Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/deb6fb94-6e53-3c64-92b3-0b44571a1cfa.roa
File:                     deb6fb94-6e53-3c64-92b3-0b44571a1cfa.roa (raw, json)
Hash identifier:          GRareHDAxGTsF1OjmzzHjGpUqaoJhHQUGM2Q6NVGg7A=
Subject key identifier:   C0:40:19:06:8B:B9:A6:3B:74:0F:93:5C:14:9A:74:34:07:B8:43:D8
Certificate issuer:       /CN=fd691680-2c46-4e86-8545-3e0e0c0e305a
Certificate serial:       010D0C9F4328584E0005DFFCEC272E3E616CC200
Authority key identifier: A4:E2:CB:32:4A:F2:A0:87:FE:BF:8F:42:40:F8:AD:90:5E:2C:AC:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/deb6fb94-6e53-3c64-92b3-0b44571a1cfa.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     23028
IP address blocks:        216.31.33.0/24 maxlen: 24
                          216.31.34.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/fd691680-2c46-4e86-8545-3e0e0c0e305a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/fd691680-2c46-4e86-8545-3e0e0c0e305a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:df:fc:ec:27:2e:3e:61:6c:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd691680-2c46-4e86-8545-3e0e0c0e305a
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=f20be033-9cbe-46e4-887e-94fe24d28d32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8b:94:12:ab:7b:d5:3f:d0:3b:55:82:76:6d:
                    b6:7a:bf:b2:5c:a0:0d:cc:b3:5a:85:6a:f6:1e:5f:
                    53:cc:15:80:6b:b1:38:b0:70:36:ec:dc:30:c0:45:
                    27:32:02:56:30:7f:1a:84:14:6c:6e:c3:7d:65:ee:
                    ab:eb:00:ab:f0:79:14:1e:2b:09:c9:d4:62:9b:99:
                    30:91:85:1f:0a:50:1a:55:5a:7c:ca:a0:20:02:74:
                    37:bc:dd:94:d6:c9:71:71:06:c3:db:83:e7:60:28:
                    b4:59:65:bf:9e:cd:22:57:16:d2:62:9a:2b:fa:94:
                    ff:94:15:9f:b2:a4:c7:2d:a2:1e:dc:77:09:61:5a:
                    24:7b:b4:a3:cf:86:31:27:1e:ef:ed:d6:c3:dd:d2:
                    d0:3a:f8:e4:ca:c9:11:db:02:c3:8d:0b:8e:d0:e9:
                    7a:45:61:6a:4c:f9:6f:b5:8c:b3:9e:2b:4d:92:88:
                    1a:c2:c6:08:96:bf:21:fa:fc:c3:f1:53:92:2f:4f:
                    cc:da:ea:d1:f6:5c:c0:83:b9:96:d6:70:d7:71:1c:
                    97:f9:81:30:4a:21:45:81:79:36:18:1c:ac:6b:6c:
                    c4:43:04:68:e2:e6:b8:27:97:ce:b1:86:0f:c5:c6:
                    cd:13:d1:1f:75:1b:bb:59:d9:7f:89:f4:0b:73:3f:
                    56:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:40:19:06:8B:B9:A6:3B:74:0F:93:5C:14:9A:74:34:07:B8:43:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/deb6fb94-6e53-3c64-92b3-0b44571a1cfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/fd691680-2c46-4e86-8545-3e0e0c0e305a.crl

            X509v3 Authority Key Identifier:
                keyid:A4:E2:CB:32:4A:F2:A0:87:FE:BF:8F:42:40:F8:AD:90:5E:2C:AC:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.31.33.0-216.31.35.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:8d:8f:ce:17:70:cb:16:8e:01:f5:a8:55:dc:fe:0d:60:c0:
         bb:74:ec:3f:bb:f8:2f:0e:5c:50:f1:9d:ab:f5:c2:19:04:be:
         a3:f3:75:d6:2f:2e:94:31:91:c0:b0:18:66:99:db:c5:18:1d:
         b2:f2:80:10:2b:0a:ce:7d:66:62:03:2c:66:b5:f3:10:92:14:
         d1:80:e3:01:6a:e7:76:93:3f:df:80:66:21:d9:e6:81:a0:4c:
         85:04:a5:46:f9:d0:79:ca:95:bf:d0:1f:58:01:c2:bb:ac:37:
         85:69:0f:b3:05:e3:24:8c:e8:a7:ae:73:b3:4b:c5:18:e6:f3:
         c2:c9:d4:b3:e7:cd:44:38:db:35:07:3d:7b:e7:d8:e7:bc:43:
         aa:fc:ec:58:1a:28:c9:b8:f3:35:5a:3e:fb:b0:94:b9:6f:10:
         1e:88:20:8d:75:1b:ad:5f:34:1f:d9:72:8e:97:ed:7f:b1:4f:
         87:8e:e1:23:6d:56:a2:29:50:96:60:05:f0:a1:8a:3d:8a:38:
         b1:e6:63:1b:6e:3d:28:d6:d3:3d:95:66:3d:25:3f:48:41:4b:
         34:7e:fd:2f:40:09:80:31:69:e0:23:a7:f9:04:d4:56:5a:1e:
         3a:ae:8a:4d:1a:c4:78:0c:c4:f3:cd:8a:45:74:4c:50:0f:d2:
         ac:90:88:1d
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE4ABd/87CcuPmFswgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmQ2OTE2ODAtMmM0Ni00ZTg2LTg1NDUtM2UwZTBjMGUz
MDVhMB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk
ZjIwYmUwMzMtOWNiZS00NmU0LTg4N2UtOTRmZTI0ZDI4ZDMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzouUEqt71T/QO1WCdm22er+yXKANzLNahWr2
Hl9TzBWAa7E4sHA27NwwwEUnMgJWMH8ahBRsbsN9Ze6r6wCr8HkUHisJydRim5kw
kYUfClAaVVp8yqAgAnQ3vN2U1slxcQbD24PnYCi0WWW/ns0iVxbSYpor+pT/lBWf
sqTHLaIe3HcJYVoke7Sjz4YxJx7v7dbD3dLQOvjkyskR2wLDjQuO0Ol6RWFqTPlv
tYyznitNkogawsYIlr8h+vzD8VOSL0/M2urR9lzAg7mW1nDXcRyX+YEwSiFFgXk2
GBysa2zEQwRo4ua4J5fOsYYPxcbNE9EfdRu7Wdl/ifQLcz9WOQIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFMBAGQaLuaY7dA+TXBSadDQHuEPYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZDY5
MTY4MC0yYzQ2LTRlODYtODU0NS0zZTBlMGMwZTMwNWEvZGViNmZiOTQtNmU1My0z
YzY0LTkyYjMtMGI0NDU3MWExY2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmQ2OTE2ODAtMmM0Ni00ZTg2LTg1
NDUtM2UwZTBjMGUzMDVhL2ZkNjkxNjgwLTJjNDYtNGU4Ni04NTQ1LTNlMGUwYzBl
MzA1YS5jcmwwHwYDVR0jBBgwFoAUpOLLMkryoIf+v49CQPitkF4srMMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9mZDY5MTY4MC0yYzQ2LTRlODYtODU0NS0zZTBl
MGMwZTMwNWEuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADYHyED
BALYHyAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAW42PzhdwyxaOAfWoVdz+DWDAu3TsP7v4Lw5cUPGdq/XC
GQS+o/N11i8ulDGRwLAYZpnbxRgdsvKAECsKzn1mYgMsZrXzEJIU0YDjAWrndpM/
34BmIdnmgaBMhQSlRvnQecqVv9AfWAHCu6w3hWkPswXjJIzop65zs0vFGObzwsnU
s+fNRDjbNQc9e+fY57xDqvzsWBooybjzNVo++7CUuW8QHoggjXUbrV80H9lyjpft
f7FPh47hI21WoilQlmAF8KGKPYo4seZjG249KNbTPZVmPSU/SEFLNH79L0AJgDFp
4COn+QTUVloeOq6KTRrEeAzE882KRXRMUA/SrJCIHQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:47:26 2026 by rpki-client