Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/fe55b376-4f8a-303c-a275-778287cb6142.roa
File:                     fe55b376-4f8a-303c-a275-778287cb6142.roa (raw, json)
Hash identifier:          3AmBWcqAqx1h/dIBlPrZIbcA52aCJZrXS7rMpyvzh8g=
Subject key identifier:   DD:63:C8:12:8E:D8:FB:0F:39:90:09:96:F6:E6:29:88:23:32:04:DD
Certificate issuer:       /CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c
Certificate serial:       010D0C9F4328584E253F0264B38FB12851143600
Authority key identifier: 58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/fe55b376-4f8a-303c-a275-778287cb6142.roa
Signing time:             Fri 12 Jun 2026 09:00:11 +0000
ROA not before:           Fri 12 Jun 2026 09:00:11 +0000
ROA not after:            Thu 10 Sep 2026 09:00:11 +0000
asID:                     2906
IP address blocks:        64.120.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:3f:02:64:b3:8f:b1:28:51:14:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c
        Validity
            Not Before: Jun 12 09:00:11 2026 GMT
            Not After : Sep 10 09:00:11 2026 GMT
        Subject: CN=f463e533-9c5a-4e9f-aa9e-6a0f28e719f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:55:fc:54:ba:7e:32:16:ef:dc:c3:ca:02:9f:
                    d5:e6:9d:17:d6:f0:12:5a:e0:62:c1:5c:24:57:c5:
                    de:4b:53:ba:08:56:2a:a4:23:65:7a:7f:99:47:df:
                    40:65:11:e4:53:cd:15:b3:ce:ae:14:49:fd:15:dd:
                    db:6d:ae:cf:6a:1a:a3:15:53:9a:42:a6:39:c1:b1:
                    fb:2a:d8:1e:7b:82:27:a0:34:8d:71:1e:b8:39:e6:
                    a6:67:c8:fb:c1:a0:e0:e6:31:36:91:45:0d:34:c2:
                    c9:cb:72:6c:9b:3a:ec:43:c0:07:ed:22:5b:d9:62:
                    a0:bc:8e:0b:50:ad:91:74:95:75:47:98:ff:9a:9b:
                    c7:a8:27:43:4c:93:52:7b:25:99:91:78:b8:e4:48:
                    f9:01:ae:5e:60:a3:88:f2:4d:f3:ad:e5:f8:63:b6:
                    e1:82:24:52:83:d0:b1:45:2b:66:83:3f:49:f1:ed:
                    01:f3:53:5b:a8:0c:5f:27:cb:30:84:57:ae:2a:c3:
                    1e:af:f4:ae:03:73:69:73:80:a5:ce:ed:1d:a1:7d:
                    fd:23:4f:69:93:53:c7:6a:26:bc:81:24:68:62:4e:
                    81:a9:42:15:66:e6:a6:f9:0d:03:d3:96:30:44:73:
                    96:db:4c:61:00:28:dd:4b:d9:e6:8a:0d:4a:9f:af:
                    56:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:63:C8:12:8E:D8:FB:0F:39:90:09:96:F6:E6:29:88:23:32:04:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/fe55b376-4f8a-303c-a275-778287cb6142.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl

            X509v3 Authority Key Identifier:
                keyid:58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.120.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:9c:65:cc:f6:5c:30:84:24:4c:4f:d7:14:72:21:bd:bd:e9:
         95:59:a1:46:5a:56:24:96:83:ea:e1:2b:60:fd:9c:5a:8b:74:
         9b:b8:08:58:4d:a2:8b:22:12:57:a8:d6:e3:c3:7b:25:c9:b2:
         ee:7c:b9:f3:f9:1a:e0:97:70:21:14:00:ef:4a:5f:29:05:f4:
         00:72:51:ab:95:92:7b:37:4c:46:d4:8b:cf:72:0b:77:f8:ee:
         3e:fe:86:a8:f6:a3:50:de:15:6d:71:5c:81:9c:e0:39:23:02:
         88:e1:f6:94:c0:ca:7f:9f:98:fd:13:39:1a:f2:d9:bf:0e:fd:
         0a:00:fa:0a:65:49:71:4b:9c:ac:5b:4a:9e:0f:f6:af:33:c9:
         ed:6f:06:72:ce:34:09:27:32:43:a6:e7:6b:e0:81:9e:75:05:
         7a:12:5f:56:d5:bf:8e:ad:a0:0b:b0:b1:a8:26:5e:e1:c5:f5:
         f5:90:6e:79:c1:df:e8:ec:45:0c:7e:db:ba:a3:26:65:8f:6c:
         04:46:8b:68:11:23:aa:58:18:44:ae:1e:37:bb:d3:97:8a:22:
         b0:01:c4:57:18:2a:f9:0c:00:01:85:a4:f5:ed:e6:9f:93:94:
         8a:8f:b7:1f:92:a0:ee:0b:85:2b:3e:df:95:5d:3d:b7:2c:a0:
         67:fb:e0:2e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4lPwJks4+xKFEUNgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ4NjYzOGEtMmUxMi00YWE0LWJkY2QtMjI2NjViMjZl
NTdjMB4XDTI2MDYxMjA5MDAxMVoXDTI2MDkxMDA5MDAxMVowLzEtMCsGA1UEAxMk
ZjQ2M2U1MzMtOWM1YS00ZTlmLWFhOWUtNmEwZjI4ZTcxOWYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFX8VLp+Mhbv3MPKAp/V5p0X1vASWuBiwVwk
V8XeS1O6CFYqpCNlen+ZR99AZRHkU80Vs86uFEn9Fd3bba7PahqjFVOaQqY5wbH7
Ktgee4InoDSNcR64OeamZ8j7waDg5jE2kUUNNMLJy3JsmzrsQ8AH7SJb2WKgvI4L
UK2RdJV1R5j/mpvHqCdDTJNSeyWZkXi45Ej5Aa5eYKOI8k3zreX4Y7bhgiRSg9Cx
RStmgz9J8e0B81NbqAxfJ8swhFeuKsMer/SuA3Npc4Clzu0doX39I09pk1PHaia8
gSRoYk6BqUIVZuam+Q0D05YwRHOW20xhACjdS9nmig1Kn69WmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN1jyBKO2PsPOZAJlvbmKYgjMgTdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wZDg2
NjM4YS0yZTEyLTRhYTQtYmRjZC0yMjY2NWIyNmU1N2MvZmU1NWIzNzYtNGY4YS0z
MDNjLWEyNzUtNzc4Mjg3Y2I2MTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMGQ4NjYzOGEtMmUxMi00YWE0LWJk
Y2QtMjI2NjViMjZlNTdjLzBkODY2MzhhLTJlMTItNGFhNC1iZGNkLTIyNjY1YjI2
ZTU3Yy5jcmwwHwYDVR0jBBgwFoAUWEZxtOubjmMGeKRywWglQLM/E9cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wZDg2NjM4YS0yZTEyLTRhYTQtYmRjZC0yMjY2
NWIyNmU1N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHQHiAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHucZcz2XDCEJExP1xRyIb296ZVZoUZaViSWg+rhK2D9nFqLdJu4CFhN
oosiEleo1uPDeyXJsu58ufP5GuCXcCEUAO9KXykF9AByUauVkns3TEbUi89yC3f4
7j7+hqj2o1DeFW1xXIGc4DkjAojh9pTAyn+fmP0TORry2b8O/QoA+gplSXFLnKxb
Sp4P9q8zye1vBnLONAknMkOm52vggZ51BXoSX1bVv46toAuwsagmXuHF9fWQbnnB
3+jsRQx+27qjJmWPbARGi2gRI6pYGESuHje705eKIrABxFcYKvkMAAGFpPXt5p+T
lIqPtx+SoO4LhSs+35VdPbcsoGf74C4=
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:50:48 2026 by rpki-client