Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/63a75663-357f-3ec5-a3cf-77bc4f446e3e.roa
File:                     63a75663-357f-3ec5-a3cf-77bc4f446e3e.roa (raw, json)
Hash identifier:          VlsrmZb69GK/N75TeEnIzC/7BxZUo4UJMLxK8yqXYNg=
Subject key identifier:   6D:96:99:97:EF:06:E3:EF:6B:5B:14:EF:0B:4E:B2:7B:3B:13:8C:66
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D0059F1924FBB01D40953B600
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/63a75663-357f-3ec5-a3cf-77bc4f446e3e.roa
Signing time:             Fri 27 Feb 2026 11:02:48 +0000
ROA not before:           Fri 27 Feb 2026 11:02:48 +0000
ROA not after:            Thu 28 May 2026 10:02:48 +0000
asID:                     16276
IP address blocks:        216.132.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:59:f1:92:4f:bb:01:d4:09:53:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Feb 27 11:02:48 2026 GMT
            Not After : May 28 10:02:48 2026 GMT
        Subject: CN=f592df78-3ebb-4760-b11a-702e1866f7ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a3:16:58:7d:32:7f:93:ad:ec:ae:75:d1:d9:
                    61:60:8f:56:37:06:42:cf:06:c0:a6:cb:ad:82:2e:
                    a2:ec:bc:23:00:66:f2:78:f8:76:1f:cf:a1:7d:d2:
                    59:38:f7:13:17:57:39:d0:58:a4:3e:fb:ce:48:b0:
                    38:8b:56:48:88:73:ee:63:32:06:5b:d7:87:86:4d:
                    1c:7e:f6:12:34:8b:66:63:58:18:8a:06:8e:5b:d5:
                    37:4f:7a:2f:98:00:d3:69:9f:43:f2:1a:0a:cf:94:
                    e7:a3:4a:db:4d:bf:06:51:42:7c:ea:f6:d7:41:cd:
                    48:5a:b7:a5:94:3b:2e:38:9e:70:0f:12:4e:ed:5c:
                    e9:1f:34:c8:3f:11:52:9a:83:1e:dd:01:f3:10:aa:
                    00:35:b8:ea:59:dc:d6:8d:de:f1:59:b7:9d:84:77:
                    b4:81:d6:d9:8c:c0:1a:c6:07:1c:b6:0c:2f:f3:16:
                    aa:27:3f:d5:d9:df:7a:70:23:b5:2d:2d:a5:7e:f1:
                    2b:f4:ff:1d:5e:c7:81:da:b4:c9:c3:b7:26:79:4f:
                    81:54:d0:33:6c:7d:30:57:80:c3:39:72:ef:31:d5:
                    75:8b:fc:2b:75:ab:3e:70:0b:a8:ed:b8:f0:e2:0a:
                    85:04:83:a7:4d:45:0f:5f:75:b1:16:ae:b5:3f:0b:
                    53:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:96:99:97:EF:06:E3:EF:6B:5B:14:EF:0B:4E:B2:7B:3B:13:8C:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/63a75663-357f-3ec5-a3cf-77bc4f446e3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.132.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:a6:bf:0d:de:74:06:a3:73:cc:ec:aa:88:e2:b4:f8:5a:c0:
         aa:f6:7f:4b:79:94:40:c1:86:e4:f1:bb:c7:bf:c1:0f:62:50:
         92:ba:4d:94:54:db:13:5c:6a:a9:9b:89:c6:22:2e:db:b1:4a:
         bd:68:35:e3:d1:c9:1b:cf:e6:f5:1a:8a:5c:25:e2:7f:c8:be:
         7a:57:5e:16:8d:fd:06:ed:b9:4c:78:d2:3f:20:9a:9b:e0:07:
         1f:15:bf:95:11:dd:d7:a1:71:96:92:4b:f0:60:cd:41:c1:ca:
         c4:6a:2f:85:ec:30:16:55:d0:45:65:7b:60:48:8b:ba:9b:ff:
         56:22:b7:d8:e8:da:16:ef:6c:af:4f:67:fc:89:1b:d1:87:21:
         73:08:00:64:32:80:59:2e:10:17:a0:be:83:8c:65:63:86:71:
         2b:03:a6:9e:92:6c:12:37:b0:73:e8:cd:6a:8e:70:50:71:95:
         db:9e:f6:3b:28:31:8c:59:a5:54:93:63:2f:fa:9a:cf:f1:11:
         9a:f7:14:0c:51:ba:b3:5c:4a:3e:e8:98:e1:e4:0b:9f:8e:8f:
         29:7e:49:38:a8:b6:a7:a8:1f:93:73:9b:8b:12:03:4d:68:bf:
         52:ab:ad:44:af:b1:7b:bc:33:2d:84:5e:1c:d6:94:90:55:16:
         29:35:95:fc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0AWfGST7sB1AlTtgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDIyNzExMDI0OFoXDTI2MDUyODEwMDI0OFowLzEtMCsGA1UEAxMk
ZjU5MmRmNzgtM2ViYi00NzYwLWIxMWEtNzAyZTE4NjZmN2FiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4aMWWH0yf5Ot7K510dlhYI9WNwZCzwbApsut
gi6i7LwjAGbyePh2H8+hfdJZOPcTF1c50FikPvvOSLA4i1ZIiHPuYzIGW9eHhk0c
fvYSNItmY1gYigaOW9U3T3ovmADTaZ9D8hoKz5Tno0rbTb8GUUJ86vbXQc1IWrel
lDsuOJ5wDxJO7VzpHzTIPxFSmoMe3QHzEKoANbjqWdzWjd7xWbedhHe0gdbZjMAa
xgcctgwv8xaqJz/V2d96cCO1LS2lfvEr9P8dXseB2rTJw7cmeU+BVNAzbH0wV4DD
OXLvMdV1i/wrdas+cAuo7bjw4gqFBIOnTUUPX3WxFq61PwtTEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG2WmZfvBuPva1sU7wtOsns7E4xmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNjNhNzU2NjMtMzU3Zi0z
ZWM1LWEzY2YtNzdiYzRmNDQ2ZTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2IRfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACKmvw3edAajc8zsqojitPhawKr2f0t5lEDBhuTxu8e/wQ9iUJK6TZRU
2xNcaqmbicYiLtuxSr1oNePRyRvP5vUailwl4n/IvnpXXhaN/QbtuUx40j8gmpvg
Bx8Vv5UR3dehcZaSS/BgzUHBysRqL4XsMBZV0EVle2BIi7qb/1Yit9jo2hbvbK9P
Z/yJG9GHIXMIAGQygFkuEBegvoOMZWOGcSsDpp6SbBI3sHPozWqOcFBxldue9jso
MYxZpVSTYy/6ms/xEZr3FAxRurNcSj7omOHkC5+Ojyl+STiotqeoH5Nzm4sSA01o
v1KrrUSvsXu8My2EXhzWlJBVFik1lfw=
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:31:18 2026 by rpki-client