Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/6fd4acdc-dcae-3060-9289-fccba0d195f6.roa
File:                     6fd4acdc-dcae-3060-9289-fccba0d195f6.roa (raw, json)
Hash identifier:          YVx2fkVYgCjvXHQhaDBlBXyFUO7kgqDuNEnBreAGIVc=
Subject key identifier:   FF:0E:30:3A:71:15:19:BC:93:30:E9:5F:95:7F:1E:51:82:F6:D8:E2
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584EA79111417E9FB4F446E1F100
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/6fd4acdc-dcae-3060-9289-fccba0d195f6.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16591
IP address blocks:        136.61.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:11:41:7e:9f:b4:f4:46:e1:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=f22ad3f0-f19c-4e87-a402-4ea6764c0e9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:26:31:0b:65:77:53:d3:57:db:01:de:0b:1c:
                    d1:01:0b:f7:26:70:d5:23:34:09:db:aa:0e:25:38:
                    a1:ef:fe:35:76:c3:bd:f7:8b:57:e7:0a:83:b5:7a:
                    89:cb:46:a8:56:84:f4:1f:2a:55:22:28:8b:0e:ab:
                    db:cd:ce:a9:d5:ce:3e:0e:fc:a6:1d:1f:16:ba:eb:
                    ad:26:b5:23:2d:4e:d5:56:3a:fd:47:b8:b2:d1:bd:
                    de:9b:8f:a5:4c:63:a3:85:a7:b4:74:12:6e:eb:bf:
                    0a:fa:da:95:10:0e:fa:a0:8d:ed:04:7e:b2:c6:09:
                    48:42:a8:c9:a9:09:74:27:01:eb:a4:a2:1e:ee:0d:
                    38:b4:d7:84:53:76:f3:24:67:d6:af:4c:86:b5:c1:
                    79:85:62:1d:d1:27:e1:28:64:95:24:44:de:b9:8e:
                    3f:d2:32:a3:be:c0:95:01:c6:aa:d8:82:7e:66:db:
                    24:90:6c:ab:ab:ea:90:4b:a7:38:e8:b1:d4:89:31:
                    b4:51:da:b3:7d:16:7e:f4:1b:ab:73:3d:c5:0a:93:
                    c2:33:65:95:38:38:c8:20:3f:83:86:d3:1e:a2:45:
                    60:a1:4c:3d:d3:41:a9:f0:13:92:0b:92:c3:f0:7b:
                    8b:b5:d3:25:48:03:8d:45:e4:28:bc:fa:ae:0d:84:
                    1a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:0E:30:3A:71:15:19:BC:93:30:E9:5F:95:7F:1E:51:82:F6:D8:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/6fd4acdc-dcae-3060-9289-fccba0d195f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.61.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:52:1e:2c:4c:e1:ce:d8:45:af:56:52:50:b3:19:77:cf:4c:
         fd:46:d9:53:2b:a3:fb:e5:32:5b:8f:81:df:9c:a5:e7:4e:78:
         ca:18:aa:63:04:fa:4d:9b:38:45:c6:bc:18:2c:a2:df:f0:35:
         5e:b3:e9:5b:26:bc:46:0c:1b:cd:52:a1:bf:45:b0:0c:7c:65:
         b0:98:54:c1:1e:85:de:ce:27:09:3f:a0:ae:cd:67:d0:fc:0e:
         61:fa:a4:62:0f:e9:6c:6e:c8:77:ab:c1:08:14:45:09:75:49:
         34:a1:ce:34:00:36:89:20:e6:77:de:b5:39:ee:6b:91:91:2f:
         a6:55:bb:d7:1a:19:42:0d:bf:18:0d:05:61:83:37:b8:d6:71:
         04:81:4c:eb:00:4c:fb:7e:2a:d5:ba:2a:0d:a6:fe:da:09:e1:
         a3:83:2a:7e:6a:70:df:43:8e:73:32:07:49:7a:7b:e1:2b:93:
         60:51:a6:65:16:fa:00:bc:9a:c4:2b:70:2d:76:cd:a7:29:7e:
         63:a6:60:be:44:7c:ff:b6:df:48:86:dc:fb:57:89:26:7f:6c:
         ae:2c:53:01:44:4c:d6:01:a2:bc:fc:96:d4:10:7f:b4:76:ef:
         14:16:a5:0b:39:e2:46:24:08:f7:5e:99:46:58:4a:f2:f3:b9:
         82:86:76:8b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkRFBfp+09Ebh8QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh
MzRlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZjIyYWQzZjAtZjE5Yy00ZTg3LWE0MDItNGVhNjc2NGMwZTlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCYxC2V3U9NX2wHeCxzRAQv3JnDVIzQJ26oO
JTih7/41dsO994tX5wqDtXqJy0aoVoT0HypVIiiLDqvbzc6p1c4+DvymHR8Wuuut
JrUjLU7VVjr9R7iy0b3em4+lTGOjhae0dBJu678K+tqVEA76oI3tBH6yxglIQqjJ
qQl0JwHrpKIe7g04tNeEU3bzJGfWr0yGtcF5hWId0SfhKGSVJETeuY4/0jKjvsCV
Acaq2IJ+ZtskkGyrq+qQS6c46LHUiTG0UdqzfRZ+9Burcz3FCpPCM2WVODjIID+D
htMeokVgoUw900Gp8BOSC5LD8HuLtdMlSAONReQovPquDYQaLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP8OMDpxFRm8kzDpX5V/HlGC9tjiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2
NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNmZkNGFjZGMtZGNhZS0z
MDYwLTkyODktZmNjYmEwZDE5NWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj
MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5
YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0
MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiD3gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABJSHixM4c7YRa9WUlCzGXfPTP1G2VMro/vlMluPgd+cpedOeMoYqmME
+k2bOEXGvBgsot/wNV6z6VsmvEYMG81Sob9FsAx8ZbCYVMEehd7OJwk/oK7NZ9D8
DmH6pGIP6WxuyHerwQgURQl1STShzjQANokg5nfetTnua5GRL6ZVu9caGUINvxgN
BWGDN7jWcQSBTOsATPt+KtW6Kg2m/toJ4aODKn5qcN9DjnMyB0l6e+Erk2BRpmUW
+gC8msQrcC12zacpfmOmYL5EfP+230iG3PtXiSZ/bK4sUwFETNYBorz8ltQQf7R2
7xQWpQs54kYkCPdemUZYSvLzuYKGdos=
-----END CERTIFICATE-----
Generated at Thu Jul 30 00:34:27 2026 by rpki-client