Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/0296df01-a208-3212-875e-64b1e80b1100.roa
File:                     0296df01-a208-3212-875e-64b1e80b1100.roa (raw, json)
Hash identifier:          9PRiU0Y478CSNtGiwISWfKYvyfjiwWPtE6NNCIGshqc=
Subject key identifier:   CD:BB:6F:0A:9B:1A:06:F8:C2:68:35:56:A3:FB:D5:F0:B4:52:F8:CB
Certificate issuer:       /CN=088404f8-82fb-4330-8ac4-ad17a88d2e28
Certificate serial:       010D0C9F4328584D09126BF8D22185B9A6E67670
Authority key identifier: 6B:16:38:96:60:AF:D5:52:94:DA:F2:61:9F:63:41:BA:32:F9:E4:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/0296df01-a208-3212-875e-64b1e80b1100.roa
Signing time:             Mon 02 Mar 2026 14:00:41 +0000
ROA not before:           Mon 02 Mar 2026 14:00:41 +0000
ROA not after:            Sun 31 May 2026 13:00:41 +0000
asID:                     11718
IP address blocks:        206.57.160.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/088404f8-82fb-4330-8ac4-ad17a88d2e28.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/088404f8-82fb-4330-8ac4-ad17a88d2e28.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:12:6b:f8:d2:21:85:b9:a6:e6:76:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088404f8-82fb-4330-8ac4-ad17a88d2e28
        Validity
            Not Before: Mar  2 14:00:41 2026 GMT
            Not After : May 31 13:00:41 2026 GMT
        Subject: CN=ab03ecd3-72cc-4f9f-981d-4c68d5f3b8d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a7:87:97:31:d6:a8:b0:cf:30:56:9e:07:ad:
                    00:07:4d:f4:98:f3:80:aa:37:9f:dc:4f:88:9d:eb:
                    d7:5f:44:ff:17:21:76:29:e5:6f:a4:47:b9:ba:d2:
                    cd:cf:95:ce:0e:ea:54:de:56:43:73:6c:c3:d8:8d:
                    46:95:1f:c7:73:7f:76:d9:23:ea:90:05:de:a7:ba:
                    33:6e:b2:93:e7:8b:9a:8d:cd:ff:e0:dc:aa:12:fb:
                    ee:a0:08:f6:09:82:5e:90:09:40:9c:30:ec:5c:44:
                    83:03:a4:80:68:3f:79:2a:99:35:93:74:fd:7b:e7:
                    a9:d4:64:fa:3e:c6:78:67:5e:1f:14:d7:d2:ee:46:
                    9f:2d:52:86:7d:c4:d4:5d:f7:2a:fb:46:e8:0d:8d:
                    86:82:45:37:55:78:0e:0a:5e:dd:4a:de:f9:f2:18:
                    06:51:36:92:fc:96:99:26:fa:0e:7f:dd:b5:28:80:
                    c0:ac:c8:e9:46:1f:1c:dc:df:43:ae:ea:c6:14:78:
                    57:37:8e:6d:d7:80:db:9a:2e:17:e2:49:31:8a:46:
                    79:9b:fb:d2:4b:11:5a:2c:43:a8:fe:95:a5:b8:e5:
                    2d:91:54:8a:28:32:15:e2:6a:b7:c5:21:26:69:33:
                    02:8e:c8:4b:98:ca:bb:58:0c:9e:e7:f1:2b:5e:fb:
                    75:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:BB:6F:0A:9B:1A:06:F8:C2:68:35:56:A3:FB:D5:F0:B4:52:F8:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/0296df01-a208-3212-875e-64b1e80b1100.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/088404f8-82fb-4330-8ac4-ad17a88d2e28.crl

            X509v3 Authority Key Identifier:
                keyid:6B:16:38:96:60:AF:D5:52:94:DA:F2:61:9F:63:41:BA:32:F9:E4:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.57.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:2d:bd:f4:1b:cd:ae:39:59:e6:77:a7:58:b6:05:d5:be:cb:
         52:8e:c5:55:19:cf:5d:04:1d:d8:b6:63:62:27:ca:9f:cf:a7:
         33:a8:56:6e:65:2a:15:0a:d1:6f:b0:ea:c7:57:f4:e4:8e:d5:
         b1:ac:e7:1f:aa:4f:d1:57:5b:79:dd:04:b9:3d:79:9d:f0:1c:
         f0:d8:71:bc:c4:15:fc:20:43:b8:ef:7b:5b:c6:9c:c1:eb:9f:
         59:8f:d7:ca:44:f6:36:22:3f:10:50:0e:9d:db:45:9a:da:cd:
         d4:28:07:59:a7:6e:b9:1e:ba:d7:8f:78:74:0a:71:56:bd:2a:
         cb:ec:57:c5:2c:05:ab:6b:cb:50:7b:e2:3d:41:73:cd:49:db:
         b6:a5:c2:3f:73:02:59:83:ad:80:bb:1f:b3:de:d2:85:5b:b9:
         58:20:bb:8d:b1:16:69:e9:fe:eb:d5:13:f8:4b:04:e4:72:6f:
         28:a4:ea:3f:3a:65:eb:f9:04:eb:00:44:70:8e:d4:41:c4:77:
         f2:8a:88:88:b2:56:d8:aa:b0:9e:38:d4:5a:db:97:83:be:73:
         5f:97:ad:d1:65:52:04:57:3f:57:10:f4:6e:49:d9:24:72:a8:
         39:6f:b9:a3:2d:bf:a7:fa:ac:b9:1d:cd:d5:24:04:63:20:35:
         b1:02:a9:ae
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEmv40iGFuabmdnAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDg4NDA0ZjgtODJmYi00MzMwLThhYzQtYWQxN2E4OGQy
ZTI4MB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk
YWIwM2VjZDMtNzJjYy00ZjlmLTk4MWQtNGM2OGQ1ZjNiOGQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKeHlzHWqLDPMFaeB60AB030mPOAqjef3E+I
nevXX0T/FyF2KeVvpEe5utLNz5XODupU3lZDc2zD2I1GlR/Hc3922SPqkAXep7oz
brKT54uajc3/4NyqEvvuoAj2CYJekAlAnDDsXESDA6SAaD95Kpk1k3T9e+ep1GT6
PsZ4Z14fFNfS7kafLVKGfcTUXfcq+0boDY2GgkU3VXgOCl7dSt758hgGUTaS/JaZ
JvoOf921KIDArMjpRh8c3N9DrurGFHhXN45t14Dbmi4X4kkxikZ5m/vSSxFaLEOo
/pWluOUtkVSKKDIV4mq3xSEmaTMCjshLmMq7WAye5/ErXvt1LwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM27bwqbGgb4wmg1VqP71fC0UvjLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wODg0
MDRmOC04MmZiLTQzMzAtOGFjNC1hZDE3YTg4ZDJlMjgvMDI5NmRmMDEtYTIwOC0z
MjEyLTg3NWUtNjRiMWU4MGIxMTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDg4NDA0ZjgtODJmYi00MzMwLThh
YzQtYWQxN2E4OGQyZTI4LzA4ODQwNGY4LTgyZmItNDMzMC04YWM0LWFkMTdhODhk
MmUyOC5jcmwwHwYDVR0jBBgwFoAUaxY4lmCv1VKU2vJhn2NBujL55FwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8wODg0MDRmOC04MmZiLTQzMzAtOGFjNC1hZDE3
YTg4ZDJlMjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzjmgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIktvfQbza45WeZ3p1i2BdW+y1KOxVUZz10EHdi2Y2Inyp/PpzOoVm5l
KhUK0W+w6sdX9OSO1bGs5x+qT9FXW3ndBLk9eZ3wHPDYcbzEFfwgQ7jve1vGnMHr
n1mP18pE9jYiPxBQDp3bRZrazdQoB1mnbrkeutePeHQKcVa9KsvsV8UsBatry1B7
4j1Bc81J27alwj9zAlmDrYC7H7Pe0oVbuVggu42xFmnp/uvVE/hLBORybyik6j86
Zev5BOsARHCO1EHEd/KKiIiyVtiqsJ441Frbl4O+c1+XrdFlUgRXP1cQ9G5J2SRy
qDlvuaMtv6f6rLkdzdUkBGMgNbECqa4=
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:34:04 2026 by rpki-client