Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3f0dbb30-481f-3138-bab6-18f7799df60a.roa
File:                     3f0dbb30-481f-3138-bab6-18f7799df60a.roa (raw, json)
Hash identifier:          unJ2fUYItGaFSyXK0HCUQGXy+rOyuUpRuKNCsYgQVqk=
Subject key identifier:   E6:71:68:15:26:19:3C:97:28:6E:3D:07:33:7D:C9:20:E8:31:E7:2C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F480D5BD8DD3CAFAC363E5800
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3f0dbb30-481f-3138-bab6-18f7799df60a.roa
Signing time:             Thu 24 Sep 2026 13:00:12 +0000
ROA not before:           Thu 24 Sep 2026 13:00:12 +0000
ROA not after:            Wed 23 Dec 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        75.241.216.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:48:0d:5b:d8:dd:3c:af:ac:36:3e:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 24 13:00:12 2026 GMT
            Not After : Dec 23 14:00:12 2026 GMT
        Subject: CN=5f8b5eac-6fc8-4e76-9c61-fe87eb21305c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:23:59:ba:77:a8:32:96:f2:5b:2f:89:9d:e6:
                    95:dd:5c:5a:92:c1:8f:3d:1e:fe:82:82:c4:cf:f0:
                    2c:7e:16:ea:d7:a4:32:a7:cf:56:f4:20:0c:01:db:
                    e6:7c:3e:68:7b:e6:19:56:ac:dc:50:3d:51:13:b4:
                    ec:eb:25:1e:3e:66:10:dd:45:df:22:e6:1c:44:43:
                    31:88:2e:3e:45:00:93:72:c1:39:ad:4f:8d:59:65:
                    34:e1:29:f4:6f:e7:30:bc:b1:85:cd:07:06:98:88:
                    89:51:af:90:a1:c2:72:c3:28:af:6d:38:37:8c:c4:
                    af:c4:98:c5:2f:29:57:52:ef:ea:d7:69:7e:24:af:
                    ad:b4:fa:cb:73:84:57:44:57:fb:85:e1:d2:98:32:
                    20:12:77:ae:2a:3c:a3:c1:43:1f:ff:93:b3:5c:40:
                    8a:fb:da:49:fc:5c:b2:68:ee:b8:dc:b1:ea:48:eb:
                    08:b4:e7:4a:ba:12:d1:68:aa:42:ab:7d:4f:60:0e:
                    bf:02:3f:41:eb:50:3c:83:5e:64:28:b3:83:4a:f2:
                    5b:c7:0f:14:c1:c2:99:be:f3:ba:e9:9c:3a:68:dc:
                    c2:08:38:4b:19:b2:4d:b9:63:2b:de:42:9a:e4:fc:
                    81:e4:9a:0a:d6:56:d1:d3:aa:d3:ca:e2:93:e4:ba:
                    d6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:71:68:15:26:19:3C:97:28:6E:3D:07:33:7D:C9:20:E8:31:E7:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3f0dbb30-481f-3138-bab6-18f7799df60a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.241.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:e4:6a:ad:84:0e:dd:df:55:b0:fd:3f:71:43:31:39:ce:fa:
         91:29:71:90:f0:87:e8:27:06:56:0a:00:30:af:0f:22:f5:e1:
         a2:78:c5:57:56:30:be:c2:4b:69:24:12:6f:f7:f6:cd:d1:af:
         e2:61:06:68:fb:b6:49:25:43:46:56:14:94:69:3c:3c:31:55:
         41:1f:8b:62:5f:32:65:b5:c3:6a:f4:82:86:00:f9:a6:71:2c:
         a9:e4:36:35:48:fe:ff:44:59:50:73:c8:90:40:1a:b4:f2:44:
         89:05:4e:90:1d:b3:c6:fb:a4:84:73:2a:d9:4b:07:69:7c:0b:
         6e:d6:37:f7:ed:05:7f:a3:3b:06:a5:4b:a1:b3:2a:d4:3b:e7:
         b9:0a:0b:af:98:20:38:ef:3e:0f:ba:22:d6:95:34:3f:59:ab:
         a7:ab:51:03:bf:1f:e3:4e:73:33:e8:50:af:a2:44:ec:9a:eb:
         2f:76:9b:7f:3d:43:09:54:25:fd:85:41:b5:3c:42:88:c7:c8:
         08:72:4d:ff:c1:9b:70:8c:18:88:4a:34:cf:c4:95:96:24:a5:
         62:9b:1f:e0:b4:70:24:74:16:cb:8f:06:3a:45:88:6d:17:6a:
         01:39:5d:b7:c9:31:74:d8:70:01:ce:da:f7:21:bc:35:14:16:
         ef:b5:eb:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9IDVvY3TyvrDY+WAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk
NWY4YjVlYWMtNmZjOC00ZTc2LTljNjEtZmU4N2ViMjEzMDVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCNZuneoMpbyWy+JneaV3VxaksGPPR7+goLE
z/Asfhbq16Qyp89W9CAMAdvmfD5oe+YZVqzcUD1RE7Ts6yUePmYQ3UXfIuYcREMx
iC4+RQCTcsE5rU+NWWU04Sn0b+cwvLGFzQcGmIiJUa+QocJywyivbTg3jMSvxJjF
LylXUu/q12l+JK+ttPrLc4RXRFf7heHSmDIgEneuKjyjwUMf/5OzXECK+9pJ/Fyy
aO643LHqSOsItOdKuhLRaKpCq31PYA6/Aj9B61A8g15kKLODSvJbxw8UwcKZvvO6
6Zw6aNzCCDhLGbJNuWMr3kKa5PyB5JoK1lbR06rTyuKT5LrWsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOZxaBUmGTyXKG49BzN9ySDoMecsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2YwZGJiMzAtNDgxZi0z
MTM4LWJhYjYtMThmNzc5OWRmNjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS/HYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGLkaq2EDt3fVbD9P3FDMTnO+pEpcZDwh+gnBlYKADCvDyL14aJ4xVdW
ML7CS2kkEm/39s3Rr+JhBmj7tkklQ0ZWFJRpPDwxVUEfi2JfMmW1w2r0goYA+aZx
LKnkNjVI/v9EWVBzyJBAGrTyRIkFTpAds8b7pIRzKtlLB2l8C27WN/ftBX+jOwal
S6GzKtQ757kKC6+YIDjvPg+6ItaVND9Zq6erUQO/H+NOczPoUK+iROya6y92m389
QwlUJf2FQbU8QojHyAhyTf/Bm3CMGIhKNM/ElZYkpWKbH+C0cCR0FsuPBjpFiG0X
agE5XbfJMXTYcAHO2vchvDUUFu+1690=
-----END CERTIFICATE-----
Generated at Sat Sep 26 23:57:56 2026 by rpki-client