Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/6fa964dd-f2d5-3a5d-bd91-93616798a6e2.roa
File:                     6fa964dd-f2d5-3a5d-bd91-93616798a6e2.roa (raw, json)
Hash identifier:          t449Juz8w/3z0Lwlvoqh1TkLG8PVqQ8U93tNxG5CmWQ=
Subject key identifier:   D7:0C:E0:3B:9B:AD:CA:7C:D3:84:48:7A:45:1F:62:F9:DC:AC:29:C0
Certificate issuer:       /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial:       010D0C9F4328584E0005D347C06BF421621F1E6C
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/6fa964dd-f2d5-3a5d-bd91-93616798a6e2.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     212669
IP address blocks:        65.110.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:d3:47:c0:6b:f4:21:62:1f:1e:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=1d9015f2-2edc-49b3-8c27-c969e3760f7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:73:13:bf:c6:3e:f8:a4:c8:a1:1a:58:94:81:
                    36:7c:ab:47:f9:8c:d9:64:e2:24:58:53:0e:d0:47:
                    df:f3:09:d1:90:1d:ac:1b:7b:45:0e:b6:06:f9:0b:
                    dd:27:c6:83:64:1c:d4:a2:49:ec:f6:54:a6:29:bc:
                    12:27:29:50:e9:d9:c1:e9:3f:be:6e:4d:ad:32:39:
                    3c:b1:47:32:47:28:02:ed:a8:98:13:46:b6:57:eb:
                    a5:e7:f0:08:9e:ad:77:01:89:17:e3:30:29:5f:17:
                    b1:65:8b:7d:cb:49:28:09:d3:6c:85:05:19:4a:50:
                    d5:78:ee:36:1f:be:bd:f1:f6:74:09:be:3b:7a:fe:
                    f4:6e:b9:3e:8b:09:cb:fc:85:74:2e:f8:83:69:33:
                    62:e5:74:7c:48:4c:61:a0:36:d9:92:3d:f9:28:76:
                    e5:91:1a:1f:be:28:b8:c8:16:e3:13:1c:af:ee:50:
                    9c:9a:f4:96:35:8d:7f:48:94:16:f9:a0:71:1d:07:
                    6d:84:48:f0:ae:51:f3:50:f0:c8:17:b1:75:17:f7:
                    87:ed:c5:ca:31:80:82:ac:70:d1:0a:5f:75:f5:7f:
                    c2:62:d1:69:d8:fa:65:88:40:2b:78:78:b6:f0:90:
                    0e:87:be:2c:98:d0:8b:9a:6a:d6:fe:60:51:5c:8e:
                    c1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:0C:E0:3B:9B:AD:CA:7C:D3:84:48:7A:45:1F:62:F9:DC:AC:29:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/6fa964dd-f2d5-3a5d-bd91-93616798a6e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl

            X509v3 Authority Key Identifier:
                keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.110.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:19:87:53:fe:a4:aa:17:d6:af:be:07:dd:24:19:ee:b8:09:
         43:3b:d5:21:5c:75:6c:8a:36:19:9a:95:e0:7c:34:9d:dd:27:
         20:75:39:66:a3:89:8e:3c:51:9e:01:26:3a:33:5d:ec:1c:48:
         c7:07:13:76:de:90:6f:c8:42:07:69:97:89:b6:e9:38:9b:87:
         da:29:03:80:02:6e:4b:a6:02:eb:54:8e:db:73:aa:69:ff:aa:
         23:86:91:f5:5d:c2:96:ed:ee:d9:3e:62:70:f5:66:0f:71:a4:
         0d:21:cd:68:c7:f5:d4:18:b6:25:3e:90:64:bb:80:6b:58:74:
         95:92:05:8e:c4:2c:0c:12:c1:b0:af:70:46:d0:95:24:44:1b:
         22:3d:3b:b3:7b:8b:f6:36:e1:98:ae:95:39:74:97:cc:be:11:
         4a:db:18:f0:c8:a5:72:67:e8:66:d3:cc:95:a1:8e:b1:ec:54:
         03:cc:0e:1d:c9:e9:97:48:20:ea:f8:a3:7e:7e:ea:e3:48:2f:
         c4:95:5e:cc:9d:8f:90:70:48:0a:cd:e8:69:fd:2e:b4:79:56:
         cc:87:25:92:08:ca:b3:4f:24:48:7e:00:b1:e8:89:87:ea:2d:
         b1:95:97:10:66:46:f6:0b:9a:f5:7a:8b:ca:a8:e0:00:6c:35:
         eb:a6:9d:61
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ABdNHwGv0IWIfHmwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjBlOTcyZTctYWUxZS00NDhjLThlNmMtOGY4MWY3M2I3
N2ExMB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk
MWQ5MDE1ZjItMmVkYy00OWIzLThjMjctYzk2OWUzNzYwZjdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHMTv8Y++KTIoRpYlIE2fKtH+YzZZOIkWFMO
0Eff8wnRkB2sG3tFDrYG+QvdJ8aDZBzUokns9lSmKbwSJylQ6dnB6T++bk2tMjk8
sUcyRygC7aiYE0a2V+ul5/AInq13AYkX4zApXxexZYt9y0koCdNshQUZSlDVeO42
H7698fZ0Cb47ev70brk+iwnL/IV0LviDaTNi5XR8SExhoDbZkj35KHblkRofvii4
yBbjExyv7lCcmvSWNY1/SJQW+aBxHQdthEjwrlHzUPDIF7F1F/eH7cXKMYCCrHDR
Cl919X/CYtFp2PpliEAreHi28JAOh74smNCLmmrW/mBRXI7BEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNcM4Dubrcp804RIekUfYvncrCnAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5
NzJlNy1hZTFlLTQ0OGMtOGU2Yy04ZjgxZjczYjc3YTEvNmZhOTY0ZGQtZjJkNS0z
YTVkLWJkOTEtOTM2MTY3OThhNmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjBlOTcyZTctYWUxZS00NDhjLThl
NmMtOGY4MWY3M2I3N2ExLzIwZTk3MmU3LWFlMWUtNDQ4Yy04ZTZjLThmODFmNzNi
NzdhMS5jcmwwHwYDVR0jBBgwFoAU9m6h5/hh+dd0ACy7mBw7ijSGX0cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5NzJlNy1hZTFlLTQ0OGMtOGU2Yy04Zjgx
ZjczYjc3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQW4pMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABsZh1P+pKoX1q++B90kGe64CUM71SFcdWyKNhmaleB8NJ3dJyB1OWaj
iY48UZ4BJjozXewcSMcHE3bekG/IQgdpl4m26Tibh9opA4ACbkumAutUjttzqmn/
qiOGkfVdwpbt7tk+YnD1Zg9xpA0hzWjH9dQYtiU+kGS7gGtYdJWSBY7ELAwSwbCv
cEbQlSREGyI9O7N7i/Y24ZiulTl0l8y+EUrbGPDIpXJn6GbTzJWhjrHsVAPMDh3J
6ZdIIOr4o35+6uNIL8SVXsydj5BwSArN6Gn9LrR5VsyHJZIIyrNPJEh+ALHoiYfq
LbGVlxBmRvYLmvV6i8qo4ABsNeumnWE=
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:58:14 2026 by rpki-client