Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/e435fae9-0730-3b11-a8a1-03164503f229.roa
File:                     e435fae9-0730-3b11-a8a1-03164503f229.roa (raw, json)
Hash identifier:          Yf5REwtOnenNflyq+d+XCG40Q/VlZ0ij6oDGNp0iwNY=
Subject key identifier:   5E:94:C4:41:51:5B:E8:8C:A5:62:8D:7A:72:94:DE:3F:3A:B2:3F:63
Certificate issuer:       /CN=6fda6c5c-9c11-4f77-8128-71e07d46806c
Certificate serial:       010D0C9F4328584D492A62202C49D28E54343F00
Authority key identifier: 34:52:EC:75:65:9C:71:A0:F7:4D:93:FD:8A:BB:05:7F:63:F1:AC:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/e435fae9-0730-3b11-a8a1-03164503f229.roa
Signing time:             Wed 25 Mar 2026 13:00:41 +0000
ROA not before:           Wed 25 Mar 2026 13:00:41 +0000
ROA not after:            Tue 23 Jun 2026 13:00:41 +0000
asID:                     14618
IP address blocks:        192.210.16.0/20 maxlen: 24
                          2620:44:4000::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/6fda6c5c-9c11-4f77-8128-71e07d46806c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/6fda6c5c-9c11-4f77-8128-71e07d46806c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:2a:62:20:2c:49:d2:8e:54:34:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fda6c5c-9c11-4f77-8128-71e07d46806c
        Validity
            Not Before: Mar 25 13:00:41 2026 GMT
            Not After : Jun 23 13:00:41 2026 GMT
        Subject: CN=d4677b9d-4b0a-4160-a10e-5be31bd456b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7f:82:6b:16:35:7d:18:8d:ec:1e:dc:e2:50:
                    c8:1c:b6:cc:1c:2a:67:51:b5:d1:df:38:e1:ca:45:
                    79:74:35:b5:1f:30:03:a5:dc:29:e5:b1:64:2a:59:
                    13:e0:6a:c5:89:77:6f:63:fe:e1:c5:16:22:2a:5f:
                    fb:c5:90:2f:4e:46:55:9b:51:8e:3c:ca:4a:88:dd:
                    f7:65:b0:25:10:10:64:8b:f0:99:e5:a1:1d:67:46:
                    94:2b:fb:14:fb:eb:0f:27:0c:97:14:ee:52:c3:90:
                    5e:8e:5a:01:9c:1b:3a:5f:c7:1b:f8:58:53:dd:4e:
                    b7:af:e2:fe:db:97:2e:0c:65:08:96:52:8e:ce:1f:
                    cb:6b:5b:03:0e:82:58:1d:13:0a:f7:68:43:aa:f6:
                    3e:61:71:88:85:4f:11:89:76:de:1b:35:83:15:50:
                    4a:c7:c6:30:29:35:9b:0d:20:67:91:36:da:c2:46:
                    3b:f2:49:64:93:1c:8b:04:c0:16:77:ac:1f:b9:f1:
                    c0:89:a0:21:85:20:81:b5:78:b0:49:fc:0b:c1:76:
                    58:e5:45:19:da:b8:5a:f8:fb:f2:08:bd:6e:33:8f:
                    ee:7f:32:dc:85:0b:29:3f:bf:28:2a:85:39:38:22:
                    56:a8:e6:8d:65:0e:d2:8e:ee:a5:6a:f8:11:83:b0:
                    39:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:94:C4:41:51:5B:E8:8C:A5:62:8D:7A:72:94:DE:3F:3A:B2:3F:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/e435fae9-0730-3b11-a8a1-03164503f229.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/6fda6c5c-9c11-4f77-8128-71e07d46806c.crl

            X509v3 Authority Key Identifier:
                keyid:34:52:EC:75:65:9C:71:A0:F7:4D:93:FD:8A:BB:05:7F:63:F1:AC:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.210.16.0/20
                IPv6:
                  2620:44:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:08:82:b2:33:44:16:80:c6:3f:41:08:b7:9d:1e:6e:8a:50:
         37:1d:f1:af:d3:e1:64:d1:f5:4c:ee:44:92:fc:f9:c2:57:e4:
         67:7e:67:b1:d9:e9:49:be:e9:df:0b:6c:2c:34:38:85:46:65:
         90:32:fb:30:9b:12:8c:c9:26:4d:cc:d4:be:d3:94:2b:e8:42:
         4b:3c:8c:a5:09:08:3a:a5:95:f8:68:29:6e:2c:48:61:38:01:
         80:fe:20:c8:a7:91:fb:72:92:f1:31:b6:2f:52:dd:0f:ff:6a:
         6f:13:d0:b6:98:70:e2:1e:29:e1:97:5c:dc:fc:a6:4d:58:01:
         2d:45:d5:87:f1:7c:ed:79:56:9f:b6:1a:00:63:d8:5a:7e:52:
         d4:a9:68:ae:1c:b4:35:8c:94:bf:ce:ff:92:7c:9d:1c:20:51:
         60:7f:d9:87:0c:2c:f0:db:18:06:d6:7a:9e:7c:e9:76:d9:50:
         02:f8:93:a6:c2:56:2a:b5:b2:19:32:31:54:07:36:25:7d:7c:
         2f:66:a7:57:93:62:f2:2b:85:4a:9e:bf:59:ba:76:80:6c:c7:
         81:73:0a:f9:d4:2e:26:0e:4d:c8:0c:a4:f9:c6:f6:b5:1c:50:
         67:bd:ae:5e:50:eb:17:8c:27:71:86:a0:c6:36:dd:75:11:14:
         d9:ab:9b:8c
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE1JKmIgLEnSjlQ0PwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmZkYTZjNWMtOWMxMS00Zjc3LTgxMjgtNzFlMDdkNDY4
MDZjMB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk
ZDQ2NzdiOWQtNGIwYS00MTYwLWExMGUtNWJlMzFiZDQ1NmI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3+CaxY1fRiN7B7c4lDIHLbMHCpnUbXR3zjh
ykV5dDW1HzADpdwp5bFkKlkT4GrFiXdvY/7hxRYiKl/7xZAvTkZVm1GOPMpKiN33
ZbAlEBBki/CZ5aEdZ0aUK/sU++sPJwyXFO5Sw5BejloBnBs6X8cb+FhT3U63r+L+
25cuDGUIllKOzh/La1sDDoJYHRMK92hDqvY+YXGIhU8RiXbeGzWDFVBKx8YwKTWb
DSBnkTbawkY78klkkxyLBMAWd6wfufHAiaAhhSCBtXiwSfwLwXZY5UUZ2rha+Pvy
CL1uM4/ufzLchQspP78oKoU5OCJWqOaNZQ7Sju6lavgRg7A5lwIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFF6UxEFRW+iMpWKNenKU3j86sj9jMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82ZmRh
NmM1Yy05YzExLTRmNzctODEyOC03MWUwN2Q0NjgwNmMvZTQzNWZhZTktMDczMC0z
YjExLWE4YTEtMDMxNjQ1MDNmMjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNmZkYTZjNWMtOWMxMS00Zjc3LTgx
MjgtNzFlMDdkNDY4MDZjLzZmZGE2YzVjLTljMTEtNGY3Ny04MTI4LTcxZTA3ZDQ2
ODA2Yy5jcmwwHwYDVR0jBBgwFoAUNFLsdWWccaD3TZP9irsFf2PxrNkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82ZmRhNmM1Yy05YzExLTRmNzctODEyOC03MWUw
N2Q0NjgwNmMuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQEwNIQMA8E
AgACMAkDBwAmIABEQAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAhQiCsjNEFoDGP0EIt50ebopQNx3xr9Ph
ZNH1TO5Ekvz5wlfkZ35nsdnpSb7p3wtsLDQ4hUZlkDL7MJsSjMkmTczUvtOUK+hC
SzyMpQkIOqWV+GgpbixIYTgBgP4gyKeR+3KS8TG2L1LdD/9qbxPQtphw4h4p4Zdc
3PymTVgBLUXVh/F87XlWn7YaAGPYWn5S1Klorhy0NYyUv87/knydHCBRYH/Zhwws
8NsYBtZ6nnzpdtlQAviTpsJWKrWyGTIxVAc2JX18L2anV5Ni8iuFSp6/Wbp2gGzH
gXMK+dQuJg5NyAyk+cb2tRxQZ72uXlDrF4wncYagxjbddREU2aubjA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:08:22 2026 by rpki-client