Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/066614fe-8fb5-391f-96ba-d3b09999174c.roa
File:                     066614fe-8fb5-391f-96ba-d3b09999174c.roa (raw, json)
Hash identifier:          PcacF3mNLQApOSGdCUHWhAfNXqYhTbqsj9qeAcWEeK0=
Subject key identifier:   F2:59:46:8A:56:75:2A:8F:F4:C4:3B:E0:21:81:95:60:26:F6:F2:6E
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA79641545402BD7C4D772F00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/066614fe-8fb5-391f-96ba-d3b09999174c.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     19905
IP address blocks:        173.22.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:41:54:54:02:bd:7c:4d:77:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ebad289b-873a-46a1-aa74-36692af67172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:cd:ad:0e:ae:e5:eb:cf:0c:ff:66:03:a8:a9:
                    3d:0a:ea:11:a7:bd:e5:8e:0f:b5:27:db:eb:38:d8:
                    91:b1:bf:ce:09:9a:39:51:3d:93:8b:db:9c:92:88:
                    d5:60:5c:a5:e0:ef:0e:57:95:49:a1:82:c2:2c:24:
                    ca:09:78:7a:5b:bd:69:05:99:4c:36:07:27:b3:9c:
                    cb:32:63:a0:8a:84:3f:26:93:f7:ca:bf:a0:d9:71:
                    03:02:29:7f:e1:81:31:3a:3a:04:a7:0d:10:eb:3b:
                    83:a4:52:3f:e0:e8:49:c8:5d:96:15:64:59:72:a7:
                    5c:b3:d8:bb:ab:b4:9a:10:c6:88:e0:cb:69:a2:df:
                    c3:e7:4e:0b:ff:67:5c:36:f6:d5:cd:38:4e:18:c9:
                    78:fc:88:81:2e:7f:15:f3:79:1c:be:8e:59:44:a1:
                    05:00:95:42:9f:1f:03:9a:ea:07:44:2a:ba:68:76:
                    f4:30:d2:56:86:b2:ea:8b:83:22:0a:26:5e:1a:82:
                    95:53:40:c5:b7:2a:a1:f4:3f:77:a5:1e:68:9b:fa:
                    b0:0d:39:64:61:12:f9:20:1c:50:4c:63:b0:24:7a:
                    78:8b:78:33:47:39:83:1c:21:db:32:22:df:82:a0:
                    59:d5:1e:c5:a0:65:ee:31:ef:78:ac:67:05:00:a4:
                    bb:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:59:46:8A:56:75:2A:8F:F4:C4:3B:E0:21:81:95:60:26:F6:F2:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/066614fe-8fb5-391f-96ba-d3b09999174c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.22.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:cb:01:bd:7a:87:1e:79:a5:2d:97:2f:40:d4:b1:e0:05:bf:
         99:6b:7f:78:83:10:81:d2:ae:b2:b9:3b:27:85:4e:c3:d7:5d:
         82:21:af:13:83:39:f5:39:a1:53:da:cd:88:2e:8f:78:da:f5:
         6c:73:64:37:9f:54:7b:cb:3c:29:58:56:5a:69:c8:f1:a8:b9:
         af:4c:36:f5:ed:90:ed:b8:41:48:a4:96:98:cd:8f:9c:ef:d7:
         df:cd:74:58:cc:ef:1d:76:f2:ca:cb:8f:4f:7d:2f:46:a4:86:
         c8:66:8d:64:99:eb:37:9f:07:f8:20:4c:9a:02:db:d6:71:37:
         26:38:ea:a2:7f:4b:0f:22:78:28:5b:ab:52:25:36:e4:a0:5f:
         48:52:87:df:db:ae:fe:6c:bb:82:f3:db:dc:ac:cd:3c:27:ee:
         08:60:43:3c:78:68:3c:fa:d2:76:61:e4:f8:e4:73:85:0f:2b:
         35:ba:bf:9a:1e:e8:3a:f3:5c:80:1b:45:7e:5f:d0:21:dd:8e:
         e6:ed:bd:81:84:da:9f:38:78:2f:30:ee:d5:b1:46:27:e7:3e:
         70:e1:4e:62:6a:0d:99:ab:b4:e5:1e:ee:a9:28:c0:5e:fa:75:
         76:43:e2:3c:ff:52:cb:08:4c:32:5b:36:25:b9:b7:e4:42:8d:
         ed:26:d3:36
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlkFUVAK9fE13LwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZWJhZDI4OWItODczYS00NmExLWFhNzQtMzY2OTJhZjY3MTcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAks2tDq7l688M/2YDqKk9CuoRp73ljg+1J9vr
ONiRsb/OCZo5UT2Ti9uckojVYFyl4O8OV5VJoYLCLCTKCXh6W71pBZlMNgcns5zL
MmOgioQ/JpP3yr+g2XEDAil/4YExOjoEpw0Q6zuDpFI/4OhJyF2WFWRZcqdcs9i7
q7SaEMaI4Mtpot/D504L/2dcNvbVzThOGMl4/IiBLn8V83kcvo5ZRKEFAJVCnx8D
muoHRCq6aHb0MNJWhrLqi4MiCiZeGoKVU0DFtyqh9D93pR5om/qwDTlkYRL5IBxQ
TGOwJHp4i3gzRzmDHCHbMiLfgqBZ1R7FoGXuMe94rGcFAKS7aQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPJZRopWdSqP9MQ74CGBlWAm9vJuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDY2NjE0ZmUtOGZiNS0z
OTFmLTk2YmEtZDNiMDk5OTkxNzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRaIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFLLAb16hx55pS2XL0DUseAFv5lrf3iDEIHSrrK5OyeFTsPXXYIhrxOD
OfU5oVPazYguj3ja9WxzZDefVHvLPClYVlppyPGoua9MNvXtkO24QUiklpjNj5zv
19/NdFjM7x128srLj099L0akhshmjWSZ6zefB/ggTJoC29ZxNyY46qJ/Sw8ieChb
q1IlNuSgX0hSh9/brv5su4Lz29yszTwn7ghgQzx4aDz60nZh5Pjkc4UPKzW6v5oe
6DrzXIAbRX5f0CHdjubtvYGE2p84eC8w7tWxRifnPnDhTmJqDZmrtOUe7qkowF76
dXZD4jz/UssITDJbNiW5t+RCje0m0zY=
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:14:19 2026 by rpki-client