Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59/6c6804ba-4fab-36a2-820d-0cbd9797e83c.roa
File:                     6c6804ba-4fab-36a2-820d-0cbd9797e83c.roa (raw, json)
Hash identifier:          nVfdCOuq3cV8MCZwZf4WmyA7zNVO3Hvz81N0CmFZdgE=
Subject key identifier:   4B:A3:70:8D:68:1F:D7:A7:C5:D0:B2:56:79:E8:EE:6A:DB:60:41:81
Certificate issuer:       /CN=75d2cba5-acec-4ba8-ade7-0f83a6aefd59
Certificate serial:       010D0C9F4328584C8ABCD6A6B2EF0912E1663200
Authority key identifier: 0B:42:83:AD:39:29:A6:89:DF:8C:7F:D7:13:47:46:6F:8F:CB:EF:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59/6c6804ba-4fab-36a2-820d-0cbd9797e83c.roa
Signing time:             Fri 16 Jan 2026 07:56:41 +0000
ROA not before:           Fri 16 Jan 2026 07:56:41 +0000
ROA not after:            Thu 16 Apr 2026 06:56:41 +0000
asID:                     27345
IP address blocks:        23.170.24.0/24 maxlen: 24
                          155.103.196.0/22 maxlen: 22
                          2602:f9aa::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59/75d2cba5-acec-4ba8-ade7-0f83a6aefd59.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59/75d2cba5-acec-4ba8-ade7-0f83a6aefd59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:8a:bc:d6:a6:b2:ef:09:12:e1:66:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75d2cba5-acec-4ba8-ade7-0f83a6aefd59
        Validity
            Not Before: Jan 16 07:56:41 2026 GMT
            Not After : Apr 16 06:56:41 2026 GMT
        Subject: CN=92ab0405-4833-4c8e-b63f-fbdbc51c3be7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9a:4c:3c:9b:51:f5:d1:af:24:d3:a8:31:c3:
                    80:d1:7c:00:c8:0a:6a:7c:26:a1:ff:77:d6:7b:eb:
                    61:f4:a7:62:b8:2b:f2:67:18:de:55:06:1f:c5:71:
                    3f:e4:dd:87:b5:a1:50:0c:3d:71:2d:24:2b:be:84:
                    60:82:3c:a6:74:55:05:e6:25:19:13:f6:c2:0d:ae:
                    92:c2:8b:2c:d5:dc:cc:87:08:16:84:2d:96:03:7a:
                    f7:49:e8:61:58:65:8b:55:96:54:a6:ee:46:3a:29:
                    96:dc:7e:13:60:90:aa:7b:24:90:63:d6:e9:82:e0:
                    12:21:b0:ae:6b:5a:ea:5e:43:e3:7c:90:a8:0c:fc:
                    1e:f3:e8:49:56:a5:f1:d6:cf:09:18:1b:79:36:4c:
                    23:8d:49:b5:ff:54:2e:6c:5b:cf:04:90:37:c6:fb:
                    de:8f:aa:c2:f9:e9:17:48:9f:46:13:ec:7d:b2:61:
                    61:31:75:30:ec:01:7a:8e:c6:3b:5d:5c:8d:c2:e7:
                    35:18:8b:a2:35:f9:e5:e8:40:c9:10:6f:ec:6a:9f:
                    b2:a2:c3:c2:97:7b:8e:1f:6f:8b:61:c1:1c:48:61:
                    58:89:12:05:7a:31:dc:74:07:42:a0:80:da:78:a8:
                    9a:f6:c6:0f:ed:f3:74:43:a8:fe:ca:95:db:29:7d:
                    74:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:A3:70:8D:68:1F:D7:A7:C5:D0:B2:56:79:E8:EE:6A:DB:60:41:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59/6c6804ba-4fab-36a2-820d-0cbd9797e83c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59/75d2cba5-acec-4ba8-ade7-0f83a6aefd59.crl

            X509v3 Authority Key Identifier:
                keyid:0B:42:83:AD:39:29:A6:89:DF:8C:7F:D7:13:47:46:6F:8F:CB:EF:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.170.24.0/24
                  155.103.196.0/22
                IPv6:
                  2602:f9aa::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:f3:be:90:dc:92:ad:43:5f:f2:cf:c8:f6:47:6f:2e:f4:22:
         40:92:df:fb:7f:6d:00:64:90:be:4a:55:a5:90:be:a3:7c:79:
         cb:48:1e:0b:da:23:7c:8b:e5:97:d7:09:a1:4c:df:79:dd:b2:
         12:91:96:4c:f8:d3:ec:bd:d8:ae:bc:d8:e3:f5:00:ae:2d:b5:
         9b:da:35:0b:88:1f:25:f9:6a:9a:b4:2c:ef:5f:46:72:8b:c7:
         d9:fb:7b:4b:49:ce:85:f5:fd:e9:63:e3:e3:ef:7a:df:8c:08:
         49:cb:0c:e5:3b:e0:4d:cf:d2:88:ee:f7:20:08:09:f0:44:3d:
         ae:9b:be:a5:1a:bc:c0:00:a9:b2:00:81:a5:af:0b:8a:21:d1:
         c5:e8:49:6f:da:b8:01:25:38:26:66:9e:3d:01:00:de:df:46:
         9d:98:ba:b6:59:7d:d1:eb:76:af:f1:13:2b:5e:81:03:70:8a:
         4f:e5:31:59:5a:69:c7:d2:dd:1f:02:15:a8:b0:2d:19:31:6f:
         1d:12:e6:0a:f9:c3:dd:ca:b2:53:b2:4b:67:37:ce:66:e8:fa:
         26:a5:15:5e:1a:8c:80:6c:f4:1d:73:de:60:85:d6:0e:13:0e:
         a9:73:3d:5a:76:ae:0e:69:4a:d1:47:91:1d:6a:09:d8:aa:8c:
         3b:b2:2b:47
-----BEGIN CERTIFICATE-----
MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEyKvNamsu8JEuFmMgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzVkMmNiYTUtYWNlYy00YmE4LWFkZTctMGY4M2E2YWVm
ZDU5MB4XDTI2MDExNjA3NTY0MVoXDTI2MDQxNjA2NTY0MVowLzEtMCsGA1UEAxMk
OTJhYjA0MDUtNDgzMy00YzhlLWI2M2YtZmJkYmM1MWMzYmU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JpMPJtR9dGvJNOoMcOA0XwAyApqfCah/3fW
e+th9KdiuCvyZxjeVQYfxXE/5N2HtaFQDD1xLSQrvoRggjymdFUF5iUZE/bCDa6S
woss1dzMhwgWhC2WA3r3SehhWGWLVZZUpu5GOimW3H4TYJCqeySQY9bpguASIbCu
a1rqXkPjfJCoDPwe8+hJVqXx1s8JGBt5NkwjjUm1/1QubFvPBJA3xvvej6rC+ekX
SJ9GE+x9smFhMXUw7AF6jsY7XVyNwuc1GIuiNfnl6EDJEG/sap+yosPCl3uOH2+L
YcEcSGFYiRIFejHcdAdCoIDaeKia9sYP7fN0Q6j+ypXbKX10iwIDAQABo4IDazCC
A2cwHQYDVR0OBBYEFEujcI1oH9enxdCyVnno7mrbYEGBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83NWQy
Y2JhNS1hY2VjLTRiYTgtYWRlNy0wZjgzYTZhZWZkNTkvNmM2ODA0YmEtNGZhYi0z
NmEyLTgyMGQtMGNiZDk3OTdlODNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzVkMmNiYTUtYWNlYy00YmE4LWFk
ZTctMGY4M2E2YWVmZDU5Lzc1ZDJjYmE1LWFjZWMtNGJhOC1hZGU3LTBmODNhNmFl
ZmQ1OS5jcmwwHwYDVR0jBBgwFoAUC0KDrTkpponfjH/XE0dGb4/L7/UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83NWQyY2JhNS1hY2VjLTRiYTgtYWRlNy0wZjgz
YTZhZWZkNTkuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF6oYAwQC
m2fEMA4EAgACMAgDBgAmAvmqADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCn876Q3JKtQ1/yz8j2R28u9CJA
kt/7f20AZJC+SlWlkL6jfHnLSB4L2iN8i+WX1wmhTN953bISkZZM+NPsvdiuvNjj
9QCuLbWb2jULiB8l+WqatCzvX0Zyi8fZ+3tLSc6F9f3pY+Pj73rfjAhJywzlO+BN
z9KI7vcgCAnwRD2um76lGrzAAKmyAIGlrwuKIdHF6Elv2rgBJTgmZp49AQDe30ad
mLq2WX3R63av8RMrXoEDcIpP5TFZWmnH0t0fAhWosC0ZMW8dEuYK+cPdyrJTsktn
N85m6PompRVeGoyAbPQdc95ghdYOEw6pcz1adq4OaUrRR5EdagnYqow7sitH
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:34:19 2026 by rpki-client