Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b6ead6d2-ec85-3a82-b502-55fb79fe5173.roa
File:                     b6ead6d2-ec85-3a82-b502-55fb79fe5173.roa (raw, json)
Hash identifier:          d93X1c379uHOqEI22QoWiQSgSlRJtGIbWd3Ww8KbWNM=
Subject key identifier:   1D:F1:0D:0B:E1:40:80:E8:82:6A:62:1C:6E:DF:22:E4:F2:86:84:25
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584EA7970D0A748FD1974AC982C0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b6ead6d2-ec85-3a82-b502-55fb79fe5173.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     20197
IP address blocks:        204.84.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:0d:0a:74:8f:d1:97:4a:c9:82:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=5f74e039-bd9c-45cf-ac62-2d7dc825fcdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ff:59:c8:ab:73:1b:1e:d0:7b:51:6a:09:3a:
                    8a:d3:46:30:99:47:a4:2a:fa:af:6c:40:05:08:ff:
                    b0:df:65:10:13:d0:af:55:5b:34:cb:f9:35:76:1d:
                    88:c8:34:aa:b7:00:f6:1e:9b:be:4b:f9:79:ba:99:
                    1c:b7:84:b4:43:f1:54:13:15:3f:13:23:ec:14:67:
                    68:5a:18:36:11:6f:bc:58:d4:84:0f:4c:8d:90:28:
                    51:aa:d4:4b:25:f1:da:cf:ee:e4:2e:63:3c:02:8c:
                    35:f6:df:c5:16:8d:11:c5:65:e2:93:ab:bc:c8:67:
                    cb:a1:7a:f2:1d:71:44:ec:a2:8a:7e:2f:f5:fb:d9:
                    c4:39:c1:bf:a1:fd:46:a2:20:aa:ba:55:9a:45:1e:
                    e2:c4:15:4b:29:89:90:f9:e1:a3:36:b6:58:00:72:
                    15:f6:4b:dd:da:ce:23:bc:e7:3c:2c:3f:ac:95:c0:
                    5f:77:1d:f1:66:41:b4:31:45:cb:ce:c7:d2:ff:84:
                    96:ba:fb:54:18:cf:9e:6b:5c:0f:ab:62:a3:0b:dd:
                    e6:86:4b:54:d4:6a:bc:1c:dd:df:a3:1b:ea:9b:70:
                    da:fe:47:c2:f6:10:50:a6:5b:16:4a:7b:25:c6:94:
                    28:b1:4c:97:56:66:d7:ff:f1:a4:ee:8b:4b:3e:14:
                    d8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:F1:0D:0B:E1:40:80:E8:82:6A:62:1C:6E:DF:22:E4:F2:86:84:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b6ead6d2-ec85-3a82-b502-55fb79fe5173.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.84.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:c9:6a:88:e8:c2:79:f3:62:ed:22:ae:9b:af:47:29:35:6b:
         aa:6b:e1:f9:35:02:fa:d2:3d:f4:4a:e0:09:15:92:b6:1b:e2:
         12:6d:61:3b:f6:89:7e:85:6f:51:fc:29:95:ea:be:8b:63:8d:
         78:d8:aa:ce:6d:77:fb:77:ca:4a:58:89:04:69:04:a1:c5:b2:
         67:07:a9:7c:8f:00:d7:58:d6:55:4c:7c:47:8a:d6:de:7b:33:
         d3:7d:0b:70:5e:58:0b:a2:f5:00:12:b4:07:96:dd:a0:a0:71:
         0f:85:43:a2:d3:f0:e8:2f:c7:bd:bb:a1:5c:ef:a5:c8:e7:5e:
         e6:ad:5d:38:63:da:7a:c1:e7:74:7d:56:97:1e:9f:6d:51:01:
         22:73:9a:68:88:5e:68:9a:08:b9:5b:71:23:25:94:db:ea:16:
         72:af:80:e3:a9:10:16:57:f5:a8:88:33:31:7a:20:5f:87:1f:
         01:dc:47:14:7d:4c:74:0b:ef:18:59:91:06:1c:90:42:24:5d:
         48:ca:6b:64:14:27:ea:16:23:49:1b:9f:bd:1b:63:ff:73:4a:
         53:fc:63:66:52:6c:85:7a:6c:44:60:ee:ca:58:ee:7e:dd:b6:
         07:1f:d2:04:5e:8d:c9:fe:35:aa:6a:e0:f4:87:ee:84:c5:1e:
         2e:89:50:42
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlw0KdI/Rl0rJgsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NWY3NGUwMzktYmQ5Yy00NWNmLWFjNjItMmQ3ZGM4MjVmY2RkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApP9ZyKtzGx7Qe1FqCTqK00YwmUekKvqvbEAF
CP+w32UQE9CvVVs0y/k1dh2IyDSqtwD2Hpu+S/l5upkct4S0Q/FUExU/EyPsFGdo
Whg2EW+8WNSED0yNkChRqtRLJfHaz+7kLmM8Aow19t/FFo0RxWXik6u8yGfLoXry
HXFE7KKKfi/1+9nEOcG/of1GoiCqulWaRR7ixBVLKYmQ+eGjNrZYAHIV9kvd2s4j
vOc8LD+slcBfdx3xZkG0MUXLzsfS/4SWuvtUGM+ea1wPq2KjC93mhktU1Gq8HN3f
oxvqm3Da/kfC9hBQplsWSnslxpQosUyXVmbX//Gk7otLPhTYGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB3xDQvhQIDogmpiHG7fIuTyhoQlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvYjZlYWQ2ZDItZWM4NS0z
YTgyLWI1MDItNTVmYjc5ZmU1MTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzFQGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAITJaojownnzYu0irpuvRyk1a6pr4fk1AvrSPfRK4AkVkrYb4hJtYTv2
iX6Fb1H8KZXqvotjjXjYqs5td/t3ykpYiQRpBKHFsmcHqXyPANdY1lVMfEeK1t57
M9N9C3BeWAui9QAStAeW3aCgcQ+FQ6LT8Ogvx727oVzvpcjnXuatXThj2nrB53R9
Vpcen21RASJzmmiIXmiaCLlbcSMllNvqFnKvgOOpEBZX9aiIMzF6IF+HHwHcRxR9
THQL7xhZkQYckEIkXUjKa2QUJ+oWI0kbn70bY/9zSlP8Y2ZSbIV6bERg7spY7n7d
tgcf0gRejcn+Napq4PSH7oTFHi6JUEI=
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:12:34 2026 by rpki-client