Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a06ab81f-a6c8-462a-b3e0-52f829f8f687/61cd5006-eb96-38f0-ae08-70b29623b9ec.roa
File:                     61cd5006-eb96-38f0-ae08-70b29623b9ec.roa (raw, json)
Hash identifier:          RaZX72eEk0lc8N6qaorIpXxlhSC81qZQl7zuZta7PC4=
Subject key identifier:   E8:B0:10:93:C5:EC:FD:95:9D:AC:98:38:71:59:F0:14:34:02:66:66
Certificate issuer:       /CN=a06ab81f-a6c8-462a-b3e0-52f829f8f687
Certificate serial:       010D0C9F4328584E0A6FF198326E98644A81FB28
Authority key identifier: BB:E4:F8:D9:20:DD:C2:23:75:FB:B4:A0:FD:34:2F:65:04:BC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a06ab81f-a6c8-462a-b3e0-52f829f8f687.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a06ab81f-a6c8-462a-b3e0-52f829f8f687/61cd5006-eb96-38f0-ae08-70b29623b9ec.roa
Signing time:             Tue 02 Jun 2026 18:32:03 +0000
ROA not before:           Tue 02 Jun 2026 18:32:03 +0000
ROA not after:            Mon 31 Aug 2026 18:32:03 +0000
asID:                     398992
IP address blocks:        169.197.182.0/24 maxlen: 24
                          2602:fced::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a06ab81f-a6c8-462a-b3e0-52f829f8f687/a06ab81f-a6c8-462a-b3e0-52f829f8f687.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a06ab81f-a6c8-462a-b3e0-52f829f8f687/a06ab81f-a6c8-462a-b3e0-52f829f8f687.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a06ab81f-a6c8-462a-b3e0-52f829f8f687.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0a:6f:f1:98:32:6e:98:64:4a:81:fb:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a06ab81f-a6c8-462a-b3e0-52f829f8f687
        Validity
            Not Before: Jun  2 18:32:03 2026 GMT
            Not After : Aug 31 18:32:03 2026 GMT
        Subject: CN=4b5b63ab-276d-4e27-8c7c-08a71e7f227a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8d:42:ba:9a:36:0e:81:9e:a8:d3:49:ff:b1:
                    94:bb:6a:3e:5f:ba:68:47:0f:d2:15:53:4d:7b:ad:
                    75:10:44:cc:ba:c2:d8:d4:57:c7:f6:4d:ed:54:45:
                    69:c0:58:2c:e0:bf:72:72:d6:9e:cb:39:44:7d:8b:
                    48:70:07:ad:6e:23:11:bd:07:d5:c3:49:bb:76:ab:
                    24:db:9f:1d:fa:b7:bb:8a:d3:53:4a:d3:22:2a:0d:
                    69:6a:31:63:e7:cd:40:ed:a7:90:6a:d5:5c:c4:36:
                    64:2c:ee:d7:a3:9f:be:b5:20:ce:3a:19:5f:1e:5c:
                    74:3e:ca:31:9a:e4:fa:21:1a:cf:dd:47:60:be:5d:
                    ed:af:e9:8f:0a:f3:ee:00:54:d1:f1:57:6c:d0:14:
                    16:ef:07:1f:3d:3f:c9:09:c7:02:2e:71:ef:90:7e:
                    22:d7:cd:dc:b4:a4:6d:85:9b:13:b4:a1:d2:81:a6:
                    0c:c9:93:f3:7b:3f:ce:df:19:4d:8e:40:2a:61:b2:
                    87:7f:09:eb:17:e7:67:92:e7:9d:ba:ed:ea:8d:91:
                    0d:cb:55:84:40:c3:36:cd:fe:54:1f:99:e4:50:cd:
                    ae:4e:6a:6f:0a:ee:7e:16:9a:b5:4a:2a:7c:a7:42:
                    0b:11:b7:f8:79:38:40:7b:64:44:fa:5a:89:e4:d1:
                    49:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:B0:10:93:C5:EC:FD:95:9D:AC:98:38:71:59:F0:14:34:02:66:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a06ab81f-a6c8-462a-b3e0-52f829f8f687/61cd5006-eb96-38f0-ae08-70b29623b9ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a06ab81f-a6c8-462a-b3e0-52f829f8f687/a06ab81f-a6c8-462a-b3e0-52f829f8f687.crl

            X509v3 Authority Key Identifier:
                keyid:BB:E4:F8:D9:20:DD:C2:23:75:FB:B4:A0:FD:34:2F:65:04:BC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a06ab81f-a6c8-462a-b3e0-52f829f8f687.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.197.182.0/24
                IPv6:
                  2602:fced::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:95:8f:41:f4:45:12:29:e5:91:46:fd:ce:c8:f5:d9:e6:27:
         34:5f:ee:38:69:97:47:d9:ca:e5:3b:1e:bf:6d:63:d3:fe:8a:
         a4:a1:50:95:7b:ec:b8:26:00:15:d5:6f:3a:15:67:a7:13:b0:
         59:d9:2c:85:48:1d:4c:6b:87:22:3b:79:4c:69:05:51:63:30:
         ac:96:80:44:ea:15:99:3f:20:59:66:9a:2a:bd:62:b7:cd:89:
         e3:1b:74:0f:a5:db:24:d8:88:f5:10:82:62:31:18:a4:fb:a7:
         c1:43:b1:ba:8b:94:fe:5e:04:15:8b:59:b7:23:41:b4:2b:71:
         f8:52:ef:9a:84:0b:5c:d1:12:3c:b8:d9:6e:66:00:00:fc:93:
         60:a7:95:4e:47:de:2c:97:b9:69:45:20:fd:04:58:1f:aa:0a:
         a8:2c:42:b3:43:93:e3:2c:f9:14:a5:47:00:85:7a:17:7a:0b:
         71:c3:9e:86:b4:40:2b:ee:18:b1:dd:2e:e2:68:de:07:08:c1:
         dd:69:fd:3e:d1:97:80:5e:ef:94:1a:44:6b:5a:4a:74:6a:06:
         d0:67:1d:dc:7c:4b:b8:d1:5e:35:70:6b:50:66:71:e2:30:40:
         f9:70:78:77:89:59:94:f7:25:8d:d8:d3:ed:aa:18:b0:cd:7e:
         ba:72:64:d6
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE4Kb/GYMm6YZEqB+ygwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTA2YWI4MWYtYTZjOC00NjJhLWIzZTAtNTJmODI5Zjhm
Njg3MB4XDTI2MDYwMjE4MzIwM1oXDTI2MDgzMTE4MzIwM1owLzEtMCsGA1UEAxMk
NGI1YjYzYWItMjc2ZC00ZTI3LThjN2MtMDhhNzFlN2YyMjdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoY1Cupo2DoGeqNNJ/7GUu2o+X7poRw/SFVNN
e611EETMusLY1FfH9k3tVEVpwFgs4L9yctaeyzlEfYtIcAetbiMRvQfVw0m7dqsk
258d+re7itNTStMiKg1pajFj581A7aeQatVcxDZkLO7Xo5++tSDOOhlfHlx0Psox
muT6IRrP3Udgvl3tr+mPCvPuAFTR8Vds0BQW7wcfPT/JCccCLnHvkH4i183ctKRt
hZsTtKHSgaYMyZPzez/O3xlNjkAqYbKHfwnrF+dnkueduu3qjZENy1WEQMM2zf5U
H5nkUM2uTmpvCu5+Fpq1Sip8p0ILEbf4eThAe2RE+lqJ5NFJpQIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFOiwEJPF7P2VnayYOHFZ8BQ0AmZmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMDZh
YjgxZi1hNmM4LTQ2MmEtYjNlMC01MmY4MjlmOGY2ODcvNjFjZDUwMDYtZWI5Ni0z
OGYwLWFlMDgtNzBiMjk2MjNiOWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTA2YWI4MWYtYTZjOC00NjJhLWIz
ZTAtNTJmODI5ZjhmNjg3L2EwNmFiODFmLWE2YzgtNDYyYS1iM2UwLTUyZjgyOWY4
ZjY4Ny5jcmwwHwYDVR0jBBgwFoAUu+T42SDdwiN1+7Sg/TQvZQS80GswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hMDZhYjgxZi1hNmM4LTQ2MmEtYjNlMC01MmY4
MjlmOGY2ODcuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAqcW2MA4E
AgACMAgDBgQmAvztADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQADlY9B9EUSKeWRRv3OyPXZ5ic0X+44aZdH
2crlOx6/bWPT/oqkoVCVe+y4JgAV1W86FWenE7BZ2SyFSB1Ma4ciO3lMaQVRYzCs
loBE6hWZPyBZZpoqvWK3zYnjG3QPpdsk2Ij1EIJiMRik+6fBQ7G6i5T+XgQVi1m3
I0G0K3H4Uu+ahAtc0RI8uNluZgAA/JNgp5VOR94sl7lpRSD9BFgfqgqoLEKzQ5Pj
LPkUpUcAhXoXegtxw56GtEAr7hix3S7iaN4HCMHdaf0+0ZeAXu+UGkRrWkp0agbQ
Zx3cfEu40V41cGtQZnHiMED5cHh3iVmU9yWN2NPtqhiwzX66cmTW
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:06:08 2026 by rpki-client