Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/24851b99-d0d6-345e-ae71-08c0f9f2c08e.roa
File:                     24851b99-d0d6-345e-ae71-08c0f9f2c08e.roa (raw, json)
Hash identifier:          qWh094HIrDjj2UUCYy47N1rWI/A7bXZ2xuEhgOMfiSo=
Subject key identifier:   BC:84:53:44:55:96:06:89:C8:AF:F1:B5:8B:57:2F:1A:2F:C1:C8:43
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F6C584AD50CE411BAC01C4AC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/24851b99-d0d6-345e-ae71-08c0f9f2c08e.roa
Signing time:             Wed 07 Oct 2026 13:00:13 +0000
ROA not before:           Wed 07 Oct 2026 13:00:13 +0000
ROA not after:            Tue 05 Jan 2027 14:00:13 +0000
asID:                     6167
IP address blocks:        174.246.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6c:58:4a:d5:0c:e4:11:ba:c0:1c:4a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  7 13:00:13 2026 GMT
            Not After : Jan  5 14:00:13 2027 GMT
        Subject: CN=d5b3bf98-c220-4e0f-86cc-6828150a010b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:85:f6:9f:36:8b:8b:eb:1e:bf:d4:48:12:f8:
                    17:61:78:40:dd:c6:c1:80:1e:f2:41:ae:fa:6a:8b:
                    f3:d5:60:7f:9f:15:87:91:17:52:6a:f0:17:5f:6a:
                    9b:83:52:1f:7f:14:c8:5c:16:f0:45:21:94:55:95:
                    0e:9b:f7:fa:ad:38:b2:96:a1:2d:28:a7:69:56:10:
                    e8:ed:a1:59:e4:d3:25:b7:fc:b8:35:a5:b6:43:1e:
                    6a:cf:1b:5b:99:14:9e:6d:c9:33:05:be:f8:27:26:
                    16:2f:31:d5:10:61:e7:5b:fc:3d:7f:45:f7:59:59:
                    ba:47:01:08:89:b9:15:b0:14:02:74:e1:96:9a:38:
                    7a:fe:69:11:d5:01:2b:f7:a3:ae:46:fa:e1:ef:b7:
                    1a:01:8e:78:f5:3e:4c:53:33:03:5d:e6:f8:f5:f2:
                    d3:5d:cf:0c:dd:a3:31:3b:25:09:f4:03:4f:1c:60:
                    bc:1e:a6:ec:21:33:78:36:08:f1:3f:b9:73:c0:36:
                    55:c3:1a:6b:b6:48:c7:35:d9:c2:f8:d3:92:f8:c4:
                    8e:2c:ae:72:f3:d9:63:b7:c2:95:6f:7d:88:87:82:
                    4e:39:85:e9:eb:bb:7d:39:5b:e8:bb:e5:e6:30:f1:
                    39:ad:c2:23:90:7b:15:4d:fc:b7:89:68:8a:c9:71:
                    f0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:84:53:44:55:96:06:89:C8:AF:F1:B5:8B:57:2F:1A:2F:C1:C8:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/24851b99-d0d6-345e-ae71-08c0f9f2c08e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.246.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:e9:e3:67:be:3c:13:0a:77:bf:df:6d:3e:5c:0c:33:fb:0f:
         be:f7:e1:c7:94:39:2a:18:78:2e:8f:95:61:33:af:32:db:9f:
         4c:9a:05:e5:62:94:4f:51:1a:e5:47:ed:25:ea:a4:1a:1a:cd:
         81:17:1f:4f:7e:da:7f:e0:12:52:a7:e4:f3:b2:91:27:ed:53:
         ea:22:c8:05:c1:52:6d:e2:12:bb:1c:c6:5d:36:fc:52:8c:6e:
         37:e0:9a:b0:2a:53:bf:2b:44:de:a6:63:8e:fa:8e:69:81:ce:
         eb:8d:9d:11:89:60:b5:a7:c8:4e:90:e6:a9:6a:cb:6f:0f:d8:
         d0:9d:2a:90:f6:90:93:81:12:42:bd:7a:cb:48:2d:3d:2f:10:
         a8:a4:b0:75:24:ee:09:ef:77:a7:4d:d7:57:ab:35:25:54:29:
         5f:96:6d:7c:94:83:14:e6:48:ce:23:26:de:c1:37:6d:12:ec:
         c2:bf:85:8b:ac:2f:55:c5:7c:c2:f5:ea:02:ff:dc:ee:ec:f9:
         7b:8f:36:16:b5:a3:64:68:7f:d7:eb:e5:79:24:f0:51:cd:29:
         43:b5:02:3c:bc:41:b5:b1:11:6d:05:e4:48:2a:b2:1b:ff:54:
         f7:28:9c:6f:bc:af:a2:4f:9e:a7:fc:64:0f:73:5c:2b:85:b2:
         2c:16:c3:bf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9sWErVDOQRusAcSsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MTAwNzEzMDAxM1oXDTI3MDEwNTE0MDAxM1owLzEtMCsGA1UEAxMk
ZDViM2JmOTgtYzIyMC00ZTBmLTg2Y2MtNjgyODE1MGEwMTBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4X2nzaLi+sev9RIEvgXYXhA3cbBgB7yQa76
aovz1WB/nxWHkRdSavAXX2qbg1IffxTIXBbwRSGUVZUOm/f6rTiylqEtKKdpVhDo
7aFZ5NMlt/y4NaW2Qx5qzxtbmRSebckzBb74JyYWLzHVEGHnW/w9f0X3WVm6RwEI
ibkVsBQCdOGWmjh6/mkR1QEr96OuRvrh77caAY549T5MUzMDXeb49fLTXc8M3aMx
OyUJ9ANPHGC8HqbsITN4NgjxP7lzwDZVwxprtkjHNdnC+NOS+MSOLK5y89ljt8KV
b32Ih4JOOYXp67t9OVvou+XmMPE5rcIjkHsVTfy3iWiKyXHwiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLyEU0RVlgaJyK/xtYtXLxovwchDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjQ4NTFiOTktZDBkNi0z
NDVlLWFlNzEtMDhjMGY5ZjJjMDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErvYQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGvp42e+PBMKd7/fbT5cDDP7D7734ceUOSoYeC6PlWEzrzLbn0yaBeVi
lE9RGuVH7SXqpBoazYEXH09+2n/gElKn5POykSftU+oiyAXBUm3iErscxl02/FKM
bjfgmrAqU78rRN6mY476jmmBzuuNnRGJYLWnyE6Q5qlqy28P2NCdKpD2kJOBEkK9
estILT0vEKiksHUk7gnvd6dN11erNSVUKV+WbXyUgxTmSM4jJt7BN20S7MK/hYus
L1XFfML16gL/3O7s+XuPNha1o2Rof9fr5Xkk8FHNKUO1Ajy8QbWxEW0F5Egqshv/
VPconG+8r6JPnqf8ZA9zXCuFsiwWw78=
-----END CERTIFICATE-----
Generated at Sat Oct 10 13:26:53 2026 by rpki-client