Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31/1dc07208-ca23-362a-a20c-22d013df9b70.roa
File:                     1dc07208-ca23-362a-a20c-22d013df9b70.roa (raw, json)
Hash identifier:          OL18jldwDnGEmjEBZEiOQ+0Nuk/bg3aizF8/R2kAJ+M=
Subject key identifier:   AC:46:CA:08:5B:CA:10:2F:0F:44:C1:2D:6C:04:AA:3B:AD:B5:DB:79
Certificate issuer:       /CN=68f1635e-5871-4108-b726-e99a09258e31
Certificate serial:       010D0C9F4328584E18AEFE3BC7939B83B34DB5C0
Authority key identifier: CD:C5:9F:2D:D8:29:37:AA:4F:82:8E:D4:10:7B:6E:FF:F4:CA:08:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31/1dc07208-ca23-362a-a20c-22d013df9b70.roa
Signing time:             Sun 07 Jun 2026 21:00:12 +0000
ROA not before:           Sun 07 Jun 2026 21:00:12 +0000
ROA not after:            Sat 05 Sep 2026 21:00:12 +0000
asID:                     33510
IP address blocks:        204.126.156.0/24 maxlen: 24
                          204.126.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31/68f1635e-5871-4108-b726-e99a09258e31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31/68f1635e-5871-4108-b726-e99a09258e31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:18:ae:fe:3b:c7:93:9b:83:b3:4d:b5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68f1635e-5871-4108-b726-e99a09258e31
        Validity
            Not Before: Jun  7 21:00:12 2026 GMT
            Not After : Sep  5 21:00:12 2026 GMT
        Subject: CN=925d575c-16fb-44ea-9209-16bc2351eba1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:25:8e:29:df:f2:2d:88:a3:3c:4e:c3:01:3f:
                    e7:c0:5a:a6:7a:0e:f6:56:5e:57:11:da:36:e9:bc:
                    91:78:d8:85:c6:c3:7e:40:97:a1:ef:ca:7a:f4:b2:
                    e3:58:e0:a2:fb:d2:cc:d8:5b:3d:17:11:0d:f6:20:
                    67:97:32:39:7f:cf:8c:f2:7d:16:8d:df:df:72:81:
                    c1:0e:d0:d5:1b:0d:d7:a3:08:6d:2c:19:33:eb:0a:
                    88:a8:ee:b7:f5:f7:73:73:1d:1d:67:25:18:e9:cc:
                    48:82:fc:92:da:6d:4e:88:17:7c:02:ce:af:62:57:
                    95:61:96:49:38:35:44:c9:1c:73:df:4a:fc:05:16:
                    23:f4:d5:ac:4f:b1:8f:e3:7f:69:1f:31:54:f4:e6:
                    f2:d3:ae:57:cc:e1:90:38:f8:70:7a:6e:f5:ae:22:
                    8e:70:92:4d:27:63:c7:61:bd:73:e9:6b:21:24:57:
                    42:4b:05:15:f1:55:0b:a9:be:08:8e:82:9c:4a:89:
                    5b:0f:46:f1:5d:40:1b:e7:38:87:50:68:a2:0e:df:
                    cb:d6:c8:d6:f8:87:13:63:fb:52:20:82:83:6f:6c:
                    9b:e7:25:ac:e0:16:b4:c2:7f:17:f5:2f:62:92:a8:
                    72:d4:2e:8b:e3:7b:99:b0:5a:38:72:c7:51:27:f8:
                    92:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:46:CA:08:5B:CA:10:2F:0F:44:C1:2D:6C:04:AA:3B:AD:B5:DB:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31/1dc07208-ca23-362a-a20c-22d013df9b70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31/68f1635e-5871-4108-b726-e99a09258e31.crl

            X509v3 Authority Key Identifier:
                keyid:CD:C5:9F:2D:D8:29:37:AA:4F:82:8E:D4:10:7B:6E:FF:F4:CA:08:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.126.156.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:d3:fd:30:5b:a1:eb:0b:fe:66:ee:7f:cb:37:6e:25:a8:34:
         91:0b:cc:58:64:54:52:09:d8:b2:bf:97:9e:17:c9:49:3f:b0:
         fb:ed:78:c9:f0:ba:41:5e:88:eb:40:e6:7c:86:c3:0d:aa:66:
         d1:71:9a:09:4e:92:67:e5:bc:c6:d9:71:a0:c0:78:12:1c:6f:
         00:72:cc:31:9a:8e:e7:8e:bf:fd:ee:b5:f7:df:61:aa:fc:dc:
         fb:45:2d:6e:e4:16:c2:9a:db:4f:ee:42:8f:05:6a:1e:13:3f:
         ac:f6:22:00:22:f2:27:dd:a8:16:c2:9a:b3:33:9a:36:29:df:
         71:ae:a4:f8:e3:16:05:57:fe:a2:53:dc:53:c9:90:b6:e6:67:
         69:c8:d3:ca:e4:7b:dd:f7:b2:42:7c:3d:c5:9f:70:45:6d:86:
         32:c4:e6:df:45:fc:49:20:be:25:c2:7d:50:9c:a6:c7:15:89:
         5a:f1:d5:1b:34:05:e1:25:26:d0:78:9f:87:36:3b:4b:c3:8f:
         0c:c8:14:b3:e2:4c:c6:17:c0:a0:2a:78:63:d9:b5:c5:db:08:
         aa:2d:b5:59:af:f0:da:f8:be:fc:e5:10:44:97:4d:ca:e0:1a:
         87:ce:7c:53:b4:3d:d8:3f:9e:2e:b2:eb:58:08:e1:e0:6a:e5:
         6c:98:d1:ee
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Yrv47x5Obg7NNtcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjhmMTYzNWUtNTg3MS00MTA4LWI3MjYtZTk5YTA5MjU4
ZTMxMB4XDTI2MDYwNzIxMDAxMloXDTI2MDkwNTIxMDAxMlowLzEtMCsGA1UEAxMk
OTI1ZDU3NWMtMTZmYi00NGVhLTkyMDktMTZiYzIzNTFlYmExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSWOKd/yLYijPE7DAT/nwFqmeg72Vl5XEdo2
6byReNiFxsN+QJeh78p69LLjWOCi+9LM2Fs9FxEN9iBnlzI5f8+M8n0Wjd/fcoHB
DtDVGw3XowhtLBkz6wqIqO639fdzcx0dZyUY6cxIgvyS2m1OiBd8As6vYleVYZZJ
ODVEyRxz30r8BRYj9NWsT7GP439pHzFU9Oby065XzOGQOPhwem71riKOcJJNJ2PH
Yb1z6WshJFdCSwUV8VULqb4IjoKcSolbD0bxXUAb5ziHUGiiDt/L1sjW+IcTY/tS
IIKDb2yb5yWs4Ba0wn8X9S9ikqhy1C6L43uZsFo4csdRJ/iSTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKxGyghbyhAvD0TBLWwEqjuttdt5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82OGYx
NjM1ZS01ODcxLTQxMDgtYjcyNi1lOTlhMDkyNThlMzEvMWRjMDcyMDgtY2EyMy0z
NjJhLWEyMGMtMjJkMDEzZGY5YjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNjhmMTYzNWUtNTg3MS00MTA4LWI3
MjYtZTk5YTA5MjU4ZTMxLzY4ZjE2MzVlLTU4NzEtNDEwOC1iNzI2LWU5OWEwOTI1
OGUzMS5jcmwwHwYDVR0jBBgwFoAUzcWfLdgpN6pPgo7UEHtu//TKCMwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy82OGYxNjM1ZS01ODcxLTQxMDgtYjcyNi1lOTlh
MDkyNThlMzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzH6cMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEvT/TBboesL/mbuf8s3biWoNJELzFhkVFIJ2LK/l54XyUk/sPvteMnw
ukFeiOtA5nyGww2qZtFxmglOkmflvMbZcaDAeBIcbwByzDGajueOv/3utfffYar8
3PtFLW7kFsKa20/uQo8Fah4TP6z2IgAi8ifdqBbCmrMzmjYp33GupPjjFgVX/qJT
3FPJkLbmZ2nI08rke933skJ8PcWfcEVthjLE5t9F/EkgviXCfVCcpscViVrx1Rs0
BeElJtB4n4c2O0vDjwzIFLPiTMYXwKAqeGPZtcXbCKottVmv8Nr4vvzlEESXTcrg
GofOfFO0Pdg/ni6y61gI4eBq5WyY0e4=
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:17:13 2026 by rpki-client