Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf/c601183c-c50b-3996-a472-3386d4586ad1.roa
File:                     c601183c-c50b-3996-a472-3386d4586ad1.roa (raw, json)
Hash identifier:          ys6ZeALNFMwoVhzh3fw5g2CXZ8gw4FqU3Odw5s9XdoM=
Subject key identifier:   B0:1B:97:68:42:69:DF:EE:D7:78:21:C8:92:19:E4:9B:AD:6C:78:9F
Certificate issuer:       /CN=c4608cb8-a1d0-40aa-8b05-a597157bb1bf
Certificate serial:       010D0C9F4328584E7A64D8F5A4DB63293A609200
Authority key identifier: 67:2A:E3:EB:9E:ED:46:3C:EE:76:FF:EE:C2:BB:86:EC:2A:A6:E2:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf/c601183c-c50b-3996-a472-3386d4586ad1.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     54070
IP address blocks:        205.211.168.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf/c4608cb8-a1d0-40aa-8b05-a597157bb1bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf/c4608cb8-a1d0-40aa-8b05-a597157bb1bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:d8:f5:a4:db:63:29:3a:60:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4608cb8-a1d0-40aa-8b05-a597157bb1bf
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=aa673539-b723-4872-b71b-f033e5024f0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:56:df:9b:42:71:ed:9a:dc:50:02:53:f9:29:
                    59:63:a2:9e:0e:8d:04:59:89:9e:8d:e8:90:ca:29:
                    90:66:45:98:96:2a:8f:c9:fd:5a:a7:46:c0:fd:f0:
                    31:8d:50:a3:5b:80:7a:4a:1b:59:71:0f:f3:c3:bf:
                    6f:30:6b:1e:b9:94:b5:de:6c:6a:7f:8a:17:cb:3c:
                    e9:c9:0e:03:3e:56:36:86:ba:46:69:c2:8d:e8:ad:
                    a4:a1:19:ed:6f:a2:b4:be:93:ac:d6:81:19:f6:62:
                    dd:ab:18:cc:77:60:38:d9:ab:8c:b7:b2:a9:d4:d3:
                    3f:cc:66:d0:e6:cd:28:e8:10:8a:6e:e4:fe:60:b6:
                    fd:8a:9b:d7:c9:82:96:77:a7:b3:93:32:1b:aa:ab:
                    d1:ce:c2:a2:f9:c0:0f:59:b3:1d:a9:63:43:bb:e7:
                    ef:9b:09:c4:60:c7:02:99:19:54:cf:db:f9:33:d0:
                    ed:de:ef:f7:c4:e2:94:89:ef:9a:bf:2a:a0:7c:13:
                    30:0d:11:37:2d:dc:de:2b:31:f2:d7:33:73:f8:f1:
                    65:b9:43:a0:14:ba:98:71:f8:20:fa:99:b1:30:6c:
                    0c:36:49:cf:57:c8:90:e9:5b:78:31:9d:7f:96:31:
                    3f:d3:68:02:b6:50:d0:7f:9d:eb:e6:a7:17:af:a4:
                    f9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:1B:97:68:42:69:DF:EE:D7:78:21:C8:92:19:E4:9B:AD:6C:78:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf/c601183c-c50b-3996-a472-3386d4586ad1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf/c4608cb8-a1d0-40aa-8b05-a597157bb1bf.crl

            X509v3 Authority Key Identifier:
                keyid:67:2A:E3:EB:9E:ED:46:3C:EE:76:FF:EE:C2:BB:86:EC:2A:A6:E2:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.211.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:19:19:14:61:48:8d:2a:b4:bb:80:5a:03:9e:84:87:d5:98:
         1a:22:df:31:f8:d8:cb:e5:01:43:19:33:7b:93:6f:c0:9b:a7:
         28:61:5d:c3:c8:30:53:c1:5c:94:87:98:b5:6a:8f:e5:b8:a9:
         7d:27:dd:0b:ac:cc:37:5a:6c:86:08:b2:d3:7b:a5:08:27:6a:
         27:c8:e5:ae:7c:b8:7c:3e:d2:e5:2d:04:86:20:4c:da:26:6b:
         80:a7:53:13:77:2b:9e:e2:87:87:0e:22:4d:63:11:6a:f0:ed:
         83:91:1d:ad:45:0f:0e:2c:fb:2f:ea:23:dc:15:0a:43:e2:61:
         a7:53:b7:e5:c4:a5:85:c1:8e:69:02:35:e9:d0:ad:d9:75:8f:
         f9:fb:99:de:c1:02:1a:04:51:68:5f:b3:4c:36:7c:2f:1d:9b:
         ec:a2:ed:2a:5b:2a:93:ba:b7:16:71:a5:51:69:c4:85:34:c2:
         37:14:a9:13:11:fd:9e:88:a7:0d:3a:25:48:4b:97:72:b5:80:
         4b:2c:ae:dc:0c:9f:81:40:75:4a:c8:0f:ca:73:ac:32:f5:74:
         6e:db:73:45:48:18:10:49:1b:b2:96:bb:7d:24:93:87:3d:86:
         3f:e3:80:fc:1f:e2:77:94:a7:b5:0b:af:7a:d5:62:37:70:15:
         1b:f5:ab:21
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE56ZNj1pNtjKTpgkgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzQ2MDhjYjgtYTFkMC00MGFhLThiMDUtYTU5NzE1N2Ji
MWJmMB4XDTI2MDcxMjIxMDAxM1oXDTI2MTAxMDIxMDAxM1owLzEtMCsGA1UEAxMk
YWE2NzM1MzktYjcyMy00ODcyLWI3MWItZjAzM2U1MDI0ZjBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglbfm0Jx7ZrcUAJT+SlZY6KeDo0EWYmejeiQ
yimQZkWYliqPyf1ap0bA/fAxjVCjW4B6ShtZcQ/zw79vMGseuZS13mxqf4oXyzzp
yQ4DPlY2hrpGacKN6K2koRntb6K0vpOs1oEZ9mLdqxjMd2A42auMt7Kp1NM/zGbQ
5s0o6BCKbuT+YLb9ipvXyYKWd6ezkzIbqqvRzsKi+cAPWbMdqWNDu+fvmwnEYMcC
mRlUz9v5M9Dt3u/3xOKUie+avyqgfBMwDRE3LdzeKzHy1zNz+PFluUOgFLqYcfgg
+pmxMGwMNknPV8iQ6Vt4MZ1/ljE/02gCtlDQf53r5qcXr6T5OQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLAbl2hCad/u13ghyJIZ5JutbHifMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jNDYw
OGNiOC1hMWQwLTQwYWEtOGIwNS1hNTk3MTU3YmIxYmYvYzYwMTE4M2MtYzUwYi0z
OTk2LWE0NzItMzM4NmQ0NTg2YWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzQ2MDhjYjgtYTFkMC00MGFhLThi
MDUtYTU5NzE1N2JiMWJmL2M0NjA4Y2I4LWExZDAtNDBhYS04YjA1LWE1OTcxNTdi
YjFiZi5jcmwwHwYDVR0jBBgwFoAUZyrj657tRjzudv/uwruG7Cqm4tMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jNDYwOGNiOC1hMWQwLTQwYWEtOGIwNS1hNTk3
MTU3YmIxYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzdOoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGcZGRRhSI0qtLuAWgOehIfVmBoi3zH42MvlAUMZM3uTb8CbpyhhXcPI
MFPBXJSHmLVqj+W4qX0n3QuszDdabIYIstN7pQgnaifI5a58uHw+0uUtBIYgTNom
a4CnUxN3K57ih4cOIk1jEWrw7YORHa1FDw4s+y/qI9wVCkPiYadTt+XEpYXBjmkC
NenQrdl1j/n7md7BAhoEUWhfs0w2fC8dm+yi7SpbKpO6txZxpVFpxIU0wjcUqRMR
/Z6Ipw06JUhLl3K1gEssrtwMn4FAdUrID8pzrDL1dG7bc0VIGBBJG7KWu30kk4c9
hj/jgPwf4neUp7ULr3rVYjdwFRv1qyE=
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:24:06 2026 by rpki-client