Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/f8e73e04-24ce-33fa-a8ac-e3de7660c942.roa
File:                     f8e73e04-24ce-33fa-a8ac-e3de7660c942.roa (raw, json)
Hash identifier:          SNIW/ysfdKQOUlUV0qOFqQFTU1xB+iHGctlOHvTm0ac=
Subject key identifier:   1E:53:86:36:BF:78:94:7A:75:0C:55:76:20:47:14:3F:97:FC:7B:D2
Certificate issuer:       /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
Certificate serial:       010D0C9F4328584F4972CA6445C73B4596BA6100
Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/f8e73e04-24ce-33fa-a8ac-e3de7660c942.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     11377
IP address blocks:        216.20.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:ca:64:45:c7:3b:45:96:ba:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=3b7a694b-4ada-4d48-99b4-b094869505e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:72:db:3d:a6:07:e2:96:7c:06:01:e3:ab:a2:
                    c1:03:a7:44:60:34:46:5e:6f:65:4e:e9:cd:7b:e3:
                    56:7e:3d:e2:6c:01:01:63:4d:5c:db:3f:f3:bc:d0:
                    a2:a2:4d:8e:59:d2:42:ca:e0:8b:99:65:d5:ba:a0:
                    cb:e1:04:a5:7d:10:42:2a:3f:9c:02:3e:37:73:58:
                    43:98:b7:34:5f:cd:35:40:58:2e:98:cd:5e:c4:a3:
                    ef:09:4f:1d:7d:1e:38:02:ec:d7:35:c1:9d:ca:b9:
                    db:91:6c:77:5b:c7:20:d6:9f:c2:db:6c:24:38:0c:
                    24:ea:31:0a:00:22:a9:1d:9f:11:6f:b3:05:45:e0:
                    0d:38:88:a4:f9:ec:3c:ac:0c:18:c7:a6:dd:6b:c2:
                    b4:33:d4:0d:e6:95:22:1d:4d:d2:67:7f:24:3a:06:
                    a3:15:5a:3a:cb:1f:d0:04:70:06:7a:43:f0:f1:e7:
                    c1:0d:05:c8:9d:2d:77:40:bf:98:98:fa:75:e8:64:
                    f0:4b:cf:4a:8e:e9:06:5c:e8:05:52:67:f0:33:e9:
                    89:37:b8:33:52:31:0f:22:41:7b:ed:03:c9:32:be:
                    e3:78:61:89:ef:3e:d5:f1:d4:7b:fd:54:35:a0:ca:
                    68:a5:ad:1c:c5:4a:e6:ab:f0:e0:e4:ce:8f:73:81:
                    5f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:53:86:36:BF:78:94:7A:75:0C:55:76:20:47:14:3F:97:FC:7B:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/f8e73e04-24ce-33fa-a8ac-e3de7660c942.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl

            X509v3 Authority Key Identifier:
                keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.20.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:db:5a:ee:a9:58:a6:02:af:4a:e9:b6:55:63:c4:3e:ae:20:
         1d:fa:8d:ec:41:7e:b6:5b:e1:e7:74:3d:8d:49:6b:da:5c:d7:
         5a:3b:c4:6c:9e:59:bf:d4:88:02:f1:fd:f3:bf:e8:77:1d:a0:
         03:88:6f:9d:6a:17:25:cd:2d:e0:9e:21:21:63:e7:f0:92:3c:
         52:38:f8:34:8b:cf:6a:36:02:64:5a:aa:15:79:25:66:3d:67:
         69:d7:5a:00:2f:6a:27:38:5a:ea:0b:98:cb:d5:00:40:7c:6b:
         b3:a7:81:bb:3b:1b:71:8c:ce:eb:d5:cd:22:79:cd:d6:db:af:
         31:c8:19:4c:d1:af:cf:95:1d:b7:40:be:2c:dc:b9:93:b6:f6:
         1a:c4:05:fd:fe:c1:79:9b:bb:ef:79:8a:8b:bb:59:68:a1:48:
         38:a2:dd:c7:a5:92:08:a9:e6:20:5c:0a:7e:2c:67:3b:c4:79:
         ff:d0:3c:c7:ca:9c:2c:64:b7:72:d9:ee:b4:be:89:23:32:82:
         10:07:84:7d:1e:f5:5b:4f:85:97:12:d5:c6:35:22:75:71:04:
         06:4a:da:8f:e1:15:ee:db:07:63:39:08:47:04:94:26:b6:0b:
         4c:0d:01:73:62:33:8d:fb:4d:8f:ef:29:af:68:dc:66:cc:f6:
         b9:45:6b:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcspkRcc7RZa6YQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDU1NGU1ZmMtNWYxYS00YzczLTkxMTQtODkyZWQ1ZDA1
MGI4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
M2I3YTY5NGItNGFkYS00ZDQ4LTk5YjQtYjA5NDg2OTUwNWU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HLbPaYH4pZ8BgHjq6LBA6dEYDRGXm9lTunN
e+NWfj3ibAEBY01c2z/zvNCiok2OWdJCyuCLmWXVuqDL4QSlfRBCKj+cAj43c1hD
mLc0X801QFgumM1exKPvCU8dfR44AuzXNcGdyrnbkWx3W8cg1p/C22wkOAwk6jEK
ACKpHZ8Rb7MFReANOIik+ew8rAwYx6bda8K0M9QN5pUiHU3SZ38kOgajFVo6yx/Q
BHAGekPw8efBDQXInS13QL+YmPp16GTwS89KjukGXOgFUmfwM+mJN7gzUjEPIkF7
7QPJMr7jeGGJ7z7V8dR7/VQ1oMpopa0cxUrmq/Dg5M6Pc4FfWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB5Thja/eJR6dQxVdiBHFD+X/HvSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0
ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJlZDVkMDUwYjgvZjhlNzNlMDQtMjRjZS0z
M2ZhLWE4YWMtZTNkZTc2NjBjOTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDU1NGU1ZmMtNWYxYS00YzczLTkx
MTQtODkyZWQ1ZDA1MGI4LzQ1NTRlNWZjLTVmMWEtNGM3My05MTE0LTg5MmVkNWQw
NTBiOC5jcmwwHwYDVR0jBBgwFoAU3+QEWiaDm8xXidGwF1BetYvaRmswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJl
ZDVkMDUwYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2BQ8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABfbWu6pWKYCr0rptlVjxD6uIB36jexBfrZb4ed0PY1Ja9pc11o7xGye
Wb/UiALx/fO/6HcdoAOIb51qFyXNLeCeISFj5/CSPFI4+DSLz2o2AmRaqhV5JWY9
Z2nXWgAvaic4WuoLmMvVAEB8a7Ongbs7G3GMzuvVzSJ5zdbbrzHIGUzRr8+VHbdA
vizcuZO29hrEBf3+wXmbu+95iou7WWihSDii3celkgip5iBcCn4sZzvEef/QPMfK
nCxkt3LZ7rS+iSMyghAHhH0e9VtPhZcS1cY1InVxBAZK2o/hFe7bB2M5CEcElCa2
C0wNAXNiM437TY/vKa9o3GbM9rlFa6Q=
-----END CERTIFICATE-----
Generated at Tue Sep 29 04:56:29 2026 by rpki-client