Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/c0670f7b-03ee-399b-83ee-0b09148904bb.roa
File:                     c0670f7b-03ee-399b-83ee-0b09148904bb.roa (raw, json)
Hash identifier:          0vkvAI5J/LBLHyO+cVmWxZjT2J45WP/r0EUIljBhxI8=
Subject key identifier:   A0:16:D4:DE:B2:98:C8:B0:F2:74:F3:C1:1C:41:4B:0E:2E:17:23:B1
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F4328584D4D5A6E123A92D63C31E69180
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/c0670f7b-03ee-399b-83ee-0b09148904bb.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     2734
IP address blocks:        67.212.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:6e:12:3a:92:d6:3c:31:e6:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=fb52b0f9-26cf-41ef-9d64-1aae6f26716d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:59:b4:c3:18:d3:9c:e8:0a:82:36:ec:00:44:
                    b3:d4:de:50:59:1a:34:1a:8e:20:ac:bb:18:c2:77:
                    28:aa:22:0f:83:5f:06:3e:99:65:69:1b:f7:50:d3:
                    9d:94:9d:22:af:44:06:a6:29:a6:ae:27:2d:b2:44:
                    ba:52:32:4e:7d:b2:4c:e1:4d:68:5b:91:00:8d:fc:
                    97:db:2f:2f:6d:05:9c:81:1a:7c:c9:48:5d:af:44:
                    d5:d2:16:9f:06:f1:d8:bb:f9:b4:b1:68:e7:47:92:
                    b7:99:e4:eb:08:26:b6:25:a5:98:93:b4:94:df:fd:
                    fc:a4:95:ee:88:b9:47:a2:db:8b:51:5e:94:08:a1:
                    45:ab:e9:b6:2a:a0:03:ba:28:93:42:8a:7c:52:8a:
                    2c:84:0b:66:53:5a:b8:50:4e:93:f6:60:57:6c:43:
                    49:d8:52:97:f4:f9:df:a6:3e:58:be:75:13:3c:6b:
                    97:f4:7c:62:0a:a5:ea:06:0f:cc:20:2f:69:87:5e:
                    11:7a:51:71:10:10:0a:58:47:7d:14:6b:61:d7:75:
                    a2:b3:0d:f7:55:37:2f:1d:0d:e7:3e:41:79:44:9c:
                    5e:c7:a0:52:a4:b4:df:b8:b0:bb:64:28:99:0e:3b:
                    55:0b:bd:89:a0:68:29:94:4d:11:7f:85:f3:a9:e9:
                    65:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:16:D4:DE:B2:98:C8:B0:F2:74:F3:C1:1C:41:4B:0E:2E:17:23:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/c0670f7b-03ee-399b-83ee-0b09148904bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.212.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:c7:46:8f:d0:8d:43:89:f6:21:50:be:83:be:c1:5f:72:ea:
         fa:34:b0:36:79:2e:04:09:41:ed:e6:23:26:49:cc:ef:7e:b2:
         23:86:ef:91:05:38:c1:b7:e7:26:aa:2c:a1:e2:5f:69:59:67:
         6b:45:d8:06:8a:eb:fe:7f:15:70:65:31:e4:c9:49:c3:6c:4a:
         6d:60:76:87:94:a2:29:a4:31:e1:6b:8a:e5:db:8e:be:d2:19:
         4a:82:70:51:81:0d:37:ab:e5:48:24:8f:e3:65:4b:ce:ef:83:
         20:2e:ff:c9:d8:54:be:4c:81:14:8f:42:3b:bb:ab:eb:1a:ac:
         8c:a7:d3:93:39:cb:f1:75:a1:d9:dd:ac:a3:a8:2b:91:16:a0:
         06:dd:25:1e:8b:03:13:55:0a:75:08:77:0e:a3:34:8e:18:af:
         90:34:a1:5f:96:b3:34:27:ae:d0:13:0b:ad:91:3f:d6:24:c4:
         25:53:70:ec:11:59:ba:b3:df:f6:a4:36:cb:fd:e1:a8:b5:4b:
         c6:ba:65:17:0f:66:05:b0:87:72:75:7a:19:55:34:1b:6a:85:
         d9:ff:79:1e:23:c3:7c:38:52:10:93:e8:e6:11:bd:44:fe:45:
         20:18:40:26:45:a3:9d:23:d6:f1:6d:a1:5d:1d:3a:7f:b8:0b:
         c1:df:7c:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWm4SOpLWPDHmkYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjlmNWU0OTYtOGZmOC00MDFmLWFkMjctYTFiNjI0Zjkw
MTRhMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk
ZmI1MmIwZjktMjZjZi00MWVmLTlkNjQtMWFhZTZmMjY3MTZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVm0wxjTnOgKgjbsAESz1N5QWRo0Go4grLsY
wncoqiIPg18GPpllaRv3UNOdlJ0ir0QGpimmrictskS6UjJOfbJM4U1oW5EAjfyX
2y8vbQWcgRp8yUhdr0TV0hafBvHYu/m0sWjnR5K3meTrCCa2JaWYk7SU3/38pJXu
iLlHotuLUV6UCKFFq+m2KqADuiiTQop8UooshAtmU1q4UE6T9mBXbENJ2FKX9Pnf
pj5YvnUTPGuX9HxiCqXqBg/MIC9ph14RelFxEBAKWEd9FGth13Wisw33VTcvHQ3n
PkF5RJxex6BSpLTfuLC7ZCiZDjtVC72JoGgplE0Rf4XzqellPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKAW1N6ymMiw8nTzwRxBSw4uFyOxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOWY1
ZTQ5Ni04ZmY4LTQwMWYtYWQyNy1hMWI2MjRmOTAxNGEvYzA2NzBmN2ItMDNlZS0z
OTliLTgzZWUtMGIwOTE0ODkwNGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjlmNWU0OTYtOGZmOC00MDFmLWFk
MjctYTFiNjI0ZjkwMTRhLzI5ZjVlNDk2LThmZjgtNDAxZi1hZDI3LWExYjYyNGY5
MDE0YS5jcmwwHwYDVR0jBBgwFoAUsHS8ugFMyPdv9/jKlpR/Lims27EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8yOWY1ZTQ5Ni04ZmY4LTQwMWYtYWQyNy1hMWI2
MjRmOTAxNGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9SbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEDHRo/QjUOJ9iFQvoO+wV9y6vo0sDZ5LgQJQe3mIyZJzO9+siOG75EF
OMG35yaqLKHiX2lZZ2tF2AaK6/5/FXBlMeTJScNsSm1gdoeUoimkMeFriuXbjr7S
GUqCcFGBDTer5Ugkj+NlS87vgyAu/8nYVL5MgRSPQju7q+sarIyn05M5y/F1odnd
rKOoK5EWoAbdJR6LAxNVCnUIdw6jNI4Yr5A0oV+WszQnrtATC62RP9YkxCVTcOwR
Wbqz3/akNsv94ai1S8a6ZRcPZgWwh3J1ehlVNBtqhdn/eR4jw3w4UhCT6OYRvUT+
RSAYQCZFo50j1vFtoV0dOn+4C8HffKw=
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:47:52 2026 by rpki-client