Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/1b6b8cdc-f4a2-37cc-9980-2d8976fa1a28.roa
File:                     1b6b8cdc-f4a2-37cc-9980-2d8976fa1a28.roa (raw, json)
Hash identifier:          DMNhX9QyeKffBKYkHdD7MRfojlk4m7OehnkOUtJq7aQ=
Subject key identifier:   9C:AA:BD:04:E3:D3:0A:BE:6C:DD:64:8A:0F:9B:E9:43:FF:4B:4B:2E
Certificate issuer:       /CN=4a1bda30-5045-4ded-bf47-7fd03a594092
Certificate serial:       010D0C9F4328584D55BA426F4B474359FE04DD40
Authority key identifier: 83:D5:89:B1:86:42:51:89:C7:5B:ED:F1:4D:E1:13:2C:88:89:A1:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/1b6b8cdc-f4a2-37cc-9980-2d8976fa1a28.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     16509
IP address blocks:        209.166.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/4a1bda30-5045-4ded-bf47-7fd03a594092.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/4a1bda30-5045-4ded-bf47-7fd03a594092.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:ba:42:6f:4b:47:43:59:fe:04:dd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a1bda30-5045-4ded-bf47-7fd03a594092
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=281b8bc6-4024-44f8-9556-1af0dcbdffb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e8:28:c0:f4:5b:0c:fe:a3:37:dd:a7:b1:40:
                    d9:6d:bf:73:18:6d:ca:37:45:8e:5b:5b:66:53:d1:
                    8e:06:0d:de:91:00:22:8a:87:dd:c6:85:59:09:33:
                    97:1b:3f:90:8c:03:85:e5:cb:70:66:e5:0e:7e:90:
                    c6:eb:df:e7:02:6c:60:06:66:e2:4f:32:00:93:89:
                    1d:4b:7e:0d:90:5a:12:83:0e:b4:6e:3f:20:48:ee:
                    65:96:ef:93:a2:a9:b5:9c:be:7e:04:a0:f1:c6:7f:
                    c0:d4:8f:51:c8:e5:ab:3d:40:21:6a:99:cb:1a:44:
                    75:32:9e:cb:6e:7a:aa:6b:67:4e:76:04:19:01:83:
                    96:df:f6:36:5f:94:fb:2c:b8:ff:b6:bb:f0:60:f0:
                    9e:07:3a:7c:57:9b:8e:69:a0:28:80:50:4d:21:72:
                    1d:52:b3:94:be:3e:4e:6d:dd:82:a9:54:4b:cc:fc:
                    69:27:12:4d:a6:fe:f2:44:ae:d4:bd:28:82:40:b7:
                    78:63:e9:bf:20:43:3b:af:84:82:06:4c:83:e3:4e:
                    58:58:60:8f:3a:df:3f:2f:67:1f:40:fa:3c:38:c2:
                    72:cf:b5:9d:9e:3a:9b:cb:93:02:7d:75:f4:52:9b:
                    e6:7b:b3:95:59:aa:67:06:b3:5b:52:f3:dc:6f:7f:
                    bb:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:AA:BD:04:E3:D3:0A:BE:6C:DD:64:8A:0F:9B:E9:43:FF:4B:4B:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/1b6b8cdc-f4a2-37cc-9980-2d8976fa1a28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/4a1bda30-5045-4ded-bf47-7fd03a594092.crl

            X509v3 Authority Key Identifier:
                keyid:83:D5:89:B1:86:42:51:89:C7:5B:ED:F1:4D:E1:13:2C:88:89:A1:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.166.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:ea:fc:05:4b:d8:0e:66:8e:65:10:0a:df:b9:8d:12:1a:10:
         a4:c6:ec:9b:f8:47:b4:ac:37:0f:f2:c2:0c:53:9a:1c:00:78:
         e8:db:42:2f:41:bd:6c:41:59:1d:11:40:54:00:67:22:e7:fd:
         16:50:2b:73:6e:18:10:73:16:99:6b:03:74:ce:66:1f:95:bb:
         cf:2b:90:17:e5:3a:ae:85:97:10:04:01:8e:1b:4a:19:46:df:
         b3:a9:da:a8:06:8d:bb:92:06:78:da:c4:a1:d4:3d:2d:d9:6f:
         2d:a6:01:98:42:8b:ae:d5:9d:36:5e:07:11:8f:a4:c1:c6:e5:
         22:c4:68:4e:e7:ad:15:65:c2:6a:56:d4:88:be:53:03:9e:57:
         05:0d:2f:e3:e4:b0:86:76:6c:ac:ea:76:40:ef:23:9f:c2:25:
         e2:95:ea:e3:e7:7d:b3:a1:34:0f:ea:1d:d6:18:bf:98:d7:0c:
         89:01:cd:e8:e0:b6:91:91:9c:82:67:53:3f:e1:20:83:2e:e8:
         32:78:83:a8:ac:e8:cb:47:06:68:74:78:14:29:63:3e:9d:6e:
         3e:e9:18:a0:6c:43:aa:92:ba:31:96:0f:cf:b3:1e:d0:4b:ec:
         aa:eb:52:0f:17:5e:00:4c:2f:b2:c6:60:84:7a:22:d2:6c:ee:
         1d:79:08:31
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VukJvS0dDWf4E3UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGExYmRhMzAtNTA0NS00ZGVkLWJmNDctN2ZkMDNhNTk0
MDkyMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk
MjgxYjhiYzYtNDAyNC00NGY4LTk1NTYtMWFmMGRjYmRmZmIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+gowPRbDP6jN92nsUDZbb9zGG3KN0WOW1tm
U9GOBg3ekQAiiofdxoVZCTOXGz+QjAOF5ctwZuUOfpDG69/nAmxgBmbiTzIAk4kd
S34NkFoSgw60bj8gSO5llu+Toqm1nL5+BKDxxn/A1I9RyOWrPUAhapnLGkR1Mp7L
bnqqa2dOdgQZAYOW3/Y2X5T7LLj/trvwYPCeBzp8V5uOaaAogFBNIXIdUrOUvj5O
bd2CqVRLzPxpJxJNpv7yRK7UvSiCQLd4Y+m/IEM7r4SCBkyD405YWGCPOt8/L2cf
QPo8OMJyz7Wdnjqby5MCfXX0Upvme7OVWapnBrNbUvPcb3+7twIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJyqvQTj0wq+bN1kig+b6UP/S0suMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YTFi
ZGEzMC01MDQ1LTRkZWQtYmY0Ny03ZmQwM2E1OTQwOTIvMWI2YjhjZGMtZjRhMi0z
N2NjLTk5ODAtMmQ4OTc2ZmExYTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGExYmRhMzAtNTA0NS00ZGVkLWJm
NDctN2ZkMDNhNTk0MDkyLzRhMWJkYTMwLTUwNDUtNGRlZC1iZjQ3LTdmZDAzYTU5
NDA5Mi5jcmwwHwYDVR0jBBgwFoAUg9WJsYZCUYnHW+3xTeETLIiJodYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS80YTFiZGEzMC01MDQ1LTRkZWQtYmY0Ny03ZmQw
M2E1OTQwOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0abAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGXq/AVL2A5mjmUQCt+5jRIaEKTG7Jv4R7SsNw/ywgxTmhwAeOjbQi9B
vWxBWR0RQFQAZyLn/RZQK3NuGBBzFplrA3TOZh+Vu88rkBflOq6FlxAEAY4bShlG
37Op2qgGjbuSBnjaxKHUPS3Zby2mAZhCi67VnTZeBxGPpMHG5SLEaE7nrRVlwmpW
1Ii+UwOeVwUNL+PksIZ2bKzqdkDvI5/CJeKV6uPnfbOhNA/qHdYYv5jXDIkBzejg
tpGRnIJnUz/hIIMu6DJ4g6is6MtHBmh0eBQpYz6dbj7pGKBsQ6qSujGWD8+zHtBL
7KrrUg8XXgBML7LGYIR6ItJs7h15CDE=
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:05:29 2026 by rpki-client