Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02e3db6d-40b5-4639-a499-a02b80a4befe/720a27f4-1f1a-3a71-b385-a3d01090242f.roa
File:                     720a27f4-1f1a-3a71-b385-a3d01090242f.roa (raw, json)
Hash identifier:          df/kv3ksBn/RnwTwWIoGIqegAmlCJYXBR25QeoTJUz8=
Subject key identifier:   DC:02:79:D7:7A:9A:86:5B:C5:81:93:57:65:4A:FB:45:00:62:50:2C
Certificate issuer:       /CN=02e3db6d-40b5-4639-a499-a02b80a4befe
Certificate serial:       010D0C9F4328584E0865E6FA8860D1611BADF5C0
Authority key identifier: CC:62:08:D3:2D:E8:6B:71:2B:A1:F2:C0:86:A8:B6:62:99:81:EF:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02e3db6d-40b5-4639-a499-a02b80a4befe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02e3db6d-40b5-4639-a499-a02b80a4befe/720a27f4-1f1a-3a71-b385-a3d01090242f.roa
Signing time:             Tue 02 Jun 2026 01:00:10 +0000
ROA not before:           Tue 02 Jun 2026 01:00:10 +0000
ROA not after:            Mon 31 Aug 2026 01:00:10 +0000
asID:                     62488
IP address blocks:        162.216.24.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02e3db6d-40b5-4639-a499-a02b80a4befe/02e3db6d-40b5-4639-a499-a02b80a4befe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02e3db6d-40b5-4639-a499-a02b80a4befe/02e3db6d-40b5-4639-a499-a02b80a4befe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02e3db6d-40b5-4639-a499-a02b80a4befe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:08:65:e6:fa:88:60:d1:61:1b:ad:f5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02e3db6d-40b5-4639-a499-a02b80a4befe
        Validity
            Not Before: Jun  2 01:00:10 2026 GMT
            Not After : Aug 31 01:00:10 2026 GMT
        Subject: CN=0e60eae2-50c2-48ba-bbeb-eadd602ee2e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:fd:6e:5e:99:0a:03:63:4c:db:71:17:56:99:
                    f8:3a:29:47:53:a3:80:f3:89:7a:cf:72:18:0e:9c:
                    da:2d:98:f9:c5:77:33:71:9b:2c:a9:84:4b:83:4a:
                    fa:76:cd:ec:e4:22:56:08:3b:04:c8:88:0c:06:8d:
                    16:1c:32:f6:f1:a7:f6:ff:7b:75:b2:f5:0d:00:65:
                    46:67:c1:58:0c:cd:20:b5:dd:1c:74:a7:40:9b:db:
                    dc:f1:13:30:86:7b:06:58:6e:a6:a1:4c:60:b6:a6:
                    54:3b:7f:6f:cf:b6:77:30:64:da:06:ba:5a:ba:a4:
                    a5:1e:ef:25:a4:51:a9:0b:73:e8:4e:79:43:e7:e7:
                    f9:13:57:fe:d6:89:91:77:d9:e7:f9:50:ea:06:03:
                    61:6e:3d:1e:72:50:01:fe:c7:77:6f:63:48:af:e2:
                    80:86:f3:57:33:ae:b7:c3:89:f1:f7:c3:72:d7:5a:
                    16:59:bb:db:a1:71:a8:7c:15:f1:90:72:e3:09:79:
                    ea:01:ca:26:32:80:28:ba:56:83:e8:31:32:79:19:
                    a8:8a:3a:96:01:81:15:19:be:18:00:bb:f1:b0:b4:
                    55:12:1b:2d:18:1a:46:4b:52:09:fd:36:31:61:96:
                    74:b9:80:3b:b5:a5:36:c1:1b:cb:65:2c:ef:1d:dc:
                    c9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:02:79:D7:7A:9A:86:5B:C5:81:93:57:65:4A:FB:45:00:62:50:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02e3db6d-40b5-4639-a499-a02b80a4befe/720a27f4-1f1a-3a71-b385-a3d01090242f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02e3db6d-40b5-4639-a499-a02b80a4befe/02e3db6d-40b5-4639-a499-a02b80a4befe.crl

            X509v3 Authority Key Identifier:
                keyid:CC:62:08:D3:2D:E8:6B:71:2B:A1:F2:C0:86:A8:B6:62:99:81:EF:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02e3db6d-40b5-4639-a499-a02b80a4befe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.216.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:15:e7:20:74:2d:58:7a:6f:b5:aa:c4:c1:4c:a9:1e:8d:fa:
         21:30:91:f5:8f:af:fd:06:90:46:7c:c9:c3:29:a2:a1:81:93:
         5a:d9:66:42:bf:2d:f7:0a:d3:09:69:17:c7:3f:00:de:08:cf:
         c0:18:4c:af:85:17:62:c4:d6:fd:8a:32:08:59:9d:d9:87:69:
         fd:3a:2d:79:8d:9c:27:90:67:d6:60:24:3d:d3:a8:52:3b:a4:
         55:66:c9:d7:87:9a:92:18:4b:fb:63:82:89:4d:20:8d:b5:57:
         cd:65:fe:96:be:49:55:0a:de:b1:39:5d:c2:32:53:bd:97:73:
         20:f0:d3:2e:33:15:c3:57:01:37:60:31:eb:e8:47:46:19:ac:
         f0:a1:67:45:4a:db:59:ae:f2:4f:6c:b3:7d:74:f7:44:b2:35:
         db:31:d3:7e:43:d7:b5:62:37:63:e6:3a:30:97:e5:ec:1d:57:
         f7:a1:e9:ad:17:a0:b2:cf:6c:05:d9:49:90:9a:6d:f3:63:27:
         6c:c0:5f:b5:72:f4:a9:e6:9f:61:f0:5e:33:73:f3:67:17:c8:
         f7:ab:8b:38:0b:99:c5:da:33:e6:a5:b6:68:27:63:02:e2:04:
         83:5d:07:0b:48:6c:a2:5f:ff:bc:b1:ed:f6:ed:18:6b:db:cf:
         04:72:91:9f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4IZeb6iGDRYRut9cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDJlM2RiNmQtNDBiNS00NjM5LWE0OTktYTAyYjgwYTRi
ZWZlMB4XDTI2MDYwMjAxMDAxMFoXDTI2MDgzMTAxMDAxMFowLzEtMCsGA1UEAxMk
MGU2MGVhZTItNTBjMi00OGJhLWJiZWItZWFkZDYwMmVlMmU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/1uXpkKA2NM23EXVpn4OilHU6OA84l6z3IY
DpzaLZj5xXczcZssqYRLg0r6ds3s5CJWCDsEyIgMBo0WHDL28af2/3t1svUNAGVG
Z8FYDM0gtd0cdKdAm9vc8RMwhnsGWG6moUxgtqZUO39vz7Z3MGTaBrpauqSlHu8l
pFGpC3PoTnlD5+f5E1f+1omRd9nn+VDqBgNhbj0eclAB/sd3b2NIr+KAhvNXM663
w4nx98Ny11oWWbvboXGofBXxkHLjCXnqAcomMoAoulaD6DEyeRmoijqWAYEVGb4Y
ALvxsLRVEhstGBpGS1IJ/TYxYZZ0uYA7taU2wRvLZSzvHdzJnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNwCedd6moZbxYGTV2VK+0UAYlAsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wMmUz
ZGI2ZC00MGI1LTQ2MzktYTQ5OS1hMDJiODBhNGJlZmUvNzIwYTI3ZjQtMWYxYS0z
YTcxLWIzODUtYTNkMDEwOTAyNDJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMDJlM2RiNmQtNDBiNS00NjM5LWE0
OTktYTAyYjgwYTRiZWZlLzAyZTNkYjZkLTQwYjUtNDYzOS1hNDk5LWEwMmI4MGE0
YmVmZS5jcmwwHwYDVR0jBBgwFoAUzGII0y3oa3ErofLAhqi2YpmB77IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8wMmUzZGI2ZC00MGI1LTQ2MzktYTQ5OS1hMDJi
ODBhNGJlZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDotgYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG4V5yB0LVh6b7WqxMFMqR6N+iEwkfWPr/0GkEZ8ycMpoqGBk1rZZkK/
LfcK0wlpF8c/AN4Iz8AYTK+FF2LE1v2KMghZndmHaf06LXmNnCeQZ9ZgJD3TqFI7
pFVmydeHmpIYS/tjgolNII21V81l/pa+SVUK3rE5XcIyU72XcyDw0y4zFcNXATdg
MevoR0YZrPChZ0VK21mu8k9ss31090SyNdsx035D17ViN2PmOjCX5ewdV/eh6a0X
oLLPbAXZSZCabfNjJ2zAX7Vy9Knmn2HwXjNz82cXyPerizgLmcXaM+altmgnYwLi
BINdBwtIbKJf/7yx7fbtGGvbzwRykZ8=
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:52:19 2026 by rpki-client