Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c8817623-911a-3d53-a166-264485c4b571.roa
File:                     c8817623-911a-3d53-a166-264485c4b571.roa (raw, json)
Hash identifier:          TP0PUyL2SJuxpUryXi8NcdIP4Il1XMJpSZ6kYkw+BpI=
Subject key identifier:   50:06:FA:07:E3:2A:76:EB:51:D9:08:D2:2C:CA:78:36:60:50:CF:41
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D703FF56AD44A89F799095C00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c8817623-911a-3d53-a166-264485c4b571.roa
Signing time:             Wed 08 Apr 2026 13:00:33 +0000
ROA not before:           Wed 08 Apr 2026 13:00:33 +0000
ROA not after:            Tue 07 Jul 2026 13:00:33 +0000
asID:                     16224
IP address blocks:        206.136.120.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:3f:f5:6a:d4:4a:89:f7:99:09:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr  8 13:00:33 2026 GMT
            Not After : Jul  7 13:00:33 2026 GMT
        Subject: CN=ad5ccd6d-e9b2-458c-aa30-c3eeced7d8f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:33:16:b2:a2:f2:9e:c8:6f:c2:94:0b:17:ca:
                    cf:d5:db:d1:6a:71:88:f1:a5:85:27:81:e0:b3:7e:
                    60:b2:73:68:94:9c:bb:8e:f6:59:35:4e:ec:69:e4:
                    a4:aa:a7:c2:0a:67:0a:b5:e3:62:f8:84:53:fc:12:
                    46:3c:12:c6:6c:34:95:08:10:f1:a5:1e:79:73:68:
                    c2:d6:4f:4f:78:39:6f:e7:b9:06:68:8b:35:ff:4e:
                    49:09:8a:8c:b3:47:3d:9a:a0:0b:94:87:7a:62:04:
                    fe:bf:5b:53:a1:c2:2a:5a:fa:a9:cf:d2:9e:d2:5f:
                    bc:88:cd:77:a8:d6:86:0b:9f:0c:4a:4d:12:5e:34:
                    3e:cf:c0:1d:3d:ea:17:ba:f1:45:9f:46:cb:82:2c:
                    09:c2:1c:e3:1e:73:18:33:9f:af:84:e1:45:e3:cb:
                    28:c5:16:94:59:b5:d2:a3:0b:47:26:2e:58:da:26:
                    c7:c7:71:39:eb:3a:ca:4d:a4:53:d8:e4:0b:8d:09:
                    8d:9f:2f:e3:54:41:7f:53:77:c6:06:df:2d:7c:52:
                    e8:bc:28:8c:51:4a:7d:74:37:c2:00:dd:4c:70:43:
                    37:a5:2e:4b:dd:9a:7e:82:a2:c7:31:06:0e:b6:eb:
                    aa:65:dc:7f:37:aa:cb:b1:d9:c9:f1:d9:b8:05:0b:
                    d7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:06:FA:07:E3:2A:76:EB:51:D9:08:D2:2C:CA:78:36:60:50:CF:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c8817623-911a-3d53-a166-264485c4b571.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.136.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:ab:37:6f:63:0e:2a:4f:51:c7:3e:5c:e4:fb:8a:fa:51:da:
         1e:6e:9d:15:9d:84:6b:35:d9:bb:df:89:85:e2:69:ac:06:d9:
         1a:07:d5:69:25:8e:80:d1:b4:96:cf:f9:50:c1:f2:cb:ce:9a:
         e0:d8:24:87:e7:27:88:7b:86:49:43:ff:b6:c3:de:1c:ec:df:
         2f:95:7d:66:c9:6c:e8:52:a3:a6:c3:db:19:c3:97:e6:0d:36:
         48:3a:20:86:37:26:7e:1c:96:3f:13:ea:04:44:c4:a2:fe:3d:
         30:75:0b:b3:74:46:8d:8b:93:d6:50:02:d8:6b:31:5a:6c:ed:
         9b:21:25:20:ab:5d:a6:b4:1c:31:53:a8:53:2d:1f:d1:3e:9c:
         ad:74:9c:5f:5c:f7:35:6d:2d:53:82:c6:7d:e2:90:af:d3:9a:
         e8:75:15:f0:9b:24:fd:4e:a6:72:a2:ba:45:1a:0c:df:6d:cf:
         44:96:e8:28:62:96:e2:a6:31:fb:8a:ea:99:5a:88:ca:df:1f:
         dd:c4:73:d3:d8:6f:24:41:fd:30:df:68:20:d4:b9:d4:a1:d1:
         79:92:42:53:87:1b:19:c3:05:ed:26:23:05:fd:17:94:fe:f2:
         e9:ec:33:74:f5:49:f0:ad:10:b5:b5:ba:28:94:9c:01:76:ad:
         6d:c9:fb:b6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1wP/Vq1EqJ95kJXAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDQwODEzMDAzM1oXDTI2MDcwNzEzMDAzM1owLzEtMCsGA1UEAxMk
YWQ1Y2NkNmQtZTliMi00NThjLWFhMzAtYzNlZWNlZDdkOGYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTMWsqLynshvwpQLF8rP1dvRanGI8aWFJ4Hg
s35gsnNolJy7jvZZNU7saeSkqqfCCmcKteNi+IRT/BJGPBLGbDSVCBDxpR55c2jC
1k9PeDlv57kGaIs1/05JCYqMs0c9mqALlId6YgT+v1tTocIqWvqpz9Ke0l+8iM13
qNaGC58MSk0SXjQ+z8AdPeoXuvFFn0bLgiwJwhzjHnMYM5+vhOFF48soxRaUWbXS
owtHJi5Y2ibHx3E56zrKTaRT2OQLjQmNny/jVEF/U3fGBt8tfFLovCiMUUp9dDfC
AN1McEM3pS5L3Zp+gqLHMQYOtuuqZdx/N6rLsdnJ8dm4BQvXlwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFAG+gfjKnbrUdkI0izKeDZgUM9BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzg4MTc2MjMtOTExYS0z
ZDUzLWExNjYtMjY0NDg1YzRiNTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzoh4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK2rN29jDipPUcc+XOT7ivpR2h5unRWdhGs12bvfiYXiaawG2RoH1Wkl
joDRtJbP+VDB8svOmuDYJIfnJ4h7hklD/7bD3hzs3y+VfWbJbOhSo6bD2xnDl+YN
Nkg6IIY3Jn4clj8T6gRExKL+PTB1C7N0Ro2Lk9ZQAthrMVps7ZshJSCrXaa0HDFT
qFMtH9E+nK10nF9c9zVtLVOCxn3ikK/Tmuh1FfCbJP1OpnKiukUaDN9tz0SW6Chi
luKmMfuK6plaiMrfH93Ec9PYbyRB/TDfaCDUudSh0XmSQlOHGxnDBe0mIwX9F5T+
8unsM3T1SfCtELW1uiiUnAF2rW3J+7Y=
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:05:53 2026 by rpki-client