Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f/6fc5b20a-f85b-3f9a-9274-2dfd90a78800.roa
File:                     6fc5b20a-f85b-3f9a-9274-2dfd90a78800.roa (raw, json)
Hash identifier:          OSJhGyR3hZPF/9DUb9OTFa/o7/acMrg68dZXsk1rG8I=
Subject key identifier:   9B:2A:66:D2:0E:94:1A:29:54:5F:84:FD:2A:6B:D0:00:E7:69:4D:54
Certificate issuer:       /CN=c3e3599f-a90f-4544-a440-c15eca99db7f
Certificate serial:       010D0C9F4328584D9FB568A37EE81E9294C45900
Authority key identifier: 66:2D:F9:A3:3C:93:D0:EE:E2:AC:8B:F7:04:D9:73:D5:15:6C:7F:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f/6fc5b20a-f85b-3f9a-9274-2dfd90a78800.roa
Signing time:             Sat 25 Apr 2026 13:00:30 +0000
ROA not before:           Sat 25 Apr 2026 13:00:30 +0000
ROA not after:            Fri 24 Jul 2026 13:00:30 +0000
asID:                     22952
IP address blocks:        66.187.200.0/22 maxlen: 24
                          162.246.208.0/21 maxlen: 24
                          2604:c240::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f/c3e3599f-a90f-4544-a440-c15eca99db7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f/c3e3599f-a90f-4544-a440-c15eca99db7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9f:b5:68:a3:7e:e8:1e:92:94:c4:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3e3599f-a90f-4544-a440-c15eca99db7f
        Validity
            Not Before: Apr 25 13:00:30 2026 GMT
            Not After : Jul 24 13:00:30 2026 GMT
        Subject: CN=c3ea1fe1-fe25-4803-ba90-b30ea10b93bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:94:8f:d7:f7:15:0b:a2:af:80:1d:23:26:9f:
                    8c:1a:3b:8e:6d:aa:9a:d0:a0:97:bb:94:ae:f3:bc:
                    76:92:e5:ec:33:5c:5d:b8:b8:b0:58:38:d2:2f:bc:
                    cd:a3:5c:8d:ec:b7:43:46:eb:85:f3:6c:ba:8e:d0:
                    b1:d3:d1:15:d1:99:c1:fb:d9:88:56:43:c6:46:5c:
                    9d:d3:c0:17:d2:10:47:ba:82:3a:5f:8b:ed:ff:51:
                    b6:8e:b9:c8:83:a9:cf:f4:cc:fa:c2:6c:56:3b:b6:
                    00:52:99:4d:87:37:77:d9:bf:05:1d:d5:c9:fe:17:
                    e9:cf:7b:40:cf:c8:83:80:74:0b:c5:2c:87:d1:5c:
                    2e:3c:79:bc:b5:21:c5:33:4a:56:25:84:c7:57:da:
                    f9:22:5d:d0:bb:5a:0f:d9:78:7e:fb:b0:df:c6:8e:
                    25:8c:1f:e3:02:0b:e2:13:ee:11:d5:e6:d1:b9:61:
                    01:2c:d8:46:97:ff:d9:d2:6c:34:9c:a1:d6:c4:d6:
                    f4:20:e8:ac:cc:de:f0:63:6f:2e:a0:cc:a2:c3:82:
                    b8:3b:d8:2a:1e:c7:9a:ac:e3:ca:ec:fb:e8:d7:4a:
                    5e:6a:0e:51:4c:1a:1d:dc:c3:1a:e7:cb:09:18:00:
                    fd:23:d6:bc:1d:4e:c5:0b:05:62:53:d0:b6:6c:57:
                    ed:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:2A:66:D2:0E:94:1A:29:54:5F:84:FD:2A:6B:D0:00:E7:69:4D:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f/6fc5b20a-f85b-3f9a-9274-2dfd90a78800.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f/c3e3599f-a90f-4544-a440-c15eca99db7f.crl

            X509v3 Authority Key Identifier:
                keyid:66:2D:F9:A3:3C:93:D0:EE:E2:AC:8B:F7:04:D9:73:D5:15:6C:7F:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.187.200.0/22
                  162.246.208.0/21
                IPv6:
                  2604:c240::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:33:67:c8:54:2a:2a:de:8c:10:47:21:a1:f4:c0:5c:1d:70:
         3b:76:3a:4b:07:0f:50:17:bb:47:7e:9b:fc:a0:a2:87:fb:26:
         90:58:38:69:29:52:ab:b1:3b:12:f1:eb:c6:a6:5c:ef:f8:73:
         dd:7c:e5:f3:4b:58:93:1b:22:1c:68:7d:11:69:de:e4:9a:13:
         d3:a8:5c:80:06:59:b2:91:32:d7:d9:d7:1e:c2:af:e2:25:85:
         3d:c6:8b:c9:b5:e6:a7:79:ff:5e:98:a2:90:73:88:d0:d7:2a:
         39:d5:e5:7f:62:cb:91:a2:b0:47:f8:0d:25:2d:12:75:98:7a:
         af:19:2f:a5:17:d1:2b:2a:10:a1:47:59:58:83:07:0b:00:ba:
         88:3f:86:a8:d4:eb:a9:e7:1d:25:ad:68:fb:4f:53:56:e5:09:
         c8:de:55:ec:19:a4:71:a1:5e:c6:66:25:bd:30:bb:20:42:88:
         b5:51:da:5e:cd:a6:ea:98:1b:9e:2e:12:33:6b:9a:20:57:68:
         16:53:39:2e:fd:63:0b:dd:ae:92:5d:ba:ab:d5:a9:de:19:f8:
         62:76:6e:2b:bc:29:66:ff:f7:b2:52:f5:5d:a7:a3:28:03:f1:
         82:a3:69:c6:bc:46:33:66:eb:33:c7:e8:cb:e7:5c:ce:d0:68:
         2e:64:f7:0a
-----BEGIN CERTIFICATE-----
MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWE2ftWijfugekpTEWQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzNlMzU5OWYtYTkwZi00NTQ0LWE0NDAtYzE1ZWNhOTlk
YjdmMB4XDTI2MDQyNTEzMDAzMFoXDTI2MDcyNDEzMDAzMFowLzEtMCsGA1UEAxMk
YzNlYTFmZTEtZmUyNS00ODAzLWJhOTAtYjMwZWExMGI5M2JjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJSP1/cVC6KvgB0jJp+MGjuObaqa0KCXu5Su
87x2kuXsM1xduLiwWDjSL7zNo1yN7LdDRuuF82y6jtCx09EV0ZnB+9mIVkPGRlyd
08AX0hBHuoI6X4vt/1G2jrnIg6nP9Mz6wmxWO7YAUplNhzd32b8FHdXJ/hfpz3tA
z8iDgHQLxSyH0VwuPHm8tSHFM0pWJYTHV9r5Il3Qu1oP2Xh++7Dfxo4ljB/jAgvi
E+4R1ebRuWEBLNhGl//Z0mw0nKHWxNb0IOiszN7wY28uoMyiw4K4O9gqHsearOPK
7Pvo10peag5RTBod3MMa58sJGAD9I9a8HU7FCwViU9C2bFftoQIDAQABo4IDajCC
A2YwHQYDVR0OBBYEFJsqZtIOlBopVF+E/Spr0ADnaU1UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jM2Uz
NTk5Zi1hOTBmLTQ1NDQtYTQ0MC1jMTVlY2E5OWRiN2YvNmZjNWIyMGEtZjg1Yi0z
ZjlhLTkyNzQtMmRmZDkwYTc4ODAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzNlMzU5OWYtYTkwZi00NTQ0LWE0
NDAtYzE1ZWNhOTlkYjdmL2MzZTM1OTlmLWE5MGYtNDU0NC1hNDQwLWMxNWVjYTk5
ZGI3Zi5jcmwwHwYDVR0jBBgwFoAUZi35ozyT0O7irIv3BNlz1RVsf1UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jM2UzNTk5Zi1hOTBmLTQ1NDQtYTQ0MC1jMTVl
Y2E5OWRiN2YuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCQrvIAwQD
ovbQMA0EAgACMAcDBQAmBMJAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFkzZ8hUKirejBBHIaH0wFwdcDt2
OksHD1AXu0d+m/ygoof7JpBYOGkpUquxOxLx68amXO/4c9185fNLWJMbIhxofRFp
3uSaE9OoXIAGWbKRMtfZ1x7Cr+IlhT3Gi8m15qd5/16YopBziNDXKjnV5X9iy5Gi
sEf4DSUtEnWYeq8ZL6UX0SsqEKFHWViDBwsAuog/hqjU66nnHSWtaPtPU1blCcje
VewZpHGhXsZmJb0wuyBCiLVR2l7NpuqYG54uEjNrmiBXaBZTOS79YwvdrpJduqvV
qd4Z+GJ2biu8KWb/97JS9V2noygD8YKjaca8RjNm6zPH6MvnXM7QaC5k9wo=
-----END CERTIFICATE-----
Generated at Wed May 13 15:13:45 2026 by rpki-client