Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/6adfbf1b-339a-377d-8dda-1c0fcc4304e3.roa
File:                     6adfbf1b-339a-377d-8dda-1c0fcc4304e3.roa (raw, json)
Hash identifier:          TBz/lJ82r5WxrzdbC9de1k14K/1ts3d86ERfosr5YoU=
Subject key identifier:   39:87:5A:7F:5B:92:53:28:9E:6C:AF:0E:41:1E:14:29:E6:62:E2:BF
Certificate issuer:       /CN=8d34ec60-03b0-4663-8748-fab291e36393
Certificate serial:       010D0C9F4328584E1B798E05440B86D37B324680
Authority key identifier: 3C:E1:AD:C4:6C:FF:FF:61:D2:6D:75:13:59:A5:F2:0A:4D:07:85:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/6adfbf1b-339a-377d-8dda-1c0fcc4304e3.roa
Signing time:             Mon 08 Jun 2026 21:00:12 +0000
ROA not before:           Mon 08 Jun 2026 21:00:12 +0000
ROA not after:            Sun 06 Sep 2026 21:00:12 +0000
asID:                     395807
IP address blocks:        199.60.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1b:79:8e:05:44:0b:86:d3:7b:32:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d34ec60-03b0-4663-8748-fab291e36393
        Validity
            Not Before: Jun  8 21:00:12 2026 GMT
            Not After : Sep  6 21:00:12 2026 GMT
        Subject: CN=64b935b6-4205-4c49-9d57-9f5a822cd332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:5e:b7:ff:bc:26:0b:b6:ac:e4:59:8a:26:70:
                    5e:bd:70:8b:48:d3:b8:26:93:5c:93:72:3b:48:7b:
                    36:19:f4:3b:3d:5c:49:66:79:c9:dc:2a:8a:b7:1b:
                    10:2e:a9:a9:73:b9:28:30:4f:60:51:b5:e3:f7:e0:
                    39:cb:65:74:e2:f8:c6:d6:b9:65:ee:41:76:17:ef:
                    b4:aa:22:25:84:a2:83:0b:46:c9:8b:18:c1:30:30:
                    8a:68:0b:01:27:58:4b:1b:31:8e:77:50:45:b0:b9:
                    54:93:1d:a0:5d:b2:4c:93:76:ff:b0:21:b9:80:24:
                    02:09:46:07:84:02:20:43:8e:88:54:ea:ee:a7:55:
                    dd:c2:10:fb:9d:56:6f:ef:08:99:87:7e:aa:c5:30:
                    aa:b9:79:97:9e:ad:fa:4b:22:48:fb:37:3c:7b:c5:
                    ed:4f:43:54:d1:ea:cd:21:18:e7:08:30:3d:0e:b8:
                    5e:31:bf:e4:d8:94:06:0f:81:80:41:e4:51:06:fc:
                    3f:b4:37:df:8d:eb:fd:d0:15:6e:02:fb:83:3c:cd:
                    72:36:9c:1c:63:70:dc:eb:0c:00:98:67:04:ae:10:
                    aa:f1:99:cd:0c:c1:63:35:f9:1f:19:91:d2:7b:5e:
                    94:99:68:c4:5e:11:47:a6:50:c3:96:02:6e:95:33:
                    0c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:87:5A:7F:5B:92:53:28:9E:6C:AF:0E:41:1E:14:29:E6:62:E2:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/6adfbf1b-339a-377d-8dda-1c0fcc4304e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.crl

            X509v3 Authority Key Identifier:
                keyid:3C:E1:AD:C4:6C:FF:FF:61:D2:6D:75:13:59:A5:F2:0A:4D:07:85:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.60.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:b3:9a:62:ee:6a:23:26:f2:cb:24:ab:7e:65:b1:b8:7c:4a:
         f8:56:ae:d9:72:6f:2b:a9:16:b0:fa:ae:88:c0:9f:45:db:52:
         f0:b6:8a:bc:9d:39:7c:42:5f:2e:2f:84:7a:d7:a8:36:69:c6:
         c1:94:d3:9b:b2:a8:42:b3:8d:d5:c5:1d:65:2e:b1:08:b0:54:
         dd:07:15:99:27:e4:2f:a8:d2:ad:83:18:27:83:ed:03:81:fe:
         e6:2a:4e:b4:71:0e:8b:2b:45:e7:c5:59:ba:12:0a:1c:02:fc:
         92:52:39:00:2f:75:5b:1e:ba:2a:5f:ee:0c:55:63:ab:04:15:
         b6:43:08:32:12:90:8b:65:ac:bb:d5:85:9a:c8:f4:27:e7:4b:
         43:31:d4:2e:b2:27:39:fb:31:4c:bf:59:83:27:13:13:69:7f:
         34:91:aa:cb:cc:3f:72:5f:8c:cb:94:43:6a:74:21:9d:8b:28:
         85:ea:a4:75:1b:97:50:68:36:f2:da:04:3c:63:89:5f:1d:07:
         ed:fb:b7:4f:3f:5f:0a:38:2f:22:10:53:34:ee:4d:8d:80:0d:
         9d:5d:a0:1f:20:e7:ea:46:e8:2f:de:60:f2:28:f8:d1:40:bb:
         05:19:04:33:17:69:e7:ce:55:2c:68:d3:32:53:61:8b:19:33:
         87:10:4c:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4beY4FRAuG03syRoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGQzNGVjNjAtMDNiMC00NjYzLTg3NDgtZmFiMjkxZTM2
MzkzMB4XDTI2MDYwODIxMDAxMloXDTI2MDkwNjIxMDAxMlowLzEtMCsGA1UEAxMk
NjRiOTM1YjYtNDIwNS00YzQ5LTlkNTctOWY1YTgyMmNkMzMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh163/7wmC7as5FmKJnBevXCLSNO4JpNck3I7
SHs2GfQ7PVxJZnnJ3CqKtxsQLqmpc7koME9gUbXj9+A5y2V04vjG1rll7kF2F++0
qiIlhKKDC0bJixjBMDCKaAsBJ1hLGzGOd1BFsLlUkx2gXbJMk3b/sCG5gCQCCUYH
hAIgQ46IVOrup1XdwhD7nVZv7wiZh36qxTCquXmXnq36SyJI+zc8e8XtT0NU0erN
IRjnCDA9DrheMb/k2JQGD4GAQeRRBvw/tDffjev90BVuAvuDPM1yNpwcY3Dc6wwA
mGcErhCq8ZnNDMFjNfkfGZHSe16UmWjEXhFHplDDlgJulTMMiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDmHWn9bklMonmyvDkEeFCnmYuK/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDM0
ZWM2MC0wM2IwLTQ2NjMtODc0OC1mYWIyOTFlMzYzOTMvNmFkZmJmMWItMzM5YS0z
NzdkLThkZGEtMWMwZmNjNDMwNGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGQzNGVjNjAtMDNiMC00NjYzLTg3
NDgtZmFiMjkxZTM2MzkzLzhkMzRlYzYwLTAzYjAtNDY2My04NzQ4LWZhYjI5MWUz
NjM5My5jcmwwHwYDVR0jBBgwFoAUPOGtxGz//2HSbXUTWaXyCk0Hhd0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDM0ZWM2MC0wM2IwLTQ2NjMtODc0OC1mYWIy
OTFlMzYzOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzyTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEazmmLuaiMm8sskq35lsbh8SvhWrtlybyupFrD6rojAn0XbUvC2iryd
OXxCXy4vhHrXqDZpxsGU05uyqEKzjdXFHWUusQiwVN0HFZkn5C+o0q2DGCeD7QOB
/uYqTrRxDosrRefFWboSChwC/JJSOQAvdVseuipf7gxVY6sEFbZDCDISkItlrLvV
hZrI9CfnS0Mx1C6yJzn7MUy/WYMnExNpfzSRqsvMP3JfjMuUQ2p0IZ2LKIXqpHUb
l1BoNvLaBDxjiV8dB+37t08/Xwo4LyIQUzTuTY2ADZ1doB8g5+pG6C/eYPIo+NFA
uwUZBDMXaefOVSxo0zJTYYsZM4cQTNI=
-----END CERTIFICATE-----
Generated at Sun Jun 14 06:36:02 2026 by rpki-client