Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/7619f8d9-90fb-3f52-968a-d2a895ee65fc.roa
File:                     7619f8d9-90fb-3f52-968a-d2a895ee65fc.roa (raw, json)
Hash identifier:          Dp1jU7c7xTKeiXGcZIl2hYL2qAjEuA2xYaDtfUsdwwA=
Subject key identifier:   79:63:89:9C:1C:72:4D:8B:A8:C7:5E:F4:6E:9D:42:4A:00:9B:9A:48
Certificate issuer:       /CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
Certificate serial:       010D0C9F4328584D83CB0D3C971C055318073820
Authority key identifier: C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/7619f8d9-90fb-3f52-968a-d2a895ee65fc.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     6922
IP address blocks:        206.76.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:cb:0d:3c:97:1c:05:53:18:07:38:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=3d869823-530c-42e7-8624-91c41d82eeac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:16:4f:91:ed:a9:b2:61:91:07:f1:7d:5e:f9:
                    c3:df:da:0f:2c:3d:e6:f7:84:f1:fb:b1:c6:60:34:
                    c3:6c:90:ec:59:e5:b5:26:94:19:3f:f9:95:d6:00:
                    1d:20:4a:e3:49:79:79:19:5b:e3:4d:57:3b:a3:da:
                    69:0d:e5:d5:01:84:da:a1:03:78:d2:45:68:03:71:
                    24:c9:5c:ae:0a:dc:f2:a1:63:03:b5:39:23:47:55:
                    10:49:f5:cc:2a:48:4c:cd:e0:81:3f:5f:5f:71:d1:
                    75:76:c6:00:2d:9c:fb:15:c2:dd:84:7c:af:ae:6d:
                    41:af:4b:93:ff:61:93:e7:95:c4:73:e0:55:4d:bc:
                    45:17:88:ad:b8:cc:c3:92:19:86:30:70:70:ba:40:
                    b7:2b:55:e9:5a:85:ca:c3:f0:dd:b7:db:53:33:b1:
                    16:1a:d2:86:c5:19:6a:47:e3:b4:a3:c8:99:c1:19:
                    cf:6f:9e:21:eb:94:53:2c:b3:94:a2:4c:78:5e:d6:
                    cc:34:bd:71:10:67:eb:69:17:11:0f:3f:48:a2:48:
                    de:01:ba:19:be:20:9d:70:c0:62:9b:92:b3:19:ed:
                    03:64:f9:54:e1:57:5b:05:65:d6:62:0d:1f:62:ed:
                    86:75:3b:1e:ec:29:96:a0:bb:bc:ef:51:37:89:37:
                    44:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:63:89:9C:1C:72:4D:8B:A8:C7:5E:F4:6E:9D:42:4A:00:9B:9A:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/7619f8d9-90fb-3f52-968a-d2a895ee65fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl

            X509v3 Authority Key Identifier:
                keyid:C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.76.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:c2:44:46:2c:1f:58:da:71:b7:d1:8e:60:41:e8:8b:49:2b:
         12:83:10:18:ed:95:08:0b:61:00:96:56:2b:f1:eb:13:c7:20:
         2f:39:a9:be:47:9b:37:95:82:a0:a8:4b:d6:df:ef:67:1f:bd:
         fc:fb:6c:2d:72:20:da:44:09:0b:85:31:c5:f7:7c:8a:19:44:
         1b:4c:00:bf:ec:f3:86:e7:93:13:9a:6c:7f:86:5b:b2:1e:cb:
         17:6d:bb:47:07:b1:c5:e7:fa:5d:ba:cd:7d:51:93:d4:c3:1c:
         59:94:16:b2:35:b7:aa:8e:62:f9:37:43:ae:9b:2b:5a:8b:1b:
         41:62:a2:dc:48:5a:3c:2a:33:5c:97:e2:68:fd:7d:c1:a3:ba:
         2f:ba:05:d3:17:cc:a5:4c:74:e8:eb:26:7b:7e:e2:18:db:10:
         b8:0e:61:62:e9:1b:4d:27:dc:56:6f:24:b0:e6:d1:91:e2:9f:
         d0:d5:6d:17:be:44:ea:09:58:56:bd:9c:a2:eb:13:0a:2c:fe:
         d8:48:db:ea:5a:6b:5b:78:ba:7f:3f:be:d5:88:51:19:72:d3:
         46:90:6f:60:a2:85:fd:e8:e2:5a:70:f9:6a:82:7d:2b:71:c3:
         a6:0e:b6:b2:49:4d:ca:73:ba:16:bd:ce:13:fe:15:78:93:d9:
         7a:4c:f7:3b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Dyw08lxwFUxgHOCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU4MWEyNTYtNDFmZi00ZjUxLTgwOTItYzdmZmZhNGQ5
MjIxMB4XDTI2MDQxNTEzMDAzMFoXDTI2MDcxNDEzMDAzMFowLzEtMCsGA1UEAxMk
M2Q4Njk4MjMtNTMwYy00MmU3LTg2MjQtOTFjNDFkODJlZWFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhZPke2psmGRB/F9XvnD39oPLD3m94Tx+7HG
YDTDbJDsWeW1JpQZP/mV1gAdIErjSXl5GVvjTVc7o9ppDeXVAYTaoQN40kVoA3Ek
yVyuCtzyoWMDtTkjR1UQSfXMKkhMzeCBP19fcdF1dsYALZz7FcLdhHyvrm1Br0uT
/2GT55XEc+BVTbxFF4ituMzDkhmGMHBwukC3K1XpWoXKw/Ddt9tTM7EWGtKGxRlq
R+O0o8iZwRnPb54h65RTLLOUokx4XtbMNL1xEGfraRcRDz9IokjeAboZviCdcMBi
m5KzGe0DZPlU4VdbBWXWYg0fYu2GdTse7CmWoLu871E3iTdEIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHljiZwcck2LqMde9G6dQkoAm5pIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTgx
YTI1Ni00MWZmLTRmNTEtODA5Mi1jN2ZmZmE0ZDkyMjEvNzYxOWY4ZDktOTBmYi0z
ZjUyLTk2OGEtZDJhODk1ZWU2NWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU4MWEyNTYtNDFmZi00ZjUxLTgw
OTItYzdmZmZhNGQ5MjIxLzRlODFhMjU2LTQxZmYtNGY1MS04MDkyLWM3ZmZmYTRk
OTIyMS5jcmwwHwYDVR0jBBgwFoAUwitnYdEerOUTJk8QRtL6zHxFiyowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTgxYTI1Ni00MWZmLTRmNTEtODA5Mi1jN2Zm
ZmE0ZDkyMjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzkyQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFPCREYsH1jacbfRjmBB6ItJKxKDEBjtlQgLYQCWVivx6xPHIC85qb5H
mzeVgqCoS9bf72cfvfz7bC1yINpECQuFMcX3fIoZRBtMAL/s84bnkxOabH+GW7Ie
yxdtu0cHscXn+l26zX1Rk9TDHFmUFrI1t6qOYvk3Q66bK1qLG0FiotxIWjwqM1yX
4mj9fcGjui+6BdMXzKVMdOjrJnt+4hjbELgOYWLpG00n3FZvJLDm0ZHin9DVbRe+
ROoJWFa9nKLrEwos/thI2+paa1t4un8/vtWIURly00aQb2Cihf3o4lpw+WqCfStx
w6YOtrJJTcpzuha9zhP+FXiT2XpM9zs=
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:51:47 2026 by rpki-client