Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6c523f7c-2e09-30e2-9294-60fc3f6f8865.roa
File:                     6c523f7c-2e09-30e2-9294-60fc3f6f8865.roa (raw, json)
Hash identifier:          c3rWO/ABpYoHFsBk7oclZK+wCztCzNlBkspzPRSXZFk=
Subject key identifier:   BD:FC:4C:E4:54:BC:C0:43:2C:81:17:DE:32:6B:16:3C:44:AA:DD:3C
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F34AB5ED25826724797FF2200
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6c523f7c-2e09-30e2-9294-60fc3f6f8865.roa
Signing time:             Thu 17 Sep 2026 14:22:46 +0000
ROA not before:           Thu 17 Sep 2026 14:22:46 +0000
ROA not after:            Wed 16 Dec 2026 15:22:46 +0000
asID:                     152179
IP address blocks:        64.204.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:34:ab:5e:d2:58:26:72:47:97:ff:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 17 14:22:46 2026 GMT
            Not After : Dec 16 15:22:46 2026 GMT
        Subject: CN=6ab769f4-43ca-4e92-9ccb-f2957ddbf514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:69:9e:22:d3:18:11:98:e7:cb:fd:86:fb:4c:
                    1f:9b:5f:1a:e7:3f:12:ef:7a:9f:8e:e2:bf:8b:d7:
                    4f:92:6e:26:b2:d7:cf:93:fc:24:e8:f2:6e:74:e8:
                    bb:21:7c:e9:fe:69:50:09:d3:0f:a0:d0:8c:5b:23:
                    f2:57:8f:8e:cb:05:a3:d1:fb:29:08:1d:c7:c2:51:
                    d5:1a:4c:9a:f4:9b:ad:61:10:c4:dc:51:34:e1:33:
                    5e:da:1a:84:6d:4d:8d:83:04:89:47:88:6f:09:c4:
                    38:d7:0d:21:3c:1d:ca:fc:8d:97:f1:86:5f:ae:2e:
                    99:b3:17:f5:87:31:1e:a9:d6:86:30:b5:9b:74:cb:
                    0e:85:a3:c3:53:74:d8:0f:cd:7f:d6:99:44:4b:b4:
                    9b:92:60:d5:b2:7a:5a:69:b0:f0:ef:f4:66:7e:d1:
                    9f:3c:91:41:3b:c2:a8:b7:80:11:d2:b6:4c:ae:0f:
                    00:1d:02:98:d6:db:c1:a8:d7:f9:5a:b8:7c:ae:67:
                    80:70:ba:76:91:33:55:38:0a:7b:7b:fc:d2:62:d0:
                    38:3b:f8:02:92:e0:0d:df:cf:91:55:be:13:ee:f3:
                    aa:4a:76:98:10:37:c4:53:67:81:03:b8:19:2b:52:
                    51:be:89:58:37:8b:6b:98:af:44:05:37:ab:95:01:
                    06:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:FC:4C:E4:54:BC:C0:43:2C:81:17:DE:32:6B:16:3C:44:AA:DD:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6c523f7c-2e09-30e2-9294-60fc3f6f8865.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.204.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:de:6c:bd:f1:b6:28:ed:14:01:a6:f0:a0:9d:44:be:ad:61:
         24:af:df:eb:a5:d2:7a:f6:74:e2:9f:84:de:38:6d:b3:7c:61:
         80:bc:da:20:ba:5a:ec:53:ed:42:27:14:4c:4a:e3:79:3f:49:
         03:6b:38:95:9c:55:21:9d:ba:bf:fd:63:c8:15:d7:1f:36:d7:
         9b:67:c6:2a:b4:08:1b:fb:62:65:99:b2:1b:7d:07:10:10:2a:
         56:c0:0c:16:cf:99:9a:a4:06:1d:e0:24:47:5a:6e:c4:5d:70:
         94:0f:c7:3c:bb:3f:f3:73:72:1c:32:7c:49:8b:ac:df:c0:7f:
         46:c0:64:e8:9a:a7:3f:4f:f1:f1:73:42:4d:31:bc:78:7e:ca:
         1f:9d:06:e9:b8:f1:35:f3:33:b6:5f:47:5f:68:7a:67:2b:b0:
         c8:32:fa:58:3c:69:7c:f0:3a:ee:26:bb:73:1e:99:77:2d:17:
         2b:ca:6d:85:45:d8:06:1b:d3:a0:39:4c:0d:48:d5:97:4a:2e:
         0f:18:10:25:2d:2d:44:61:b8:a0:61:ee:8b:1f:a1:07:f6:f0:
         80:ec:b6:08:6d:5e:64:06:be:46:50:6d:af:a7:fb:77:e7:6e:
         3b:9c:a0:5f:c2:db:03:75:44:13:3b:f9:45:8d:82:41:eb:b4:
         1a:68:ec:10
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE80q17SWCZyR5f/IgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDkxNzE0MjI0NloXDTI2MTIxNjE1MjI0NlowLzEtMCsGA1UEAxMk
NmFiNzY5ZjQtNDNjYS00ZTkyLTljY2ItZjI5NTdkZGJmNTE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGmeItMYEZjny/2G+0wfm18a5z8S73qfjuK/
i9dPkm4mstfPk/wk6PJudOi7IXzp/mlQCdMPoNCMWyPyV4+OywWj0fspCB3HwlHV
Gkya9JutYRDE3FE04TNe2hqEbU2NgwSJR4hvCcQ41w0hPB3K/I2X8YZfri6Zsxf1
hzEeqdaGMLWbdMsOhaPDU3TYD81/1plES7SbkmDVsnpaabDw7/RmftGfPJFBO8Ko
t4AR0rZMrg8AHQKY1tvBqNf5Wrh8rmeAcLp2kTNVOAp7e/zSYtA4O/gCkuAN38+R
Vb4T7vOqSnaYEDfEU2eBA7gZK1JRvolYN4trmK9EBTerlQEGRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL38TORUvMBDLIEX3jJrFjxEqt08MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNmM1MjNmN2MtMmUwOS0z
MGUyLTkyOTQtNjBmYzNmNmY4ODY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMyEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABfebL3xtijtFAGm8KCdRL6tYSSv3+ul0nr2dOKfhN44bbN8YYC82iC6
WuxT7UInFExK43k/SQNrOJWcVSGdur/9Y8gV1x8215tnxiq0CBv7YmWZsht9BxAQ
KlbADBbPmZqkBh3gJEdabsRdcJQPxzy7P/NzchwyfEmLrN/Af0bAZOiapz9P8fFz
Qk0xvHh+yh+dBum48TXzM7ZfR19oemcrsMgy+lg8aXzwOu4mu3MemXctFyvKbYVF
2AYb06A5TA1I1ZdKLg8YECUtLURhuKBh7osfoQf28IDstghtXmQGvkZQba+n+3fn
bjucoF/C2wN1RBM7+UWNgkHrtBpo7BA=
-----END CERTIFICATE-----
Generated at Mon Sep 21 21:10:55 2026 by rpki-client