Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/cd28f1d5-cbb6-3ab6-b73a-434d505cb22e.roa
File:                     cd28f1d5-cbb6-3ab6-b73a-434d505cb22e.roa (raw, json)
Hash identifier:          a3imy002uWALKZttDt+ZAqBqXmMDoW041oIfrqKoch0=
Subject key identifier:   2F:70:16:E8:5C:BF:66:C7:98:B4:11:91:CA:56:19:B3:7E:6D:FC:F4
Certificate issuer:       /CN=6c86d366-9f08-4852-b060-53c54ef6dda0
Certificate serial:       010D0C9F4328584E7A64D6910D966786F29F13C0
Authority key identifier: AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/cd28f1d5-cbb6-3ab6-b73a-434d505cb22e.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     14618
IP address blocks:        164.153.128.0/24 maxlen: 32
                          164.153.129.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:d6:91:0d:96:67:86:f2:9f:13:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c86d366-9f08-4852-b060-53c54ef6dda0
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=87a4ccc6-57ef-47f2-8040-58546d2b5d78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:2a:51:93:8e:10:0d:a0:05:9d:b8:55:93:13:
                    df:9e:28:f3:53:9b:29:44:cb:d0:fa:00:8a:e4:9a:
                    cd:d3:54:e3:00:31:68:d7:52:a3:be:34:8b:f7:a0:
                    a2:59:fa:77:f2:c0:15:a6:20:42:fe:b1:00:43:a8:
                    d4:3a:76:1f:95:8a:c4:fd:6e:bc:3a:f9:63:1a:19:
                    55:88:81:49:0c:3d:3c:0e:7c:4e:5f:56:6c:79:02:
                    63:08:93:1a:83:7e:5d:60:81:ac:1f:9d:70:6a:47:
                    16:92:99:b1:94:f0:27:25:8c:08:ca:a4:22:30:52:
                    d1:63:96:d3:87:3b:35:80:95:f9:77:b0:25:89:3c:
                    f5:ee:15:95:ac:81:66:a4:09:87:6c:6d:fe:b2:fa:
                    ba:a7:6b:41:59:82:6e:5a:43:bf:4c:4d:b5:ff:83:
                    a2:ec:55:e1:bd:08:71:b5:a5:ef:41:a9:25:71:94:
                    52:7a:e3:48:7e:77:fd:f4:a0:3c:c1:19:a8:1e:9d:
                    4e:97:a3:87:e4:b2:d8:c7:f7:6a:f3:0b:ec:a3:5c:
                    06:4e:d5:5e:30:15:d7:5f:9b:ba:e9:31:39:8f:71:
                    7c:68:c2:5a:43:26:df:9d:c7:59:7b:4c:ca:27:1c:
                    78:53:4a:09:9c:ce:d2:9f:cc:ac:55:8a:72:9c:aa:
                    24:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:70:16:E8:5C:BF:66:C7:98:B4:11:91:CA:56:19:B3:7E:6D:FC:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/cd28f1d5-cbb6-3ab6-b73a-434d505cb22e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl

            X509v3 Authority Key Identifier:
                keyid:AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.153.128.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:bd:0f:40:10:93:b1:a7:21:66:0e:91:af:58:3b:df:5a:63:
         fb:17:51:aa:0e:f0:fc:bd:bb:53:51:da:fb:01:9e:f3:3c:9a:
         44:c3:d3:1e:e7:c4:5c:16:3f:fa:61:0e:98:f2:f1:14:0f:2b:
         9a:0c:58:a0:1e:e3:0c:76:af:3b:06:61:fc:fd:7f:34:3f:3b:
         51:ef:a4:69:f3:c6:85:bc:a2:c5:72:26:7e:b8:26:49:3d:dc:
         d2:39:0e:48:55:4f:7c:b8:46:ae:10:1e:6d:f9:68:5f:c0:15:
         90:6c:3a:a7:53:0f:a4:ab:91:bb:93:59:71:68:f1:37:7b:40:
         03:76:64:91:8c:42:03:0b:55:97:6d:9c:6b:78:e3:c9:dc:57:
         3c:08:f5:a6:12:cf:c3:c0:b3:7a:75:1f:95:05:fe:f0:a5:19:
         18:8c:ae:8d:98:90:58:35:ff:7d:70:15:ce:a3:34:fb:3f:a2:
         01:21:fd:1a:cf:92:fb:ba:24:13:14:71:88:b2:10:6e:d2:c4:
         4e:ee:34:17:f4:ac:74:c1:dc:8a:59:56:c5:8a:7a:f2:13:b1:
         6c:ac:65:43:5d:80:8f:f0:42:83:20:74:78:02:e4:22:e2:2c:
         7b:94:85:da:f9:0a:b5:00:1e:1e:c6:41:dd:4c:3a:16:7f:d7:
         1c:af:4f:ce
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE56ZNaRDZZnhvKfE8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmM4NmQzNjYtOWYwOC00ODUyLWIwNjAtNTNjNTRlZjZk
ZGEwMB4XDTI2MDcxMjIxMDAxM1oXDTI2MTAxMDIxMDAxM1owLzEtMCsGA1UEAxMk
ODdhNGNjYzYtNTdlZi00N2YyLTgwNDAtNTg1NDZkMmI1ZDc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSpRk44QDaAFnbhVkxPfnijzU5spRMvQ+gCK
5JrN01TjADFo11KjvjSL96CiWfp38sAVpiBC/rEAQ6jUOnYflYrE/W68OvljGhlV
iIFJDD08DnxOX1ZseQJjCJMag35dYIGsH51wakcWkpmxlPAnJYwIyqQiMFLRY5bT
hzs1gJX5d7AliTz17hWVrIFmpAmHbG3+svq6p2tBWYJuWkO/TE21/4Oi7FXhvQhx
taXvQaklcZRSeuNIfnf99KA8wRmoHp1Ol6OH5LLYx/dq8wvso1wGTtVeMBXXX5u6
6TE5j3F8aMJaQybfncdZe0zKJxx4U0oJnM7Sn8ysVYpynKokRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC9wFuhcv2bHmLQRkcpWGbN+bfz0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82Yzg2
ZDM2Ni05ZjA4LTQ4NTItYjA2MC01M2M1NGVmNmRkYTAvY2QyOGYxZDUtY2JiNi0z
YWI2LWI3M2EtNDM0ZDUwNWNiMjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNmM4NmQzNjYtOWYwOC00ODUyLWIw
NjAtNTNjNTRlZjZkZGEwLzZjODZkMzY2LTlmMDgtNDg1Mi1iMDYwLTUzYzU0ZWY2
ZGRhMC5jcmwwHwYDVR0jBBgwFoAUrIupbk9Z3OsRWaUXpqufnhQ48X8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82Yzg2ZDM2Ni05ZjA4LTQ4NTItYjA2MC01M2M1
NGVmNmRkYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpJmAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACm9D0AQk7GnIWYOka9YO99aY/sXUaoO8Py9u1NR2vsBnvM8mkTD0x7n
xFwWP/phDpjy8RQPK5oMWKAe4wx2rzsGYfz9fzQ/O1HvpGnzxoW8osVyJn64Jkk9
3NI5DkhVT3y4Rq4QHm35aF/AFZBsOqdTD6SrkbuTWXFo8Td7QAN2ZJGMQgMLVZdt
nGt448ncVzwI9aYSz8PAs3p1H5UF/vClGRiMro2YkFg1/31wFc6jNPs/ogEh/RrP
kvu6JBMUcYiyEG7SxE7uNBf0rHTB3IpZVsWKevITsWysZUNdgI/wQoMgdHgC5CLi
LHuUhdr5CrUAHh7GQd1MOhZ/1xyvT84=
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:37:15 2026 by rpki-client