Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/b1760df8-e2ea-3449-91b9-9d7b18e15e4e.roa
File:                     b1760df8-e2ea-3449-91b9-9d7b18e15e4e.roa (raw, json)
Hash identifier:          ol8gv4mE4yQikDVnbGPZKRR+lt49NLne0mjp6Php7k0=
Subject key identifier:   9D:0C:D9:F8:F2:F5:F9:4D:60:F4:52:63:1D:02:1A:1D:0B:DA:40:67
Certificate issuer:       /CN=9822150f-2e6f-4fc9-b0d3-5a8e0903b333
Certificate serial:       010D0C9F4328584D6C0FB75002FBB076C056D680
Authority key identifier: E8:FB:53:43:63:09:90:50:5B:E8:A4:C4:4A:09:BC:46:9B:50:73:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/b1760df8-e2ea-3449-91b9-9d7b18e15e4e.roa
Signing time:             Tue 07 Apr 2026 01:00:23 +0000
ROA not before:           Tue 07 Apr 2026 01:00:23 +0000
ROA not after:            Mon 06 Jul 2026 01:00:23 +0000
asID:                     160
IP address blocks:        205.208.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6c:0f:b7:50:02:fb:b0:76:c0:56:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9822150f-2e6f-4fc9-b0d3-5a8e0903b333
        Validity
            Not Before: Apr  7 01:00:23 2026 GMT
            Not After : Jul  6 01:00:23 2026 GMT
        Subject: CN=9bb9154f-148f-4b6e-8841-63a0832734e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:2d:22:96:d9:93:dd:32:f8:1f:76:ab:3b:3d:
                    59:65:2d:e4:d2:b0:4c:f5:1a:a0:5d:75:61:34:ee:
                    7a:82:44:a6:e0:af:97:68:78:0e:27:aa:b4:80:3e:
                    89:05:29:b9:3b:e2:18:67:9c:d8:0d:4b:cc:3a:85:
                    ff:15:16:21:42:ed:29:3e:ab:c3:68:d5:fc:9a:c4:
                    51:cf:21:bd:36:14:8b:1e:d4:b4:55:47:36:d5:a8:
                    1f:cc:b9:cc:4e:7e:3e:ef:9b:29:0e:7d:5e:fb:ef:
                    ae:e4:89:fb:93:80:e9:41:dc:98:77:1b:27:60:1b:
                    66:fd:bf:09:90:cb:60:ee:21:4e:3d:6f:40:9e:b5:
                    03:1c:3d:07:58:c8:e3:12:e7:6f:37:f7:4d:d4:6a:
                    95:ed:94:2c:1f:b2:a0:8f:c1:db:9f:59:af:f4:d5:
                    99:40:0a:a8:81:f0:a2:07:6e:87:68:a6:d3:5b:39:
                    d4:ad:89:98:cc:64:02:1a:67:d3:ae:ee:32:1b:91:
                    db:d4:47:c5:5e:0d:2e:6c:76:5a:89:e0:50:73:1c:
                    85:d7:40:dd:9f:b1:22:8b:b5:fa:60:85:76:f5:72:
                    e6:62:8b:fd:cf:f8:f4:3a:bb:64:e5:20:ec:f2:44:
                    ba:87:39:ef:2e:0f:18:b3:56:c4:76:72:5d:45:31:
                    13:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:0C:D9:F8:F2:F5:F9:4D:60:F4:52:63:1D:02:1A:1D:0B:DA:40:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/b1760df8-e2ea-3449-91b9-9d7b18e15e4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.crl

            X509v3 Authority Key Identifier:
                keyid:E8:FB:53:43:63:09:90:50:5B:E8:A4:C4:4A:09:BC:46:9B:50:73:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.208.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:9b:80:b5:c0:70:13:b8:82:ba:10:0f:82:75:83:61:5f:44:
         49:08:ac:70:2a:66:8b:f3:ed:1a:44:42:28:8c:4e:1e:82:5f:
         33:e3:31:57:84:ce:c3:26:d5:c1:a1:24:a4:fe:d8:ab:b8:e8:
         b4:01:bf:13:c3:75:43:d0:56:87:fb:be:02:99:80:d7:2f:00:
         64:47:f5:df:ec:09:7c:f5:29:1c:08:46:af:f5:8e:43:d7:ef:
         60:b8:b5:4f:43:6c:20:10:50:ea:a1:84:0b:c7:04:41:40:a1:
         e1:29:2d:c7:7d:ae:3a:55:f9:5c:99:c2:2d:28:97:53:dd:51:
         b8:7d:83:51:b6:b1:0d:74:75:c8:70:6f:29:6f:25:b0:cf:d8:
         64:4e:95:4c:70:27:5e:7e:79:b1:b2:a5:e4:74:b9:91:04:0a:
         b5:58:3d:bf:95:13:a3:91:6b:85:dc:92:31:a0:40:cd:8a:66:
         7f:c1:fa:ea:40:62:cc:6e:dd:84:d7:9b:e0:56:75:ac:82:11:
         6a:bb:72:d2:4c:b2:ca:b1:da:a7:6a:26:24:16:cb:74:d1:0c:
         b7:09:e5:44:0b:c4:dc:9f:83:d3:70:44:6f:40:53:f1:dd:80:
         15:c7:6b:b6:dd:c3:c6:6c:a6:f2:2b:70:69:2b:29:5d:53:fb:
         ed:12:28:ad
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1sD7dQAvuwdsBW1oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTgyMjE1MGYtMmU2Zi00ZmM5LWIwZDMtNWE4ZTA5MDNi
MzMzMB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk
OWJiOTE1NGYtMTQ4Zi00YjZlLTg4NDEtNjNhMDgzMjczNGU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhy0iltmT3TL4H3arOz1ZZS3k0rBM9RqgXXVh
NO56gkSm4K+XaHgOJ6q0gD6JBSm5O+IYZ5zYDUvMOoX/FRYhQu0pPqvDaNX8msRR
zyG9NhSLHtS0VUc21agfzLnMTn4+75spDn1e+++u5In7k4DpQdyYdxsnYBtm/b8J
kMtg7iFOPW9AnrUDHD0HWMjjEudvN/dN1GqV7ZQsH7Kgj8Hbn1mv9NWZQAqogfCi
B26HaKbTWznUrYmYzGQCGmfTru4yG5Hb1EfFXg0ubHZaieBQcxyF10Ddn7Eii7X6
YIV29XLmYov9z/j0Ortk5SDs8kS6hznvLg8Ys1bEdnJdRTETnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ0M2fjy9flNYPRSYx0CGh0L2kBnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85ODIy
MTUwZi0yZTZmLTRmYzktYjBkMy01YThlMDkwM2IzMzMvYjE3NjBkZjgtZTJlYS0z
NDQ5LTkxYjktOWQ3YjE4ZTE1ZTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOTgyMjE1MGYtMmU2Zi00ZmM5LWIw
ZDMtNWE4ZTA5MDNiMzMzLzk4MjIxNTBmLTJlNmYtNGZjOS1iMGQzLTVhOGUwOTAz
YjMzMy5jcmwwHwYDVR0jBBgwFoAU6PtTQ2MJkFBb6KTESgm8RptQc+MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi85ODIyMTUwZi0yZTZmLTRmYzktYjBkMy01YThl
MDkwM2IzMzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHzdAAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACibgLXAcBO4groQD4J1g2FfREkIrHAqZovz7RpEQiiMTh6CXzPjMVeE
zsMm1cGhJKT+2Ku46LQBvxPDdUPQVof7vgKZgNcvAGRH9d/sCXz1KRwIRq/1jkPX
72C4tU9DbCAQUOqhhAvHBEFAoeEpLcd9rjpV+VyZwi0ol1PdUbh9g1G2sQ10dchw
bylvJbDP2GROlUxwJ15+ebGypeR0uZEECrVYPb+VE6ORa4XckjGgQM2KZn/B+upA
Ysxu3YTXm+BWdayCEWq7ctJMssqx2qdqJiQWy3TRDLcJ5UQLxNyfg9NwRG9AU/Hd
gBXHa7bdw8ZspvIrcGkrKV1T++0SKK0=
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:31:27 2026 by rpki-client