Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/51c8001a-1279-34b7-87ce-25625e69123b.roa
File:                     51c8001a-1279-34b7-87ce-25625e69123b.roa (raw, json)
Hash identifier:          kJh56Z4du5r9T+O8MFN+M+K4/tKiSZ5iWmrfy08g360=
Subject key identifier:   C3:1F:AB:77:FD:06:95:B6:6E:15:4A:28:5B:05:25:CE:52:26:C8:85
Certificate issuer:       /CN=a01c464d-9d20-46a1-858b-c36c8c1a3776
Certificate serial:       010D0C9F4328584D571FAE87854A06E9FB739040
Authority key identifier: 42:8D:86:35:2E:D5:21:76:56:74:A3:8F:E2:B7:8A:FC:03:DE:9F:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/51c8001a-1279-34b7-87ce-25625e69123b.roa
Signing time:             Mon 30 Mar 2026 13:00:30 +0000
ROA not before:           Mon 30 Mar 2026 13:00:30 +0000
ROA not after:            Sun 28 Jun 2026 13:00:30 +0000
asID:                     6360
IP address blocks:        166.122.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/a01c464d-9d20-46a1-858b-c36c8c1a3776.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/a01c464d-9d20-46a1-858b-c36c8c1a3776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:1f:ae:87:85:4a:06:e9:fb:73:90:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a01c464d-9d20-46a1-858b-c36c8c1a3776
        Validity
            Not Before: Mar 30 13:00:30 2026 GMT
            Not After : Jun 28 13:00:30 2026 GMT
        Subject: CN=16f63f5a-121c-453c-b604-79d2def46cae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:57:74:34:bf:a2:1f:d5:57:c5:84:af:1b:04:
                    e3:01:61:ce:45:45:9e:8a:3b:71:82:d3:29:9b:60:
                    65:58:e6:05:41:ca:53:37:19:60:c2:f6:b1:98:b1:
                    f9:1c:e4:3c:f5:7d:e3:5a:5e:96:ec:cd:02:9a:e9:
                    4e:fd:40:50:43:d9:cf:b0:09:c2:61:9d:35:5d:4d:
                    1c:41:13:fe:5c:88:ad:d0:47:31:99:81:c3:a2:0b:
                    d5:ec:e2:16:7c:a1:25:6f:f0:7b:e9:fd:1e:1b:1e:
                    54:d9:a1:e1:91:8e:2c:76:9f:01:d4:7d:83:0a:d2:
                    9a:7c:ce:38:97:28:5e:24:b5:20:c8:6a:54:95:e7:
                    4e:8b:e1:cc:3b:f3:ce:6d:10:29:72:8d:17:fb:e4:
                    1d:43:f7:85:c3:97:4c:17:e6:ad:e7:6c:49:9a:97:
                    6b:f2:9d:61:17:df:86:e1:18:be:10:91:fe:f9:44:
                    18:b7:4b:4a:22:72:50:38:7b:e4:68:02:01:42:dc:
                    2b:53:86:0f:d9:9a:3c:b1:53:fc:cf:e6:a1:dc:52:
                    e6:a4:cc:84:37:6f:b9:ab:cf:6a:32:c8:8a:fd:d1:
                    12:73:fc:f1:c8:a4:22:81:f6:93:81:e5:c1:a8:e3:
                    ba:7a:fb:89:a6:58:15:9b:f6:36:5f:b1:1a:26:1d:
                    7a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:1F:AB:77:FD:06:95:B6:6E:15:4A:28:5B:05:25:CE:52:26:C8:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/51c8001a-1279-34b7-87ce-25625e69123b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/a01c464d-9d20-46a1-858b-c36c8c1a3776.crl

            X509v3 Authority Key Identifier:
                keyid:42:8D:86:35:2E:D5:21:76:56:74:A3:8F:E2:B7:8A:FC:03:DE:9F:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.122.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:01:ac:99:40:ab:7e:f2:ba:b5:07:7b:0f:21:e6:4d:c6:91:
         a0:74:dd:ba:71:17:66:7a:a5:26:c4:8d:fb:db:e1:f8:c3:d3:
         de:6e:1b:7c:99:3b:d0:10:da:93:6e:d1:bf:6c:45:91:1a:62:
         58:2f:8d:03:ad:bd:83:c5:9d:20:01:b4:dd:02:63:7e:21:cb:
         b0:e0:5d:29:28:a4:04:3a:24:9f:e0:0d:db:ac:f3:a4:75:01:
         b0:d0:d4:eb:ab:ad:9e:23:b0:80:5e:ca:ce:09:21:94:40:e1:
         0a:f9:ce:78:46:b7:f1:1a:ca:c4:0a:c8:39:65:20:50:a7:4f:
         a6:c0:39:80:c1:f4:2b:3c:ae:36:69:7f:cd:50:a7:31:1e:b8:
         43:35:79:da:e9:9b:99:cf:9f:20:18:95:38:fe:1e:53:af:12:
         0d:72:b4:ca:0a:24:f1:68:eb:3a:eb:cd:45:db:38:c8:5e:05:
         7f:72:a3:e9:e9:ec:99:5c:9f:4b:fb:c8:9a:68:bd:26:8b:1f:
         8c:7b:7e:0a:52:62:2f:d8:d5:2d:6c:bc:76:33:c1:af:39:14:
         5d:55:6c:ce:7e:6b:92:d0:a5:1b:b9:96:a5:5d:ae:9b:94:fb:
         98:a0:79:97:8b:c2:26:50:6a:17:4e:90:5c:a7:e2:a5:be:66:
         68:8b:d2:fd
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE1XH66HhUoG6ftzkEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTAxYzQ2NGQtOWQyMC00NmExLTg1OGItYzM2YzhjMWEz
Nzc2MB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk
MTZmNjNmNWEtMTIxYy00NTNjLWI2MDQtNzlkMmRlZjQ2Y2FlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAild0NL+iH9VXxYSvGwTjAWHORUWeijtxgtMp
m2BlWOYFQcpTNxlgwvaxmLH5HOQ89X3jWl6W7M0CmulO/UBQQ9nPsAnCYZ01XU0c
QRP+XIit0EcxmYHDogvV7OIWfKElb/B76f0eGx5U2aHhkY4sdp8B1H2DCtKafM44
lyheJLUgyGpUledOi+HMO/PObRApco0X++QdQ/eFw5dMF+at52xJmpdr8p1hF9+G
4Ri+EJH++UQYt0tKInJQOHvkaAIBQtwrU4YP2Zo8sVP8z+ah3FLmpMyEN2+5q89q
MsiK/dESc/zxyKQigfaTgeXBqOO6evuJplgVm/Y2X7EaJh169QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFMMfq3f9BpW2bhVKKFsFJc5SJsiFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMDFj
NDY0ZC05ZDIwLTQ2YTEtODU4Yi1jMzZjOGMxYTM3NzYvNTFjODAwMWEtMTI3OS0z
NGI3LTg3Y2UtMjU2MjVlNjkxMjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTAxYzQ2NGQtOWQyMC00NmExLTg1
OGItYzM2YzhjMWEzNzc2L2EwMWM0NjRkLTlkMjAtNDZhMS04NThiLWMzNmM4YzFh
Mzc3Ni5jcmwwHwYDVR0jBBgwFoAUQo2GNS7VIXZWdKOP4reK/APen14wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hMDFjNDY0ZC05ZDIwLTQ2YTEtODU4Yi1jMzZj
OGMxYTM3NzYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMApnowVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAuwGsmUCrfvK6tQd7DyHmTcaRoHTdunEXZnqlJsSN+9vh+MPT3m4bfJk7
0BDak27Rv2xFkRpiWC+NA629g8WdIAG03QJjfiHLsOBdKSikBDokn+AN26zzpHUB
sNDU66utniOwgF7KzgkhlEDhCvnOeEa38RrKxArIOWUgUKdPpsA5gMH0KzyuNml/
zVCnMR64QzV52umbmc+fIBiVOP4eU68SDXK0ygok8WjrOuvNRds4yF4Ff3Kj6ens
mVyfS/vImmi9JosfjHt+ClJiL9jVLWy8djPBrzkUXVVszn5rktClG7mWpV2um5T7
mKB5l4vCJlBqF06QXKfipb5maIvS/Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:07:02 2026 by rpki-client