Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/eeec2a0b-d077-3139-8182-9ef3d7ace134.roa
File:                     eeec2a0b-d077-3139-8182-9ef3d7ace134.roa (raw, json)
Hash identifier:          tiP7aJawi6IeStmKQzcR+i4+4bl4P4cFUtbtC1Px6a8=
Subject key identifier:   74:5A:98:01:F7:C9:48:5A:5C:29:99:E6:E9:5A:69:B3:B1:2D:0A:2E
Certificate issuer:       /CN=0c04df04-2c9d-47f7-9c5f-383c0718b395
Certificate serial:       010D0C9F4328584E104F2BA1C6F07138886E0780
Authority key identifier: B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/eeec2a0b-d077-3139-8182-9ef3d7ace134.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     17275
IP address blocks:        161.107.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4f:2b:a1:c6:f0:71:38:88:6e:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c04df04-2c9d-47f7-9c5f-383c0718b395
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=0a0892dd-733d-4d4d-80df-578053b332c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:49:d4:d8:a5:9c:b9:07:b2:87:f0:e9:9a:25:
                    fa:d4:8d:22:5d:fd:1e:b2:bb:67:98:e9:5d:50:65:
                    91:d4:58:96:a0:2c:c2:ea:f5:9d:b7:d2:d4:45:2c:
                    5c:17:e6:14:cd:3c:ad:67:67:e6:f6:55:0a:5f:ad:
                    78:3c:2d:15:f5:2c:78:e3:52:5d:f7:9a:d1:0b:16:
                    44:21:93:b7:30:cc:99:11:6d:47:a8:a9:8f:6a:4d:
                    7f:2d:cf:5e:ac:d4:aa:4e:8f:f3:fa:48:2f:03:5d:
                    60:b5:80:5a:eb:52:d1:be:d7:d9:62:53:4e:5e:8d:
                    16:cf:62:38:9f:f8:fa:f2:4a:e5:1b:61:d8:06:10:
                    e3:ef:a6:be:4e:9f:11:61:66:6b:e7:6a:86:83:1c:
                    15:1b:6a:1f:e4:23:14:d2:99:f4:69:aa:ac:cf:64:
                    17:44:45:7c:c0:fe:cd:17:02:00:62:97:c9:15:c4:
                    5c:d5:42:5f:22:84:cc:fd:be:36:fb:07:2f:66:e2:
                    53:df:1d:06:9c:1b:3f:44:a7:dd:f5:72:e0:2f:0c:
                    02:07:8a:13:c5:06:68:3e:91:ce:8f:6f:3a:aa:8f:
                    2f:5e:b2:f8:25:bf:d9:45:59:31:5e:21:16:e3:aa:
                    f8:55:0e:5a:a3:6a:43:90:1d:79:84:15:57:93:c7:
                    92:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:5A:98:01:F7:C9:48:5A:5C:29:99:E6:E9:5A:69:B3:B1:2D:0A:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/eeec2a0b-d077-3139-8182-9ef3d7ace134.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl

            X509v3 Authority Key Identifier:
                keyid:B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.107.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:cd:6e:8e:0b:df:26:af:30:6e:86:86:23:08:9b:ed:9b:7e:
         58:b9:2e:28:b3:ad:23:b1:90:31:4d:a4:31:06:70:6c:d5:31:
         83:98:55:fa:e2:ab:0a:0e:5f:89:d6:08:98:9d:98:57:c0:f8:
         22:ff:db:61:1d:63:49:e0:b9:76:66:67:65:69:48:ba:a8:c1:
         e0:a7:2d:ed:93:16:da:75:36:57:a5:37:4b:46:6d:b7:9a:50:
         de:8d:05:fd:3b:4a:55:6a:d5:05:e1:d0:1c:b8:d9:0c:47:72:
         7a:fc:38:c9:2d:e6:49:54:c7:ac:43:73:a5:89:fa:f0:fc:66:
         0c:92:9e:c0:ce:39:bd:32:9b:2d:db:8a:db:f5:c8:92:8c:55:
         04:74:61:50:c8:fb:34:36:d9:3f:b6:fb:99:3f:b1:ea:b4:6c:
         a9:b4:2a:80:4e:36:22:24:c2:a3:49:e6:07:41:84:d7:2a:5e:
         b9:3f:43:16:ed:83:65:fb:a4:01:84:12:b2:44:49:be:dc:e2:
         42:b0:7e:01:6a:e0:c5:88:83:64:bb:7f:8d:be:1b:f4:df:ca:
         ee:44:c8:de:e7:ee:00:54:b2:9f:88:77:33:ec:13:f0:62:3f:
         9a:3d:0e:f7:35:22:4c:2b:2b:a0:f5:f7:12:ac:2e:8b:28:c2:
         33:94:98:11
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTyuhxvBxOIhuB4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGMwNGRmMDQtMmM5ZC00N2Y3LTljNWYtMzgzYzA3MThi
Mzk1MB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk
MGEwODkyZGQtNzMzZC00ZDRkLTgwZGYtNTc4MDUzYjMzMmM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhknU2KWcuQeyh/DpmiX61I0iXf0esrtnmOld
UGWR1FiWoCzC6vWdt9LURSxcF+YUzTytZ2fm9lUKX614PC0V9Sx441Jd95rRCxZE
IZO3MMyZEW1HqKmPak1/Lc9erNSqTo/z+kgvA11gtYBa61LRvtfZYlNOXo0Wz2I4
n/j68krlG2HYBhDj76a+Tp8RYWZr52qGgxwVG2of5CMU0pn0aaqsz2QXREV8wP7N
FwIAYpfJFcRc1UJfIoTM/b42+wcvZuJT3x0GnBs/RKfd9XLgLwwCB4oTxQZoPpHO
j286qo8vXrL4Jb/ZRVkxXiEW46r4VQ5ao2pDkB15hBVXk8eSWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHRamAH3yUhaXCmZ5ulaabOxLQouMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0
ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNjMDcxOGIzOTUvZWVlYzJhMGItZDA3Ny0z
MTM5LTgxODItOWVmM2Q3YWNlMTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGMwNGRmMDQtMmM5ZC00N2Y3LTlj
NWYtMzgzYzA3MThiMzk1LzBjMDRkZjA0LTJjOWQtNDdmNy05YzVmLTM4M2MwNzE4
YjM5NS5jcmwwHwYDVR0jBBgwFoAUuNY5jUEe70cALHjIiVaiLNS+kBcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNj
MDcxOGIzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCoWscMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHbNbo4L3yavMG6GhiMIm+2bfli5LiizrSOxkDFNpDEGcGzVMYOYVfri
qwoOX4nWCJidmFfA+CL/22EdY0nguXZmZ2VpSLqoweCnLe2TFtp1NlelN0tGbbea
UN6NBf07SlVq1QXh0By42QxHcnr8OMkt5klUx6xDc6WJ+vD8ZgySnsDOOb0ymy3b
itv1yJKMVQR0YVDI+zQ22T+2+5k/seq0bKm0KoBONiIkwqNJ5gdBhNcqXrk/Qxbt
g2X7pAGEErJESb7c4kKwfgFq4MWIg2S7f42+G/Tfyu5EyN7n7gBUsp+IdzPsE/Bi
P5o9Dvc1IkwrK6D19xKsLosowjOUmBE=
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:29:14 2026 by rpki-client