Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0cc8d741-6753-3819-a62b-15af04ee2afd.roa
File:                     0cc8d741-6753-3819-a62b-15af04ee2afd.roa (raw, json)
Hash identifier:          2OaFQar4Q934SKwUbdiyj7oF1nL12+Em9MQEiEtLiPM=
Subject key identifier:   5F:24:E9:15:AF:A9:6C:12:04:FE:0E:1E:7A:3C:F2:93:D4:03:25:84
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F49860A709CE04515628512C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0cc8d741-6753-3819-a62b-15af04ee2afd.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        174.196.56.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:0a:70:9c:e0:45:15:62:85:12:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ab2594d0-6158-4549-8bfc-ca119999a0c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a2:41:f3:23:2a:64:d6:be:02:25:64:90:4e:
                    13:ff:26:b8:ea:c7:40:80:10:cb:a4:61:10:3a:27:
                    db:b4:4c:a9:87:5d:67:6f:80:96:8b:39:64:42:6e:
                    86:27:fb:8f:f1:95:51:91:92:5b:32:c9:ca:bb:3d:
                    7c:41:ff:ec:4e:89:6e:da:2e:60:5c:a5:ae:15:ab:
                    6d:40:f7:31:11:81:36:a8:4f:01:d2:24:7f:63:1d:
                    9e:d1:69:de:ea:d3:fe:54:0d:6c:68:6c:15:7a:3b:
                    07:2e:24:ee:13:1b:c8:6c:44:73:5a:5d:84:c4:55:
                    b7:10:03:be:ee:45:8d:59:c1:be:d1:a9:b9:86:c7:
                    92:9f:82:2c:30:e2:f6:e3:c4:25:eb:f4:e7:95:eb:
                    e0:1c:75:db:9e:0d:6f:3e:94:31:0c:6b:6e:f2:43:
                    f8:2c:34:c6:ad:e0:70:e5:5a:2e:ad:af:6d:78:b5:
                    5c:19:7f:a4:81:47:19:7f:0b:ef:4d:18:f4:d6:ed:
                    4c:e9:46:70:7d:ce:30:23:f2:a2:ec:b1:fa:09:d3:
                    55:c6:17:90:22:e2:b6:a6:5a:45:7c:d0:c8:ef:5b:
                    82:02:57:a5:8f:96:86:98:b2:31:d1:ef:4c:66:4f:
                    01:7a:02:13:85:4b:b0:f9:02:59:f3:62:3d:00:01:
                    26:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:24:E9:15:AF:A9:6C:12:04:FE:0E:1E:7A:3C:F2:93:D4:03:25:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0cc8d741-6753-3819-a62b-15af04ee2afd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.196.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:4e:cf:85:d8:14:14:4d:c0:b2:38:71:b3:82:eb:00:24:b8:
         d5:b6:50:90:cd:74:e1:79:d0:3b:f0:3f:7f:c3:30:fa:75:df:
         04:25:76:18:86:59:23:96:be:ad:37:fb:6e:c7:32:71:51:0d:
         c7:bd:3a:0b:f0:2f:05:a4:f6:d3:06:21:11:e8:84:73:a6:4f:
         ad:dd:32:ea:b6:c5:5a:55:6c:e8:33:53:96:f9:9c:1f:bf:24:
         97:d9:7a:ec:2b:2c:62:63:98:a9:30:00:a6:7d:15:04:0f:87:
         84:86:0e:d6:59:68:4a:8a:47:c9:a1:95:2a:d4:23:47:d3:15:
         77:93:29:34:64:a9:f6:6b:91:a0:26:30:08:f3:98:f4:dd:22:
         30:86:40:75:09:ef:c7:75:70:7d:18:e3:bc:e4:14:36:e0:e8:
         e8:74:3e:4b:f6:c0:65:cc:e7:48:d0:ee:8d:df:d0:d1:4a:ae:
         26:3c:16:e2:d0:ee:f8:d4:18:e9:5b:5c:15:d1:9b:d3:75:fa:
         88:61:97:71:1a:e1:0a:7d:4d:77:a7:be:cc:56:08:37:e7:52:
         ca:42:f5:15:0c:c0:f1:ec:40:19:ce:3e:f0:1f:86:0a:25:ce:
         5d:7e:7d:80:0c:db:2d:69:d3:a6:f0:5f:17:cb:9b:04:3f:39:
         a7:62:25:d6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhgpwnOBFFWKFEsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
YWIyNTk0ZDAtNjE1OC00NTQ5LThiZmMtY2ExMTk5OTlhMGM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKJB8yMqZNa+AiVkkE4T/ya46sdAgBDLpGEQ
OifbtEyph11nb4CWizlkQm6GJ/uP8ZVRkZJbMsnKuz18Qf/sTolu2i5gXKWuFatt
QPcxEYE2qE8B0iR/Yx2e0Wne6tP+VA1saGwVejsHLiTuExvIbERzWl2ExFW3EAO+
7kWNWcG+0am5hseSn4IsMOL248Ql6/TnlevgHHXbng1vPpQxDGtu8kP4LDTGreBw
5Voura9teLVcGX+kgUcZfwvvTRj01u1M6UZwfc4wI/Ki7LH6CdNVxheQIuK2plpF
fNDI71uCAlelj5aGmLIx0e9MZk8BegIThUuw+QJZ82I9AAEmbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF8k6RWvqWwSBP4OHno88pPUAyWEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMGNjOGQ3NDEtNjc1My0z
ODE5LWE2MmItMTVhZjA0ZWUyYWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrsQ4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAhOz4XYFBRNwLI4cbOC6wAkuNW2UJDNdOF50DvwP3/DMPp13wQldhiG
WSOWvq03+27HMnFRDce9OgvwLwWk9tMGIRHohHOmT63dMuq2xVpVbOgzU5b5nB+/
JJfZeuwrLGJjmKkwAKZ9FQQPh4SGDtZZaEqKR8mhlSrUI0fTFXeTKTRkqfZrkaAm
MAjzmPTdIjCGQHUJ78d1cH0Y47zkFDbg6Oh0Pkv2wGXM50jQ7o3f0NFKriY8FuLQ
7vjUGOlbXBXRm9N1+ohhl3Ea4Qp9TXenvsxWCDfnUspC9RUMwPHsQBnOPvAfhgol
zl1+fYAM2y1p06bwXxfLmwQ/OadiJdY=
-----END CERTIFICATE-----
Generated at Mon Sep 28 21:16:28 2026 by rpki-client