Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/6d0c3a77-86ce-3d20-ac56-dc2cd9c555ff.roa
File:                     6d0c3a77-86ce-3d20-ac56-dc2cd9c555ff.roa (raw, json)
Hash identifier:          7RID6YLxZNPDWQprIOp4IqyVw7RwxT5rbHs8h7fXMkw=
Subject key identifier:   F6:AA:77:00:0C:7C:A9:C1:77:F4:10:6F:76:3A:8D:36:98:F6:2A:BF
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584E8DEFAEBC6653BE313F4EEF80
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/6d0c3a77-86ce-3d20-ac56-dc2cd9c555ff.roa
Signing time:             Sun 19 Jul 2026 21:00:12 +0000
ROA not before:           Sun 19 Jul 2026 21:00:12 +0000
ROA not after:            Sat 17 Oct 2026 21:00:12 +0000
asID:                     11232
IP address blocks:        24.220.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8d:ef:ae:bc:66:53:be:31:3f:4e:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Jul 19 21:00:12 2026 GMT
            Not After : Oct 17 21:00:12 2026 GMT
        Subject: CN=3cc56ad5-dd50-487f-a8bd-66d7401c9e2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:07:e9:27:88:16:52:3c:cd:e3:2b:1c:03:9b:
                    1f:d5:92:44:33:c3:ee:af:4f:41:6d:79:85:8f:59:
                    38:a4:28:1c:f2:b4:73:aa:87:0e:c6:0c:3d:e7:4b:
                    d0:3b:81:d4:14:f3:70:65:e7:5c:93:04:fc:ab:5a:
                    63:ea:2c:31:12:9f:d6:a3:c8:8a:b6:6b:a0:6f:07:
                    e7:9e:a6:d0:3c:15:cb:e3:44:25:81:23:b1:0e:4b:
                    96:bf:64:af:95:58:08:ea:3c:c0:73:bb:99:f4:7d:
                    a2:29:de:e9:2d:19:19:ec:35:08:ea:3e:46:c5:cf:
                    07:fe:69:74:f4:c3:db:e2:22:63:07:02:0a:73:3f:
                    93:6d:21:6e:4f:ba:41:e8:49:5e:2d:d8:50:ba:74:
                    24:16:c4:a1:ec:ad:ec:44:ce:ca:73:02:fd:5c:a5:
                    92:0d:40:3d:c3:f8:73:a3:91:51:ea:2d:39:33:d8:
                    81:01:d3:19:6b:4f:0b:23:52:e6:f4:f1:b8:52:44:
                    8d:e2:64:62:d8:50:ad:b6:02:e2:e1:8c:7d:12:7a:
                    7d:41:c5:ae:1a:70:35:cc:a1:7a:a7:ac:3f:ca:44:
                    1c:04:24:38:23:ee:ca:15:ad:11:15:60:81:8c:de:
                    b4:d3:43:8b:97:cb:b0:d9:80:9a:c7:c3:5e:ef:03:
                    76:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:AA:77:00:0C:7C:A9:C1:77:F4:10:6F:76:3A:8D:36:98:F6:2A:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/6d0c3a77-86ce-3d20-ac56-dc2cd9c555ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.220.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:03:ca:23:f2:2b:fe:2f:9b:d8:bc:ed:9a:27:e0:89:8f:f0:
         8b:d8:dc:22:cd:76:c8:21:54:03:0d:28:c3:97:3d:12:15:48:
         d6:31:b5:eb:da:84:46:c4:bb:bf:39:d3:eb:ea:a5:5e:0e:64:
         63:4d:ab:9a:35:2a:51:00:13:69:16:b2:f8:a4:7b:03:60:4c:
         52:3f:bd:01:98:87:15:49:09:3f:58:28:9a:05:59:9b:af:28:
         8a:0e:12:6d:07:92:93:84:53:45:ea:3a:b1:04:15:f2:50:b8:
         8d:0c:b3:f8:2a:52:90:6e:dd:bf:88:d9:fe:d4:f6:6e:64:2e:
         a5:fc:73:6c:a9:ef:29:94:b7:92:87:d1:5b:67:20:72:21:90:
         11:3b:48:2a:f1:81:4d:fa:54:e1:20:61:0a:07:a9:b1:d9:1e:
         d1:7d:45:b1:ac:c2:17:e2:58:b6:77:3f:f4:17:e3:29:16:f6:
         79:7e:a9:c3:35:4a:3e:2e:f9:8b:53:c1:c4:ff:f6:1b:2a:9b:
         8a:8f:58:1f:ab:d3:31:c0:51:92:c3:2f:8b:9e:d2:98:fc:5f:
         31:d2:da:ee:e2:7a:fe:f3:06:4f:1d:5d:28:88:ea:e0:99:e2:
         a3:cc:b8:71:7d:56:1d:09:49:ae:7c:be:78:79:ba:db:6a:6e:
         af:a4:ee:48
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE6N7668ZlO+MT9O74AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3
MDg1MB4XDTI2MDcxOTIxMDAxMloXDTI2MTAxNzIxMDAxMlowLzEtMCsGA1UEAxMk
M2NjNTZhZDUtZGQ1MC00ODdmLWE4YmQtNjZkNzQwMWM5ZTJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugfpJ4gWUjzN4yscA5sf1ZJEM8Pur09BbXmF
j1k4pCgc8rRzqocOxgw950vQO4HUFPNwZedckwT8q1pj6iwxEp/Wo8iKtmugbwfn
nqbQPBXL40QlgSOxDkuWv2SvlVgI6jzAc7uZ9H2iKd7pLRkZ7DUI6j5Gxc8H/ml0
9MPb4iJjBwIKcz+TbSFuT7pB6EleLdhQunQkFsSh7K3sRM7KcwL9XKWSDUA9w/hz
o5FR6i05M9iBAdMZa08LI1Lm9PG4UkSN4mRi2FCttgLi4Yx9Enp9QcWuGnA1zKF6
p6w/ykQcBCQ4I+7KFa0RFWCBjN6000OLl8uw2YCax8Ne7wN2nwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFPaqdwAMfKnBd/QQb3Y6jTaY9iq/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2
M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvNmQwYzNhNzctODZjZS0z
ZDIwLWFjNTYtZGMyY2Q5YzU1NWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm
YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3
NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2
NDNhNzcwODUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAGNwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAmQPKI/Ir/i+b2LztmifgiY/wi9jcIs12yCFUAw0ow5c9EhVI1jG169qE
RsS7vznT6+qlXg5kY02rmjUqUQATaRay+KR7A2BMUj+9AZiHFUkJP1gomgVZm68o
ig4SbQeSk4RTReo6sQQV8lC4jQyz+CpSkG7dv4jZ/tT2bmQupfxzbKnvKZS3kofR
W2cgciGQETtIKvGBTfpU4SBhCgepsdke0X1FsazCF+JYtnc/9BfjKRb2eX6pwzVK
Pi75i1PBxP/2Gyqbio9YH6vTMcBRksMvi57SmPxfMdLa7uJ6/vMGTx1dKIjq4Jni
o8y4cX1WHQlJrny+eHm622pur6TuSA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:11:56 2026 by rpki-client