Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/eecba821-2c3b-3274-8a03-9189a2666411.roa
File:                     eecba821-2c3b-3274-8a03-9189a2666411.roa (raw, json)
Hash identifier:          sKpdGMsK6FSPfer0puuBhZiH3T/tQY1vb2Y0kQrSdKs=
Subject key identifier:   4D:96:9F:42:99:6D:37:1E:7C:2A:69:6B:45:E0:32:8C:C0:D5:32:7C
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328584F305262A75D4B8CBED2FD67C0
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/eecba821-2c3b-3274-8a03-9189a2666411.roa
Signing time:             Wed 16 Sep 2026 01:00:12 +0000
ROA not before:           Wed 16 Sep 2026 01:00:12 +0000
ROA not after:            Tue 15 Dec 2026 02:00:12 +0000
asID:                     11404
IP address blocks:        216.243.4.0/22 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:30:52:62:a7:5d:4b:8c:be:d2:fd:67:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Sep 16 01:00:12 2026 GMT
            Not After : Dec 15 02:00:12 2026 GMT
        Subject: CN=bb81d3c1-0391-4b3a-a814-ddcba0e52356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:24:b3:86:dd:29:de:0a:b3:ce:36:58:cc:62:
                    23:42:e7:3c:42:48:9c:ce:08:aa:f8:e1:55:f8:8e:
                    d5:ca:00:02:e1:20:45:c2:28:43:13:2d:64:f9:35:
                    1e:96:72:39:8f:b8:99:16:9f:c6:76:7d:56:6b:d4:
                    b6:6d:1b:a3:aa:06:5e:7b:f4:bb:72:eb:9d:62:49:
                    64:06:9e:38:ef:83:0d:09:31:75:ed:b1:63:a2:fe:
                    1e:31:36:56:78:7f:8f:ef:64:05:57:f0:39:ec:1a:
                    3c:98:af:9f:82:f0:c0:37:8d:e8:fa:fb:c8:e5:4e:
                    a5:3a:45:77:14:5b:9e:26:2b:ce:06:75:56:11:15:
                    63:88:32:b2:19:be:65:18:01:ca:76:a8:c3:80:31:
                    4e:84:cf:8a:b4:a7:4b:7c:9c:ee:33:35:60:6c:af:
                    9d:41:b8:9a:a7:c7:43:e3:7c:d2:c3:76:99:2a:3a:
                    55:dc:48:7f:4a:31:c8:d3:57:47:7c:94:ba:84:31:
                    47:ac:78:83:04:c7:6a:8e:2f:4d:e5:33:a6:0f:da:
                    24:a9:1d:b8:ce:87:fe:d1:c5:f8:3f:8a:3a:e5:70:
                    aa:36:49:2b:6c:d8:82:aa:bd:f4:5a:60:e9:69:41:
                    c8:9c:a4:47:ef:95:08:3d:d2:8b:9b:f3:43:98:ad:
                    6f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:96:9F:42:99:6D:37:1E:7C:2A:69:6B:45:E0:32:8C:C0:D5:32:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/eecba821-2c3b-3274-8a03-9189a2666411.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.243.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:ac:e8:c1:eb:30:5e:97:fc:be:ec:1e:6b:59:00:fa:ce:dc:
         88:4e:c5:6e:74:06:7d:b7:b3:51:b8:48:1f:4f:2a:0d:f2:a7:
         63:ad:40:24:e8:3c:a1:8f:8e:7a:88:fd:14:09:94:05:6e:95:
         1c:42:01:a5:45:32:6c:7a:b4:24:8b:c2:b5:03:95:f8:1b:a5:
         a3:37:fb:e9:ba:68:44:22:39:d7:05:8b:c9:76:72:9a:01:54:
         5c:58:b8:f0:56:1a:2a:dc:a7:49:a5:0e:47:6e:64:59:30:53:
         c4:bb:f1:51:c2:55:7d:5e:f6:b9:52:9a:fe:78:a2:c2:34:64:
         99:05:73:f6:c8:ba:b6:ca:da:12:51:a5:a1:8a:54:48:fd:88:
         11:d5:08:b2:64:47:24:10:44:88:72:c0:4c:17:42:88:69:f0:
         9f:c8:0f:9c:f9:90:c0:d5:ad:e4:17:4a:1c:51:97:57:6f:a2:
         90:9a:9d:a7:58:8f:f4:e2:0b:37:53:37:54:40:8b:03:6b:76:
         fb:62:82:40:53:41:8d:9f:8c:48:57:6c:e7:6e:ac:16:87:8d:
         8f:e9:b2:2c:2f:78:1e:34:2f:85:50:c2:2e:d2:5f:79:e6:2a:
         da:ee:3c:e2:bf:d3:b3:af:32:e1:87:0d:6c:e9:fd:eb:63:9f:
         5e:3e:5b:30
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8wUmKnXUuMvtL9Z8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk
OTg5MB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk
YmI4MWQzYzEtMDM5MS00YjNhLWE4MTQtZGRjYmEwZTUyMzU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviSzht0p3gqzzjZYzGIjQuc8Qkiczgiq+OFV
+I7VygAC4SBFwihDEy1k+TUelnI5j7iZFp/Gdn1Wa9S2bRujqgZee/S7cuudYklk
Bp4474MNCTF17bFjov4eMTZWeH+P72QFV/A57Bo8mK+fgvDAN43o+vvI5U6lOkV3
FFueJivOBnVWERVjiDKyGb5lGAHKdqjDgDFOhM+KtKdLfJzuMzVgbK+dQbiap8dD
43zSw3aZKjpV3Eh/SjHI01dHfJS6hDFHrHiDBMdqji9N5TOmD9okqR24zof+0cX4
P4o65XCqNkkrbNiCqr30WmDpaUHInKRH75UIPdKLm/NDmK1vUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE2Wn0KZbTcefCppa0XgMozA1TJ8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk
OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZWVjYmE4MjEtMmMzYi0z
Mjc0LThhMDMtOTE4OWEyNjY2NDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky
MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk
ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2
MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2PMEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADOs6MHrMF6X/L7sHmtZAPrO3IhOxW50Bn23s1G4SB9PKg3yp2OtQCTo
PKGPjnqI/RQJlAVulRxCAaVFMmx6tCSLwrUDlfgbpaM3++m6aEQiOdcFi8l2cpoB
VFxYuPBWGircp0mlDkduZFkwU8S78VHCVX1e9rlSmv54osI0ZJkFc/bIurbK2hJR
paGKVEj9iBHVCLJkRyQQRIhywEwXQohp8J/ID5z5kMDVreQXShxRl1dvopCanadY
j/TiCzdTN1RAiwNrdvtigkBTQY2fjEhXbOdurBaHjY/psiwveB40L4VQwi7SX3nm
KtruPOK/07OvMuGHDWzp/etjn14+WzA=
-----END CERTIFICATE-----
Generated at Tue Sep 22 22:08:21 2026 by rpki-client