Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/256f5a60-acd7-370b-a839-372a2dc4749d.roa
File:                     256f5a60-acd7-370b-a839-372a2dc4749d.roa (raw, json)
Hash identifier:          GyoFV263eGJbG7qG2ITScicFiB7CGWZ7txFzqUcHd1U=
Subject key identifier:   D0:FF:BD:46:94:DF:87:9B:F6:10:00:33:15:A1:2E:97:2C:1F:96:A0
Certificate issuer:       /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c
Certificate serial:       010D0C9F4328584E1E449D57D84D73E8C13ACD40
Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/256f5a60-acd7-370b-a839-372a2dc4749d.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     3756
IP address blocks:        199.109.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:9d:57:d8:4d:73:e8:c1:3a:cd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=92cd8dfe-f40c-4d4d-b06b-eb87eab37b3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f8:d4:5b:23:31:22:e6:cf:4a:a2:3f:7f:8b:
                    90:96:0f:74:3a:65:f8:17:fb:87:4e:b5:65:52:20:
                    39:e3:5e:4f:ed:5d:c6:ee:04:ac:dd:4a:5c:d0:e7:
                    2c:51:47:7a:90:89:a2:12:d6:8a:9f:3f:25:d0:f3:
                    99:5f:1d:9c:8e:96:41:c1:5b:bd:81:1d:b1:6b:e8:
                    cf:24:e6:30:f9:96:36:61:88:82:31:40:97:78:03:
                    2d:fd:ab:60:89:5c:87:a7:9d:d0:b5:8e:c0:70:fd:
                    51:bf:27:70:74:d1:68:9c:17:91:cf:d0:37:93:a6:
                    a7:57:0d:98:20:a7:73:c5:8c:f6:70:8d:cc:ad:f6:
                    03:83:55:29:60:63:87:4a:5f:fd:06:b5:2a:da:5d:
                    aa:1f:5d:84:34:14:e6:4c:5e:44:80:37:25:6b:08:
                    e0:91:78:cd:75:8e:b1:08:fc:62:18:82:f3:ec:be:
                    e3:7a:bf:bc:74:ff:41:fb:e2:fd:41:0a:35:46:42:
                    ea:6d:d5:3c:9b:7b:40:e2:75:c9:a2:8f:8b:9f:1a:
                    e6:83:d2:00:65:b4:e8:be:60:0f:f4:d3:68:7b:93:
                    1f:25:36:bb:8b:ce:a8:bf:ce:2e:6c:b6:e8:c2:71:
                    ae:04:d8:a8:6a:53:f0:7a:d6:b1:15:87:01:4a:2f:
                    79:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:FF:BD:46:94:DF:87:9B:F6:10:00:33:15:A1:2E:97:2C:1F:96:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/256f5a60-acd7-370b-a839-372a2dc4749d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl

            X509v3 Authority Key Identifier:
                keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.109.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:9a:c2:16:65:91:69:25:25:39:d4:fd:c3:ee:33:4c:1c:f1:
         66:a0:13:40:6b:d3:6e:08:40:e6:6c:98:40:84:48:fb:ef:c0:
         53:f2:49:38:54:0a:e2:59:7b:e4:d9:da:dc:69:4e:7d:17:ae:
         1f:d6:4d:25:0c:61:3a:63:cb:84:9e:39:4d:a3:9e:80:26:4c:
         3e:32:83:88:e2:2b:6c:be:a9:61:3b:bb:23:0d:1d:e4:b2:69:
         bf:ed:95:60:df:0f:c9:38:12:15:b2:93:96:eb:4f:e6:e7:db:
         03:47:d6:2b:e5:3a:b8:71:b6:7f:32:72:f8:b1:c8:26:8b:7f:
         e3:11:b2:01:b0:95:25:01:54:53:32:40:1c:62:18:57:b2:49:
         e5:ce:d1:ac:88:58:76:e6:21:a9:71:69:bf:bf:90:8c:03:bd:
         9d:9a:bc:aa:b8:f8:24:00:e6:41:d4:92:a8:1f:e6:92:c2:8c:
         05:8e:cb:3c:f3:35:cb:25:80:2f:74:58:30:04:5b:0e:5b:e4:
         46:8f:66:b5:4d:70:5c:c2:6f:ac:86:ff:f1:f5:35:dc:f7:a9:
         02:89:46:c3:d8:27:19:89:d0:8a:12:13:3a:b5:d8:f9:6a:fb:
         ec:b1:b6:88:a1:f8:01:50:fb:2b:de:10:fe:d4:6b:d1:17:cf:
         b7:17:63:8e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4eRJ1X2E1z6ME6zUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz
ODdjMB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk
OTJjZDhkZmUtZjQwYy00ZDRkLWIwNmItZWI4N2VhYjM3YjNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfjUWyMxIubPSqI/f4uQlg90OmX4F/uHTrVl
UiA5415P7V3G7gSs3Upc0OcsUUd6kImiEtaKnz8l0POZXx2cjpZBwVu9gR2xa+jP
JOYw+ZY2YYiCMUCXeAMt/atgiVyHp53QtY7AcP1RvydwdNFonBeRz9A3k6anVw2Y
IKdzxYz2cI3MrfYDg1UpYGOHSl/9BrUq2l2qH12ENBTmTF5EgDclawjgkXjNdY6x
CPxiGILz7L7jer+8dP9B++L9QQo1RkLqbdU8m3tA4nXJoo+Lnxrmg9IAZbTovmAP
9NNoe5MfJTa7i86ov84ubLbownGuBNioalPwetaxFYcBSi957wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFND/vUaU34eb9hAAMxWhLpcsH5agMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm
NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvMjU2ZjVhNjAtYWNkNy0z
NzBiLWE4MzktMzcyYTJkYzQ3NDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0
ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4
Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy
OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEx23gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG2awhZlkWklJTnU/cPuM0wc8WagE0Br024IQOZsmECESPvvwFPySThU
CuJZe+TZ2txpTn0Xrh/WTSUMYTpjy4SeOU2jnoAmTD4yg4jiK2y+qWE7uyMNHeSy
ab/tlWDfD8k4EhWyk5brT+bn2wNH1ivlOrhxtn8ycvixyCaLf+MRsgGwlSUBVFMy
QBxiGFeySeXO0ayIWHbmIalxab+/kIwDvZ2avKq4+CQA5kHUkqgf5pLCjAWOyzzz
NcslgC90WDAEWw5b5EaPZrVNcFzCb6yG//H1Ndz3qQKJRsPYJxmJ0IoSEzq12Plq
++yxtoih+AFQ+yveEP7Ua9EXz7cXY44=
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:46:48 2026 by rpki-client