3e:09:aa:ce:ef:3e:cd:24:24:
         77:fc:df:7f:46:0d:6d:67:0f:24:4f:fa:40:ad:ac:d9:c1:b5:
         8e:32:f7:35:ab:af:ef:92:dd:19:37:47:71:00:0f:4e:af:1f:
         a0:3c:09:24:d0:86:a8:37:16:39:e9:1d:63:68:b3:8d:9c:2b:
         46:ca:ee:db:40:91:13:4c:96:37:0d:cb:14:9c:0a:8a:3e:1e:
         66:81:a4:88:cf:2f:cc:ad:07:52:e5:39:cf:09:ea:9c:cc:d7:
         fd:12:d1:b0:35:73:d0:d6:fd:22:9e:dc:2d:20:b5:ce:c5:03:
         d8:01:e0:b0:a9:5b:c4:47:55:4c:77:93:90:e7:2f:4a:b3:df:
         7d:3c:c8:1d:0d:f7:1f:61:21:bb:e6:1c:a4:e8:56:61:e8:ef:
         bd:b8:89:c9:67:31:dc:3f:1d:63:b6:d8:61:c1:b3:b9:c7:ab:
         16:18:71:6d:63:0c:d9:5b:de:95:9d:2c:dd:cd:2d:92:8b:38:
         63:41:cd:8e:56:fd:f7:38:86:23:82:55:23:7d:ce:ce:48:df:
         34:b5:ba:cd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QEBytQpfsCXeRSoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2
ZjNmMB4XDTI2MDYwNDE4NTM1NVoXDTI2MDkwMjE4NTM1NVowLzEtMCsGA1UEAxMk
YmY5ZDc5ODMtYzA4Zi00NWYxLWEyZjgtMzJlNDZjYjI5ZGZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDmJwQ9s4ezFVZ3Nv/zUbt0aPG9Ua4Tar7Mo
dj60ITG+1H+nJmqoSpnrGkJ9mThsD6AfwDja0SZpAERixWIjscMT0UqYi96tT1w0
R30ZfZTXipUm4/GPNyhf6G0v7E+uIEy00nZESjjKwHOlToy1zbjUQNIdyeK+lB6s
fj59xmtfy1YpRToJ0kyoCQBk8kYUHME6tQsUvDGB8xI0wlrzeWc8MlsKd+hs/b97
8Xo4kMoUVO62PyiUSg0oWvUngw+GtYmNAi803pbX7l4KNZ3eFcLoup2zLhzEykhi
8EbTgHs4y55wL3x+0gUgwuybu9eoXtwmL142PspJhTQUVcWG+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH5mSUwLmkTQprf95IXX8nCIMweoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk
MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvMWZkYWYzYWItMjY1ZS0z
ZWNiLWFiOGUtNTBkZWMzZmY5YTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw
YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm
NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk
ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2BjVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFGuw/u6Ew4fSFw1nZRUhY0B79dwe40XoBvyq5eodJG88zYJTDgolRNp
xgBTUj4Jqs7vPs0kJHf8339GDW1nDyRP+kCtrNnBtY4y9zWrr++S3Rk3R3EAD06v
H6A8CSTQhqg3FjnpHWNos42cK0bK7ttAkRNMljcNyxScCoo+HmaBpIjPL8ytB1Ll
Oc8J6pzM1/0S0bA1c9DW/SKe3C0gtc7FA9gB4LCpW8RHVUx3k5DnL0qz3308yB0N
9x9hIbvmHKToVmHo7724iclnMdw/HWO22GHBs7nHqxYYcW1jDNlb3pWdLN3NLZKL
OGNBzY5W/fc4hiOCVSN9zs5I3zS1us0=
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:54:02 2026 by rpki-client