Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/d0d0cc2d-a574-3bd7-a8b6-bfe473605728.roa
File:                     d0d0cc2d-a574-3bd7-a8b6-bfe473605728.roa (raw, json)
Hash identifier:          Ifi16o9hrC8zfmrxtGe9ucQ7sycXw8Lko4ZBB5g2cPk=
Subject key identifier:   AC:7E:60:6E:9F:12:29:E3:D5:62:2A:55:0C:30:1E:AB:D2:B6:A6:30
Certificate issuer:       /CN=6719c5f2-5819-4972-b430-9d76eb88cb36
Certificate serial:       010D0C9F4328584DEC7B2B6D0B586912BA97EA00
Authority key identifier: D2:1B:81:45:14:AD:B5:ED:A9:8B:2D:BF:1E:FA:41:07:50:54:AA:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/d0d0cc2d-a574-3bd7-a8b6-bfe473605728.roa
Signing time:             Sat 23 May 2026 01:00:25 +0000
ROA not before:           Sat 23 May 2026 01:00:25 +0000
ROA not after:            Fri 21 Aug 2026 01:00:25 +0000
asID:                     397735
IP address blocks:        198.175.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/6719c5f2-5819-4972-b430-9d76eb88cb36.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/6719c5f2-5819-4972-b430-9d76eb88cb36.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ec:7b:2b:6d:0b:58:69:12:ba:97:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6719c5f2-5819-4972-b430-9d76eb88cb36
        Validity
            Not Before: May 23 01:00:25 2026 GMT
            Not After : Aug 21 01:00:25 2026 GMT
        Subject: CN=21b828bf-9047-4f5a-b5f9-ddc22001e1fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:be:3c:d9:79:b3:02:45:05:8f:32:a9:85:75:
                    db:c6:20:16:b6:d9:60:f1:1b:e6:cd:64:85:21:a8:
                    b1:c2:49:80:31:84:74:34:6a:95:b9:65:6f:b7:b2:
                    0c:22:d5:2d:cb:25:69:c1:6b:1b:db:93:ac:e5:71:
                    61:a8:b1:21:25:1f:55:a4:7d:0a:5f:28:cd:db:20:
                    29:23:01:69:d7:4f:84:bb:1d:d6:db:6c:26:6e:89:
                    09:ca:fe:15:f3:a1:c3:50:f4:6c:a2:c6:34:45:eb:
                    42:37:0f:e3:2b:6a:17:c8:49:00:b9:77:6c:69:f9:
                    12:98:a4:4e:a0:7e:4a:0f:26:09:01:ab:73:de:ca:
                    f9:5b:81:9f:f9:80:55:6e:09:a9:c1:9d:1e:5f:62:
                    59:87:91:20:a6:f3:53:d5:1f:25:ed:ec:7a:64:06:
                    2e:6e:bc:0d:ee:05:19:5e:ef:3a:fd:45:0e:d6:fa:
                    06:04:0d:5e:6d:19:df:07:f3:27:22:2c:a4:d4:63:
                    ec:e9:4d:d1:3c:45:68:a3:3f:f3:90:76:a8:1b:99:
                    b4:72:78:08:88:e3:53:94:37:4f:c1:f1:82:70:5e:
                    a0:d0:ef:b0:03:ba:2a:4d:7b:d8:bd:94:5f:45:ce:
                    69:0f:6b:54:0e:12:80:70:21:a6:3b:de:c1:46:e0:
                    04:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:7E:60:6E:9F:12:29:E3:D5:62:2A:55:0C:30:1E:AB:D2:B6:A6:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/d0d0cc2d-a574-3bd7-a8b6-bfe473605728.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/6719c5f2-5819-4972-b430-9d76eb88cb36.crl

            X509v3 Authority Key Identifier:
                keyid:D2:1B:81:45:14:AD:B5:ED:A9:8B:2D:BF:1E:FA:41:07:50:54:AA:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.175.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:76:bb:fc:e9:49:ac:c2:7a:f4:5e:99:46:8b:f8:a2:31:03:
         cd:69:50:ee:a1:fb:ae:0c:24:be:3a:0d:5c:22:e6:51:c0:e2:
         6c:94:86:6e:2e:44:45:6c:c9:d6:38:71:87:51:c2:44:f0:bb:
         fd:ff:4a:ea:e3:91:52:e6:30:5f:d9:b3:5b:8f:cb:82:f5:07:
         d9:48:e9:da:5d:30:26:06:22:ea:78:c8:85:52:3f:08:a1:52:
         93:47:69:66:14:aa:e1:78:12:a0:c5:a0:d8:34:f8:4c:4b:22:
         f4:97:ad:a7:96:a2:78:34:10:c1:42:78:23:ef:e8:e7:18:1e:
         a3:38:98:bd:75:00:32:cc:6f:e7:2d:58:57:09:99:95:4b:63:
         91:73:86:3a:ca:49:42:11:55:59:b1:34:16:a7:7c:d3:f3:54:
         be:51:f2:0d:17:34:1c:13:a5:59:98:39:dc:e0:79:b9:f3:37:
         b7:b4:fb:96:19:56:48:d7:73:92:b1:77:6e:a9:81:0e:bf:43:
         7e:4c:36:52:cf:14:e7:49:ce:ed:58:13:88:db:23:2c:f0:7a:
         de:e9:82:17:b7:f8:59:4a:3f:ab:c9:e4:c0:17:80:ea:83:78:
         ca:67:91:13:dd:2f:08:84:9f:40:79:c3:88:3e:6b:af:5f:85:
         53:8f:0e:83
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3seyttC1hpErqX6gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjcxOWM1ZjItNTgxOS00OTcyLWI0MzAtOWQ3NmViODhj
YjM2MB4XDTI2MDUyMzAxMDAyNVoXDTI2MDgyMTAxMDAyNVowLzEtMCsGA1UEAxMk
MjFiODI4YmYtOTA0Ny00ZjVhLWI1ZjktZGRjMjIwMDFlMWZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApb482XmzAkUFjzKphXXbxiAWttlg8RvmzWSF
IaixwkmAMYR0NGqVuWVvt7IMItUtyyVpwWsb25Os5XFhqLEhJR9VpH0KXyjN2yAp
IwFp10+Eux3W22wmbokJyv4V86HDUPRsosY0RetCNw/jK2oXyEkAuXdsafkSmKRO
oH5KDyYJAatz3sr5W4Gf+YBVbgmpwZ0eX2JZh5EgpvNT1R8l7ex6ZAYubrwN7gUZ
Xu86/UUO1voGBA1ebRnfB/MnIiyk1GPs6U3RPEVooz/zkHaoG5m0cngIiONTlDdP
wfGCcF6g0O+wA7oqTXvYvZRfRc5pD2tUDhKAcCGmO97BRuAEIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKx+YG6fEinj1WIqVQwwHqvStqYwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82NzE5
YzVmMi01ODE5LTQ5NzItYjQzMC05ZDc2ZWI4OGNiMzYvZDBkMGNjMmQtYTU3NC0z
YmQ3LWE4YjYtYmZlNDczNjA1NzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjcxOWM1ZjItNTgxOS00OTcyLWI0
MzAtOWQ3NmViODhjYjM2LzY3MTljNWYyLTU4MTktNDk3Mi1iNDMwLTlkNzZlYjg4
Y2IzNi5jcmwwHwYDVR0jBBgwFoAU0huBRRStte2piy2/HvpBB1BUquwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi82NzE5YzVmMi01ODE5LTQ5NzItYjQzMC05ZDc2
ZWI4OGNiMzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxq8UMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFl2u/zpSazCevRemUaL+KIxA81pUO6h+64MJL46DVwi5lHA4myUhm4u
REVsydY4cYdRwkTwu/3/SurjkVLmMF/Zs1uPy4L1B9lI6dpdMCYGIup4yIVSPwih
UpNHaWYUquF4EqDFoNg0+ExLIvSXraeWong0EMFCeCPv6OcYHqM4mL11ADLMb+ct
WFcJmZVLY5FzhjrKSUIRVVmxNBanfNPzVL5R8g0XNBwTpVmYOdzgebnzN7e0+5YZ
VkjXc5Kxd26pgQ6/Q35MNlLPFOdJzu1YE4jbIyzwet7pghe3+FlKP6vJ5MAXgOqD
eMpnkRPdLwiEn0B5w4g+a69fhVOPDoM=
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:43:41 2026 by rpki-client