Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/2d232c06-adff-33dc-a513-f88329eccb2e.roa
File:                     2d232c06-adff-33dc-a513-f88329eccb2e.roa (raw, json)
Hash identifier:          QZPq1WvmewREVls+ccLr2F9v5XiOws539VmrdRaE7ow=
Subject key identifier:   F7:59:EC:A9:1A:B6:4F:4F:19:AC:A7:51:AC:2D:D5:50:2A:1C:2A:D4
Certificate issuer:       /CN=601de417-7cdc-45d3-8d80-7279489a39e0
Certificate serial:       010D0C9F4328584E26A447F563A47B2BE5A19A00
Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/2d232c06-adff-33dc-a513-f88329eccb2e.roa
Signing time:             Fri 12 Jun 2026 21:00:11 +0000
ROA not before:           Fri 12 Jun 2026 21:00:11 +0000
ROA not after:            Thu 10 Sep 2026 21:00:11 +0000
asID:                     63023
IP address blocks:        216.106.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:26:a4:47:f5:63:a4:7b:2b:e5:a1:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0
        Validity
            Not Before: Jun 12 21:00:11 2026 GMT
            Not After : Sep 10 21:00:11 2026 GMT
        Subject: CN=e4cf23ab-4c07-4eb4-9e5d-4dbd24f0eb81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:47:85:54:5e:c5:08:39:eb:a4:52:32:53:be:
                    ce:c6:61:1c:fa:0c:c3:23:45:33:9d:96:18:27:35:
                    16:b9:43:63:0f:96:6e:80:50:0a:83:a2:19:0f:bc:
                    95:38:27:60:09:d0:b4:cb:58:5f:72:4c:88:50:32:
                    d4:fa:c7:0f:3b:f8:35:cb:7d:7f:c2:5a:50:9e:2b:
                    49:80:27:9c:4b:38:6f:81:8a:24:a4:b5:ee:bc:55:
                    64:07:ea:a4:48:66:91:c0:ad:c2:63:41:7a:e8:35:
                    8e:b2:0c:68:f4:00:9c:31:e8:fd:9f:49:e2:47:17:
                    0f:2b:3a:41:98:17:a1:91:a3:a1:19:04:db:be:8d:
                    8f:11:a6:69:7f:f2:3c:49:ea:b7:f8:59:89:63:22:
                    ae:73:6d:2c:34:20:28:65:d6:5f:6e:3f:19:35:6b:
                    af:cf:60:99:c9:1f:da:b1:f4:a9:70:0a:0d:33:1e:
                    a7:27:53:45:c6:ef:cb:63:42:fd:86:a7:95:0a:c7:
                    2b:05:c5:cd:54:3c:f0:72:7f:d9:64:8b:72:f0:52:
                    ce:59:da:fc:74:ce:80:39:d1:c9:2b:1a:d6:1e:ba:
                    bb:3a:47:b7:0a:a0:09:e6:5d:2f:dc:37:44:e6:5a:
                    76:0a:81:17:d5:ac:96:89:0b:da:7d:8b:65:c4:d4:
                    9d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:59:EC:A9:1A:B6:4F:4F:19:AC:A7:51:AC:2D:D5:50:2A:1C:2A:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/2d232c06-adff-33dc-a513-f88329eccb2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl

            X509v3 Authority Key Identifier:
                keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.106.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:98:8c:f3:a3:af:19:2c:1b:4d:72:d3:65:af:53:c3:18:d8:
         81:e9:a4:b4:64:41:62:05:fe:f5:72:0e:dd:4d:51:f1:9b:7b:
         f8:67:f0:46:d3:02:3a:44:3c:de:8f:f0:71:66:e1:b6:6a:c7:
         41:54:dc:48:6c:ed:98:c5:59:3b:94:c3:e9:67:70:3c:1f:bb:
         61:71:51:18:69:0a:7d:a3:20:48:51:15:06:3b:5a:17:b6:d0:
         e4:cf:c1:b5:f5:bc:28:74:ab:10:de:2b:4b:54:b9:aa:d8:59:
         7f:22:4e:bc:70:b9:a3:5a:b0:21:f1:f0:3c:9c:a7:11:de:0d:
         df:c5:09:56:93:7a:ee:10:d5:22:69:a2:cc:7c:f7:1a:6d:d2:
         f8:bd:60:0c:86:a5:24:55:3a:55:96:3e:e4:d3:0a:32:ad:09:
         e8:bf:7f:41:b7:ac:99:eb:25:09:94:38:5d:a9:f9:92:27:c2:
         4f:5d:ce:fe:15:7e:1f:5d:62:ff:27:8b:4e:77:bd:4e:2e:3b:
         d4:a8:89:a6:31:c6:b3:21:16:e9:52:97:2d:c6:91:fa:ea:f6:
         24:d3:71:df:74:b7:ec:c6:87:e2:17:38:08:0a:88:4f:51:66:
         c8:95:4d:4f:7b:9d:42:b0:24:59:7c:04:ce:40:2c:ae:b8:72:
         71:ed:cb:eb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4mpEf1Y6R7K+WhmgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz
OWUwMB4XDTI2MDYxMjIxMDAxMVoXDTI2MDkxMDIxMDAxMVowLzEtMCsGA1UEAxMk
ZTRjZjIzYWItNGMwNy00ZWI0LTllNWQtNGRiZDI0ZjBlYjgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEeFVF7FCDnrpFIyU77OxmEc+gzDI0UznZYY
JzUWuUNjD5ZugFAKg6IZD7yVOCdgCdC0y1hfckyIUDLU+scPO/g1y31/wlpQnitJ
gCecSzhvgYokpLXuvFVkB+qkSGaRwK3CY0F66DWOsgxo9ACcMej9n0niRxcPKzpB
mBehkaOhGQTbvo2PEaZpf/I8Seq3+FmJYyKuc20sNCAoZdZfbj8ZNWuvz2CZyR/a
sfSpcAoNMx6nJ1NFxu/LY0L9hqeVCscrBcXNVDzwcn/ZZIty8FLOWdr8dM6AOdHJ
KxrWHrq7Oke3CqAJ5l0v3DdE5lp2CoEX1ayWiQvafYtlxNSdsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPdZ7Kkatk9PGaynUawt1VAqHCrUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk
ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvMmQyMzJjMDYtYWRmZi0z
M2RjLWE1MTMtZjg4MzI5ZWNjYjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk
ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh
MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5
NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Gq7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB2YjPOjrxksG01y02WvU8MY2IHppLRkQWIF/vVyDt1NUfGbe/hn8EbT
AjpEPN6P8HFm4bZqx0FU3Ehs7ZjFWTuUw+lncDwfu2FxURhpCn2jIEhRFQY7Whe2
0OTPwbX1vCh0qxDeK0tUuarYWX8iTrxwuaNasCHx8DycpxHeDd/FCVaTeu4Q1SJp
osx89xpt0vi9YAyGpSRVOlWWPuTTCjKtCei/f0G3rJnrJQmUOF2p+ZInwk9dzv4V
fh9dYv8ni053vU4uO9SoiaYxxrMhFulSly3Gkfrq9iTTcd90t+zGh+IXOAgKiE9R
ZsiVTU97nUKwJFl8BM5ALK64cnHty+s=
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:12:35 2026 by rpki-client