Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4845bce4-9cb6-3c92-ba33-fe061be0822c.roa
File:                     4845bce4-9cb6-3c92-ba33-fe061be0822c.roa (raw, json)
Hash identifier:          enuV2708ywH/GgWnjER02TOTjyG9jnbz5jc/5aapFwA=
Subject key identifier:   0A:DC:57:09:91:61:16:8E:54:07:CA:88:09:76:E5:BB:EF:01:8B:A9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D6515366037547C198FFCFB80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4845bce4-9cb6-3c92-ba33-fe061be0822c.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     701
IP address blocks:        71.116.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:36:60:37:54:7c:19:8f:fc:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=3e3d22a0-bde3-4600-8265-a0477f8de0c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0b:64:75:7d:63:22:65:a6:32:4a:02:bc:00:
                    ad:d4:88:08:17:48:dd:68:b8:49:6e:95:b9:20:6c:
                    bc:e2:86:55:c0:fe:17:26:3d:5f:9b:3f:ef:13:7d:
                    85:01:b4:44:1d:c5:dd:8a:42:df:f2:6b:e5:97:67:
                    c7:53:23:e7:94:b7:5c:01:65:05:7f:e9:25:f2:78:
                    9a:96:5e:11:9e:f6:a2:c8:cf:f4:34:f6:5e:ce:86:
                    f7:50:d5:ff:b4:12:86:0a:8a:4e:7a:e0:c8:f6:35:
                    a2:af:2b:9e:25:d3:16:cf:90:2f:50:52:84:97:4c:
                    46:5f:57:03:37:7e:31:5b:ca:df:f0:58:39:f1:2f:
                    be:ee:2b:be:9a:f2:e2:69:04:e0:3f:ae:79:3d:d2:
                    5e:ae:cd:bb:03:60:f7:7f:5f:60:e8:af:42:bb:4d:
                    42:19:36:08:e2:b5:15:40:68:b6:8d:47:4a:c3:a7:
                    fc:bb:6a:8a:0e:ad:f3:a2:f9:90:cf:ca:e9:02:d6:
                    ec:80:4b:1f:66:b1:4b:02:4a:76:40:7b:21:c6:08:
                    99:c6:17:f3:a1:cc:e4:d4:3d:4a:1a:17:8a:2b:ad:
                    94:7a:78:37:0a:93:56:b4:3c:15:81:44:84:d8:46:
                    23:f4:b0:f7:19:fd:cc:c3:69:09:55:ce:38:0f:47:
                    a9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:DC:57:09:91:61:16:8E:54:07:CA:88:09:76:E5:BB:EF:01:8B:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4845bce4-9cb6-3c92-ba33-fe061be0822c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.116.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:c8:d5:f7:38:21:0d:b1:be:06:27:f0:7b:9e:8d:36:19:82:
         d5:34:52:94:6c:9c:90:b4:9e:dd:a2:c0:a7:cc:52:2c:fa:a1:
         cb:a7:9c:93:ad:86:0b:02:6c:e8:6e:14:52:a4:d4:47:10:e9:
         a8:0f:c7:2e:42:e8:d5:ff:4b:1c:ca:bb:2e:a6:fa:6c:9b:85:
         00:f7:48:93:e9:9e:8c:61:11:0c:7e:87:19:7f:27:fa:bf:42:
         cc:0e:06:40:a4:bd:43:90:71:5c:6d:fa:b7:5b:fb:5d:74:0f:
         80:36:46:ba:70:27:0b:db:3d:14:b1:e7:ad:50:5d:e1:b3:5f:
         06:dd:2a:a5:a6:c2:ef:03:61:26:b6:6c:05:9c:52:06:8a:34:
         ac:e8:35:14:30:ad:60:26:fb:97:3e:15:45:c1:61:d8:c0:98:
         2f:9b:9e:47:83:4b:a8:41:71:b5:b9:81:15:d1:03:e9:7e:57:
         ce:85:b4:34:3a:3a:95:81:ac:b3:ed:38:ba:62:bf:c8:e5:ea:
         75:fb:89:d1:1d:19:42:da:5b:15:aa:3a:78:3f:f4:da:55:50:
         1a:91:d2:09:26:39:cc:e5:14:28:e4:23:5e:7f:45:fe:a7:f8:
         4a:c0:84:59:25:b7:10:af:b1:c9:f6:3c:e0:28:59:6f:cc:fe:
         f9:93:05:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFTZgN1R8GY/8+4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk
M2UzZDIyYTAtYmRlMy00NjAwLTgyNjUtYTA0NzdmOGRlMGM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQtkdX1jImWmMkoCvACt1IgIF0jdaLhJbpW5
IGy84oZVwP4XJj1fmz/vE32FAbREHcXdikLf8mvll2fHUyPnlLdcAWUFf+kl8nia
ll4RnvaiyM/0NPZezob3UNX/tBKGCopOeuDI9jWiryueJdMWz5AvUFKEl0xGX1cD
N34xW8rf8Fg58S++7iu+mvLiaQTgP655PdJers27A2D3f19g6K9Cu01CGTYI4rUV
QGi2jUdKw6f8u2qKDq3zovmQz8rpAtbsgEsfZrFLAkp2QHshxgiZxhfzoczk1D1K
GheKK62Ueng3CpNWtDwVgUSE2EYj9LD3Gf3Mw2kJVc44D0epmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFArcVwmRYRaOVAfKiAl25bvvAYupMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDg0NWJjZTQtOWNiNi0z
YzkyLWJhMzMtZmUwNjFiZTA4MjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER3QQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADTI1fc4IQ2xvgYn8HuejTYZgtU0UpRsnJC0nt2iwKfMUiz6ocunnJOt
hgsCbOhuFFKk1EcQ6agPxy5C6NX/SxzKuy6m+mybhQD3SJPpnoxhEQx+hxl/J/q/
QswOBkCkvUOQcVxt+rdb+110D4A2RrpwJwvbPRSx561QXeGzXwbdKqWmwu8DYSa2
bAWcUgaKNKzoNRQwrWAm+5c+FUXBYdjAmC+bnkeDS6hBcbW5gRXRA+l+V86FtDQ6
OpWBrLPtOLpiv8jl6nX7idEdGULaWxWqOng/9NpVUBqR0gkmOczlFCjkI15/Rf6n
+ErAhFkltxCvscn2POAoWW/M/vmTBaM=
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:51:19 2026 by rpki-client