Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/6f5fd4d2-085b-32fe-94e1-e6820ea25fe6.roa
File:                     6f5fd4d2-085b-32fe-94e1-e6820ea25fe6.roa (raw, json)
Hash identifier:          barFwS5gPlcTdtuLTU3zJd/K+5McuqbI8ZyPKYvc51Q=
Subject key identifier:   FD:F2:47:10:E9:E4:4F:06:A5:BA:F2:53:F4:2A:07:DB:46:1D:D0:30
Certificate issuer:       /CN=473aba48-e57f-40d4-b25e-8e59a1171ae8
Certificate serial:       010D0C9F4328584F4973F22B51491F702C1B13E0
Authority key identifier: 31:D8:E4:89:EF:82:5A:7B:E9:37:04:AB:E6:B3:60:F1:3C:92:1D:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/6f5fd4d2-085b-32fe-94e1-e6820ea25fe6.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     399331
IP address blocks:        174.136.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/473aba48-e57f-40d4-b25e-8e59a1171ae8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/473aba48-e57f-40d4-b25e-8e59a1171ae8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:f2:2b:51:49:1f:70:2c:1b:13:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=473aba48-e57f-40d4-b25e-8e59a1171ae8
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=c6e77cff-eff3-476f-90b9-0995d0a67ca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:4a:30:8e:58:dd:72:d0:9d:42:9a:5c:47:74:
                    db:1d:c9:61:af:09:80:a7:50:60:a9:f0:8c:77:fc:
                    84:d4:ae:a9:73:0c:f2:71:ad:8b:83:f7:ff:51:fc:
                    c7:42:53:2e:29:e0:37:7d:98:26:5f:51:5e:de:98:
                    c3:66:2f:3f:74:a3:c2:74:1c:0f:d2:89:8a:80:4c:
                    cf:a6:bb:76:fc:2d:5c:af:99:f1:8a:68:21:97:79:
                    b1:f0:01:d8:9e:47:7f:98:1f:5c:32:eb:8d:ed:b4:
                    88:2f:7f:a5:49:39:c7:92:a7:b5:5f:e3:b9:ec:fe:
                    23:0e:9d:5a:b7:b0:82:bb:bb:50:47:ff:60:b8:c6:
                    69:35:0d:d8:fe:34:d5:3c:14:26:e2:7e:b5:f1:5b:
                    65:67:be:00:5a:b1:69:b1:ef:da:5a:ba:66:fa:73:
                    a2:6c:76:32:84:9e:3b:a9:45:db:2c:f4:5f:28:41:
                    35:1c:45:3a:5d:3d:aa:fb:36:02:d2:64:ca:be:b6:
                    93:3d:a4:c1:c5:f0:98:a8:17:98:a8:3f:50:0a:a8:
                    14:1c:ed:21:23:23:b0:d6:57:70:a1:17:42:40:3f:
                    27:46:82:92:a2:f2:ca:d5:fb:f5:b3:dc:ef:b5:02:
                    08:b3:7d:c3:02:02:7a:9f:05:7b:36:14:dd:9e:f5:
                    43:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:F2:47:10:E9:E4:4F:06:A5:BA:F2:53:F4:2A:07:DB:46:1D:D0:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/6f5fd4d2-085b-32fe-94e1-e6820ea25fe6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/473aba48-e57f-40d4-b25e-8e59a1171ae8.crl

            X509v3 Authority Key Identifier:
                keyid:31:D8:E4:89:EF:82:5A:7B:E9:37:04:AB:E6:B3:60:F1:3C:92:1D:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.136.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:88:63:fd:08:af:45:0a:8c:c7:6a:8a:e1:3e:6c:20:36:67:
         14:bd:e6:58:21:ee:5d:c5:2c:a4:84:07:c2:31:47:7e:b5:96:
         75:bc:e1:60:dd:24:2e:44:fe:fe:b7:82:e8:07:6f:95:39:32:
         b2:b7:9b:f4:8a:d4:e4:6a:dc:ab:69:22:6d:0b:c3:4a:01:a8:
         2f:9f:2b:db:c3:2b:4b:1f:a4:06:71:44:d3:53:ce:82:8e:8b:
         a5:9c:70:c8:d8:85:9e:f4:da:ed:42:1d:15:f4:16:31:5a:03:
         4a:fb:c6:e7:24:11:5c:36:52:6a:72:9f:e3:db:ca:73:1c:78:
         af:cd:94:e5:7a:97:5f:a4:33:de:43:98:8e:eb:ec:2d:ea:e1:
         2a:ba:9f:31:d2:e4:ff:e8:90:7a:83:7e:e0:3d:d0:36:f5:1c:
         69:50:dd:4f:b6:f0:e2:5e:1a:00:84:1a:39:79:e0:fd:40:d7:
         f2:17:5f:7f:57:f3:56:22:ee:40:7e:05:9a:1e:d5:27:03:05:
         40:e8:35:0a:97:87:23:90:22:a9:d0:35:af:7a:c6:86:8c:e2:
         c7:7c:69:36:77:4a:02:1e:c7:3e:87:99:b3:e6:ea:2a:5e:d8:
         1c:3f:8e:d8:89:28:45:eb:8f:a9:d9:73:18:c9:b1:b5:5c:a1:
         34:48:0a:5f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc/IrUUkfcCwbE+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDczYWJhNDgtZTU3Zi00MGQ0LWIyNWUtOGU1OWExMTcx
YWU4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
YzZlNzdjZmYtZWZmMy00NzZmLTkwYjktMDk5NWQwYTY3Y2E4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEowjljdctCdQppcR3TbHclhrwmAp1BgqfCM
d/yE1K6pcwzyca2Lg/f/UfzHQlMuKeA3fZgmX1Fe3pjDZi8/dKPCdBwP0omKgEzP
prt2/C1cr5nximghl3mx8AHYnkd/mB9cMuuN7bSIL3+lSTnHkqe1X+O57P4jDp1a
t7CCu7tQR/9guMZpNQ3Y/jTVPBQm4n618VtlZ74AWrFpse/aWrpm+nOibHYyhJ47
qUXbLPRfKEE1HEU6XT2q+zYC0mTKvraTPaTBxfCYqBeYqD9QCqgUHO0hIyOw1ldw
oRdCQD8nRoKSovLK1fv1s9zvtQIIs33DAgJ6nwV7NhTdnvVD/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP3yRxDp5E8GpbryU/QqB9tGHdAwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NzNh
YmE0OC1lNTdmLTQwZDQtYjI1ZS04ZTU5YTExNzFhZTgvNmY1ZmQ0ZDItMDg1Yi0z
MmZlLTk0ZTEtZTY4MjBlYTI1ZmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDczYWJhNDgtZTU3Zi00MGQ0LWIy
NWUtOGU1OWExMTcxYWU4LzQ3M2FiYTQ4LWU1N2YtNDBkNC1iMjVlLThlNTlhMTE3
MWFlOC5jcmwwHwYDVR0jBBgwFoAUMdjkie+CWnvpNwSr5rNg8TySHUowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS80NzNhYmE0OC1lNTdmLTQwZDQtYjI1ZS04ZTU5
YTExNzFhZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCroj0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB2IY/0Ir0UKjMdqiuE+bCA2ZxS95lgh7l3FLKSEB8IxR361lnW84WDd
JC5E/v63gugHb5U5MrK3m/SK1ORq3KtpIm0Lw0oBqC+fK9vDK0sfpAZxRNNTzoKO
i6WccMjYhZ702u1CHRX0FjFaA0r7xuckEVw2Umpyn+PbynMceK/NlOV6l1+kM95D
mI7r7C3q4Sq6nzHS5P/okHqDfuA90Db1HGlQ3U+28OJeGgCEGjl54P1A1/IXX39X
81Yi7kB+BZoe1ScDBUDoNQqXhyOQIqnQNa96xoaM4sd8aTZ3SgIexz6HmbPm6ipe
2Bw/jtiJKEXrj6nZcxjJsbVcoTRICl8=
-----END CERTIFICATE-----
Generated at Sat Sep 26 03:25:05 2026 by rpki-client