Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/6ec4b6bf-d53f-3877-b36e-f669576d8063.roa
File:                     6ec4b6bf-d53f-3877-b36e-f669576d8063.roa (raw, json)
Hash identifier:          ewjlsuRFqw/LIF0f+fH4+F9PAsKcwtGF5VlFQBhBrGo=
Subject key identifier:   FC:27:D8:FA:93:0B:F3:21:6B:72:40:CC:C9:0F:2B:8F:18:87:AD:F7
Certificate issuer:       /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Certificate serial:       010D0C9F4328584F3A17D2560D4CF506746419B0
Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/6ec4b6bf-d53f-3877-b36e-f669576d8063.roa
Signing time:             Sat 19 Sep 2026 13:00:12 +0000
ROA not before:           Sat 19 Sep 2026 13:00:12 +0000
ROA not after:            Fri 18 Dec 2026 14:00:12 +0000
asID:                     6128
IP address blocks:        216.97.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3a:17:d2:56:0d:4c:f5:06:74:64:19:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
        Validity
            Not Before: Sep 19 13:00:12 2026 GMT
            Not After : Dec 18 14:00:12 2026 GMT
        Subject: CN=47d565c8-6d8a-4399-8407-41a253fef600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:59:4f:5d:f5:e1:f5:6a:c0:38:54:70:80:f1:
                    cb:05:92:17:66:72:b6:a4:b5:80:8a:d7:88:c2:24:
                    a8:69:0a:b1:29:e3:be:0a:0f:7b:14:ed:5e:d1:a7:
                    3c:40:b6:08:85:10:51:73:c4:14:e1:ad:4f:73:3d:
                    2b:ee:31:e3:f2:7d:a1:e7:76:b7:65:6a:3b:5b:87:
                    75:54:d3:eb:c5:28:81:22:12:44:3a:f4:ce:cb:e9:
                    8a:56:c4:48:fe:6a:37:53:ef:f1:1e:ee:8d:e5:aa:
                    b0:70:61:e0:b5:74:d4:52:87:39:7b:c5:62:cb:ff:
                    89:53:c9:d1:69:8a:25:16:d4:3a:4c:1a:09:19:1d:
                    d0:de:3d:8e:15:7a:7e:ea:c6:57:18:95:96:a5:aa:
                    37:af:c4:4b:92:f4:8b:2d:bc:27:ef:8e:c4:8c:b0:
                    cc:57:19:04:ce:16:e4:b6:16:8b:ad:a9:8c:48:7d:
                    3f:72:c2:8a:04:05:06:ac:41:77:40:72:0d:5c:55:
                    c0:a1:96:5b:c8:6c:47:82:e9:21:b6:df:5d:fa:74:
                    22:2c:76:f4:1e:07:a3:0a:55:c9:d5:96:f8:98:f6:
                    26:68:59:4e:3c:36:b8:33:49:1e:d4:2a:82:8d:24:
                    68:14:21:54:52:28:68:d7:c9:bd:b2:bd:6b:cb:88:
                    cc:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:27:D8:FA:93:0B:F3:21:6B:72:40:CC:C9:0F:2B:8F:18:87:AD:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/6ec4b6bf-d53f-3877-b36e-f669576d8063.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl

            X509v3 Authority Key Identifier:
                keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.97.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:85:cb:24:89:03:88:1f:be:35:62:73:79:7b:4c:79:80:77:
         f4:c4:7c:71:79:ba:4a:99:60:69:2a:be:f0:cb:b3:aa:a7:13:
         b7:27:1d:4a:31:44:07:e2:52:49:6d:48:c7:46:dc:24:76:49:
         25:e4:43:a6:ff:09:13:52:c3:f7:0e:3b:af:02:2f:71:dd:67:
         5a:6d:c1:7a:04:95:3f:87:16:6b:e6:ec:38:4c:60:8f:0a:5e:
         71:58:39:a8:d8:06:45:61:22:30:2d:b7:11:1a:fb:9d:3e:42:
         3f:43:c0:fd:eb:9c:66:c8:b2:95:2e:38:01:ee:50:91:0a:53:
         52:9e:b7:0d:f7:14:f0:9b:12:0b:c8:1b:a2:0a:aa:c5:6a:cf:
         31:98:5b:42:a6:4f:fc:2a:35:46:95:a1:c8:7f:7e:09:35:ed:
         98:63:04:f7:65:56:b4:76:ac:c5:c1:5b:f0:04:a4:d5:56:92:
         f1:77:a4:24:ad:42:ba:ca:17:7f:33:6e:4e:59:03:8e:80:cb:
         ac:d3:a1:d6:f2:ed:5d:cd:a9:97:49:64:69:47:35:14:8e:49:
         13:72:12:bb:c9:5d:3b:9d:47:a4:7f:bf:40:10:20:78:5e:2f:
         5b:49:25:c5:75:3f:71:d1:cd:f8:3b:dd:a4:93:73:5c:75:fb:
         17:ca:9c:15
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86F9JWDUz1BnRkGbAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3
NzNlMB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk
NDdkNTY1YzgtNmQ4YS00Mzk5LTg0MDctNDFhMjUzZmVmNjAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVlPXfXh9WrAOFRwgPHLBZIXZnK2pLWAiteI
wiSoaQqxKeO+Cg97FO1e0ac8QLYIhRBRc8QU4a1Pcz0r7jHj8n2h53a3ZWo7W4d1
VNPrxSiBIhJEOvTOy+mKVsRI/mo3U+/xHu6N5aqwcGHgtXTUUoc5e8Viy/+JU8nR
aYolFtQ6TBoJGR3Q3j2OFXp+6sZXGJWWpao3r8RLkvSLLbwn747EjLDMVxkEzhbk
thaLramMSH0/csKKBAUGrEF3QHINXFXAoZZbyGxHgukhtt9d+nQiLHb0HgejClXJ
1Zb4mPYmaFlOPDa4M0ke1CqCjSRoFCFUUiho18m9sr1ry4jMUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPwn2PqTC/Mha3JAzMkPK48Yh633MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl
ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvNmVjNGI2YmYtZDUzZi0z
ODc3LWIzNmUtZjY2OTU3NmQ4MDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4
YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj
NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1
MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2GGQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH6FyySJA4gfvjVic3l7THmAd/TEfHF5ukqZYGkqvvDLs6qnE7cnHUox
RAfiUkltSMdG3CR2SSXkQ6b/CRNSw/cOO68CL3HdZ1ptwXoElT+HFmvm7DhMYI8K
XnFYOajYBkVhIjAttxEa+50+Qj9DwP3rnGbIspUuOAHuUJEKU1Ketw33FPCbEgvI
G6IKqsVqzzGYW0KmT/wqNUaVoch/fgk17ZhjBPdlVrR2rMXBW/AEpNVWkvF3pCSt
QrrKF38zbk5ZA46Ay6zTodby7V3NqZdJZGlHNRSOSRNyErvJXTudR6R/v0AQIHhe
L1tJJcV1P3HRzfg73aSTc1x1+xfKnBU=
-----END CERTIFICATE-----
Generated at Sun Sep 27 01:23:46 2026 by rpki-client