Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/67086338-d450-446e-8fe5-2b5278af4351/eb2a7273-0819-3b7d-88f6-5ed6a5dd1df0.roa
File:                     eb2a7273-0819-3b7d-88f6-5ed6a5dd1df0.roa (raw, json)
Hash identifier:          PZktP5w070sT/z6WETkngcJ1kh8ESZ6ypaEYPHl6SQQ=
Subject key identifier:   52:D0:08:22:EC:58:F1:EE:63:DC:AE:47:A2:3F:51:D0:72:1F:46:27
Certificate issuer:       /CN=67086338-d450-446e-8fe5-2b5278af4351
Certificate serial:       010D0C9F4328584E2274455B9A56A4CD8336FEA0
Authority key identifier: F0:B7:87:44:38:08:B2:AF:EF:59:FD:46:BB:E0:2F:93:80:D6:89:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/67086338-d450-446e-8fe5-2b5278af4351.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/67086338-d450-446e-8fe5-2b5278af4351/eb2a7273-0819-3b7d-88f6-5ed6a5dd1df0.roa
Signing time:             Thu 11 Jun 2026 09:00:12 +0000
ROA not before:           Thu 11 Jun 2026 09:00:12 +0000
ROA not after:            Wed 09 Sep 2026 09:00:12 +0000
asID:                     20364
IP address blocks:        96.45.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/67086338-d450-446e-8fe5-2b5278af4351/67086338-d450-446e-8fe5-2b5278af4351.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/67086338-d450-446e-8fe5-2b5278af4351/67086338-d450-446e-8fe5-2b5278af4351.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/67086338-d450-446e-8fe5-2b5278af4351.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:22:74:45:5b:9a:56:a4:cd:83:36:fe:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67086338-d450-446e-8fe5-2b5278af4351
        Validity
            Not Before: Jun 11 09:00:12 2026 GMT
            Not After : Sep  9 09:00:12 2026 GMT
        Subject: CN=ab8d0458-f2b6-47f0-8a9e-7eb3e9f2604b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:40:19:fa:51:df:a7:29:db:bc:88:c8:76:7e:
                    39:61:0f:e0:8d:96:16:4f:2d:a0:10:dd:8d:3f:1e:
                    87:b6:20:a0:93:a4:6b:e9:63:e7:f3:e1:16:23:41:
                    30:00:5a:27:1e:d6:35:c1:50:6b:34:67:e0:d1:84:
                    3e:cc:a2:c2:33:a9:52:4f:76:f3:33:f9:7f:16:82:
                    fd:3e:8c:30:77:67:5d:73:af:88:aa:d8:fa:cd:23:
                    5c:c3:7c:f1:e0:41:be:fd:5b:bd:fe:ad:1f:32:04:
                    5e:78:f5:99:4a:fd:78:80:45:a1:e4:bd:bc:a9:bd:
                    ea:9d:3b:08:e0:f6:c0:d2:c8:3b:f7:ec:e3:36:50:
                    99:c6:1a:08:12:2d:de:e9:07:1b:00:45:11:ed:6e:
                    f0:3d:80:10:99:93:ec:6f:29:68:32:bb:c5:07:fe:
                    37:6b:ee:0c:01:2d:e4:9a:75:a8:73:c3:c7:ce:67:
                    7a:c7:65:13:10:96:42:7a:01:42:f8:db:43:60:f6:
                    c5:4e:4e:4b:a7:b2:84:fd:d6:5a:28:7b:d3:36:57:
                    de:79:7e:cd:66:52:4c:60:60:6b:84:64:81:f9:da:
                    f2:88:7c:3e:df:cb:01:91:1e:fe:8a:ea:be:c3:6d:
                    2f:1a:c0:89:60:60:51:42:c8:1c:bc:9f:be:10:c2:
                    66:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:D0:08:22:EC:58:F1:EE:63:DC:AE:47:A2:3F:51:D0:72:1F:46:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/67086338-d450-446e-8fe5-2b5278af4351/eb2a7273-0819-3b7d-88f6-5ed6a5dd1df0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/67086338-d450-446e-8fe5-2b5278af4351/67086338-d450-446e-8fe5-2b5278af4351.crl

            X509v3 Authority Key Identifier:
                keyid:F0:B7:87:44:38:08:B2:AF:EF:59:FD:46:BB:E0:2F:93:80:D6:89:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/67086338-d450-446e-8fe5-2b5278af4351.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.45.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:32:43:f6:18:54:75:ad:3f:00:fa:ed:70:e3:40:cc:d4:5e:
         28:f4:4d:54:58:f0:f5:77:ad:ca:ec:03:fe:21:4e:ec:aa:f2:
         b7:a0:c6:1f:ee:c4:12:2b:f8:47:3a:b9:93:a4:f6:e2:73:18:
         cc:55:75:92:12:68:c8:83:62:50:db:f1:87:5d:34:f0:11:02:
         f9:b1:00:8b:52:5c:56:8f:31:16:f6:a3:94:a5:f0:f6:98:96:
         5d:d3:c1:61:45:a4:c7:79:cd:ee:c9:b3:39:56:b7:b7:0c:0f:
         f6:b4:a6:53:0f:6b:12:a2:b9:e5:fc:3c:a9:93:4a:01:1f:9e:
         a7:d0:9a:c8:4e:70:53:88:c7:26:a8:db:79:e4:09:f2:a1:27:
         c6:35:24:c7:2f:a9:76:6b:ab:f7:22:e2:13:15:4e:d5:a7:0a:
         5f:ed:d7:8b:0e:61:b5:cf:84:05:f5:5b:7e:c5:7f:f1:07:b9:
         62:86:b9:76:a0:2d:eb:98:57:d1:b9:21:bd:7c:25:ef:b6:62:
         0c:16:63:93:9b:99:ef:97:8f:bf:55:b0:13:0d:73:83:f4:f6:
         4e:4b:f4:e1:38:51:54:d7:f4:12:67:1a:0b:2b:b9:b6:78:2e:
         ba:16:a4:23:10:d3:54:27:8b:b3:82:35:36:13:6f:63:bc:12:
         71:52:e3:6b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4idEVbmlakzYM2/qAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjcwODYzMzgtZDQ1MC00NDZlLThmZTUtMmI1Mjc4YWY0
MzUxMB4XDTI2MDYxMTA5MDAxMloXDTI2MDkwOTA5MDAxMlowLzEtMCsGA1UEAxMk
YWI4ZDA0NTgtZjJiNi00N2YwLThhOWUtN2ViM2U5ZjI2MDRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8EAZ+lHfpynbvIjIdn45YQ/gjZYWTy2gEN2N
Px6HtiCgk6Rr6WPn8+EWI0EwAFonHtY1wVBrNGfg0YQ+zKLCM6lST3bzM/l/FoL9
Powwd2ddc6+Iqtj6zSNcw3zx4EG+/Vu9/q0fMgReePWZSv14gEWh5L28qb3qnTsI
4PbA0sg79+zjNlCZxhoIEi3e6QcbAEUR7W7wPYAQmZPsbyloMrvFB/43a+4MAS3k
mnWoc8PHzmd6x2UTEJZCegFC+NtDYPbFTk5Lp7KE/dZaKHvTNlfeeX7NZlJMYGBr
hGSB+dryiHw+38sBkR7+iuq+w20vGsCJYGBRQsgcvJ++EMJmSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFLQCCLsWPHuY9yuR6I/UdByH0YnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82NzA4
NjMzOC1kNDUwLTQ0NmUtOGZlNS0yYjUyNzhhZjQzNTEvZWIyYTcyNzMtMDgxOS0z
YjdkLTg4ZjYtNWVkNmE1ZGQxZGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjcwODYzMzgtZDQ1MC00NDZlLThm
ZTUtMmI1Mjc4YWY0MzUxLzY3MDg2MzM4LWQ0NTAtNDQ2ZS04ZmU1LTJiNTI3OGFm
NDM1MS5jcmwwHwYDVR0jBBgwFoAU8LeHRDgIsq/vWf1Gu+Avk4DWiR0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC82NzA4NjMzOC1kNDUwLTQ0NmUtOGZlNS0yYjUy
NzhhZjQzNTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYC08MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAEyQ/YYVHWtPwD67XDjQMzUXij0TVRY8PV3rcrsA/4hTuyq8regxh/u
xBIr+Ec6uZOk9uJzGMxVdZISaMiDYlDb8YddNPARAvmxAItSXFaPMRb2o5Sl8PaY
ll3TwWFFpMd5ze7JszlWt7cMD/a0plMPaxKiueX8PKmTSgEfnqfQmshOcFOIxyao
23nkCfKhJ8Y1JMcvqXZrq/ci4hMVTtWnCl/t14sOYbXPhAX1W37Ff/EHuWKGuXag
LeuYV9G5Ib18Je+2YgwWY5Obme+Xj79VsBMNc4P09k5L9OE4UVTX9BJnGgsrubZ4
LroWpCMQ01Qni7OCNTYTb2O8EnFS42s=
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:21:20 2026 by rpki-client