Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6128cc13-bc0f-49f2-8a31-9290bbc754a5/d3879bb8-5a86-3587-80ad-af7330f2e038.roa
File:                     d3879bb8-5a86-3587-80ad-af7330f2e038.roa (raw, json)
Hash identifier:          VRLlork9CcMcTJKm/a8ikqRNfRhyg8X63u5WjBVageE=
Subject key identifier:   E8:31:46:45:59:4D:76:AE:14:0C:F7:C4:9F:A6:25:D5:84:74:CD:5D
Certificate issuer:       /CN=6128cc13-bc0f-49f2-8a31-9290bbc754a5
Certificate serial:       010D0C9F4328584DB07583439CAB8AFD3A92C440
Authority key identifier: 6B:BE:01:58:1F:07:88:AF:98:39:9F:C3:67:4C:A7:6F:AD:68:4E:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6128cc13-bc0f-49f2-8a31-9290bbc754a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6128cc13-bc0f-49f2-8a31-9290bbc754a5/d3879bb8-5a86-3587-80ad-af7330f2e038.roa
Signing time:             Fri 01 May 2026 13:00:30 +0000
ROA not before:           Fri 01 May 2026 13:00:30 +0000
ROA not after:            Thu 30 Jul 2026 13:00:30 +0000
asID:                     35979
IP address blocks:        173.241.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6128cc13-bc0f-49f2-8a31-9290bbc754a5/6128cc13-bc0f-49f2-8a31-9290bbc754a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6128cc13-bc0f-49f2-8a31-9290bbc754a5/6128cc13-bc0f-49f2-8a31-9290bbc754a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6128cc13-bc0f-49f2-8a31-9290bbc754a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b0:75:83:43:9c:ab:8a:fd:3a:92:c4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6128cc13-bc0f-49f2-8a31-9290bbc754a5
        Validity
            Not Before: May  1 13:00:30 2026 GMT
            Not After : Jul 30 13:00:30 2026 GMT
        Subject: CN=69b05b0b-bb05-4444-86a6-3fa20dd8c36d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9f:5d:62:60:77:6c:78:61:f6:da:f9:a9:f2:
                    6e:4b:8c:ec:ab:f3:87:1c:5d:28:32:7e:0d:55:0e:
                    ee:d0:95:18:a4:fd:eb:25:83:3c:0c:c2:4c:47:41:
                    af:64:24:ba:d9:82:55:4a:5a:70:12:4c:1a:05:dd:
                    24:d8:0f:e1:b5:62:40:66:fd:44:c0:ce:49:8b:f9:
                    5f:5c:4a:70:b7:8b:fb:6d:eb:5f:a6:67:66:38:6a:
                    e6:8f:6d:42:76:16:ca:59:e3:b2:04:15:1b:3d:08:
                    28:38:c6:43:ff:ba:3a:2a:0e:15:05:b9:3f:5a:5c:
                    7b:28:29:6d:b1:cc:91:01:81:9e:85:6a:f3:bd:80:
                    86:2f:93:68:41:6c:24:49:70:3e:64:d6:b2:74:ba:
                    fd:7f:f8:27:e8:d5:66:6c:bf:27:2a:30:b5:79:b8:
                    d6:13:c9:73:11:d2:f6:ef:39:48:36:47:bd:d4:ff:
                    15:32:7b:7a:81:08:9d:20:a3:c6:39:b2:df:3a:01:
                    b5:9d:56:0d:76:39:48:dc:84:1d:35:b7:ef:9f:4f:
                    8d:e1:72:50:72:63:5a:b6:8d:c0:26:cb:0b:99:5a:
                    86:a2:c8:60:29:6a:5a:1b:03:2c:9e:e5:8b:2c:2b:
                    88:fb:84:b2:20:4d:8c:ea:67:28:17:09:51:42:bb:
                    bb:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:31:46:45:59:4D:76:AE:14:0C:F7:C4:9F:A6:25:D5:84:74:CD:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6128cc13-bc0f-49f2-8a31-9290bbc754a5/d3879bb8-5a86-3587-80ad-af7330f2e038.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6128cc13-bc0f-49f2-8a31-9290bbc754a5/6128cc13-bc0f-49f2-8a31-9290bbc754a5.crl

            X509v3 Authority Key Identifier:
                keyid:6B:BE:01:58:1F:07:88:AF:98:39:9F:C3:67:4C:A7:6F:AD:68:4E:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6128cc13-bc0f-49f2-8a31-9290bbc754a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.241.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:95:7a:3c:57:5c:2f:38:72:82:54:ca:74:29:b2:8d:bb:b7:
         ea:22:8e:73:52:3c:b1:05:34:48:61:79:a4:3b:ac:86:b7:1e:
         a4:91:db:12:66:ab:7c:b8:b8:e0:d0:17:6f:f9:10:51:82:a1:
         15:3f:2a:a7:77:a6:fb:24:d7:f2:46:73:fd:73:f1:18:28:13:
         03:fa:71:e9:41:e3:24:8e:0c:60:70:cf:df:92:8a:8b:40:18:
         a6:8a:f0:ad:79:9b:37:3b:b2:7c:e9:e8:0b:c4:18:01:1f:9b:
         cb:8f:14:55:52:09:fa:c7:88:14:e8:35:e0:76:2d:3f:62:12:
         a0:a6:f3:17:dd:89:31:87:64:66:e1:bb:1c:d8:b0:28:f2:f5:
         8f:f4:76:80:dc:14:06:5a:2a:a2:e0:8b:e4:fd:41:3b:0e:4c:
         a0:21:89:5a:8e:5d:d8:bf:29:16:65:d0:a7:3d:76:64:5a:87:
         7e:a1:9e:d0:b2:4b:67:d4:19:2d:e3:a1:26:a0:8a:6f:25:6d:
         d4:46:1d:59:ed:6a:34:70:79:74:45:32:22:6e:ad:db:bf:bb:
         5e:b2:c4:d2:11:95:e6:19:71:aa:6d:46:74:5b:f1:56:d9:71:
         58:f0:37:c1:ba:26:a7:c8:77:bc:08:20:81:b2:ce:87:cf:f9:
         2b:06:3d:ea
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2wdYNDnKuK/TqSxEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjEyOGNjMTMtYmMwZi00OWYyLThhMzEtOTI5MGJiYzc1
NGE1MB4XDTI2MDUwMTEzMDAzMFoXDTI2MDczMDEzMDAzMFowLzEtMCsGA1UEAxMk
NjliMDViMGItYmIwNS00NDQ0LTg2YTYtM2ZhMjBkZDhjMzZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqp9dYmB3bHhh9tr5qfJuS4zsq/OHHF0oMn4N
VQ7u0JUYpP3rJYM8DMJMR0GvZCS62YJVSlpwEkwaBd0k2A/htWJAZv1EwM5Ji/lf
XEpwt4v7betfpmdmOGrmj21CdhbKWeOyBBUbPQgoOMZD/7o6Kg4VBbk/Wlx7KClt
scyRAYGehWrzvYCGL5NoQWwkSXA+ZNaydLr9f/gn6NVmbL8nKjC1ebjWE8lzEdL2
7zlINke91P8VMnt6gQidIKPGObLfOgG1nVYNdjlI3IQdNbfvn0+N4XJQcmNato3A
JssLmVqGoshgKWpaGwMsnuWLLCuI+4SyIE2M6mcoFwlRQru7UQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOgxRkVZTXauFAz3xJ+mJdWEdM1dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi82MTI4
Y2MxMy1iYzBmLTQ5ZjItOGEzMS05MjkwYmJjNzU0YTUvZDM4NzliYjgtNWE4Ni0z
NTg3LTgwYWQtYWY3MzMwZjJlMDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNjEyOGNjMTMtYmMwZi00OWYyLThh
MzEtOTI5MGJiYzc1NGE1LzYxMjhjYzEzLWJjMGYtNDlmMi04YTMxLTkyOTBiYmM3
NTRhNS5jcmwwHwYDVR0jBBgwFoAUa74BWB8HiK+YOZ/DZ0ynb61oTmgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi82MTI4Y2MxMy1iYzBmLTQ5ZjItOGEzMS05Mjkw
YmJjNzU0YTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErfFwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAACVejxXXC84coJUynQpso27t+oijnNSPLEFNEhheaQ7rIa3HqSR2xJm
q3y4uODQF2/5EFGCoRU/Kqd3pvsk1/JGc/1z8RgoEwP6celB4ySODGBwz9+SiotA
GKaK8K15mzc7snzp6AvEGAEfm8uPFFVSCfrHiBToNeB2LT9iEqCm8xfdiTGHZGbh
uxzYsCjy9Y/0doDcFAZaKqLgi+T9QTsOTKAhiVqOXdi/KRZl0Kc9dmRah36hntCy
S2fUGS3joSagim8lbdRGHVntajRweXRFMiJurdu/u16yxNIRleYZcaptRnRb8VbZ
cVjwN8G6JqfId7wIIIGyzofP+SsGPeo=
-----END CERTIFICATE-----
Generated at Wed May 13 03:01:53 2026 by rpki-client