Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/f7c54606-896c-3da2-92d6-55d74ab28213.roa
File:                     f7c54606-896c-3da2-92d6-55d74ab28213.roa (raw, json)
Hash identifier:          SWvvFpA3gGGUgY2vl2PXidskaZ9rLviwauVKbrkUIlI=
Subject key identifier:   7A:C1:AF:82:C6:D1:C8:8E:08:A3:AD:D7:E6:78:18:B4:A3:07:B9:78
Certificate issuer:       /CN=6bf65f5a-6dd3-4c5d-9a94-33050d9022d6
Certificate serial:       010D0C9F4328584E070097BF2D76D746701CF780
Authority key identifier: F2:A4:2B:DE:FA:FE:77:93:4E:14:AF:9C:ED:16:EC:DD:01:9F:E4:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/f7c54606-896c-3da2-92d6-55d74ab28213.roa
Signing time:             Mon 01 Jun 2026 13:00:10 +0000
ROA not before:           Mon 01 Jun 2026 13:00:10 +0000
ROA not after:            Sun 30 Aug 2026 13:00:10 +0000
asID:                     63221
IP address blocks:        192.55.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:07:00:97:bf:2d:76:d7:46:70:1c:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bf65f5a-6dd3-4c5d-9a94-33050d9022d6
        Validity
            Not Before: Jun  1 13:00:10 2026 GMT
            Not After : Aug 30 13:00:10 2026 GMT
        Subject: CN=d1000dd2-2700-480b-b32e-12697bbbe86b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b2:4e:28:62:68:4b:9f:53:8b:ce:35:47:f7:
                    10:22:9d:65:2e:81:13:ab:8c:ba:a3:cc:b9:3d:d3:
                    0f:44:30:4e:56:08:a6:f2:05:d3:65:8d:16:54:10:
                    d2:65:0c:b9:2b:21:64:7c:24:9b:46:a2:fb:6e:7a:
                    c1:d6:ae:15:d7:8f:b1:11:8c:6f:2b:da:b3:44:28:
                    1f:dc:75:35:23:a0:0f:3b:a6:d7:03:4e:c3:94:a2:
                    e6:e1:8a:9a:bc:ae:03:17:f5:bb:33:5e:bc:e8:80:
                    65:2a:02:fb:3a:97:ea:9f:cf:98:c4:65:97:1e:79:
                    d2:7a:2e:39:40:3f:1c:59:b7:94:19:bc:59:4c:70:
                    de:2b:ce:f8:54:e4:1b:1b:a7:16:27:3a:62:e4:e1:
                    a8:cd:ee:12:24:9f:e8:66:fe:58:5a:de:de:2d:10:
                    0c:2b:27:78:bf:66:d1:92:07:8d:16:e0:c6:bb:3c:
                    b4:f1:0b:6e:73:36:51:aa:82:2a:ce:91:6c:4f:1d:
                    f1:70:f0:3c:c1:01:ae:9c:87:53:98:f4:f7:fe:45:
                    fc:80:00:72:d0:d5:02:33:8b:b0:5a:04:fb:87:96:
                    56:e0:cc:4f:af:0a:7c:78:85:a4:97:24:52:26:a4:
                    ed:77:84:70:1a:c6:f6:c6:9a:ef:f4:0b:81:90:96:
                    9d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C1:AF:82:C6:D1:C8:8E:08:A3:AD:D7:E6:78:18:B4:A3:07:B9:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/f7c54606-896c-3da2-92d6-55d74ab28213.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.crl

            X509v3 Authority Key Identifier:
                keyid:F2:A4:2B:DE:FA:FE:77:93:4E:14:AF:9C:ED:16:EC:DD:01:9F:E4:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.55.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:e5:af:0d:e2:c1:39:13:90:5e:93:c9:66:73:fd:a3:57:6d:
         33:c7:c8:33:b7:f5:d7:b8:4a:bb:4d:95:d2:d8:d8:1b:08:6c:
         d8:a9:ad:68:75:03:02:02:0a:f2:81:0c:52:ec:9f:b2:43:5e:
         52:70:d4:8c:0b:95:a8:16:c0:0e:f0:66:92:9a:8f:5d:a2:92:
         af:2f:fc:c5:c4:cd:22:3b:1a:db:c4:da:33:52:e3:d9:74:3f:
         e8:cf:af:43:f1:ed:4d:41:71:8d:6a:65:dc:99:7b:bd:20:31:
         d7:e3:12:80:81:a8:f6:06:25:85:32:cc:a5:fc:d3:be:1c:31:
         41:77:d2:72:8e:9a:dc:c4:22:13:9a:ef:8c:2e:40:e4:ba:a9:
         78:1b:fb:ee:50:c2:dc:69:15:c0:92:bd:8b:a6:08:61:aa:ff:
         42:52:c9:c0:36:f1:6f:1f:f4:08:a3:1e:f5:94:3f:91:ea:2b:
         e4:41:ea:f0:9b:5c:54:78:23:09:72:dd:c3:4f:be:32:f0:3c:
         5f:83:3c:fa:e7:47:9b:f2:e0:b1:17:61:e4:16:30:7e:39:f1:
         d9:2a:ac:78:af:96:c1:51:8b:b6:2a:74:a3:e4:56:8f:13:5a:
         e9:f4:1c:07:13:f1:30:04:9c:4d:8f:76:9a:94:38:ad:a5:ad:
         26:85:ea:c8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4HAJe/LXbXRnAc94AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmJmNjVmNWEtNmRkMy00YzVkLTlhOTQtMzMwNTBkOTAy
MmQ2MB4XDTI2MDYwMTEzMDAxMFoXDTI2MDgzMDEzMDAxMFowLzEtMCsGA1UEAxMk
ZDEwMDBkZDItMjcwMC00ODBiLWIzMmUtMTI2OTdiYmJlODZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbJOKGJoS59Ti841R/cQIp1lLoETq4y6o8y5
PdMPRDBOVgim8gXTZY0WVBDSZQy5KyFkfCSbRqL7bnrB1q4V14+xEYxvK9qzRCgf
3HU1I6APO6bXA07DlKLm4YqavK4DF/W7M1686IBlKgL7Opfqn8+YxGWXHnnSei45
QD8cWbeUGbxZTHDeK874VOQbG6cWJzpi5OGoze4SJJ/oZv5YWt7eLRAMKyd4v2bR
kgeNFuDGuzy08QtuczZRqoIqzpFsTx3xcPA8wQGunIdTmPT3/kX8gABy0NUCM4uw
WgT7h5ZW4MxPrwp8eIWklyRSJqTtd4RwGsb2xprv9AuBkJadjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHrBr4LG0ciOCKOt1+Z4GLSjB7l4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82YmY2
NWY1YS02ZGQzLTRjNWQtOWE5NC0zMzA1MGQ5MDIyZDYvZjdjNTQ2MDYtODk2Yy0z
ZGEyLTkyZDYtNTVkNzRhYjI4MjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmJmNjVmNWEtNmRkMy00YzVkLTlh
OTQtMzMwNTBkOTAyMmQ2LzZiZjY1ZjVhLTZkZDMtNGM1ZC05YTk0LTMzMDUwZDkw
MjJkNi5jcmwwHwYDVR0jBBgwFoAU8qQr3vr+d5NOFK+c7Rbs3QGf5MQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82YmY2NWY1YS02ZGQzLTRjNWQtOWE5NC0zMzA1
MGQ5MDIyZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDf3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACHlrw3iwTkTkF6TyWZz/aNXbTPHyDO39de4SrtNldLY2BsIbNiprWh1
AwICCvKBDFLsn7JDXlJw1IwLlagWwA7wZpKaj12ikq8v/MXEzSI7GtvE2jNS49l0
P+jPr0Px7U1BcY1qZdyZe70gMdfjEoCBqPYGJYUyzKX8074cMUF30nKOmtzEIhOa
74wuQOS6qXgb++5QwtxpFcCSvYumCGGq/0JSycA28W8f9AijHvWUP5HqK+RB6vCb
XFR4Iwly3cNPvjLwPF+DPPrnR5vy4LEXYeQWMH458dkqrHivlsFRi7YqdKPkVo8T
Wun0HAcT8TAEnE2PdpqUOK2lrSaF6sg=
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:13:27 2026 by rpki-client