Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/63cc6b4d-100d-3e2e-ac7e-a94d958c8b79.roa
File:                     63cc6b4d-100d-3e2e-ac7e-a94d958c8b79.roa (raw, json)
Hash identifier:          pVXfCMb9eecnXAe+ydZqKmUaLky/N2ME18EgXwisba4=
Subject key identifier:   06:77:6C:18:A1:C2:9D:F4:99:6E:C6:F4:9D:67:E8:62:59:CE:F7:37
Certificate issuer:       /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial:       010D0C9F4328584E2075BA10A4C5987FB439C140
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/63cc6b4d-100d-3e2e-ac7e-a94d958c8b79.roa
Signing time:             Wed 10 Jun 2026 15:51:35 +0000
ROA not before:           Wed 10 Jun 2026 15:51:35 +0000
ROA not after:            Tue 08 Sep 2026 15:51:35 +0000
asID:                     6079
IP address blocks:        192.132.144.0/20 maxlen: 20
                          192.132.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:20:75:ba:10:a4:c5:98:7f:b4:39:c1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
        Validity
            Not Before: Jun 10 15:51:35 2026 GMT
            Not After : Sep  8 15:51:35 2026 GMT
        Subject: CN=4f3b6028-1a40-4384-ad93-d37618b157b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:08:82:6d:e6:9c:a7:e9:00:6b:fd:0d:cf:42:
                    91:51:c9:be:6c:4c:ec:98:97:15:12:55:78:e0:79:
                    55:63:f3:fc:c4:38:d4:a2:f4:72:51:c0:2f:56:37:
                    2d:3a:e8:52:7d:fc:0a:0c:a2:eb:a3:2a:a2:89:16:
                    15:7a:47:f7:1f:c2:be:73:be:dd:f6:e2:2e:8d:0b:
                    a2:95:0e:a2:09:78:60:15:1d:2b:6c:35:0c:73:45:
                    80:c3:38:74:3b:7a:79:ea:37:54:36:0f:8d:15:f6:
                    ca:52:b2:c0:2f:b7:58:ea:32:c9:13:b2:e0:35:40:
                    41:6b:c2:e3:a8:21:1b:84:90:23:2c:4a:cc:a6:d8:
                    e5:6a:09:37:07:88:8f:20:ef:01:2e:fe:37:2c:1a:
                    c9:b5:0b:41:91:5c:98:b2:dd:9a:9c:7d:0e:42:c4:
                    a7:24:25:87:c8:34:03:59:59:f5:aa:5c:e6:32:86:
                    80:a3:44:02:10:fa:af:8e:a7:f7:95:d5:ae:95:df:
                    cc:c0:40:44:3f:61:aa:c5:c2:a5:0f:2f:ea:dd:3e:
                    b5:be:72:63:51:df:3d:85:0a:08:9a:ae:41:90:3d:
                    33:1f:02:b7:94:90:bb:1a:e9:3e:73:b3:f1:c7:29:
                    c8:3d:d4:84:ad:13:28:1c:e2:7e:ce:97:35:e2:5a:
                    a0:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:77:6C:18:A1:C2:9D:F4:99:6E:C6:F4:9D:67:E8:62:59:CE:F7:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/63cc6b4d-100d-3e2e-ac7e-a94d958c8b79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl

            X509v3 Authority Key Identifier:
                keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.132.144.0-192.132.175.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:45:9f:15:00:b0:d5:10:86:b9:da:98:41:ac:bb:ca:25:e6:
         d5:b1:d9:78:a2:d6:a3:35:d9:50:08:3d:02:17:35:1b:6f:e9:
         3c:18:99:74:da:30:dd:f2:f8:47:cd:cc:a1:7d:7c:f4:01:a7:
         19:66:92:72:ce:38:ea:5e:39:76:66:57:bf:6f:f7:f9:3c:5b:
         3f:4a:a6:98:8e:cf:18:70:04:27:7f:b7:fc:d5:3c:99:90:1f:
         4a:25:58:6f:c3:f2:a5:48:ec:90:74:43:ab:ce:b0:35:4b:50:
         70:07:dc:ca:3c:79:14:69:93:e0:ab:4c:76:7c:ce:97:e6:87:
         3f:9c:a4:6a:1e:4b:aa:be:84:d5:12:12:12:4e:92:0a:14:62:
         0f:24:b6:87:63:cf:5e:15:08:f0:2e:37:69:e4:5c:ca:9a:51:
         15:2c:41:ec:07:4a:5a:44:46:0d:1e:b1:7d:7f:23:c9:60:db:
         8a:2f:5f:ed:95:cc:fc:e1:35:36:ae:91:77:7e:02:ab:38:42:
         65:db:c4:8a:86:c7:ae:24:d7:db:70:a2:cf:b2:f7:03:2a:bf:
         f8:02:f0:98:b4:4e:85:37:06:0a:b4:2a:81:b9:41:3f:35:05:
         74:b6:d4:a5:51:6c:02:cd:8e:e2:2e:0a:ff:b2:54:c1:98:61:
         68:7b:29:b1
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE4gdboQpMWYf7Q5wUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk
YmZhMB4XDTI2MDYxMDE1NTEzNVoXDTI2MDkwODE1NTEzNVowLzEtMCsGA1UEAxMk
NGYzYjYwMjgtMWE0MC00Mzg0LWFkOTMtZDM3NjE4YjE1N2I3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2giCbeacp+kAa/0Nz0KRUcm+bEzsmJcVElV4
4HlVY/P8xDjUovRyUcAvVjctOuhSffwKDKLroyqiiRYVekf3H8K+c77d9uIujQui
lQ6iCXhgFR0rbDUMc0WAwzh0O3p56jdUNg+NFfbKUrLAL7dY6jLJE7LgNUBBa8Lj
qCEbhJAjLErMptjlagk3B4iPIO8BLv43LBrJtQtBkVyYst2anH0OQsSnJCWHyDQD
WVn1qlzmMoaAo0QCEPqvjqf3ldWuld/MwEBEP2GqxcKlDy/q3T61vnJjUd89hQoI
mq5BkD0zHwK3lJC7Guk+c7PxxynIPdSErRMoHOJ+zpc14lqgkQIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFAZ3bBihwp30mW7G9J1n6GJZzvc3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj
MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvNjNjYzZiNGQtMTAwZC0z
ZTJlLWFjN2UtYTk0ZDk1OGM4Yjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2
NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj
ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl
YzA0Y2RiZmEuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBATAhJAD
BATAhKAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAOUWfFQCw1RCGudqYQay7yiXm1bHZeKLWozXZUAg9Ahc1
G2/pPBiZdNow3fL4R83MoX189AGnGWaScs446l45dmZXv2/3+TxbP0qmmI7PGHAE
J3+3/NU8mZAfSiVYb8PypUjskHRDq86wNUtQcAfcyjx5FGmT4KtMdnzOl+aHP5yk
ah5Lqr6E1RISEk6SChRiDyS2h2PPXhUI8C43aeRcyppRFSxB7AdKWkRGDR6xfX8j
yWDbii9f7ZXM/OE1Nq6Rd34CqzhCZdvEiobHriTX23Ciz7L3Ayq/+ALwmLROhTcG
CrQqgblBPzUFdLbUpVFsAs2O4i4K/7JUwZhhaHspsQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:40:03 2026 by rpki-client