Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/6d600f3b-f2b8-3e94-ad98-43b4403b553e.roa
File:                     6d600f3b-f2b8-3e94-ad98-43b4403b553e.roa (raw, json)
Hash identifier:          juhSKWjFhu22A+cyfE9ltxwo2CKT1fejqHNZfswebcw=
Subject key identifier:   47:7E:A3:3B:68:85:91:C2:6D:13:D8:A7:C9:5E:03:26:E8:D6:E8:0C
Certificate issuer:       /CN=78ffdd14-7e7a-46d4-993a-4b51f8031030
Certificate serial:       010D0C9F4328584E18AEE0BA25A3E4B9BB655D00
Authority key identifier: FD:0B:B3:86:00:15:86:0D:7D:0A:2F:1B:5B:33:97:97:B9:95:4E:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/6d600f3b-f2b8-3e94-ad98-43b4403b553e.roa
Signing time:             Sun 07 Jun 2026 21:00:12 +0000
ROA not before:           Sun 07 Jun 2026 21:00:12 +0000
ROA not after:            Sat 05 Sep 2026 21:00:12 +0000
asID:                     22903
IP address blocks:        165.140.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/78ffdd14-7e7a-46d4-993a-4b51f8031030.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/78ffdd14-7e7a-46d4-993a-4b51f8031030.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:18:ae:e0:ba:25:a3:e4:b9:bb:65:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78ffdd14-7e7a-46d4-993a-4b51f8031030
        Validity
            Not Before: Jun  7 21:00:12 2026 GMT
            Not After : Sep  5 21:00:12 2026 GMT
        Subject: CN=352d7ab7-cdf8-4a21-ad80-549ff4fb24b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b2:38:83:6b:3d:32:08:e6:a5:e7:1f:b2:a6:
                    ee:c5:1d:e1:85:82:3f:97:62:66:95:dd:58:b9:4a:
                    0b:b5:d2:63:f7:22:10:9e:db:e0:ce:27:92:b2:cf:
                    dc:5e:e2:35:fd:ad:a3:43:a9:41:30:8f:63:82:18:
                    ed:a8:0e:99:0c:30:dd:81:f5:b1:fa:d5:55:5f:89:
                    5d:a8:3c:82:d4:7f:b2:89:5f:96:04:d4:ba:a7:7d:
                    d6:f7:e7:b5:0a:ed:55:c6:c9:a0:51:94:29:48:07:
                    96:35:cd:c6:6e:2b:39:72:41:d6:80:1f:b4:47:8e:
                    33:47:30:91:08:1f:17:87:8c:71:3f:bc:84:47:58:
                    74:ce:d2:a6:fa:5b:8e:ba:32:9f:29:46:97:02:05:
                    06:4d:89:0b:4e:b9:ec:29:7d:3c:c3:75:74:fd:bd:
                    c1:40:1e:d7:c7:96:21:14:98:0f:10:18:8f:9f:59:
                    1e:f9:94:e6:3f:06:b3:86:b1:19:f3:fa:86:22:85:
                    b1:18:9b:a6:e7:94:4d:06:24:4f:22:e6:a7:1d:59:
                    a6:87:62:7c:03:6f:85:70:29:13:ac:5e:2d:05:33:
                    bd:c3:a5:e8:ee:2c:77:33:f8:35:70:bf:1b:25:a3:
                    ee:58:e2:09:19:23:2b:b7:cf:fa:78:bb:3f:e1:c3:
                    b4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:7E:A3:3B:68:85:91:C2:6D:13:D8:A7:C9:5E:03:26:E8:D6:E8:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/6d600f3b-f2b8-3e94-ad98-43b4403b553e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/78ffdd14-7e7a-46d4-993a-4b51f8031030.crl

            X509v3 Authority Key Identifier:
                keyid:FD:0B:B3:86:00:15:86:0D:7D:0A:2F:1B:5B:33:97:97:B9:95:4E:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:01:8e:a6:b4:9f:69:73:0e:60:56:53:44:1e:6f:2b:16:7f:
         97:7a:85:9b:c8:d2:1d:ac:69:a9:03:87:b8:89:97:dc:af:53:
         5e:ad:fa:63:14:33:eb:f7:32:0a:da:e5:2c:60:f3:73:11:49:
         2a:27:ca:b8:3a:10:5a:1f:64:e4:86:eb:c0:c9:ad:19:be:b8:
         e0:26:de:7a:11:6d:a4:ff:19:03:73:6a:21:6f:72:85:5c:3d:
         a3:86:59:6d:bc:10:84:97:84:3e:81:21:13:d5:92:69:55:0e:
         70:32:13:3c:66:40:2d:71:0a:f7:46:93:4d:74:61:73:03:17:
         f8:7d:aa:94:52:e1:11:ea:6d:4d:68:29:67:b2:aa:4e:68:80:
         b4:85:35:ec:c2:a9:f9:a7:85:b2:d0:9c:7c:eb:2a:16:cd:34:
         35:53:8d:12:06:54:94:01:33:57:91:64:d8:ee:8f:ed:7e:e6:
         ca:e3:ec:ba:a5:24:e1:a6:5a:59:06:5b:43:78:72:23:eb:cf:
         4d:92:b4:cb:6e:8e:ea:da:a0:a6:71:ed:ba:0a:57:ba:ae:56:
         0b:5d:2a:6f:1c:c5:f0:a6:c7:20:22:a3:b8:c3:e8:3f:58:da:
         86:49:e8:23:98:27:e6:93:06:49:84:45:91:e6:6b:88:56:5e:
         d8:d7:68:f4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4YruC6JaPkubtlXQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzhmZmRkMTQtN2U3YS00NmQ0LTk5M2EtNGI1MWY4MDMx
MDMwMB4XDTI2MDYwNzIxMDAxMloXDTI2MDkwNTIxMDAxMlowLzEtMCsGA1UEAxMk
MzUyZDdhYjctY2RmOC00YTIxLWFkODAtNTQ5ZmY0ZmIyNGI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbI4g2s9MgjmpecfsqbuxR3hhYI/l2Jmld1Y
uUoLtdJj9yIQntvgzieSss/cXuI1/a2jQ6lBMI9jghjtqA6ZDDDdgfWx+tVVX4ld
qDyC1H+yiV+WBNS6p33W9+e1Cu1VxsmgUZQpSAeWNc3Gbis5ckHWgB+0R44zRzCR
CB8Xh4xxP7yER1h0ztKm+luOujKfKUaXAgUGTYkLTrnsKX08w3V0/b3BQB7Xx5Yh
FJgPEBiPn1ke+ZTmPwazhrEZ8/qGIoWxGJum55RNBiRPIuanHVmmh2J8A2+FcCkT
rF4tBTO9w6Xo7ix3M/g1cL8bJaPuWOIJGSMrt8/6eLs/4cO02wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEd+oztohZHCbRPYp8leAybo1ugMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83OGZm
ZGQxNC03ZTdhLTQ2ZDQtOTkzYS00YjUxZjgwMzEwMzAvNmQ2MDBmM2ItZjJiOC0z
ZTk0LWFkOTgtNDNiNDQwM2I1NTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNzhmZmRkMTQtN2U3YS00NmQ0LTk5
M2EtNGI1MWY4MDMxMDMwLzc4ZmZkZDE0LTdlN2EtNDZkNC05OTNhLTRiNTFmODAz
MTAzMC5jcmwwHwYDVR0jBBgwFoAU/QuzhgAVhg19Ci8bWzOXl7mVTrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi83OGZmZGQxNC03ZTdhLTQ2ZDQtOTkzYS00YjUx
ZjgwMzEwMzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApYw7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGYBjqa0n2lzDmBWU0QebysWf5d6hZvI0h2saakDh7iJl9yvU16t+mMU
M+v3Mgra5Sxg83MRSSonyrg6EFofZOSG68DJrRm+uOAm3noRbaT/GQNzaiFvcoVc
PaOGWW28EISXhD6BIRPVkmlVDnAyEzxmQC1xCvdGk010YXMDF/h9qpRS4RHqbU1o
KWeyqk5ogLSFNezCqfmnhbLQnHzrKhbNNDVTjRIGVJQBM1eRZNjuj+1+5srj7Lql
JOGmWlkGW0N4ciPrz02StMtujuraoKZx7boKV7quVgtdKm8cxfCmxyAio7jD6D9Y
2oZJ6COYJ+aTBkmERZHma4hWXtjXaPQ=
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:59:53 2026 by rpki-client