Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b112dbf9-e037-4085-8a8c-b84035c902a4/6e03baf6-1a47-33b6-8f5a-9f3f506ef56e.roa
File:                     6e03baf6-1a47-33b6-8f5a-9f3f506ef56e.roa (raw, json)
Hash identifier:          CYaZW1lE8xcXu1A09iCfYcsMAcBvEdMiKrb7hvyyg4c=
Subject key identifier:   78:98:87:06:3C:5F:CD:7B:47:9D:2C:EC:F9:FA:E2:AF:28:DE:E2:3E
Certificate issuer:       /CN=b112dbf9-e037-4085-8a8c-b84035c902a4
Certificate serial:       010D0C9F4328584DB4A589FD681BF3BEFEE4E080
Authority key identifier: 56:86:88:E2:95:0E:27:9C:0A:C9:A7:B7:38:1E:F1:5F:9D:39:A2:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b112dbf9-e037-4085-8a8c-b84035c902a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b112dbf9-e037-4085-8a8c-b84035c902a4/6e03baf6-1a47-33b6-8f5a-9f3f506ef56e.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     53971
IP address blocks:        141.193.80.0/22 maxlen: 24
                          167.248.136.0/21 maxlen: 24
                          173.250.232.0/21 maxlen: 24
                          204.122.20.0/22 maxlen: 24
                          2605:81c0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b112dbf9-e037-4085-8a8c-b84035c902a4/b112dbf9-e037-4085-8a8c-b84035c902a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b112dbf9-e037-4085-8a8c-b84035c902a4/b112dbf9-e037-4085-8a8c-b84035c902a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b112dbf9-e037-4085-8a8c-b84035c902a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:89:fd:68:1b:f3:be:fe:e4:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b112dbf9-e037-4085-8a8c-b84035c902a4
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=3e9f1dfc-47ab-4392-8340-7870418a5ae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:61:42:cb:f8:b9:13:6d:a7:7c:0a:66:e8:27:
                    5e:1e:b3:9c:7e:f1:41:6c:a0:e6:75:4b:9f:63:34:
                    68:48:2e:cc:01:4b:43:b3:9a:45:88:50:a2:e7:7c:
                    2a:52:7b:54:84:c6:f0:e8:8b:9d:3a:4b:d0:15:ad:
                    e3:c6:27:12:d4:d1:1c:3e:79:f8:c4:a1:7c:af:2b:
                    2c:56:3e:69:0f:fd:10:1b:c4:b9:f8:b5:88:9c:fd:
                    dc:ae:b0:30:ef:4a:21:89:b8:a2:62:c5:6e:f6:01:
                    2c:aa:67:ca:0d:05:f0:22:bf:d9:a1:b2:f4:8d:89:
                    cd:b3:b7:16:dc:d4:58:d8:b4:a0:95:71:fd:31:6a:
                    96:cd:18:a0:a2:9e:65:d2:9d:25:32:00:18:70:83:
                    7e:e1:df:fa:28:69:9c:62:4a:b6:58:7c:42:3d:11:
                    eb:c1:15:43:79:19:3b:1e:4b:44:74:af:d3:8a:00:
                    b0:93:7c:8f:77:e6:63:b9:ff:c9:8d:88:ec:e9:30:
                    11:a4:86:ce:c1:2e:2f:00:1f:df:db:5b:8d:96:b1:
                    cf:9d:b9:5d:74:7d:6c:a1:d4:7e:18:d5:70:6b:c5:
                    45:33:23:0a:2d:56:9a:d4:05:39:90:e1:50:36:ed:
                    35:a5:b2:e6:ae:96:d5:80:fb:61:22:bb:7c:0e:9e:
                    03:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:98:87:06:3C:5F:CD:7B:47:9D:2C:EC:F9:FA:E2:AF:28:DE:E2:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b112dbf9-e037-4085-8a8c-b84035c902a4/6e03baf6-1a47-33b6-8f5a-9f3f506ef56e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b112dbf9-e037-4085-8a8c-b84035c902a4/b112dbf9-e037-4085-8a8c-b84035c902a4.crl

            X509v3 Authority Key Identifier:
                keyid:56:86:88:E2:95:0E:27:9C:0A:C9:A7:B7:38:1E:F1:5F:9D:39:A2:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b112dbf9-e037-4085-8a8c-b84035c902a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.193.80.0/22
                  167.248.136.0/21
                  173.250.232.0/21
                  204.122.20.0/22
                IPv6:
                  2605:81c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:34:2b:21:ad:d5:bb:c6:44:96:cf:66:61:02:c6:a0:fc:82:
         1b:8b:73:c3:5a:ec:8b:e0:e2:b6:b7:1a:56:47:0a:39:88:2f:
         9a:e9:fc:b6:7d:d7:c3:a2:82:5c:50:f4:98:31:01:0d:e2:61:
         27:c4:48:10:0a:a9:06:85:93:ed:c7:4d:81:d4:14:99:0a:16:
         c2:c3:42:62:e5:6c:e1:02:5b:f1:62:f6:b2:35:64:38:4d:c7:
         03:d9:16:bd:e8:01:a5:71:28:42:ae:45:52:3b:69:63:1c:e1:
         20:25:fe:7f:54:f5:77:b4:4b:92:82:61:b4:28:3d:55:e4:9b:
         b2:11:87:3f:9f:e1:65:6c:b7:f8:1b:ad:89:d0:0b:0d:ad:8a:
         a8:82:8e:1c:52:a5:b0:8d:c2:68:e9:61:83:73:70:5f:29:d2:
         bd:f7:10:54:1d:8d:df:26:26:bf:a8:51:ff:b8:28:a1:f6:ac:
         ad:4b:b1:24:aa:e6:5f:dc:6f:e5:c1:eb:8a:38:b9:4b:26:b4:
         f1:64:67:02:8f:e6:a8:f5:91:eb:30:c5:6d:c8:e8:fd:06:87:
         a2:fe:a9:d5:7c:8a:d2:1f:99:83:7b:0c:84:53:a1:cf:1e:31:
         5d:f9:b7:3b:e3:b8:3b:1b:0a:f2:13:23:d1:10:44:bf:33:48:
         ec:22:45:fd
-----BEGIN CERTIFICATE-----
MIIGZDCCBUygAwIBAgIUAQ0Mn0MoWE20pYn9aBvzvv7k4IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjExMmRiZjktZTAzNy00MDg1LThhOGMtYjg0MDM1Yzkw
MmE0MB4XDTI2MDUwMzAxMDAyM1oXDTI2MDgwMTAxMDAyM1owLzEtMCsGA1UEAxMk
M2U5ZjFkZmMtNDdhYi00MzkyLTgzNDAtNzg3MDQxOGE1YWU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2FCy/i5E22nfApm6CdeHrOcfvFBbKDmdUuf
YzRoSC7MAUtDs5pFiFCi53wqUntUhMbw6IudOkvQFa3jxicS1NEcPnn4xKF8ryss
Vj5pD/0QG8S5+LWInP3crrAw70ohibiiYsVu9gEsqmfKDQXwIr/ZobL0jYnNs7cW
3NRY2LSglXH9MWqWzRigop5l0p0lMgAYcIN+4d/6KGmcYkq2WHxCPRHrwRVDeRk7
HktEdK/TigCwk3yPd+Zjuf/JjYjs6TARpIbOwS4vAB/f21uNlrHPnblddH1sodR+
GNVwa8VFMyMKLVaa1AU5kOFQNu01pbLmrpbVgPthIrt8Dp4DPwIDAQABo4IDdjCC
A3IwHQYDVR0OBBYEFHiYhwY8X817R50s7Pn64q8o3uI+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iMTEy
ZGJmOS1lMDM3LTQwODUtOGE4Yy1iODQwMzVjOTAyYTQvNmUwM2JhZjYtMWE0Ny0z
M2I2LThmNWEtOWYzZjUwNmVmNTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjExMmRiZjktZTAzNy00MDg1LThh
OGMtYjg0MDM1YzkwMmE0L2IxMTJkYmY5LWUwMzctNDA4NS04YThjLWI4NDAzNWM5
MDJhNC5jcmwwHwYDVR0jBBgwFoAUVoaI4pUOJ5wKyae3OB7xX505onMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iMTEyZGJmOS1lMDM3LTQwODUtOGE4Yy1iODQw
MzVjOTAyYTQuY2VyMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCjcFQAwQD
p/iIAwQDrfroAwQCzHoUMA0EAgACMAcDBQAmBYHAMFQGA1UdIAEB/wRKMEgwRgYI
KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz
b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABk0KyGt1bvG
RJbPZmECxqD8ghuLc8Na7Ivg4ra3GlZHCjmIL5rp/LZ918OiglxQ9JgxAQ3iYSfE
SBAKqQaFk+3HTYHUFJkKFsLDQmLlbOECW/Fi9rI1ZDhNxwPZFr3oAaVxKEKuRVI7
aWMc4SAl/n9U9Xe0S5KCYbQoPVXkm7IRhz+f4WVst/gbrYnQCw2tiqiCjhxSpbCN
wmjpYYNzcF8p0r33EFQdjd8mJr+oUf+4KKH2rK1LsSSq5l/cb+XB64o4uUsmtPFk
ZwKP5qj1keswxW3I6P0Gh6L+qdV8itIfmYN7DIRToc8eMV35tzvjuDsbCvITI9EQ
RL8zSOwiRf0=
-----END CERTIFICATE-----
Generated at Wed May 13 08:36:07 2026 by rpki-client