Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/29bd0aea-3316-3ff4-b6b4-550b75af7241.roa
File:                     29bd0aea-3316-3ff4-b6b4-550b75af7241.roa (raw, json)
Hash identifier:          kZHQ3HAWvZ2ez83/2hpNEB05O9DGrzmnuU9LJ6c4ANc=
Subject key identifier:   79:42:0B:AA:F2:73:B2:A7:79:E0:B0:6A:F3:37:07:BD:0C:91:21:0C
Certificate issuer:       /CN=c6921896-3c0f-4cb4-9c99-e2d60d1d2e41
Certificate serial:       010D0C9F4328584F3A17CB6C21197E06B76C9300
Authority key identifier: AE:57:89:B5:6E:58:19:47:0D:45:25:4E:58:B2:70:00:DA:93:82:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/29bd0aea-3316-3ff4-b6b4-550b75af7241.roa
Signing time:             Sat 19 Sep 2026 13:00:12 +0000
ROA not before:           Sat 19 Sep 2026 13:00:12 +0000
ROA not after:            Fri 18 Dec 2026 14:00:12 +0000
asID:                     12312
IP address blocks:        173.213.6.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3a:17:cb:6c:21:19:7e:06:b7:6c:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6921896-3c0f-4cb4-9c99-e2d60d1d2e41
        Validity
            Not Before: Sep 19 13:00:12 2026 GMT
            Not After : Dec 18 14:00:12 2026 GMT
        Subject: CN=60f519a8-1745-4437-bc16-120955e0eb3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:3b:d9:7c:20:0a:bf:c5:16:c6:ad:a2:c4:33:
                    be:03:bd:66:56:38:46:fc:71:72:98:02:c9:f7:5b:
                    bd:58:5f:57:0c:b3:96:24:42:a6:7f:75:c9:a6:86:
                    e1:4a:3d:c8:f1:75:c8:60:61:32:74:dc:9a:0f:6b:
                    28:7b:82:ba:8c:a5:44:b4:20:3a:5e:94:06:3d:2e:
                    ba:70:5d:d3:46:53:31:26:f7:2d:3d:84:4e:26:15:
                    4d:d9:71:dd:8a:46:74:65:ae:3a:e1:b3:33:fe:41:
                    4b:75:3f:90:99:1a:6d:b4:6b:95:57:fe:38:db:1a:
                    5d:cf:e9:d8:73:32:32:36:fd:ab:92:af:f4:79:e7:
                    db:61:3f:24:a9:d9:c1:36:1d:86:10:ff:21:43:10:
                    48:25:06:16:65:6c:ea:41:91:23:59:7e:6c:ae:89:
                    a9:ad:82:7f:53:3d:ad:2a:f1:f8:62:88:f0:a6:b0:
                    f7:23:e4:b5:f1:6f:da:2f:81:06:4d:ef:87:64:71:
                    8d:83:d0:1b:91:6e:5f:da:49:cd:ba:87:6e:14:92:
                    8b:53:0f:35:7e:95:11:8e:84:df:8d:1a:6a:81:63:
                    bc:c1:b0:c3:d6:51:38:c9:51:4a:3d:de:72:8e:0b:
                    79:eb:9f:37:d7:bf:aa:b6:09:84:5a:7d:e6:5d:62:
                    c1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:42:0B:AA:F2:73:B2:A7:79:E0:B0:6A:F3:37:07:BD:0C:91:21:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/29bd0aea-3316-3ff4-b6b4-550b75af7241.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.crl

            X509v3 Authority Key Identifier:
                keyid:AE:57:89:B5:6E:58:19:47:0D:45:25:4E:58:B2:70:00:DA:93:82:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.213.6.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:89:eb:6b:a4:df:d7:e3:14:14:ff:b4:14:2d:2b:77:f7:c9:
         c7:1d:b4:c4:d7:c0:42:6d:66:66:e4:7f:17:1b:39:79:22:aa:
         ee:4d:5d:cf:f6:d4:b2:00:d3:70:50:df:a2:f1:05:b3:31:7e:
         03:97:77:c7:6d:6a:13:7f:c8:0f:c1:0b:75:76:3d:36:73:e7:
         57:7e:5d:59:6d:33:f6:5d:e1:5a:53:2f:c3:4c:59:60:9d:de:
         b4:7c:f1:64:f0:e3:4b:8d:f1:55:e2:a2:31:85:45:7f:53:82:
         fe:ab:c7:11:58:d9:b8:c4:75:12:fb:f5:ef:b9:76:4d:33:73:
         36:3d:d7:ae:e8:07:4d:84:9e:48:d8:ce:47:12:71:ed:1f:35:
         2a:c1:cb:23:7f:84:22:78:86:c8:05:c3:de:9d:30:20:e0:29:
         e8:b1:3c:ad:ee:5b:8a:11:56:95:cc:9b:66:2b:65:27:67:18:
         b9:a3:cc:2c:c6:42:a6:ad:d0:94:26:3e:54:a1:22:31:8b:1e:
         61:0f:08:d5:76:97:36:e7:72:3c:ed:4e:c7:6f:64:11:de:5d:
         88:e7:a5:3f:60:80:77:e3:43:c7:d8:03:6b:47:90:18:0b:05:
         2d:63:b9:61:5b:67:27:a4:d2:08:db:de:33:fd:97:b7:a7:00:
         77:ec:20:87
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86F8tsIRl+BrdskwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzY5MjE4OTYtM2MwZi00Y2I0LTljOTktZTJkNjBkMWQy
ZTQxMB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk
NjBmNTE5YTgtMTc0NS00NDM3LWJjMTYtMTIwOTU1ZTBlYjNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjvZfCAKv8UWxq2ixDO+A71mVjhG/HFymALJ
91u9WF9XDLOWJEKmf3XJpobhSj3I8XXIYGEydNyaD2soe4K6jKVEtCA6XpQGPS66
cF3TRlMxJvctPYROJhVN2XHdikZ0Za464bMz/kFLdT+QmRpttGuVV/442xpdz+nY
czIyNv2rkq/0eefbYT8kqdnBNh2GEP8hQxBIJQYWZWzqQZEjWX5sromprYJ/Uz2t
KvH4YojwprD3I+S18W/aL4EGTe+HZHGNg9AbkW5f2knNuoduFJKLUw81fpURjoTf
jRpqgWO8wbDD1lE4yVFKPd5yjgt5658317+qtgmEWn3mXWLB+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHlCC6ryc7KneeCwavM3B70MkSEMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jNjky
MTg5Ni0zYzBmLTRjYjQtOWM5OS1lMmQ2MGQxZDJlNDEvMjliZDBhZWEtMzMxNi0z
ZmY0LWI2YjQtNTUwYjc1YWY3MjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzY5MjE4OTYtM2MwZi00Y2I0LTlj
OTktZTJkNjBkMWQyZTQxL2M2OTIxODk2LTNjMGYtNGNiNC05Yzk5LWUyZDYwZDFk
MmU0MS5jcmwwHwYDVR0jBBgwFoAUrleJtW5YGUcNRSVOWLJwANqTgo4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jNjkyMTg5Ni0zYzBmLTRjYjQtOWM5OS1lMmQ2
MGQxZDJlNDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrdUGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALeJ62uk39fjFBT/tBQtK3f3yccdtMTXwEJtZmbkfxcbOXkiqu5NXc/2
1LIA03BQ36LxBbMxfgOXd8dtahN/yA/BC3V2PTZz51d+XVltM/Zd4VpTL8NMWWCd
3rR88WTw40uN8VXiojGFRX9Tgv6rxxFY2bjEdRL79e+5dk0zczY9167oB02EnkjY
zkcSce0fNSrByyN/hCJ4hsgFw96dMCDgKeixPK3uW4oRVpXMm2YrZSdnGLmjzCzG
Qqat0JQmPlShIjGLHmEPCNV2lzbncjztTsdvZBHeXYjnpT9ggHfjQ8fYA2tHkBgL
BS1juWFbZyek0gjb3jP9l7enAHfsIIc=
-----END CERTIFICATE-----
Generated at Thu Sep 24 04:28:47 2026 by rpki-client