Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/c6d96590-8a20-3110-a059-a29f64d3c070.roa
File:                     c6d96590-8a20-3110-a059-a29f64d3c070.roa (raw, json)
Hash identifier:          Z5FE7wkT/7w/4sYof6umpN1jDh2ABAYf4JPBi1Ild4k=
Subject key identifier:   E4:86:F6:C8:19:46:01:5C:8B:0A:95:23:BE:BB:84:F2:EE:8F:FA:72
Certificate issuer:       /CN=55640631-1b52-4455-ab16-7633a452f342
Certificate serial:       010D0C9F4328584DCAFAF6AC2D0E71FDA614CA00
Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/c6d96590-8a20-3110-a059-a29f64d3c070.roa
Signing time:             Mon 11 May 2026 01:00:24 +0000
ROA not before:           Mon 11 May 2026 01:00:24 +0000
ROA not after:            Sun 09 Aug 2026 01:00:24 +0000
asID:                     53846
IP address blocks:        72.20.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ca:fa:f6:ac:2d:0e:71:fd:a6:14:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55640631-1b52-4455-ab16-7633a452f342
        Validity
            Not Before: May 11 01:00:24 2026 GMT
            Not After : Aug  9 01:00:24 2026 GMT
        Subject: CN=1ba5d345-ec92-452e-ad93-250e1a538b76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3f:7a:96:2d:96:fa:91:f2:06:25:63:54:0e:
                    0b:06:ac:64:fe:95:84:59:93:8d:87:03:ef:e2:85:
                    5e:de:35:4a:e5:ee:1d:fb:bb:b4:f0:82:48:cd:bb:
                    2e:e6:a3:0c:17:df:5b:57:fa:e4:bb:03:50:eb:4f:
                    a0:ef:cd:08:3c:14:00:72:fc:4d:c6:bb:ff:69:69:
                    3e:6e:e9:40:a5:d8:52:23:e1:ed:ed:13:79:e6:32:
                    9e:f5:81:4b:a8:5e:58:8a:cd:2b:08:1b:bb:21:01:
                    dc:bc:a2:26:a3:f3:47:77:0a:ca:3e:81:fa:31:29:
                    14:c5:bd:9f:80:c5:58:76:00:fb:b7:51:e6:b1:e7:
                    09:5c:34:eb:60:f5:fb:db:9e:f4:be:ce:7c:60:8f:
                    b3:f9:57:bc:47:a0:db:b9:5e:4e:aa:2b:07:ec:15:
                    27:4d:e3:26:cd:2d:6c:94:7b:e4:0b:21:74:e4:a2:
                    02:0c:97:68:4e:eb:8a:93:57:78:a7:9d:f0:f0:c2:
                    22:6f:ad:d8:e6:3c:d1:55:18:70:77:1d:85:29:11:
                    26:f2:3f:d5:2c:1d:6e:65:92:e8:fe:dc:5c:4c:42:
                    22:76:d8:e7:d6:2e:4b:aa:13:a2:9e:a9:af:99:5c:
                    d5:7e:93:36:01:f2:35:d3:c6:f9:6a:0b:da:d2:80:
                    7c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:86:F6:C8:19:46:01:5C:8B:0A:95:23:BE:BB:84:F2:EE:8F:FA:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/c6d96590-8a20-3110-a059-a29f64d3c070.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl

            X509v3 Authority Key Identifier:
                keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.20.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:c6:d6:c7:6c:89:76:16:27:d9:26:ed:88:6c:80:63:90:ab:
         56:49:6a:63:3b:04:de:83:31:45:fa:16:c2:7f:2b:0e:82:b5:
         99:7e:63:b7:09:76:e6:b0:f2:06:9e:df:f1:56:30:23:0a:9b:
         2f:f4:14:19:cb:2c:ff:69:a6:0f:de:c9:4a:2c:1f:0b:b2:9a:
         29:e1:29:a5:11:d2:ee:75:07:36:5b:ec:cd:b6:f5:2e:05:cf:
         3f:09:8b:1a:5e:34:e5:57:5f:6c:e2:22:d5:4f:65:44:42:a8:
         e0:6e:c4:c3:28:ac:a6:2e:2d:e0:65:ad:9c:b0:89:25:a6:51:
         98:61:02:43:d3:80:07:50:9e:19:0c:26:99:87:34:6b:9f:9d:
         d0:95:b5:3e:fb:ed:d9:71:a8:22:37:99:fa:fe:3f:82:86:15:
         eb:84:bc:cd:b2:53:82:f9:c9:9f:f9:43:ba:c4:20:00:4a:c5:
         22:15:25:f6:9d:84:fa:70:ff:76:98:1f:70:d9:7f:be:e0:10:
         55:17:ef:39:fe:47:19:64:07:8d:f8:dc:97:c1:d7:b3:78:38:
         c6:f1:71:92:d1:1d:ec:11:fc:66:df:17:c3:0b:64:a8:68:35:
         c5:00:ce:4b:be:a1:4e:3b:fd:f9:8f:d9:59:a2:61:bf:ed:7b:
         93:45:48:f6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3K+vasLQ5x/aYUygAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTU2NDA2MzEtMWI1Mi00NDU1LWFiMTYtNzYzM2E0NTJm
MzQyMB4XDTI2MDUxMTAxMDAyNFoXDTI2MDgwOTAxMDAyNFowLzEtMCsGA1UEAxMk
MWJhNWQzNDUtZWM5Mi00NTJlLWFkOTMtMjUwZTFhNTM4Yjc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtz96li2W+pHyBiVjVA4LBqxk/pWEWZONhwPv
4oVe3jVK5e4d+7u08IJIzbsu5qMMF99bV/rkuwNQ60+g780IPBQAcvxNxrv/aWk+
bulApdhSI+Ht7RN55jKe9YFLqF5Yis0rCBu7IQHcvKImo/NHdwrKPoH6MSkUxb2f
gMVYdgD7t1HmsecJXDTrYPX72570vs58YI+z+Ve8R6DbuV5OqisH7BUnTeMmzS1s
lHvkCyF05KICDJdoTuuKk1d4p53w8MIib63Y5jzRVRhwdx2FKREm8j/VLB1uZZLo
/txcTEIidtjn1i5LqhOinqmvmVzVfpM2AfI108b5agva0oB8iQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOSG9sgZRgFciwqVI767hPLuj/pyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTY0
MDYzMS0xYjUyLTQ0NTUtYWIxNi03NjMzYTQ1MmYzNDIvYzZkOTY1OTAtOGEyMC0z
MTEwLWEwNTktYTI5ZjY0ZDNjMDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU2NDA2MzEtMWI1Mi00NDU1LWFi
MTYtNzYzM2E0NTJmMzQyLzU1NjQwNjMxLTFiNTItNDQ1NS1hYjE2LTc2MzNhNDUy
ZjM0Mi5jcmwwHwYDVR0jBBgwFoAUUFWo2WFkn0lVufdBNbv9C6u3l7wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81NTY0MDYzMS0xYjUyLTQ0NTUtYWIxNi03NjMz
YTQ1MmYzNDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBS6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG/G1sdsiXYWJ9km7YhsgGOQq1ZJamM7BN6DMUX6FsJ/Kw6CtZl+Y7cJ
duaw8gae3/FWMCMKmy/0FBnLLP9ppg/eyUosHwuyminhKaUR0u51BzZb7M229S4F
zz8JixpeNOVXX2ziItVPZURCqOBuxMMorKYuLeBlrZywiSWmUZhhAkPTgAdQnhkM
JpmHNGufndCVtT777dlxqCI3mfr+P4KGFeuEvM2yU4L5yZ/5Q7rEIABKxSIVJfad
hPpw/3aYH3DZf77gEFUX7zn+RxlkB4343JfB17N4OMbxcZLRHewR/GbfF8MLZKho
NcUAzku+oU47/fmP2VmiYb/te5NFSPY=
-----END CERTIFICATE-----
Generated at Wed May 13 16:27:22 2026 by rpki-client