Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/44fa7203-10fb-3394-93c5-802539bacbc6.roa
File:                     44fa7203-10fb-3394-93c5-802539bacbc6.roa (raw, json)
Hash identifier:          UjzOYu8uFx87VstfbRHHb4/ymMvk37N3djXlyb9xWjE=
Subject key identifier:   8A:C7:D7:97:E9:70:40:1E:0B:54:A3:CD:DE:4B:5F:6F:26:22:4F:C1
Certificate issuer:       /CN=fd691680-2c46-4e86-8545-3e0e0c0e305a
Certificate serial:       010D0C9F4328584E0005DFE48D664622933C4C80
Authority key identifier: A4:E2:CB:32:4A:F2:A0:87:FE:BF:8F:42:40:F8:AD:90:5E:2C:AC:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/44fa7203-10fb-3394-93c5-802539bacbc6.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     16509
IP address blocks:        216.31.33.0/24 maxlen: 24
                          216.31.34.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/fd691680-2c46-4e86-8545-3e0e0c0e305a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/fd691680-2c46-4e86-8545-3e0e0c0e305a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:df:e4:8d:66:46:22:93:3c:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd691680-2c46-4e86-8545-3e0e0c0e305a
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=195fa0d6-5b17-407a-8179-516132ed2a5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:23:cd:ec:e9:53:f6:f6:15:0e:a7:09:0e:21:
                    ca:10:77:ed:9c:7c:37:80:9a:b5:6b:19:09:2a:33:
                    79:3a:ec:85:3f:c7:cc:10:5a:00:2e:cd:3c:b1:12:
                    27:dc:c1:60:3b:f4:d5:39:41:72:51:29:a4:bf:a3:
                    7f:b1:6d:dd:66:60:9e:2b:57:ea:9b:dc:89:0b:27:
                    99:86:c0:b6:c5:67:e5:06:3c:79:c6:c7:6b:26:bd:
                    1c:2d:44:69:51:ce:22:98:42:67:76:99:f6:ea:69:
                    2b:cc:86:95:6b:3a:7d:9b:73:24:05:9d:d9:ab:23:
                    3c:45:58:cb:19:f7:cc:24:e9:f3:c7:15:15:6e:12:
                    71:4a:c0:fa:84:22:a1:c2:77:17:db:5f:92:f1:0c:
                    51:f4:5f:f3:b7:f3:10:b0:08:51:6d:ad:9f:43:12:
                    62:8b:59:2f:3b:68:fb:94:09:a2:63:1a:9e:4d:a4:
                    87:ec:0d:d2:90:48:c3:7a:12:d9:48:3f:a4:ab:11:
                    52:da:a4:92:f2:1b:d2:af:97:c1:8c:e6:73:6b:26:
                    02:31:ba:00:09:a8:ef:37:3c:d6:9c:70:9a:32:6d:
                    de:6f:1b:97:70:7c:43:6e:e2:83:44:6a:bb:24:86:
                    18:91:7b:81:90:91:fe:b2:20:10:ba:85:ba:8d:8a:
                    ca:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:C7:D7:97:E9:70:40:1E:0B:54:A3:CD:DE:4B:5F:6F:26:22:4F:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/44fa7203-10fb-3394-93c5-802539bacbc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/fd691680-2c46-4e86-8545-3e0e0c0e305a.crl

            X509v3 Authority Key Identifier:
                keyid:A4:E2:CB:32:4A:F2:A0:87:FE:BF:8F:42:40:F8:AD:90:5E:2C:AC:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.31.33.0-216.31.35.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:f7:1c:9f:5a:1e:2c:ce:fc:05:48:aa:5f:0e:fc:26:01:6a:
         2a:74:40:9f:68:5e:40:61:6d:90:6b:cb:d4:ed:0d:5c:80:32:
         c6:66:26:47:25:67:a0:a3:72:dd:d4:00:52:c4:72:6d:d2:23:
         14:a1:be:b5:a1:a2:60:44:d7:b8:01:be:0e:e5:e6:f9:67:18:
         ea:bf:15:90:67:98:a2:d9:54:6b:ee:79:19:9f:cf:38:b0:9e:
         a0:61:d9:ff:a5:0e:18:88:5b:4e:8f:5d:50:f1:93:3a:e3:21:
         8d:67:2f:46:8f:3f:86:0a:97:c3:8a:b9:16:0c:08:ef:4a:c3:
         e6:6e:07:a0:b7:7a:27:ca:a3:c1:00:06:a7:f5:74:78:38:92:
         76:5c:c1:a9:b4:5a:36:d4:e8:ec:5f:0e:7c:37:1d:59:b7:3c:
         70:db:0c:ef:e3:0f:89:8b:82:e3:29:83:7b:02:e1:da:f6:3f:
         a3:aa:04:c4:c9:2c:f7:fd:9d:35:9a:2b:59:95:41:e0:a1:d4:
         af:b9:e1:52:22:ad:f4:4a:7f:7a:28:68:71:21:ec:20:e5:36:
         8d:93:ad:ea:0d:38:fc:e7:38:69:27:9a:06:83:74:e2:d2:16:
         a0:48:11:71:e5:3f:45:e8:bc:d3:de:a6:f1:83:61:fc:d0:58:
         bf:1d:d0:ce
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE4ABd/kjWZGIpM8TIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmQ2OTE2ODAtMmM0Ni00ZTg2LTg1NDUtM2UwZTBjMGUz
MDVhMB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk
MTk1ZmEwZDYtNWIxNy00MDdhLTgxNzktNTE2MTMyZWQyYTVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCPN7OlT9vYVDqcJDiHKEHftnHw3gJq1axkJ
KjN5OuyFP8fMEFoALs08sRIn3MFgO/TVOUFyUSmkv6N/sW3dZmCeK1fqm9yJCyeZ
hsC2xWflBjx5xsdrJr0cLURpUc4imEJndpn26mkrzIaVazp9m3MkBZ3ZqyM8RVjL
GffMJOnzxxUVbhJxSsD6hCKhwncX21+S8QxR9F/zt/MQsAhRba2fQxJii1kvO2j7
lAmiYxqeTaSH7A3SkEjDehLZSD+kqxFS2qSS8hvSr5fBjOZzayYCMboACajvNzzW
nHCaMm3ebxuXcHxDbuKDRGq7JIYYkXuBkJH+siAQuoW6jYrKDQIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFIrH15fpcEAeC1Sjzd5LX28mIk/BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZDY5
MTY4MC0yYzQ2LTRlODYtODU0NS0zZTBlMGMwZTMwNWEvNDRmYTcyMDMtMTBmYi0z
Mzk0LTkzYzUtODAyNTM5YmFjYmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmQ2OTE2ODAtMmM0Ni00ZTg2LTg1
NDUtM2UwZTBjMGUzMDVhL2ZkNjkxNjgwLTJjNDYtNGU4Ni04NTQ1LTNlMGUwYzBl
MzA1YS5jcmwwHwYDVR0jBBgwFoAUpOLLMkryoIf+v49CQPitkF4srMMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9mZDY5MTY4MC0yYzQ2LTRlODYtODU0NS0zZTBl
MGMwZTMwNWEuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADYHyED
BALYHyAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEASPccn1oeLM78BUiqXw78JgFqKnRAn2heQGFtkGvL1O0N
XIAyxmYmRyVnoKNy3dQAUsRybdIjFKG+taGiYETXuAG+DuXm+WcY6r8VkGeYotlU
a+55GZ/POLCeoGHZ/6UOGIhbTo9dUPGTOuMhjWcvRo8/hgqXw4q5FgwI70rD5m4H
oLd6J8qjwQAGp/V0eDiSdlzBqbRaNtTo7F8OfDcdWbc8cNsM7+MPiYuC4ymDewLh
2vY/o6oExMks9/2dNZorWZVB4KHUr7nhUiKt9Ep/eihocSHsIOU2jZOt6g04/Oc4
aSeaBoN04tIWoEgRceU/Rei8096m8YNh/NBYvx3Qzg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:39:06 2026 by rpki-client