Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/990b215e-32ad-30bb-b68a-695a2d7b0937.roa
File:                     990b215e-32ad-30bb-b68a-695a2d7b0937.roa (raw, json)
Hash identifier:          ojkdT0ATmZtzlKTqg/WR/yNf39APpNI/024TJePLVoM=
Subject key identifier:   8B:32:18:2F:B6:60:21:CB:34:C4:C0:E7:7C:4A:7B:D0:4C:8E:DB:7A
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584EA78FCC641F4CE36461A169E0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/990b215e-32ad-30bb-b68a-695a2d7b0937.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     0
IP address blocks:        16.191.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8f:cc:64:1f:4c:e3:64:61:a1:69:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=5ec12d10-0dd2-4d6c-bd93-5db54c44c85e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c6:c4:63:0f:bc:26:2a:3a:2f:e1:f7:a9:62:
                    59:79:96:7b:6b:cc:f3:e3:1d:75:06:dd:13:33:12:
                    70:aa:14:0b:13:82:37:4b:85:c3:2f:42:af:f3:6f:
                    6d:d2:5e:d3:03:31:49:e9:83:91:44:59:43:08:55:
                    73:3b:c4:8a:d7:cf:6d:73:8f:c4:1e:db:3c:e3:0c:
                    2e:bd:a8:15:59:20:ac:5c:04:8d:39:c8:3f:d3:32:
                    12:8d:6b:7f:c0:95:1a:65:fd:4f:0f:31:0d:b9:7e:
                    08:e6:18:6d:a3:f5:db:a6:a3:8a:3b:8d:fb:24:9e:
                    2d:a1:70:ff:08:cf:28:45:0b:47:67:81:db:b7:67:
                    98:7e:4a:bf:05:2c:ce:17:5f:c9:6a:ca:2b:88:cb:
                    a1:38:c0:6c:1e:03:e2:20:3e:59:f8:a0:6a:30:af:
                    57:18:6e:46:cf:05:c5:51:5d:02:66:20:94:5e:07:
                    2f:14:50:44:33:02:77:44:5b:01:ee:e6:a4:37:d4:
                    fb:2d:83:08:8b:da:db:3f:da:c8:e9:e8:b8:8b:8e:
                    b3:44:8c:66:e3:78:b7:c1:f3:91:fc:ac:bb:9a:6f:
                    74:31:6c:d2:e6:42:76:b5:b1:db:1d:e3:d5:7c:e1:
                    7a:ce:9a:84:d0:b8:12:7a:fe:85:11:c1:9a:90:b4:
                    eb:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:32:18:2F:B6:60:21:CB:34:C4:C0:E7:7C:4A:7B:D0:4C:8E:DB:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/990b215e-32ad-30bb-b68a-695a2d7b0937.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.191.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:05:ac:92:20:09:4b:cc:5b:20:2c:ec:4d:7f:e7:7e:34:a4:
         ce:0e:92:12:d6:bf:9f:1d:58:e4:6b:22:7a:65:74:8a:1f:5c:
         74:5f:f4:17:4f:ec:16:06:c5:eb:09:00:9a:e1:b8:da:7a:81:
         21:4d:d5:23:ee:aa:76:3b:85:af:aa:aa:22:02:c7:ff:9b:c9:
         3d:6b:0c:8f:65:da:a0:19:19:b4:59:b6:55:44:c6:8d:4c:73:
         cd:24:21:42:84:26:5f:6f:38:43:4d:9f:cb:8d:40:54:d5:73:
         a1:27:d4:b5:73:2d:d4:61:89:8d:1d:a5:b6:40:77:c4:c5:30:
         d0:39:be:29:4d:7c:ce:c8:02:fb:0d:f9:a5:b6:f8:95:f4:4b:
         4c:26:b5:61:bd:64:39:2e:61:47:ff:f2:13:92:e8:06:a5:91:
         42:09:1a:3e:ef:7c:af:83:33:2b:4a:b0:82:3d:48:4a:7b:d5:
         ed:ec:6a:b7:e3:8e:37:cf:46:26:48:2a:c4:24:6c:cf:f9:8b:
         10:74:d4:69:d9:a0:7f:cd:13:9f:02:a9:a5:e6:e5:8d:cb:0e:
         49:ce:96:e6:65:f6:eb:5f:30:d5:84:08:00:9a:6e:88:1f:c2:
         21:06:49:8c:a7:c8:be:5c:2c:d2:f2:82:3e:bf:ce:a7:a1:c2:
         e2:58:f0:76
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE6nj8xkH0zjZGGhaeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NWVjMTJkMTAtMGRkMi00ZDZjLWJkOTMtNWRiNTRjNDRjODVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMbEYw+8Jio6L+H3qWJZeZZ7a8zz4x11Bt0T
MxJwqhQLE4I3S4XDL0Kv829t0l7TAzFJ6YORRFlDCFVzO8SK189tc4/EHts84wwu
vagVWSCsXASNOcg/0zISjWt/wJUaZf1PDzENuX4I5hhto/XbpqOKO437JJ4toXD/
CM8oRQtHZ4Hbt2eYfkq/BSzOF1/JasoriMuhOMBsHgPiID5Z+KBqMK9XGG5GzwXF
UV0CZiCUXgcvFFBEMwJ3RFsB7uakN9T7LYMIi9rbP9rI6ei4i46zRIxm43i3wfOR
/Ky7mm90MWzS5kJ2tbHbHePVfOF6zpqE0LgSev6FEcGakLTruQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFIsyGC+2YCHLNMTA53xKe9BMjtt6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvOTkwYjIxNWUtMzJhZC0z
MGJiLWI2OGEtNjk1YTJkN2IwOTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEL8wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAgwWskiAJS8xbICzsTX/nfjSkzg6SEta/nx1Y5GsiemV0ih9cdF/0F0/s
FgbF6wkAmuG42nqBIU3VI+6qdjuFr6qqIgLH/5vJPWsMj2XaoBkZtFm2VUTGjUxz
zSQhQoQmX284Q02fy41AVNVzoSfUtXMt1GGJjR2ltkB3xMUw0Dm+KU18zsgC+w35
pbb4lfRLTCa1Yb1kOS5hR//yE5LoBqWRQgkaPu98r4MzK0qwgj1ISnvV7exqt+OO
N89GJkgqxCRsz/mLEHTUadmgf80TnwKppebljcsOSc6W5mX2618w1YQIAJpuiB/C
IQZJjKfIvlws0vKCPr/Op6HC4ljwdg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:19:29 2026 by rpki-client