Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/9bb519e3-aeba-3d7d-a107-c01ea2741f89.roa
File:                     9bb519e3-aeba-3d7d-a107-c01ea2741f89.roa (raw, json)
Hash identifier:          D33KHp/2KAS1KGYH9R4U3GitZGrK2xxtgBaRU7Qmfqc=
Subject key identifier:   BA:F8:A9:87:B7:93:BC:6D:45:A5:6B:40:9D:DD:38:4E:F0:40:D9:C4
Certificate issuer:       /CN=c6bc2da7-5b3b-4ff6-8bc2-59c42c901086
Certificate serial:       010D0C9F4328584E104EEE7E302FE7F125627EB0
Authority key identifier: 9D:66:1F:9F:23:E7:C7:B2:21:F2:E8:33:6C:7B:CE:AB:65:97:31:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/9bb519e3-aeba-3d7d-a107-c01ea2741f89.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     18615
IP address blocks:        74.116.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4e:ee:7e:30:2f:e7:f1:25:62:7e:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6bc2da7-5b3b-4ff6-8bc2-59c42c901086
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=8541fe64-067d-43a4-beb2-a4fd22d25a7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7c:6b:4f:ea:f0:dd:86:71:fc:f9:85:b4:48:
                    2f:55:b9:f0:bd:b6:dc:27:4c:95:8d:6f:fe:71:05:
                    04:76:83:c3:79:3f:ec:43:e5:df:8d:0a:a6:8f:1c:
                    58:45:a0:47:28:96:87:2c:f8:44:43:17:31:05:cf:
                    54:37:7b:8a:f3:20:34:7c:ba:94:fc:8e:72:d0:1a:
                    ba:2c:7f:79:88:b7:1d:4e:de:80:88:24:af:3a:b4:
                    3a:b0:4e:d9:ae:4b:65:24:6d:0d:88:77:8f:12:68:
                    3e:c7:9e:4c:fa:85:65:8b:fb:96:16:f6:fd:e8:ff:
                    ca:a8:97:a7:6b:4c:94:9e:ef:7f:26:40:f0:51:12:
                    37:2b:dd:73:a8:23:23:25:4e:88:35:dd:61:d8:af:
                    7e:f4:f9:b1:cf:b1:a3:ce:29:68:1a:08:8a:47:4b:
                    d6:4e:1b:96:f3:3c:0d:c9:8e:35:be:39:27:63:d1:
                    8f:34:d0:7e:37:be:e3:4b:60:26:d4:88:9e:ed:67:
                    a7:69:b8:cb:47:f4:2c:b2:79:ea:2c:5f:fc:b0:0d:
                    76:a4:ce:08:66:72:9e:13:76:ec:da:ba:d8:be:31:
                    11:5a:78:7b:6e:cc:bd:98:9d:1a:3e:5e:25:67:d3:
                    d2:37:8d:99:36:cd:bb:53:cc:46:9a:81:12:d3:59:
                    da:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F8:A9:87:B7:93:BC:6D:45:A5:6B:40:9D:DD:38:4E:F0:40:D9:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/9bb519e3-aeba-3d7d-a107-c01ea2741f89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.crl

            X509v3 Authority Key Identifier:
                keyid:9D:66:1F:9F:23:E7:C7:B2:21:F2:E8:33:6C:7B:CE:AB:65:97:31:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.116.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:8b:de:9c:07:a9:4a:96:07:c4:b3:20:f2:f1:3c:fa:1f:c5:
         dc:6f:65:9a:b2:53:d9:1a:cb:1d:92:5d:0d:73:e9:c2:d8:7d:
         ff:15:1e:51:00:a2:4a:60:41:7c:71:bb:33:f3:ae:d7:33:3c:
         9d:3f:f7:72:3f:4c:ae:26:16:3f:3a:5d:66:35:00:1e:2a:1b:
         6d:2a:81:34:d0:b1:f1:fe:ce:b3:1c:9d:ae:bd:6e:42:dc:0c:
         f0:79:52:d1:cf:3c:35:40:27:1f:d5:f9:68:7b:e6:b5:f5:73:
         0f:ef:42:77:d2:18:95:e0:a2:b3:05:f0:ba:1c:0e:9c:62:97:
         e7:74:30:a8:ff:9e:b4:d8:7d:12:42:17:63:85:92:ca:13:c7:
         5b:24:dc:f7:08:ad:d7:74:c9:f1:8c:ad:69:de:ad:dd:08:a1:
         51:fa:b6:11:5f:21:e5:27:c8:95:c5:4f:4a:39:28:19:ba:60:
         02:d0:3d:fe:b7:4d:be:1a:2d:b5:14:18:8a:42:a5:a2:99:5f:
         27:34:7f:30:3a:75:a7:ee:cc:c7:e2:b8:50:d1:68:4f:ab:ea:
         32:30:6d:f6:3e:b3:ba:d4:76:cc:4c:b4:b8:fd:39:de:8b:8a:
         2a:bb:29:29:80:01:52:bc:54:0d:69:34:8e:66:72:69:c1:9b:
         a7:2f:fb:bb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTu5+MC/n8SVifrAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzZiYzJkYTctNWIzYi00ZmY2LThiYzItNTljNDJjOTAx
MDg2MB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk
ODU0MWZlNjQtMDY3ZC00M2E0LWJlYjItYTRmZDIyZDI1YTdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXxrT+rw3YZx/PmFtEgvVbnwvbbcJ0yVjW/+
cQUEdoPDeT/sQ+XfjQqmjxxYRaBHKJaHLPhEQxcxBc9UN3uK8yA0fLqU/I5y0Bq6
LH95iLcdTt6AiCSvOrQ6sE7ZrktlJG0NiHePEmg+x55M+oVli/uWFvb96P/KqJen
a0yUnu9/JkDwURI3K91zqCMjJU6INd1h2K9+9Pmxz7GjziloGgiKR0vWThuW8zwN
yY41vjknY9GPNNB+N77jS2Am1Iie7WenabjLR/QssnnqLF/8sA12pM4IZnKeE3bs
2rrYvjERWnh7bsy9mJ0aPl4lZ9PSN42ZNs27U8xGmoES01nacQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLr4qYe3k7xtRaVrQJ3dOE7wQNnEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jNmJj
MmRhNy01YjNiLTRmZjYtOGJjMi01OWM0MmM5MDEwODYvOWJiNTE5ZTMtYWViYS0z
ZDdkLWExMDctYzAxZWEyNzQxZjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzZiYzJkYTctNWIzYi00ZmY2LThi
YzItNTljNDJjOTAxMDg2L2M2YmMyZGE3LTViM2ItNGZmNi04YmMyLTU5YzQyYzkw
MTA4Ni5jcmwwHwYDVR0jBBgwFoAUnWYfnyPnx7Ih8ugzbHvOq2WXMfIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jNmJjMmRhNy01YjNiLTRmZjYtOGJjMi01OWM0
MmM5MDEwODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSnQUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFiL3pwHqUqWB8SzIPLxPPofxdxvZZqyU9kayx2SXQ1z6cLYff8VHlEA
okpgQXxxuzPzrtczPJ0/93I/TK4mFj86XWY1AB4qG20qgTTQsfH+zrMcna69bkLc
DPB5UtHPPDVAJx/V+Wh75rX1cw/vQnfSGJXgorMF8LocDpxil+d0MKj/nrTYfRJC
F2OFksoTx1sk3PcIrdd0yfGMrWnerd0IoVH6thFfIeUnyJXFT0o5KBm6YALQPf63
Tb4aLbUUGIpCpaKZXyc0fzA6dafuzMfiuFDRaE+r6jIwbfY+s7rUdsxMtLj9Od6L
iiq7KSmAAVK8VA1pNI5mcmnBm6cv+7s=
-----END CERTIFICATE-----
Generated at Sun Jun 14 05:23:18 2026 by rpki-client