Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/469fca85-68b0-3030-a7b4-574050ac07a3.roa
File:                     469fca85-68b0-3030-a7b4-574050ac07a3.roa (raw, json)
Hash identifier:          0vJBJmamBM+vBUCm+IoDDZWAvrq7ceTeHnF7DUKARr0=
Subject key identifier:   15:36:67:6D:AD:71:AF:EC:F3:96:4A:1A:D3:48:79:91:3F:6C:29:CD
Certificate issuer:       /CN=f1fa0620-c80f-4a94-9e95-ead44fb79978
Certificate serial:       010D0C9F4328584D07ACE9E7428B6DC2B5DD5180
Authority key identifier: A6:11:BF:71:01:87:C4:1C:39:01:A2:AA:26:B9:D3:81:0C:FE:2B:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/469fca85-68b0-3030-a7b4-574050ac07a3.roa
Signing time:             Mon 02 Mar 2026 02:00:31 +0000
ROA not before:           Mon 02 Mar 2026 02:00:31 +0000
ROA not after:            Sun 31 May 2026 01:00:31 +0000
asID:                     16509
IP address blocks:        160.79.108.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:07:ac:e9:e7:42:8b:6d:c2:b5:dd:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1fa0620-c80f-4a94-9e95-ead44fb79978
        Validity
            Not Before: Mar  2 02:00:31 2026 GMT
            Not After : May 31 01:00:31 2026 GMT
        Subject: CN=30046588-a427-4cde-b7ea-6681c5ee4583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c0:8f:9b:07:a4:11:7b:46:56:90:2b:05:06:
                    15:cd:21:e4:75:d6:d4:98:a1:02:e6:0b:6a:d5:ca:
                    23:90:d7:3b:78:da:cc:10:4a:34:4a:a3:79:98:60:
                    cc:d1:c4:d3:61:c4:f1:c7:22:b0:f4:0c:c3:76:04:
                    01:6d:86:99:82:f2:61:7d:0a:f2:70:e0:d8:67:ef:
                    18:38:e1:5a:ee:3c:da:73:4c:cf:af:50:68:a9:49:
                    b9:f9:8a:a3:74:44:7a:37:53:39:79:d9:0a:6a:8a:
                    13:3d:bd:e0:75:0b:95:f2:fe:ce:50:a0:d7:a3:5a:
                    8c:f7:eb:d9:e7:9c:3b:9a:55:38:33:1b:fb:74:61:
                    f8:e1:74:f2:63:22:57:31:e2:04:a2:f5:2a:f1:a2:
                    a0:a5:3f:83:80:9f:24:c3:b5:33:3d:89:d4:85:5c:
                    e6:7a:9c:e1:5c:cb:96:b1:6a:e6:36:c1:da:63:74:
                    ff:aa:7f:fa:b2:0a:34:8d:75:6e:ed:b5:c6:9d:1c:
                    f9:78:01:21:cc:3d:0f:91:b8:76:1b:d5:99:1a:18:
                    d2:ab:8b:03:72:40:f0:14:e2:4f:d2:d5:09:4f:a0:
                    2f:a0:f4:5e:72:6e:6e:81:f1:26:1a:df:43:4f:ec:
                    26:a7:82:9c:09:7d:2e:43:05:a1:39:8a:a0:d5:9e:
                    03:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:36:67:6D:AD:71:AF:EC:F3:96:4A:1A:D3:48:79:91:3F:6C:29:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/469fca85-68b0-3030-a7b4-574050ac07a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.crl

            X509v3 Authority Key Identifier:
                keyid:A6:11:BF:71:01:87:C4:1C:39:01:A2:AA:26:B9:D3:81:0C:FE:2B:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.79.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:66:fd:48:e5:29:0c:df:91:13:47:f6:dd:6a:48:81:7f:97:
         4e:43:41:15:31:6f:00:2b:bb:61:44:7e:49:79:1b:ee:4b:ba:
         34:27:d2:e5:13:f2:b9:17:5d:48:e4:64:b0:76:8a:08:74:12:
         0b:53:cd:65:30:bc:55:c0:79:d3:1e:08:11:4a:2d:a2:d9:c0:
         13:b1:8f:a4:a8:59:62:1c:35:4d:09:c1:5c:38:00:cd:56:31:
         6d:c2:c3:ab:19:4f:74:96:0a:18:4c:8c:8f:56:96:ef:a5:74:
         59:02:d5:84:45:fe:b9:9a:9c:48:3c:2c:9e:36:0e:9e:df:32:
         8c:f5:7f:8c:93:0d:4f:59:21:a4:95:24:56:98:33:97:58:f5:
         26:29:2d:61:35:58:a6:46:24:fc:13:6d:3a:58:56:5e:1c:ef:
         7c:8b:88:54:bf:ec:ad:54:e9:1e:a1:e8:c0:ed:96:a6:88:f9:
         bb:fc:f7:cd:9a:00:11:c7:36:da:b6:8d:a0:93:22:a0:56:1c:
         fe:bc:7c:11:f9:da:c8:6c:b0:b8:6b:3e:a9:6c:ef:0d:e6:a1:
         4d:c4:ec:54:16:c0:27:5d:5f:44:83:f6:3c:b4:c6:3e:a2:db:
         49:5a:70:35:25:6c:16:68:cf:9d:69:95:46:f6:aa:49:2e:c0:
         ec:95:a8:2b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0HrOnnQottwrXdUYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjFmYTA2MjAtYzgwZi00YTk0LTllOTUtZWFkNDRmYjc5
OTc4MB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk
MzAwNDY1ODgtYTQyNy00Y2RlLWI3ZWEtNjY4MWM1ZWU0NTgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosCPmwekEXtGVpArBQYVzSHkddbUmKEC5gtq
1cojkNc7eNrMEEo0SqN5mGDM0cTTYcTxxyKw9AzDdgQBbYaZgvJhfQrycODYZ+8Y
OOFa7jzac0zPr1BoqUm5+YqjdER6N1M5edkKaooTPb3gdQuV8v7OUKDXo1qM9+vZ
55w7mlU4Mxv7dGH44XTyYyJXMeIEovUq8aKgpT+DgJ8kw7UzPYnUhVzmepzhXMuW
sWrmNsHaY3T/qn/6sgo0jXVu7bXGnRz5eAEhzD0Pkbh2G9WZGhjSq4sDckDwFOJP
0tUJT6AvoPRecm5ugfEmGt9DT+wmp4KcCX0uQwWhOYqg1Z4DRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBU2Z22tca/s85ZKGtNIeZE/bCnNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9mMWZh
MDYyMC1jODBmLTRhOTQtOWU5NS1lYWQ0NGZiNzk5NzgvNDY5ZmNhODUtNjhiMC0z
MDMwLWE3YjQtNTc0MDUwYWMwN2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZjFmYTA2MjAtYzgwZi00YTk0LTll
OTUtZWFkNDRmYjc5OTc4L2YxZmEwNjIwLWM4MGYtNGE5NC05ZTk1LWVhZDQ0ZmI3
OTk3OC5jcmwwHwYDVR0jBBgwFoAUphG/cQGHxBw5AaKqJrnTgQz+K3QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9mMWZhMDYyMC1jODBmLTRhOTQtOWU5NS1lYWQ0
NGZiNzk5NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCoE9sMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACNm/UjlKQzfkRNH9t1qSIF/l05DQRUxbwAru2FEfkl5G+5LujQn0uUT
8rkXXUjkZLB2igh0EgtTzWUwvFXAedMeCBFKLaLZwBOxj6SoWWIcNU0JwVw4AM1W
MW3Cw6sZT3SWChhMjI9Wlu+ldFkC1YRF/rmanEg8LJ42Dp7fMoz1f4yTDU9ZIaSV
JFaYM5dY9SYpLWE1WKZGJPwTbTpYVl4c73yLiFS/7K1U6R6h6MDtlqaI+bv8982a
ABHHNtq2jaCTIqBWHP68fBH52shssLhrPqls7w3moU3E7FQWwCddX0SD9jy0xj6i
20lacDUlbBZoz51plUb2qkkuwOyVqCs=
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:53:34 2026 by rpki-client