Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4ae31f6-760c-4fae-baac-05fd22f7432d/6ba83142-82b0-3bee-a15f-229954799574.roa
File:                     6ba83142-82b0-3bee-a15f-229954799574.roa (raw, json)
Hash identifier:          bjmxR0wIRocsO8NfJGKZs5I68mJ8lFym1P+KB0k2KkM=
Subject key identifier:   95:4D:6B:EB:E1:2C:28:93:17:06:11:3D:6B:29:18:4D:DB:7B:21:A0
Certificate issuer:       /CN=a4ae31f6-760c-4fae-baac-05fd22f7432d
Certificate serial:       010D0C9F4328584F49741FA3E4C7287026D6AD00
Authority key identifier: 83:47:5A:4E:4B:9E:8D:34:02:FC:30:90:4A:93:FC:FD:D1:6A:5C:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4ae31f6-760c-4fae-baac-05fd22f7432d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4ae31f6-760c-4fae-baac-05fd22f7432d/6ba83142-82b0-3bee-a15f-229954799574.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     20273
IP address blocks:        67.208.48.0/22 maxlen: 24
                          104.204.236.0/22 maxlen: 24
                          128.254.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4ae31f6-760c-4fae-baac-05fd22f7432d/a4ae31f6-760c-4fae-baac-05fd22f7432d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4ae31f6-760c-4fae-baac-05fd22f7432d/a4ae31f6-760c-4fae-baac-05fd22f7432d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4ae31f6-760c-4fae-baac-05fd22f7432d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:1f:a3:e4:c7:28:70:26:d6:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4ae31f6-760c-4fae-baac-05fd22f7432d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=750e5a96-47ce-42c1-96f2-83e82a692a0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:91:f1:16:cd:da:49:41:06:fe:40:98:36:be:
                    1f:76:04:40:4a:bc:e5:94:db:83:2f:6c:d0:6d:b4:
                    30:a9:ce:21:a0:46:17:0d:81:41:94:af:13:2a:97:
                    8d:b6:de:ac:5f:0d:e6:7f:92:ca:fa:5a:28:1c:4e:
                    1d:dc:31:8f:ff:60:f9:95:4c:a8:63:d5:67:46:db:
                    79:02:d2:43:b6:7c:68:00:48:7d:5d:a6:f9:ab:8a:
                    f6:01:8a:44:61:0c:e7:b1:44:39:b4:53:ef:3c:2a:
                    bc:fd:8c:a8:8f:2b:b0:18:c9:64:10:43:27:f3:e9:
                    23:54:84:1b:fc:03:56:80:7d:a2:8a:9e:4f:96:c8:
                    9c:23:00:5f:af:ea:1e:a9:14:72:4f:f6:b7:40:c2:
                    32:a1:e2:d0:43:02:17:33:0c:35:27:c8:4a:0b:f2:
                    ce:79:d0:08:fc:a9:f7:31:9b:c3:dd:31:2a:89:d7:
                    28:5a:db:f5:9d:06:42:e5:20:86:63:b7:60:86:d1:
                    bd:3c:95:2b:d8:40:2a:48:84:6f:85:a2:db:44:64:
                    a8:e2:a5:13:86:a0:5d:dd:68:e5:0b:b1:44:ed:5a:
                    24:6e:5e:42:b5:10:23:b2:13:ce:1e:ca:0d:2f:44:
                    e0:45:a6:14:ee:60:c3:75:3f:f6:71:25:a8:9f:b0:
                    2e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:4D:6B:EB:E1:2C:28:93:17:06:11:3D:6B:29:18:4D:DB:7B:21:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4ae31f6-760c-4fae-baac-05fd22f7432d/6ba83142-82b0-3bee-a15f-229954799574.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4ae31f6-760c-4fae-baac-05fd22f7432d/a4ae31f6-760c-4fae-baac-05fd22f7432d.crl

            X509v3 Authority Key Identifier:
                keyid:83:47:5A:4E:4B:9E:8D:34:02:FC:30:90:4A:93:FC:FD:D1:6A:5C:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4ae31f6-760c-4fae-baac-05fd22f7432d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.208.48.0/22
                  104.204.236.0/22
                  128.254.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:2c:d8:9a:27:5a:3d:b8:0c:74:09:05:5d:90:11:64:19:fb:
         a9:89:c4:a3:48:15:f5:4b:6c:c3:78:fd:b0:ed:b9:cc:bc:0c:
         2c:34:67:a3:ad:26:46:95:5f:69:36:44:72:65:94:39:b4:23:
         e3:fc:18:27:6d:7c:83:fa:08:0c:44:50:1c:85:b0:12:47:54:
         90:f3:55:e3:65:96:d6:cb:00:72:b6:a4:c5:0c:62:72:74:c6:
         e8:6d:6e:1c:7e:13:54:b8:28:b8:f1:10:54:50:17:f5:90:aa:
         e3:a7:2c:cf:05:dd:5d:0e:20:00:be:85:87:aa:ba:f3:0c:2c:
         9f:66:ab:89:76:ef:79:17:a4:c1:36:ba:cb:9c:a5:02:7f:e3:
         ab:d6:70:ec:7a:72:9c:90:37:90:54:3d:a2:6a:08:f6:1b:5f:
         39:ac:34:5c:13:ef:34:95:41:6c:de:78:c9:1a:ae:f3:98:aa:
         7e:b1:30:5e:f1:9b:ec:9e:36:50:74:00:0d:96:50:89:17:3a:
         7e:ac:ef:c3:0a:f9:24:3c:94:eb:59:b9:7d:58:13:7d:df:45:
         c9:db:d0:bc:09:4f:1a:1a:e0:4f:bd:47:fd:e3:20:ef:d5:67:
         51:0c:20:44:a7:ea:19:17:14:fc:16:9c:cd:71:d1:56:db:3e:
         ac:ec:73:82
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE9JdB+j5McocCbWrQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTRhZTMxZjYtNzYwYy00ZmFlLWJhYWMtMDVmZDIyZjc0
MzJkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NzUwZTVhOTYtNDdjZS00MmMxLTk2ZjItODNlODJhNjkyYTBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5HxFs3aSUEG/kCYNr4fdgRASrzllNuDL2zQ
bbQwqc4hoEYXDYFBlK8TKpeNtt6sXw3mf5LK+looHE4d3DGP/2D5lUyoY9VnRtt5
AtJDtnxoAEh9Xab5q4r2AYpEYQznsUQ5tFPvPCq8/YyojyuwGMlkEEMn8+kjVIQb
/ANWgH2iip5PlsicIwBfr+oeqRRyT/a3QMIyoeLQQwIXMww1J8hKC/LOedAI/Kn3
MZvD3TEqidcoWtv1nQZC5SCGY7dghtG9PJUr2EAqSIRvhaLbRGSo4qUThqBd3Wjl
C7FE7Vokbl5CtRAjshPOHsoNL0TgRaYU7mDDdT/2cSWon7AukwIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFJVNa+vhLCiTFwYRPWspGE3beyGgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hNGFl
MzFmNi03NjBjLTRmYWUtYmFhYy0wNWZkMjJmNzQzMmQvNmJhODMxNDItODJiMC0z
YmVlLWExNWYtMjI5OTU0Nzk5NTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTRhZTMxZjYtNzYwYy00ZmFlLWJh
YWMtMDVmZDIyZjc0MzJkL2E0YWUzMWY2LTc2MGMtNGZhZS1iYWFjLTA1ZmQyMmY3
NDMyZC5jcmwwHwYDVR0jBBgwFoAUg0daTkuejTQC/DCQSpP8/dFqXGYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9hNGFlMzFmNi03NjBjLTRmYWUtYmFhYy0wNWZk
MjJmNzQzMmQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCQ9AwAwQC
aMzsAwQCgP70MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBABss2JonWj24DHQJBV2QEWQZ+6mJxKNIFfVLbMN4
/bDtucy8DCw0Z6OtJkaVX2k2RHJllDm0I+P8GCdtfIP6CAxEUByFsBJHVJDzVeNl
ltbLAHK2pMUMYnJ0xuhtbhx+E1S4KLjxEFRQF/WQquOnLM8F3V0OIAC+hYequvMM
LJ9mq4l273kXpME2usucpQJ/46vWcOx6cpyQN5BUPaJqCPYbXzmsNFwT7zSVQWze
eMkarvOYqn6xMF7xm+yeNlB0AA2WUIkXOn6s78MK+SQ8lOtZuX1YE33fRcnb0LwJ
Txoa4E+9R/3jIO/VZ1EMIESn6hkXFPwWnM1x0VbbPqzsc4I=
-----END CERTIFICATE-----
Generated at Sat Oct 10 16:18:24 2026 by rpki-client