Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/f6ba3890-638c-37cc-80b2-c27c14be5a92.roa
File:                     f6ba3890-638c-37cc-80b2-c27c14be5a92.roa (raw, json)
Hash identifier:          wraP/yvZHE3zm15y6+lh2bU81alfzHHDqlqEhtwWNhI=
Subject key identifier:   74:18:A8:9E:34:39:7C:87:BD:2A:7D:A9:C6:E8:3D:9D:6D:47:D2:39
Certificate issuer:       /CN=60f3bf9e-9df6-4935-a73a-d336655a686b
Certificate serial:       010D0C9F4328584F0242289B0A93DE984BFE8900
Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/f6ba3890-638c-37cc-80b2-c27c14be5a92.roa
Signing time:             Sun 30 Aug 2026 13:00:11 +0000
ROA not before:           Sun 30 Aug 2026 13:00:11 +0000
ROA not after:            Sat 28 Nov 2026 14:00:11 +0000
asID:                     19107
IP address blocks:        216.234.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:02:42:28:9b:0a:93:de:98:4b:fe:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b
        Validity
            Not Before: Aug 30 13:00:11 2026 GMT
            Not After : Nov 28 14:00:11 2026 GMT
        Subject: CN=db571cf0-88f5-457c-bcbc-cf78725a3175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:12:14:80:89:e5:d4:9e:14:7a:c6:af:ee:38:
                    a8:18:5a:d0:5a:9c:81:49:8d:c0:35:41:14:6b:4a:
                    25:56:26:7c:cf:ea:df:8b:4f:b3:9a:76:9e:fe:dc:
                    c6:83:c2:0d:38:c9:7c:38:f5:5a:0c:c1:5b:b9:f1:
                    a7:e0:28:bc:62:6a:11:da:08:de:0f:7e:ad:c8:a8:
                    57:b9:38:45:ec:e7:7b:65:f0:95:ce:e1:95:a1:a0:
                    fa:e6:4d:5a:df:e0:08:2e:ec:a9:95:64:c2:63:c7:
                    2c:0c:cc:8a:d8:92:58:f8:05:a9:f8:4e:ae:ce:c6:
                    ed:df:d5:73:06:8b:31:3c:45:f1:02:7a:d5:ea:a7:
                    9e:7a:2c:9a:b3:d1:a7:2e:31:e4:3a:1d:64:3f:bb:
                    47:7a:76:ce:d4:d8:51:dd:a3:47:c3:9b:5a:62:00:
                    c2:2c:ae:f7:34:06:4f:0e:2e:f0:2e:04:9c:24:6f:
                    c6:fd:7b:18:be:1a:ac:ef:98:07:dd:d2:3c:79:22:
                    24:98:15:d0:f3:99:e2:3d:11:0c:e8:ee:dc:e1:d5:
                    6a:af:11:ed:61:46:c1:43:f6:ff:2c:92:d3:72:c6:
                    c2:1c:2c:b2:72:f5:6b:9a:a3:85:85:2d:d3:f4:53:
                    d9:5d:dd:76:99:d9:26:3e:06:db:1f:fe:13:af:c0:
                    4a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:18:A8:9E:34:39:7C:87:BD:2A:7D:A9:C6:E8:3D:9D:6D:47:D2:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/f6ba3890-638c-37cc-80b2-c27c14be5a92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl

            X509v3 Authority Key Identifier:
                keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.234.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:0c:ec:00:80:86:0a:c6:87:70:2f:04:48:f5:88:94:b4:15:
         b9:64:38:56:4f:c2:ef:3a:4c:42:ae:29:e8:0d:35:b1:d4:b1:
         58:62:5a:43:f5:94:cb:3b:1a:31:8b:bb:55:63:9e:7c:a1:98:
         6a:d3:dd:85:0a:fe:a7:1d:b6:1b:c7:f7:9c:0d:cd:58:ef:a0:
         54:65:d5:bb:30:41:af:f6:94:ae:45:27:4f:ed:44:61:9b:fe:
         20:73:ee:f2:05:a7:e4:56:df:c9:d7:38:94:63:9d:18:f4:51:
         7d:8d:cc:29:d3:b9:7d:ce:5e:10:6c:17:ea:c8:4a:e4:97:85:
         af:09:a0:cc:a2:62:ff:7d:31:7d:e1:2f:f8:21:4c:5e:92:89:
         d7:c7:95:4f:3e:b8:0e:28:de:3c:7f:21:96:fe:5a:33:f5:66:
         2a:ae:04:12:a0:ca:dd:76:de:59:e1:e3:b0:63:65:89:2d:27:
         c3:69:1c:a8:0d:e0:1f:37:99:26:11:e7:b0:f3:80:49:de:58:
         77:a6:f8:3a:a9:ba:b4:96:97:a6:8e:fe:83:95:30:2c:fa:08:
         55:a9:7a:97:72:c6:c0:de:88:7e:84:5b:66:5b:60:d2:1c:a8:
         39:36:89:e2:d7:de:e6:84:6a:28:14:df:9c:de:d4:61:e9:fd:
         f2:6a:5b:a0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQiibCpPemEv+iQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjBmM2JmOWUtOWRmNi00OTM1LWE3M2EtZDMzNjY1NWE2
ODZiMB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk
ZGI1NzFjZjAtODhmNS00NTdjLWJjYmMtY2Y3ODcyNWEzMTc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphIUgInl1J4Uesav7jioGFrQWpyBSY3ANUEU
a0olViZ8z+rfi0+zmnae/tzGg8INOMl8OPVaDMFbufGn4Ci8YmoR2gjeD36tyKhX
uThF7Od7ZfCVzuGVoaD65k1a3+AILuyplWTCY8csDMyK2JJY+AWp+E6uzsbt39Vz
BosxPEXxAnrV6qeeeiyas9GnLjHkOh1kP7tHenbO1NhR3aNHw5taYgDCLK73NAZP
Di7wLgScJG/G/XsYvhqs75gH3dI8eSIkmBXQ85niPREM6O7c4dVqrxHtYUbBQ/b/
LJLTcsbCHCyycvVrmqOFhS3T9FPZXd12mdkmPgbbH/4Tr8BKNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHQYqJ40OXyHvSp9qcboPZ1tR9I5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MGYz
YmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2NjU1YTY4NmIvZjZiYTM4OTAtNjM4Yy0z
N2NjLTgwYjItYzI3YzE0YmU1YTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjBmM2JmOWUtOWRmNi00OTM1LWE3
M2EtZDMzNjY1NWE2ODZiLzYwZjNiZjllLTlkZjYtNDkzNS1hNzNhLWQzMzY2NTVh
Njg2Yi5jcmwwHwYDVR0jBBgwFoAUVfHKkOB81lVG152g0waaF/ajOFIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MGYzYmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2
NjU1YTY4NmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OpCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKMM7ACAhgrGh3AvBEj1iJS0FblkOFZPwu86TEKuKegNNbHUsVhiWkP1
lMs7GjGLu1VjnnyhmGrT3YUK/qcdthvH95wNzVjvoFRl1bswQa/2lK5FJ0/tRGGb
/iBz7vIFp+RW38nXOJRjnRj0UX2NzCnTuX3OXhBsF+rISuSXha8JoMyiYv99MX3h
L/ghTF6SidfHlU8+uA4o3jx/IZb+WjP1ZiquBBKgyt123lnh47BjZYktJ8NpHKgN
4B83mSYR57DzgEneWHem+DqpurSWl6aO/oOVMCz6CFWpepdyxsDeiH6EW2ZbYNIc
qDk2ieLX3uaEaigU35ze1GHp/fJqW6A=
-----END CERTIFICATE-----
Generated at Sat Sep 26 14:14:11 2026 by rpki-client