Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/203f8c66-a16e-331d-8695-99c8f36c35e8.roa
File:                     203f8c66-a16e-331d-8695-99c8f36c35e8.roa (raw, json)
Hash identifier:          32GUBzQ+3rFxaan8lmaqOl25/n3NW1V2HMATpJj/kZ0=
Subject key identifier:   3D:71:07:DB:5F:73:C7:79:93:1C:44:4D:0E:85:AB:A7:46:29:AE:17
Certificate issuer:       /CN=d03866eb-6362-4657-aa66-83307258d945
Certificate serial:       010D0C9F4328584D6D7510D79CCD7DE67EBD0200
Authority key identifier: 65:67:96:9C:5A:F7:28:6C:5C:24:E2:4F:E8:8A:B2:76:7E:B4:29:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/203f8c66-a16e-331d-8695-99c8f36c35e8.roa
Signing time:             Tue 07 Apr 2026 13:00:30 +0000
ROA not before:           Tue 07 Apr 2026 13:00:30 +0000
ROA not after:            Mon 06 Jul 2026 13:00:30 +0000
asID:                     197450
IP address blocks:        192.101.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/d03866eb-6362-4657-aa66-83307258d945.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/d03866eb-6362-4657-aa66-83307258d945.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:75:10:d7:9c:cd:7d:e6:7e:bd:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d03866eb-6362-4657-aa66-83307258d945
        Validity
            Not Before: Apr  7 13:00:30 2026 GMT
            Not After : Jul  6 13:00:30 2026 GMT
        Subject: CN=a0aec7fd-4ccf-480c-b7f1-a8d2b8b41a50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f9:42:8d:cf:29:c1:c9:93:c2:23:8e:50:2c:
                    1f:76:66:c3:74:25:c7:7b:aa:8f:d0:c7:55:c3:e7:
                    a2:6f:a0:21:a5:ce:7d:a0:22:5a:44:9e:be:27:cc:
                    52:ed:a3:12:c2:f8:db:ff:4e:bc:44:7e:f9:11:58:
                    21:ad:14:a4:2b:00:0f:2b:f3:6a:ca:9a:f1:08:90:
                    dd:a9:83:a5:8a:f0:81:f9:15:25:ad:55:e3:4c:12:
                    00:a4:e1:94:73:66:a5:b3:5f:41:e2:91:df:f0:4f:
                    da:9b:38:af:0f:dd:f7:7f:45:e9:1d:46:f9:ba:d6:
                    e7:1e:a3:51:4e:1d:6b:d2:13:bc:a7:64:67:a4:c6:
                    cd:1c:ff:b5:96:4f:ea:e9:15:57:3d:ce:4b:a4:11:
                    32:57:44:17:9d:63:36:9d:29:1d:df:96:91:0c:01:
                    43:e6:a9:7e:a5:b0:b6:61:72:24:7b:a6:90:a0:9b:
                    9a:37:e1:7c:d8:ba:a4:60:ab:d2:d7:b8:ed:d9:dd:
                    c5:eb:84:c3:8e:97:97:55:55:d6:01:ad:d3:0a:c4:
                    1d:e0:7f:a8:cb:c7:00:f2:0a:c6:3d:15:82:d4:45:
                    20:56:1f:66:3e:a1:f8:07:24:40:4c:dc:14:44:a1:
                    1d:43:dc:ed:91:ba:eb:d6:63:f1:5c:da:5f:85:03:
                    ad:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:71:07:DB:5F:73:C7:79:93:1C:44:4D:0E:85:AB:A7:46:29:AE:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/203f8c66-a16e-331d-8695-99c8f36c35e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/d03866eb-6362-4657-aa66-83307258d945.crl

            X509v3 Authority Key Identifier:
                keyid:65:67:96:9C:5A:F7:28:6C:5C:24:E2:4F:E8:8A:B2:76:7E:B4:29:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.101.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:93:fe:a0:51:fc:c4:c8:39:7c:d0:9d:26:d7:6e:05:f7:36:
         e6:30:fd:97:06:03:d5:29:b7:0a:80:35:1f:a8:fc:f5:55:16:
         ba:4c:0f:bb:06:09:07:e1:e3:cf:97:a8:31:7b:32:96:a4:94:
         cf:ce:68:f7:49:a3:70:d3:c1:65:52:59:c9:c5:b3:86:48:f8:
         62:02:19:67:26:f6:9a:dd:1c:b8:a9:2b:9b:79:93:5a:8e:84:
         e4:c5:e8:05:06:44:f7:8d:63:79:46:48:2e:66:ff:a6:8c:a1:
         a6:3d:51:55:65:2f:2a:5f:43:28:94:8c:07:91:92:14:25:74:
         5f:fb:0c:45:03:04:a5:f6:5f:e2:45:80:09:fe:cc:5f:af:ec:
         86:9e:b0:26:2d:b3:15:95:7c:1f:32:ef:c6:bb:99:07:5b:c9:
         5a:9f:57:bc:bf:fb:03:f7:f9:e1:9f:b1:24:1d:07:2a:92:46:
         73:7d:d7:f4:89:4c:62:09:b0:69:46:04:0b:23:c3:99:b9:10:
         78:9a:4e:6e:06:f8:03:66:84:96:bd:42:25:2c:21:e4:df:9c:
         77:98:a1:b8:18:d2:6c:b6:01:3c:45:77:54:26:54:10:67:3f:
         2c:b1:18:67:7c:41:25:67:82:a9:f4:9e:e0:0b:37:c8:03:04:
         45:af:5b:dc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1tdRDXnM195n69AgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDAzODY2ZWItNjM2Mi00NjU3LWFhNjYtODMzMDcyNThk
OTQ1MB4XDTI2MDQwNzEzMDAzMFoXDTI2MDcwNjEzMDAzMFowLzEtMCsGA1UEAxMk
YTBhZWM3ZmQtNGNjZi00ODBjLWI3ZjEtYThkMmI4YjQxYTUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwflCjc8pwcmTwiOOUCwfdmbDdCXHe6qP0MdV
w+eib6Ahpc59oCJaRJ6+J8xS7aMSwvjb/068RH75EVghrRSkKwAPK/NqyprxCJDd
qYOlivCB+RUlrVXjTBIApOGUc2als19B4pHf8E/amzivD933f0XpHUb5utbnHqNR
Th1r0hO8p2RnpMbNHP+1lk/q6RVXPc5LpBEyV0QXnWM2nSkd35aRDAFD5ql+pbC2
YXIke6aQoJuaN+F82LqkYKvS17jt2d3F64TDjpeXVVXWAa3TCsQd4H+oy8cA8grG
PRWC1EUgVh9mPqH4ByRATNwURKEdQ9ztkbrr1mPxXNpfhQOt7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD1xB9tfc8d5kxxETQ6Fq6dGKa4XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kMDM4
NjZlYi02MzYyLTQ2NTctYWE2Ni04MzMwNzI1OGQ5NDUvMjAzZjhjNjYtYTE2ZS0z
MzFkLTg2OTUtOTljOGYzNmMzNWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDAzODY2ZWItNjM2Mi00NjU3LWFh
NjYtODMzMDcyNThkOTQ1L2QwMzg2NmViLTYzNjItNDY1Ny1hYTY2LTgzMzA3MjU4
ZDk0NS5jcmwwHwYDVR0jBBgwFoAUZWeWnFr3KGxcJOJP6Iqydn60KRcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kMDM4NjZlYi02MzYyLTQ2NTctYWE2Ni04MzMw
NzI1OGQ5NDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwGVBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAACT/qBR/MTIOXzQnSbXbgX3NuYw/ZcGA9UptwqANR+o/PVVFrpMD7sG
CQfh48+XqDF7MpaklM/OaPdJo3DTwWVSWcnFs4ZI+GICGWcm9prdHLipK5t5k1qO
hOTF6AUGRPeNY3lGSC5m/6aMoaY9UVVlLypfQyiUjAeRkhQldF/7DEUDBKX2X+JF
gAn+zF+v7IaesCYtsxWVfB8y78a7mQdbyVqfV7y/+wP3+eGfsSQdByqSRnN91/SJ
TGIJsGlGBAsjw5m5EHiaTm4G+ANmhJa9QiUsIeTfnHeYobgY0my2ATxFd1QmVBBn
PyyxGGd8QSVngqn0nuALN8gDBEWvW9w=
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:47:02 2026 by rpki-client