Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/b6fbb67c-9203-335a-950d-613a9b372ea2.roa
File:                     b6fbb67c-9203-335a-950d-613a9b372ea2.roa (raw, json)
Hash identifier:          5jL5LONT2hXwibZXiOs2zCCRk15ReVY19lI8vQE6MuA=
Subject key identifier:   78:9B:29:8B:46:4B:49:AD:DC:6B:DF:98:57:AB:86:90:A0:A8:91:61
Certificate issuer:       /CN=53e30d85-4474-43ab-95e5-8d5d53560b6e
Certificate serial:       010D0C9F4328584CD13CB3BB5795D49C9D71B600
Authority key identifier: E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/b6fbb67c-9203-335a-950d-613a9b372ea2.roa
Signing time:             Tue 10 Feb 2026 14:00:41 +0000
ROA not before:           Tue 10 Feb 2026 14:00:41 +0000
ROA not after:            Mon 11 May 2026 13:00:41 +0000
asID:                     22612
IP address blocks:        162.0.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d1:3c:b3:bb:57:95:d4:9c:9d:71:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53e30d85-4474-43ab-95e5-8d5d53560b6e
        Validity
            Not Before: Feb 10 14:00:41 2026 GMT
            Not After : May 11 13:00:41 2026 GMT
        Subject: CN=255b5dbe-833c-4b00-83a5-27103ea2ff02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:09:c9:4e:a8:15:63:52:05:16:d5:54:b6:b0:
                    d8:77:ee:8b:92:4b:aa:b1:5e:17:d4:08:1f:b5:8f:
                    20:a2:5e:b2:25:0f:ca:de:72:ff:08:56:7f:e2:93:
                    f1:64:31:08:42:95:58:34:7d:3c:1a:30:5a:ff:4b:
                    78:2d:da:85:aa:23:91:51:57:bb:33:6a:8a:48:93:
                    8a:5c:fc:49:70:d2:92:ee:8f:36:0e:55:36:95:79:
                    2b:ae:14:c3:1f:97:dd:68:29:c2:48:66:4f:58:b4:
                    5b:55:a0:32:45:28:77:48:d4:c7:80:ca:4a:b3:9b:
                    15:9b:bc:40:e3:6d:08:45:27:c6:1d:39:95:43:ea:
                    41:79:83:f2:be:f1:6c:fb:89:56:91:03:60:e1:a1:
                    dc:b4:9e:0d:73:0c:cd:40:2e:a5:e3:89:aa:30:99:
                    f9:7a:62:cd:94:0f:f0:47:03:02:17:96:1a:e8:42:
                    65:28:d9:60:75:b8:9d:e9:3f:b2:fd:a9:b8:e6:69:
                    f6:65:d6:e4:91:47:78:7f:c7:b6:94:13:c7:0e:53:
                    8c:fb:29:50:6e:13:64:c8:d4:f8:7b:76:1f:ba:ae:
                    27:9b:80:c6:0e:cc:6c:63:c8:31:a3:b8:bd:5f:59:
                    15:5b:f3:d2:27:66:d9:21:16:52:1f:78:62:0c:e4:
                    6e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:9B:29:8B:46:4B:49:AD:DC:6B:DF:98:57:AB:86:90:A0:A8:91:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/b6fbb67c-9203-335a-950d-613a9b372ea2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl

            X509v3 Authority Key Identifier:
                keyid:E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.0.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:8f:4c:65:8b:5b:87:f1:c5:bb:60:67:7b:ee:15:0f:74:3a:
         34:aa:e6:36:e4:36:ae:8f:6c:24:e3:58:04:7b:7f:fe:c0:e7:
         55:32:ea:fe:d7:ce:85:1b:4f:93:d8:8e:cc:eb:40:bd:26:ff:
         db:cb:18:4b:26:02:e3:04:c2:42:79:f6:00:91:9e:35:35:2c:
         54:5b:9d:87:af:ca:5d:8d:cb:62:fc:89:64:04:9b:c0:32:72:
         4b:6d:03:dc:e1:4a:c6:ad:85:65:94:28:3b:b6:c9:eb:c3:91:
         34:5b:78:86:6f:81:32:9c:7e:6a:7e:66:a8:ea:3e:7a:b7:f5:
         5d:a8:2e:f9:2f:a7:6e:2e:8c:75:cb:c0:48:40:63:6f:1c:c6:
         da:d6:29:29:d1:48:3c:42:dc:b5:77:f5:33:d5:b1:66:9e:67:
         9d:9e:9a:8d:79:f2:1b:44:60:33:da:de:16:94:7e:41:c1:78:
         0c:cf:be:60:39:85:66:13:5a:08:25:59:d5:1b:b7:e3:74:0c:
         fe:7f:4b:dd:eb:33:d7:20:35:c3:0f:1c:12:cd:13:f6:2c:1e:
         8c:f8:de:6e:25:55:08:3a:2f:d9:da:79:67:60:bc:29:98:21:
         81:db:ba:15:ea:5f:3a:2f:7a:19:57:5f:03:06:1c:7e:78:87:
         9a:ab:60:6e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzRPLO7V5XUnJ1xtgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTNlMzBkODUtNDQ3NC00M2FiLTk1ZTUtOGQ1ZDUzNTYw
YjZlMB4XDTI2MDIxMDE0MDA0MVoXDTI2MDUxMTEzMDA0MVowLzEtMCsGA1UEAxMk
MjU1YjVkYmUtODMzYy00YjAwLTgzYTUtMjcxMDNlYTJmZjAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wnJTqgVY1IFFtVUtrDYd+6LkkuqsV4X1Agf
tY8gol6yJQ/K3nL/CFZ/4pPxZDEIQpVYNH08GjBa/0t4LdqFqiORUVe7M2qKSJOK
XPxJcNKS7o82DlU2lXkrrhTDH5fdaCnCSGZPWLRbVaAyRSh3SNTHgMpKs5sVm7xA
420IRSfGHTmVQ+pBeYPyvvFs+4lWkQNg4aHctJ4NcwzNQC6l44mqMJn5emLNlA/w
RwMCF5Ya6EJlKNlgdbid6T+y/am45mn2ZdbkkUd4f8e2lBPHDlOM+ylQbhNkyNT4
e3Yfuq4nm4DGDsxsY8gxo7i9X1kVW/PSJ2bZIRZSH3hiDORu2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHibKYtGS0mt3GvfmFerhpCgqJFhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81M2Uz
MGQ4NS00NDc0LTQzYWItOTVlNS04ZDVkNTM1NjBiNmUvYjZmYmI2N2MtOTIwMy0z
MzVhLTk1MGQtNjEzYTliMzcyZWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTNlMzBkODUtNDQ3NC00M2FiLTk1
ZTUtOGQ1ZDUzNTYwYjZlLzUzZTMwZDg1LTQ0NzQtNDNhYi05NWU1LThkNWQ1MzU2
MGI2ZS5jcmwwHwYDVR0jBBgwFoAU560e7n/zMygIqI/CZ68Dq4bocGIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81M2UzMGQ4NS00NDc0LTQzYWItOTVlNS04ZDVk
NTM1NjBiNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEogDgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK+PTGWLW4fxxbtgZ3vuFQ90OjSq5jbkNq6PbCTjWAR7f/7A51Uy6v7X
zoUbT5PYjszrQL0m/9vLGEsmAuMEwkJ59gCRnjU1LFRbnYevyl2Ny2L8iWQEm8Ay
ckttA9zhSsathWWUKDu2yevDkTRbeIZvgTKcfmp+ZqjqPnq39V2oLvkvp24ujHXL
wEhAY28cxtrWKSnRSDxC3LV39TPVsWaeZ52emo158htEYDPa3haUfkHBeAzPvmA5
hWYTWgglWdUbt+N0DP5/S93rM9cgNcMPHBLNE/YsHoz43m4lVQg6L9naeWdgvCmY
IYHbuhXqXzovehlXXwMGHH54h5qrYG4=
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:14:45 2026 by rpki-client