Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/3a06afc0-5bbb-3d1d-be77-2946a75b55a6.roa
File:                     3a06afc0-5bbb-3d1d-be77-2946a75b55a6.roa (raw, json)
Hash identifier:          eTsAIe4eDl6l3pI1z20l1jRqoWAiQbwnvuWpBFZbSO0=
Subject key identifier:   17:3E:69:9C:CD:E0:F5:E9:FE:23:8D:47:6E:8C:71:1C:D8:5B:36:17
Certificate issuer:       /CN=e4fdf8c6-f91a-494f-99e5-526e6fffeebe
Certificate serial:       010D0C9F4328584D3F64DF994D18FCCABDB41050
Authority key identifier: 6A:7D:86:AE:89:46:EB:FC:95:A3:31:31:15:03:35:D5:52:C0:41:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/3a06afc0-5bbb-3d1d-be77-2946a75b55a6.roa
Signing time:             Sun 22 Mar 2026 01:00:32 +0000
ROA not before:           Sun 22 Mar 2026 01:00:32 +0000
ROA not after:            Sat 20 Jun 2026 01:00:32 +0000
asID:                     36167
IP address blocks:        216.59.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3f:64:df:99:4d:18:fc:ca:bd:b4:10:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4fdf8c6-f91a-494f-99e5-526e6fffeebe
        Validity
            Not Before: Mar 22 01:00:32 2026 GMT
            Not After : Jun 20 01:00:32 2026 GMT
        Subject: CN=9f6bf4f1-2b10-4625-8a21-3042c7fb7d64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:39:8c:55:10:75:f9:e6:aa:bd:d0:6d:7b:ad:
                    0c:04:74:8a:b0:45:7a:36:db:07:75:10:fd:a0:5c:
                    6b:c7:7c:e8:10:80:c1:b9:11:b1:8f:63:ec:f9:2a:
                    64:78:62:65:6b:55:e9:d2:1e:87:06:26:a0:a9:9c:
                    e1:dd:49:e8:4c:19:f1:58:c5:6d:da:16:3d:2a:a9:
                    22:1c:72:ec:e9:ed:33:47:19:4d:54:75:f0:91:e3:
                    d2:be:37:00:2e:57:7c:3b:8f:cc:26:21:95:13:25:
                    3c:50:a8:3c:2a:1c:9e:01:5e:df:ae:a2:10:28:fb:
                    7b:4a:7d:79:1e:c9:87:37:61:17:26:e7:30:32:83:
                    35:37:b2:d7:ce:68:03:2c:4c:ac:89:d6:1c:57:02:
                    f0:60:d6:ca:e4:ca:b9:d4:9f:d2:47:58:46:cb:37:
                    82:d1:da:e4:54:cc:cf:a9:87:0c:a5:b2:e6:7e:45:
                    e7:d1:9a:03:48:8e:8a:3a:62:e3:dd:34:8a:20:cf:
                    fb:b4:3d:7a:73:d6:06:65:da:a5:5e:03:3f:33:d4:
                    eb:0b:52:bd:f2:e7:ed:c7:82:cf:67:98:93:98:9a:
                    a8:1f:65:e1:37:90:a1:76:a0:b1:da:1a:99:92:2e:
                    8d:e9:b9:86:d2:70:b3:d1:1c:35:31:80:ab:44:fa:
                    24:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:3E:69:9C:CD:E0:F5:E9:FE:23:8D:47:6E:8C:71:1C:D8:5B:36:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/3a06afc0-5bbb-3d1d-be77-2946a75b55a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.crl

            X509v3 Authority Key Identifier:
                keyid:6A:7D:86:AE:89:46:EB:FC:95:A3:31:31:15:03:35:D5:52:C0:41:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.59.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:ba:1e:92:59:75:f8:6a:d1:ba:73:f7:cf:4f:37:6b:32:07:
         eb:6a:dc:1c:72:7f:2c:8d:65:06:ee:ed:f8:e0:7c:c6:f5:36:
         32:f3:fb:9f:c1:a4:f8:01:07:58:07:c8:52:5a:dd:0c:94:4d:
         6a:17:db:96:6a:66:4e:a8:e4:e0:c4:e5:e2:20:01:fc:13:67:
         13:e1:56:d4:22:fb:ab:40:c1:8f:44:a0:94:a2:b1:7d:bb:4e:
         b4:56:69:ba:7f:e9:c0:ab:52:0e:03:85:7d:6c:6a:a3:54:b3:
         d2:1c:78:31:e7:63:d6:57:7a:9e:e3:f1:f0:a2:19:f1:45:9e:
         57:4f:50:00:44:f7:f6:d8:b8:5b:3b:29:48:af:36:8b:cf:72:
         6a:97:95:97:0e:06:55:ea:ff:4e:ec:1e:a1:90:b8:51:d5:2b:
         c4:56:01:48:ba:71:db:b8:55:b0:8e:69:ea:8f:cf:ad:f8:a7:
         34:04:59:d4:55:f8:94:c4:0d:c2:ab:03:d5:b0:0b:ae:9b:fc:
         ef:76:ae:6d:9c:10:bf:24:59:8e:c8:b6:b8:70:6c:24:fa:84:
         83:25:42:30:f3:a5:00:36:94:84:1b:36:a4:91:77:f9:30:50:
         48:c1:5f:13:e2:fe:ea:47:7b:73:f5:9e:f6:b4:a2:73:5b:70:
         eb:5c:20:9e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZN+ZTRj8yr20EFAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTRmZGY4YzYtZjkxYS00OTRmLTk5ZTUtNTI2ZTZmZmZl
ZWJlMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk
OWY2YmY0ZjEtMmIxMC00NjI1LThhMjEtMzA0MmM3ZmI3ZDY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTmMVRB1+eaqvdBte60MBHSKsEV6NtsHdRD9
oFxrx3zoEIDBuRGxj2Ps+SpkeGJla1Xp0h6HBiagqZzh3UnoTBnxWMVt2hY9Kqki
HHLs6e0zRxlNVHXwkePSvjcALld8O4/MJiGVEyU8UKg8KhyeAV7frqIQKPt7Sn15
HsmHN2EXJucwMoM1N7LXzmgDLEysidYcVwLwYNbK5Mq51J/SR1hGyzeC0drkVMzP
qYcMpbLmfkXn0ZoDSI6KOmLj3TSKIM/7tD16c9YGZdqlXgM/M9TrC1K98uftx4LP
Z5iTmJqoH2XhN5ChdqCx2hqZki6N6bmG0nCz0Rw1MYCrRPokaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBc+aZzN4PXp/iONR26McRzYWzYXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lNGZk
ZjhjNi1mOTFhLTQ5NGYtOTllNS01MjZlNmZmZmVlYmUvM2EwNmFmYzAtNWJiYi0z
ZDFkLWJlNzctMjk0NmE3NWI1NWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTRmZGY4YzYtZjkxYS00OTRmLTk5
ZTUtNTI2ZTZmZmZlZWJlL2U0ZmRmOGM2LWY5MWEtNDk0Zi05OWU1LTUyNmU2ZmZm
ZWViZS5jcmwwHwYDVR0jBBgwFoAUan2GrolG6/yVozExFQM11VLAQXMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lNGZkZjhjNi1mOTFhLTQ5NGYtOTllNS01MjZl
NmZmZmVlYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Ds+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADi6HpJZdfhq0bpz989PN2syB+tq3BxyfyyNZQbu7fjgfMb1NjLz+5/B
pPgBB1gHyFJa3QyUTWoX25ZqZk6o5ODE5eIgAfwTZxPhVtQi+6tAwY9EoJSisX27
TrRWabp/6cCrUg4DhX1saqNUs9IceDHnY9ZXep7j8fCiGfFFnldPUABE9/bYuFs7
KUivNovPcmqXlZcOBlXq/07sHqGQuFHVK8RWAUi6cdu4VbCOaeqPz634pzQEWdRV
+JTEDcKrA9WwC66b/O92rm2cEL8kWY7ItrhwbCT6hIMlQjDzpQA2lIQbNqSRd/kw
UEjBXxPi/upHe3P1nva0onNbcOtcIJ4=
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:11:03 2026 by rpki-client