Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/d6030c72-d137-34d3-8372-1abef2623fce.roa
File:                     d6030c72-d137-34d3-8372-1abef2623fce.roa (raw, json)
Hash identifier:          gnOcvAd0pwq+q56UUV5yZccOED/yY932VxWBdmDwZM4=
Subject key identifier:   6B:5A:EB:C2:A6:C1:F2:8B:9E:41:CB:A7:98:78:95:B0:C8:EC:A0:66
Certificate issuer:       /CN=d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e
Certificate serial:       010D0C9F4328584D703FDCE0EEC2F7C412F3C7E0
Authority key identifier: 2D:22:70:71:EA:41:40:16:CE:85:45:3A:86:52:BE:FE:08:5C:C9:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/d6030c72-d137-34d3-8372-1abef2623fce.roa
Signing time:             Wed 08 Apr 2026 13:00:33 +0000
ROA not before:           Wed 08 Apr 2026 13:00:33 +0000
ROA not after:            Tue 07 Jul 2026 13:00:33 +0000
asID:                     26564
IP address blocks:        167.206.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:3f:dc:e0:ee:c2:f7:c4:12:f3:c7:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e
        Validity
            Not Before: Apr  8 13:00:33 2026 GMT
            Not After : Jul  7 13:00:33 2026 GMT
        Subject: CN=aed7d71d-8794-40f8-a87f-8468b7f07f69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:eb:86:1f:bf:a3:d3:1e:07:7f:eb:1c:40:50:
                    59:39:1b:47:46:00:32:d7:d5:5b:8b:f6:d5:1d:24:
                    af:6f:22:14:ea:7e:c3:2a:65:ca:34:22:3b:97:2d:
                    b1:4c:c2:e1:03:51:ac:a9:a0:58:9e:bb:5c:7c:6b:
                    ca:ff:44:92:c7:07:5b:cc:ff:94:dc:03:a8:f4:1a:
                    69:65:ef:ed:02:51:49:d0:d4:13:fc:3b:c1:91:ea:
                    97:0a:59:97:83:ac:e3:45:69:52:a3:9f:e8:85:12:
                    9a:63:bf:a2:92:77:b5:d9:6b:bc:04:b9:c8:f0:9a:
                    2c:b1:1f:7c:cb:2b:d1:b6:90:6d:2a:80:53:1a:cd:
                    10:72:18:01:3c:37:0f:e1:7d:3f:bc:ee:54:90:3d:
                    e1:55:74:f3:44:20:03:92:c8:22:a0:3f:a1:f1:97:
                    dc:74:62:3f:74:9f:f1:b8:25:c6:f6:7d:1b:05:fe:
                    cd:61:a5:ac:45:da:bd:e6:69:97:ad:58:ad:e8:25:
                    1e:2c:26:19:41:a2:ff:d4:b3:ff:7c:80:31:91:2d:
                    fb:97:79:53:05:dd:0d:4f:16:e6:30:c5:e3:1f:48:
                    c9:46:53:38:59:c4:ad:fa:8c:79:17:83:8b:59:0f:
                    f8:56:c3:1a:ee:62:15:c8:75:4a:27:d1:96:72:f8:
                    f6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:5A:EB:C2:A6:C1:F2:8B:9E:41:CB:A7:98:78:95:B0:C8:EC:A0:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/d6030c72-d137-34d3-8372-1abef2623fce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.crl

            X509v3 Authority Key Identifier:
                keyid:2D:22:70:71:EA:41:40:16:CE:85:45:3A:86:52:BE:FE:08:5C:C9:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.206.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:e0:4a:96:07:a4:25:d6:6b:d4:9f:10:29:a5:3a:e7:a9:17:
         20:6a:5d:eb:db:b2:e0:0e:87:e2:fb:2a:24:1c:e8:4d:03:b8:
         09:bf:fb:a5:ff:67:53:45:a0:9b:8e:d9:16:81:bd:ff:c1:82:
         05:cb:10:69:dc:48:23:a2:21:6b:bb:98:ad:a2:86:ac:d5:54:
         45:cd:5e:a6:30:1b:8e:50:c6:5f:de:b2:59:1f:95:0f:a4:9c:
         a3:62:ad:51:4c:9f:f8:08:77:74:9c:07:6f:ed:83:00:5e:1e:
         94:90:3a:78:89:f0:56:de:d7:95:06:47:e1:41:76:42:be:13:
         16:5c:e4:a7:49:32:6b:e4:63:37:94:0e:b4:9b:9d:96:de:83:
         45:21:cb:bb:47:de:39:ee:ce:4e:73:8c:f2:75:80:8d:0a:59:
         ad:9a:2e:f7:c9:fa:5b:72:f7:e9:83:04:6d:a1:33:34:08:cd:
         81:15:95:7c:80:5f:39:30:18:3f:c0:95:ea:2a:d5:c0:38:e1:
         30:b2:3c:19:fa:a7:b9:d8:88:4f:b7:7d:24:e6:25:da:93:90:
         c2:f6:5d:bc:6b:5e:a9:72:2f:76:51:3d:7e:65:c6:7a:43:6c:
         40:6b:3f:2e:c9:c6:94:aa:bb:40:9d:93:6a:e9:cc:6a:ed:b5:
         f3:a8:7b:09
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1wP9zg7sL3xBLzx+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDFmMWM4YzItMTlmOS00ZjYyLWJmZTMtZDE0MjhkMWEw
MDVlMB4XDTI2MDQwODEzMDAzM1oXDTI2MDcwNzEzMDAzM1owLzEtMCsGA1UEAxMk
YWVkN2Q3MWQtODc5NC00MGY4LWE4N2YtODQ2OGI3ZjA3ZjY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+uGH7+j0x4Hf+scQFBZORtHRgAy19Vbi/bV
HSSvbyIU6n7DKmXKNCI7ly2xTMLhA1GsqaBYnrtcfGvK/0SSxwdbzP+U3AOo9Bpp
Ze/tAlFJ0NQT/DvBkeqXClmXg6zjRWlSo5/ohRKaY7+ikne12Wu8BLnI8JossR98
yyvRtpBtKoBTGs0QchgBPDcP4X0/vO5UkD3hVXTzRCADksgioD+h8ZfcdGI/dJ/x
uCXG9n0bBf7NYaWsRdq95mmXrVit6CUeLCYZQaL/1LP/fIAxkS37l3lTBd0NTxbm
MMXjH0jJRlM4WcSt+ox5F4OLWQ/4VsMa7mIVyHVKJ9GWcvj2mwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGta68KmwfKLnkHLp5h4lbDI7KBmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kMWYx
YzhjMi0xOWY5LTRmNjItYmZlMy1kMTQyOGQxYTAwNWUvZDYwMzBjNzItZDEzNy0z
NGQzLTgzNzItMWFiZWYyNjIzZmNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDFmMWM4YzItMTlmOS00ZjYyLWJm
ZTMtZDE0MjhkMWEwMDVlL2QxZjFjOGMyLTE5ZjktNGY2Mi1iZmUzLWQxNDI4ZDFh
MDA1ZS5jcmwwHwYDVR0jBBgwFoAULSJwcepBQBbOhUU6hlK+/ghcybAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9kMWYxYzhjMi0xOWY5LTRmNjItYmZlMy1kMTQy
OGQxYTAwNWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp86+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH7gSpYHpCXWa9SfECmlOuepFyBqXevbsuAOh+L7KiQc6E0DuAm/+6X/
Z1NFoJuO2RaBvf/BggXLEGncSCOiIWu7mK2ihqzVVEXNXqYwG45Qxl/eslkflQ+k
nKNirVFMn/gId3ScB2/tgwBeHpSQOniJ8Fbe15UGR+FBdkK+ExZc5KdJMmvkYzeU
DrSbnZbeg0Uhy7tH3jnuzk5zjPJ1gI0KWa2aLvfJ+lty9+mDBG2hMzQIzYEVlXyA
XzkwGD/Aleoq1cA44TCyPBn6p7nYiE+3fSTmJdqTkML2XbxrXqlyL3ZRPX5lxnpD
bEBrPy7JxpSqu0Cdk2rpzGrttfOoewk=
-----END CERTIFICATE-----
Generated at Sat Apr 18 02:31:31 2026 by rpki-client