Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/7f659af6-1d84-34e3-9205-6190389bd336.roa
File:                     7f659af6-1d84-34e3-9205-6190389bd336.roa (raw, json)
Hash identifier:          KS4Cu22c5MknbznZhxonKUuaPzoMoVF5KT6ZLMdgVcA=
Subject key identifier:   59:C1:C6:54:CD:E2:56:BD:D1:D3:B7:EB:E7:6C:2A:2B:AD:B5:3A:6C
Certificate issuer:       /CN=a3b6948d-3ee1-4153-9c40-1cd7465bea2b
Certificate serial:       010D0C9F4328584EA791B9BB98333FF57BCB5780
Authority key identifier: 90:8D:6E:3D:A8:3C:E5:E7:6B:D5:3D:68:92:0F:67:5B:A6:D6:3E:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/7f659af6-1d84-34e3-9205-6190389bd336.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16509
IP address blocks:        216.205.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:b9:bb:98:33:3f:f5:7b:cb:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3b6948d-3ee1-4153-9c40-1cd7465bea2b
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=301bfa95-8b78-4fb3-80dc-d24b31445e5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:67:90:ef:13:d1:50:18:41:4d:61:1a:18:fb:
                    f9:36:d4:51:33:16:f4:78:ab:f0:14:f1:17:7d:42:
                    0a:52:5f:a9:e5:0f:77:89:6f:c9:40:9a:dc:96:df:
                    a3:cc:3b:80:55:17:49:17:fb:f8:c9:a9:18:9d:df:
                    20:5b:84:22:3b:36:96:a7:d6:0b:90:8d:ed:77:ea:
                    59:76:da:a4:87:a4:f9:44:bd:69:51:c9:9d:e3:a8:
                    91:3a:3f:98:00:4c:87:f4:aa:52:03:c9:5f:9c:36:
                    78:bc:03:07:f1:8b:87:e7:64:d9:2b:44:d9:3b:ac:
                    79:01:e7:38:8d:46:e5:56:a4:60:8d:ea:20:f0:a9:
                    ea:8a:36:b9:09:c1:8c:a4:23:b7:d7:3b:92:6d:fc:
                    be:e9:a5:7e:a4:8b:89:22:43:02:3f:5d:78:b1:c5:
                    72:2c:f4:ba:57:da:56:ad:74:17:a3:77:c5:24:7f:
                    7e:8d:1e:7c:69:cc:91:06:e2:2d:e7:1a:30:12:f5:
                    cc:2e:54:60:87:6d:49:9d:ad:27:68:34:fd:90:10:
                    ec:b4:79:9e:8d:14:3d:dc:b1:37:5d:9c:12:6b:ce:
                    39:78:bf:36:2c:d7:19:29:c0:9a:59:c7:4a:16:81:
                    73:58:63:67:5f:fd:b8:01:e6:ac:50:7d:f8:c8:08:
                    59:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:C1:C6:54:CD:E2:56:BD:D1:D3:B7:EB:E7:6C:2A:2B:AD:B5:3A:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/7f659af6-1d84-34e3-9205-6190389bd336.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.crl

            X509v3 Authority Key Identifier:
                keyid:90:8D:6E:3D:A8:3C:E5:E7:6B:D5:3D:68:92:0F:67:5B:A6:D6:3E:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.205.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:47:7e:b9:7e:b1:c1:fd:5a:7a:db:44:7a:75:63:e5:6d:38:
         af:e9:f5:2e:ae:e9:9a:9d:9c:32:01:1b:52:6f:d3:ea:ce:e1:
         aa:64:74:18:00:4f:c6:ff:45:b4:60:df:65:d7:ff:e7:c1:d5:
         05:4f:92:24:66:f7:32:6a:0d:40:60:a3:9e:ac:29:eb:cc:50:
         79:bb:6f:3f:7e:09:2b:16:ae:6e:ba:46:8a:8c:71:a9:a0:a5:
         f0:8d:cc:2f:04:ee:53:3c:51:b8:05:1f:fd:e6:e9:9b:e7:c8:
         9c:d6:97:04:87:ea:a5:62:a0:0b:5d:c7:fe:64:3c:f3:9b:c0:
         86:f2:f3:cb:51:20:ac:c3:d3:f3:6c:7c:ce:f8:f6:36:66:41:
         38:ad:a0:48:97:af:1c:44:18:cd:62:9e:44:53:29:9b:35:6f:
         23:b0:b4:7a:40:0b:27:27:43:97:a0:3b:78:87:85:e4:78:9b:
         38:79:17:f6:0a:6b:7d:6a:0e:46:72:b9:ea:c5:44:41:e0:66:
         68:7a:73:b5:1b:be:e4:cd:14:a3:93:21:6e:81:82:bd:8a:15:
         cc:8b:03:2c:9b:2d:16:26:69:22:de:05:88:ce:0b:dc:77:fb:
         74:38:12:e1:80:34:9c:23:d9:fc:0c:05:c2:de:50:b7:b8:ec:
         d8:4f:28:e7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkbm7mDM/9XvLV4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTNiNjk0OGQtM2VlMS00MTUzLTljNDAtMWNkNzQ2NWJl
YTJiMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MzAxYmZhOTUtOGI3OC00ZmIzLTgwZGMtZDI0YjMxNDQ1ZTVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2eQ7xPRUBhBTWEaGPv5NtRRMxb0eKvwFPEX
fUIKUl+p5Q93iW/JQJrclt+jzDuAVRdJF/v4yakYnd8gW4QiOzaWp9YLkI3td+pZ
dtqkh6T5RL1pUcmd46iROj+YAEyH9KpSA8lfnDZ4vAMH8YuH52TZK0TZO6x5Aec4
jUblVqRgjeog8Knqija5CcGMpCO31zuSbfy+6aV+pIuJIkMCP114scVyLPS6V9pW
rXQXo3fFJH9+jR58acyRBuIt5xowEvXMLlRgh21Jna0naDT9kBDstHmejRQ93LE3
XZwSa845eL82LNcZKcCaWcdKFoFzWGNnX/24AeasUH34yAhZZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFnBxlTN4la90dO36+dsKiuttTpsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hM2I2
OTQ4ZC0zZWUxLTQxNTMtOWM0MC0xY2Q3NDY1YmVhMmIvN2Y2NTlhZjYtMWQ4NC0z
NGUzLTkyMDUtNjE5MDM4OWJkMzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTNiNjk0OGQtM2VlMS00MTUzLTlj
NDAtMWNkNzQ2NWJlYTJiL2EzYjY5NDhkLTNlZTEtNDE1My05YzQwLTFjZDc0NjVi
ZWEyYi5jcmwwHwYDVR0jBBgwFoAUkI1uPag85edr1T1okg9nW6bWPkowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9hM2I2OTQ4ZC0zZWUxLTQxNTMtOWM0MC0xY2Q3
NDY1YmVhMmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2M02MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABhHfrl+scH9WnrbRHp1Y+VtOK/p9S6u6ZqdnDIBG1Jv0+rO4apkdBgA
T8b/RbRg32XX/+fB1QVPkiRm9zJqDUBgo56sKevMUHm7bz9+CSsWrm66RoqMcamg
pfCNzC8E7lM8UbgFH/3m6ZvnyJzWlwSH6qVioAtdx/5kPPObwIby88tRIKzD0/Ns
fM749jZmQTitoEiXrxxEGM1inkRTKZs1byOwtHpACycnQ5egO3iHheR4mzh5F/YK
a31qDkZyuerFREHgZmh6c7UbvuTNFKOTIW6Bgr2KFcyLAyybLRYmaSLeBYjOC9x3
+3Q4EuGANJwj2fwMBcLeULe47NhPKOc=
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:53:49 2026 by rpki-client