Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/a90df08e-d35e-3639-9829-66d383ac049f.roa
File:                     a90df08e-d35e-3639-9829-66d383ac049f.roa (raw, json)
Hash identifier:          KsqbVbqj5yf0rc+73QMsn+kRLFSMtoLgJdJbbNAQMIg=
Subject key identifier:   38:39:2C:D1:25:86:BE:12:3B:47:BC:77:01:6F:E5:4D:98:20:76:11
Certificate issuer:       /CN=0699cec8-3851-41f8-aee8-2e225865699c
Certificate serial:       010D0C9F4328584E09CB42DACFDDFFB9396723C0
Authority key identifier: 04:3A:13:A4:9A:F1:19:6C:60:B7:74:79:3E:AA:82:F6:12:4B:E6:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/a90df08e-d35e-3639-9829-66d383ac049f.roa
Signing time:             Tue 02 Jun 2026 13:00:10 +0000
ROA not before:           Tue 02 Jun 2026 13:00:10 +0000
ROA not after:            Mon 31 Aug 2026 13:00:10 +0000
asID:                     11911
IP address blocks:        170.61.235.0/24 maxlen: 24
                          170.61.237.0/24 maxlen: 24
                          170.61.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/0699cec8-3851-41f8-aee8-2e225865699c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/0699cec8-3851-41f8-aee8-2e225865699c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:09:cb:42:da:cf:dd:ff:b9:39:67:23:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0699cec8-3851-41f8-aee8-2e225865699c
        Validity
            Not Before: Jun  2 13:00:10 2026 GMT
            Not After : Aug 31 13:00:10 2026 GMT
        Subject: CN=b27fd86f-e46b-4d5e-a646-657e706fba7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d4:f3:89:37:18:24:ce:61:c0:c8:c3:2a:c2:
                    a6:62:46:d8:0a:4e:1d:e0:1a:fa:5b:e4:40:d1:e8:
                    7b:b5:3c:8c:f0:e8:22:8c:02:48:4e:21:a8:e0:63:
                    36:22:a7:c6:2d:11:3e:00:b4:a9:ad:c2:da:8a:3c:
                    72:52:9e:2c:ef:37:bd:ca:91:cb:a0:81:e9:3d:9e:
                    9d:f0:d8:18:39:8e:74:85:14:1e:f9:44:ba:56:87:
                    da:62:1f:5e:4b:65:7f:e7:ca:dd:64:af:90:56:5e:
                    52:52:17:ab:06:10:df:e4:d2:7a:62:78:ad:97:45:
                    42:43:9c:e0:1a:2e:0b:1a:4b:01:c1:5d:bb:ae:09:
                    5a:2e:27:d5:2c:2b:9a:96:44:db:8b:be:73:58:2a:
                    ae:df:cb:96:c0:5a:c9:97:2e:7a:bf:d9:e0:f9:34:
                    eb:42:61:58:11:9c:eb:e3:af:af:09:e3:67:33:ac:
                    6f:b5:b3:54:e2:63:4e:2f:40:90:de:a9:c9:6c:54:
                    c1:5f:9b:d5:68:f8:57:48:c4:ec:78:76:7a:20:0d:
                    b4:3c:c7:7c:12:18:29:55:65:41:30:f2:26:54:6c:
                    52:86:16:a0:c1:58:e3:8b:b8:7a:cf:a3:ef:04:b2:
                    cd:c5:33:61:ed:86:aa:95:8a:62:fc:ff:e5:4f:70:
                    33:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:39:2C:D1:25:86:BE:12:3B:47:BC:77:01:6F:E5:4D:98:20:76:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/a90df08e-d35e-3639-9829-66d383ac049f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/0699cec8-3851-41f8-aee8-2e225865699c.crl

            X509v3 Authority Key Identifier:
                keyid:04:3A:13:A4:9A:F1:19:6C:60:B7:74:79:3E:AA:82:F6:12:4B:E6:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.61.235.0/24
                  170.61.237.0/24
                  170.61.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:85:9a:8c:68:59:e1:fe:0b:b6:c7:9d:dd:d6:ad:b3:d9:19:
         a7:5b:32:cc:02:44:3d:e0:61:12:7a:c7:55:fd:bc:d7:b8:61:
         9b:f5:4d:72:16:0b:a7:f9:d9:8b:76:f0:13:06:00:29:96:b0:
         c1:67:27:8a:ae:ea:8a:6b:e8:89:3c:1c:db:74:5b:51:b1:a9:
         3a:c0:0a:89:2c:f9:95:7e:9f:b2:90:61:8c:d9:e9:78:ab:d8:
         dd:87:a8:1c:58:49:1e:54:8c:b6:de:e4:c6:25:91:46:75:52:
         7a:56:0e:79:5f:a1:4f:79:07:e3:6c:c6:bb:5a:2e:14:ab:c6:
         f9:92:10:17:db:29:80:68:4b:0e:40:f6:43:03:44:84:6f:ab:
         a4:49:ae:51:cb:60:1b:f4:4c:df:9d:61:a4:2a:8b:3d:d4:bc:
         ef:12:fc:6c:24:3e:28:50:66:7e:42:ad:63:fb:a9:5b:ee:42:
         73:77:3e:c1:e6:0b:07:a6:a1:a4:8f:9b:5e:89:ec:c0:ad:c5:
         87:63:96:29:2c:eb:43:ab:d6:b3:02:77:35:8a:fd:81:a5:97:
         9d:52:32:9a:8a:f1:fc:87:32:79:91:8a:c6:1e:af:99:99:64:
         ae:e3:71:a0:89:56:f3:43:1b:1e:26:d1:4c:7e:a2:d1:46:f4:
         0e:30:79:b6
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE4Jy0Laz93/uTlnI8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDY5OWNlYzgtMzg1MS00MWY4LWFlZTgtMmUyMjU4NjU2
OTljMB4XDTI2MDYwMjEzMDAxMFoXDTI2MDgzMTEzMDAxMFowLzEtMCsGA1UEAxMk
YjI3ZmQ4NmYtZTQ2Yi00ZDVlLWE2NDYtNjU3ZTcwNmZiYTdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29TziTcYJM5hwMjDKsKmYkbYCk4d4Br6W+RA
0eh7tTyM8OgijAJITiGo4GM2IqfGLRE+ALSprcLaijxyUp4s7ze9ypHLoIHpPZ6d
8NgYOY50hRQe+US6VofaYh9eS2V/58rdZK+QVl5SUherBhDf5NJ6Ynitl0VCQ5zg
Gi4LGksBwV27rglaLifVLCualkTbi75zWCqu38uWwFrJly56v9ng+TTrQmFYEZzr
46+vCeNnM6xvtbNU4mNOL0CQ3qnJbFTBX5vVaPhXSMTseHZ6IA20PMd8EhgpVWVB
MPImVGxShhagwVjji7h6z6PvBLLNxTNh7YaqlYpi/P/lT3AzIQIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFDg5LNElhr4SO0e8dwFv5U2YIHYRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8wNjk5
Y2VjOC0zODUxLTQxZjgtYWVlOC0yZTIyNTg2NTY5OWMvYTkwZGYwOGUtZDM1ZS0z
NjM5LTk4MjktNjZkMzgzYWMwNDlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMDY5OWNlYzgtMzg1MS00MWY4LWFl
ZTgtMmUyMjU4NjU2OTljLzA2OTljZWM4LTM4NTEtNDFmOC1hZWU4LTJlMjI1ODY1
Njk5Yy5jcmwwHwYDVR0jBBgwFoAUBDoTpJrxGWxgt3R5PqqC9hJL5p0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi8wNjk5Y2VjOC0zODUxLTQxZjgtYWVlOC0yZTIy
NTg2NTY5OWMuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAqj3rAwQA
qj3tAwQAqj3vMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBABSFmoxoWeH+C7bHnd3WrbPZGadbMswCRD3gYRJ6
x1X9vNe4YZv1TXIWC6f52Yt28BMGACmWsMFnJ4qu6opr6Ik8HNt0W1GxqTrACoks
+ZV+n7KQYYzZ6Xir2N2HqBxYSR5UjLbe5MYlkUZ1UnpWDnlfoU95B+NsxrtaLhSr
xvmSEBfbKYBoSw5A9kMDRIRvq6RJrlHLYBv0TN+dYaQqiz3UvO8S/GwkPihQZn5C
rWP7qVvuQnN3PsHmCwemoaSPm16J7MCtxYdjliks60Or1rMCdzWK/YGll51SMpqK
8fyHMnmRisYer5mZZK7jcaCJVvNDGx4m0Ux+otFG9A4webY=
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:50:46 2026 by rpki-client