Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/6bd7aeb8-7513-3ce0-ab40-543da5303447.roa
File:                     6bd7aeb8-7513-3ce0-ab40-543da5303447.roa (raw, json)
Hash identifier:          QAKxlDn55HjB+QQxOvZWCwtf836W1GHy2BQV39gyiYI=
Subject key identifier:   8C:90:56:7E:AB:FB:40:0B:52:8D:70:3D:83:72:EB:C1:19:18:62:85
Certificate issuer:       /CN=601de417-7cdc-45d3-8d80-7279489a39e0
Certificate serial:       010D0C9F4328584E26A445679CD4A8F56E9D6AC0
Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/6bd7aeb8-7513-3ce0-ab40-543da5303447.roa
Signing time:             Fri 12 Jun 2026 21:00:11 +0000
ROA not before:           Fri 12 Jun 2026 21:00:11 +0000
ROA not after:            Thu 10 Sep 2026 21:00:11 +0000
asID:                     63023
IP address blocks:        216.106.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:26:a4:45:67:9c:d4:a8:f5:6e:9d:6a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0
        Validity
            Not Before: Jun 12 21:00:11 2026 GMT
            Not After : Sep 10 21:00:11 2026 GMT
        Subject: CN=13393cb0-0fd8-4c15-b278-6d4cab3122b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:30:8c:79:2c:d4:f6:5d:e5:c5:c0:9d:88:6d:
                    4d:c3:66:a4:d1:a0:c5:be:fd:86:16:77:42:ea:98:
                    91:1d:33:a7:8e:b1:ef:1c:98:38:7a:bd:11:c1:75:
                    65:27:d8:07:17:2c:47:d7:c0:26:4b:8e:ac:17:6d:
                    97:a7:6a:98:cf:c6:47:04:de:88:ed:6a:ea:69:27:
                    b5:be:c9:07:db:9c:b8:e3:38:bb:4e:5a:20:4d:47:
                    18:e9:a2:f2:d6:a6:63:8a:a6:58:05:d2:a8:04:5a:
                    bb:0a:a9:a4:b5:93:22:4e:6c:d2:69:0d:f9:7a:b4:
                    be:9f:25:b1:b7:c7:11:fe:30:b5:db:46:de:84:5b:
                    b6:6a:44:7c:29:49:fb:95:5e:98:7e:ca:62:97:2b:
                    db:95:12:3b:d4:de:71:40:cc:cc:bc:73:00:09:85:
                    b3:71:ef:45:2a:2f:7f:88:97:47:23:20:88:6c:f6:
                    f8:5e:55:a9:61:14:5a:85:ee:a1:2e:68:69:dd:c1:
                    f3:fc:65:ff:52:fc:02:6c:fa:d3:51:65:76:87:7a:
                    2b:da:5a:f7:77:db:15:9e:4b:5b:82:76:3e:98:17:
                    d7:f8:4f:20:e6:29:cc:4c:2a:a1:eb:66:68:42:02:
                    35:44:8d:6a:1d:5c:d2:6b:2f:65:e2:96:ce:43:08:
                    44:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:90:56:7E:AB:FB:40:0B:52:8D:70:3D:83:72:EB:C1:19:18:62:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/6bd7aeb8-7513-3ce0-ab40-543da5303447.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl

            X509v3 Authority Key Identifier:
                keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.106.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:20:cd:83:c9:1b:0f:bd:57:f3:24:77:22:d6:f0:e6:10:e5:
         10:ab:fb:20:bf:7c:7b:9e:9f:ca:00:9a:fe:e3:88:1c:25:fd:
         31:ed:06:2e:a5:a1:0b:d5:20:48:02:f7:57:cd:f7:14:c8:e0:
         fe:11:7d:60:60:1f:12:de:18:ca:92:04:d6:00:2e:8b:83:78:
         b6:86:24:f1:cb:64:f9:ae:f6:0f:3b:39:33:8a:11:c6:c5:ec:
         dc:a1:a0:a9:e9:b4:cd:c2:55:c0:02:53:1f:28:65:8b:99:f0:
         a9:58:fb:17:d4:39:49:65:75:28:22:33:ab:a5:cb:1c:df:2d:
         1e:5d:11:93:6b:27:fc:df:67:4f:db:cd:1b:3e:69:d1:75:a9:
         41:a6:1f:ea:0e:d9:42:49:80:35:72:09:21:ab:7f:d5:68:46:
         41:da:7a:96:94:03:0e:83:cc:d4:6b:4b:4e:1c:6d:80:9b:16:
         9c:bd:f6:32:f7:49:06:a6:a0:be:4e:0a:f8:8a:07:dc:c9:5e:
         9e:36:39:14:a1:be:36:b2:71:3d:d4:3f:0c:59:06:5a:a9:d4:
         47:d1:7d:43:74:a9:2b:54:16:f8:bc:b0:55:f1:7c:a5:79:c4:
         e3:fb:72:69:51:85:cc:d5:26:40:e2:f5:c3:8d:a8:4c:02:55:
         7f:4b:b6:43
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4mpEVnnNSo9W6dasAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz
OWUwMB4XDTI2MDYxMjIxMDAxMVoXDTI2MDkxMDIxMDAxMVowLzEtMCsGA1UEAxMk
MTMzOTNjYjAtMGZkOC00YzE1LWIyNzgtNmQ0Y2FiMzEyMmI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTCMeSzU9l3lxcCdiG1Nw2ak0aDFvv2GFndC
6piRHTOnjrHvHJg4er0RwXVlJ9gHFyxH18AmS46sF22Xp2qYz8ZHBN6I7WrqaSe1
vskH25y44zi7TlogTUcY6aLy1qZjiqZYBdKoBFq7CqmktZMiTmzSaQ35erS+nyWx
t8cR/jC120behFu2akR8KUn7lV6YfspilyvblRI71N5xQMzMvHMACYWzce9FKi9/
iJdHIyCIbPb4XlWpYRRahe6hLmhp3cHz/GX/UvwCbPrTUWV2h3or2lr3d9sVnktb
gnY+mBfX+E8g5inMTCqh62ZoQgI1RI1qHVzSay9l4pbOQwhEdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIyQVn6r+0ALUo1wPYNy68EZGGKFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk
ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvNmJkN2FlYjgtNzUxMy0z
Y2UwLWFiNDAtNTQzZGE1MzAzNDQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk
ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh
MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5
NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Gq/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABogzYPJGw+9V/MkdyLW8OYQ5RCr+yC/fHuen8oAmv7jiBwl/THtBi6l
oQvVIEgC91fN9xTI4P4RfWBgHxLeGMqSBNYALouDeLaGJPHLZPmu9g87OTOKEcbF
7NyhoKnptM3CVcACUx8oZYuZ8KlY+xfUOUlldSgiM6ulyxzfLR5dEZNrJ/zfZ0/b
zRs+adF1qUGmH+oO2UJJgDVyCSGrf9VoRkHaepaUAw6DzNRrS04cbYCbFpy99jL3
SQamoL5OCviKB9zJXp42ORShvjaycT3UPwxZBlqp1EfRfUN0qStUFvi8sFXxfKV5
xOP7cmlRhczVJkDi9cONqEwCVX9LtkM=
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:52:56 2026 by rpki-client