Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/65be3f3c-1148-303b-8b8d-6a2517dc5d57.roa
File:                     65be3f3c-1148-303b-8b8d-6a2517dc5d57.roa (raw, json)
Hash identifier:          pU3OP/0bGqFU5p/Pt3OcnzMi5lDFvMsiJ9Q97sDkdTM=
Subject key identifier:   F1:A2:61:DD:70:1D:9C:CA:26:B5:C7:46:9B:14:15:94:3D:EB:E4:A9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F49731DA94E63E15737D5B640
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/65be3f3c-1148-303b-8b8d-6a2517dc5d57.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     16224
IP address blocks:        206.136.172.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:1d:a9:4e:63:e1:57:37:d5:b6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=4d480632-6127-4edd-89b2-194b9a5c1474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:05:93:05:ca:28:94:12:a7:eb:45:e3:75:b8:
                    f0:47:82:44:56:8e:11:f5:39:aa:0a:59:94:8d:72:
                    71:15:28:3e:a4:1b:e1:c0:97:ae:bf:17:92:38:62:
                    9a:56:96:74:72:48:82:4f:14:5a:50:8e:3f:73:80:
                    75:c4:14:7c:4c:c8:f3:7d:6c:57:a4:96:67:10:6b:
                    63:42:e2:cd:60:8e:e1:39:09:0c:fa:83:de:36:b3:
                    38:2d:91:c2:47:06:c5:3f:2d:94:5f:8d:ff:a1:8e:
                    fa:c5:e4:10:5a:86:85:ad:00:5b:da:ef:d3:14:aa:
                    22:48:53:99:6e:75:32:0d:22:de:f9:c9:51:2d:9a:
                    20:a2:5c:ea:c9:4e:70:5a:30:5d:48:fc:cf:84:55:
                    a0:b7:82:90:99:b8:f9:29:69:1c:f8:3e:91:5e:6b:
                    15:aa:5f:f9:1c:21:ce:d2:97:d4:4f:d9:e9:0c:1f:
                    7e:2d:47:1d:f8:ac:17:59:7f:28:63:56:e6:b2:2e:
                    ba:e1:a1:b9:01:96:09:52:38:15:cb:eb:12:71:5b:
                    a7:a2:79:73:dd:a0:d6:94:85:ad:8b:c9:6a:c0:2b:
                    c0:8c:8a:47:21:d6:67:40:56:0b:81:be:4a:d2:76:
                    95:79:b2:08:72:5c:5c:5b:62:b0:37:78:8f:0b:c2:
                    90:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:A2:61:DD:70:1D:9C:CA:26:B5:C7:46:9B:14:15:94:3D:EB:E4:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/65be3f3c-1148-303b-8b8d-6a2517dc5d57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.136.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:79:7f:d0:37:bc:cc:0d:2f:cf:1b:15:ac:6d:e8:a3:3f:47:
         63:5c:01:1c:0c:20:dd:61:99:c6:c1:0f:ac:18:52:87:9d:e4:
         19:e7:80:e5:91:bc:9a:b8:94:d2:5d:87:11:08:29:c7:06:55:
         30:f2:cf:25:17:3d:df:30:d2:ee:1c:a5:bc:f4:db:bc:8f:7f:
         1d:dd:82:cd:95:90:dd:0e:40:2e:ba:65:83:ff:dd:5d:50:b3:
         97:90:b1:85:d6:9f:70:31:f4:f8:21:c4:7c:13:c1:f1:75:59:
         42:f5:7e:d3:6a:f9:9c:30:55:23:3a:4b:e0:00:7b:ee:c1:bc:
         43:b0:c0:57:80:67:16:0a:28:2d:c2:a1:ef:e5:e7:d0:5f:3f:
         5b:5d:74:f7:67:55:c4:50:a8:25:e9:af:ef:5e:5d:d8:2a:40:
         0b:23:1e:ba:42:d0:0d:e5:0d:d5:ce:27:43:de:4d:39:63:c8:
         87:86:aa:50:6e:87:f3:96:80:83:5f:4c:59:2c:2e:cc:30:66:
         20:45:5c:53:a1:23:e0:f5:be:3b:83:84:28:3d:1d:be:30:0a:
         0b:de:24:a9:58:15:14:db:ee:88:33:ee:4f:64:66:f0:a9:e3:
         b0:ef:09:98:63:df:13:49:9d:4a:ef:56:06:4b:d0:f3:84:61:
         80:0d:ba:5f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jcx2pTmPhVzfVtkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NGQ0ODA2MzItNjEyNy00ZWRkLTg5YjItMTk0YjlhNWMxNDc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAWTBcoolBKn60XjdbjwR4JEVo4R9TmqClmU
jXJxFSg+pBvhwJeuvxeSOGKaVpZ0ckiCTxRaUI4/c4B1xBR8TMjzfWxXpJZnEGtj
QuLNYI7hOQkM+oPeNrM4LZHCRwbFPy2UX43/oY76xeQQWoaFrQBb2u/TFKoiSFOZ
bnUyDSLe+clRLZogolzqyU5wWjBdSPzPhFWgt4KQmbj5KWkc+D6RXmsVql/5HCHO
0pfUT9npDB9+LUcd+KwXWX8oY1bmsi664aG5AZYJUjgVy+sScVunonlz3aDWlIWt
i8lqwCvAjIpHIdZnQFYLgb5K0naVebIIclxcW2KwN3iPC8KQzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPGiYd1wHZzKJrXHRpsUFZQ96+SpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNjViZTNmM2MtMTE0OC0z
MDNiLThiOGQtNmEyNTE3ZGM1ZDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzoisMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADl5f9A3vMwNL88bFaxt6KM/R2NcARwMIN1hmcbBD6wYUoed5BnngOWR
vJq4lNJdhxEIKccGVTDyzyUXPd8w0u4cpbz027yPfx3dgs2VkN0OQC66ZYP/3V1Q
s5eQsYXWn3Ax9PghxHwTwfF1WUL1ftNq+ZwwVSM6S+AAe+7BvEOwwFeAZxYKKC3C
oe/l59BfP1tddPdnVcRQqCXpr+9eXdgqQAsjHrpC0A3lDdXOJ0PeTTljyIeGqlBu
h/OWgINfTFksLswwZiBFXFOhI+D1vjuDhCg9Hb4wCgveJKlYFRTb7ogz7k9kZvCp
47DvCZhj3xNJnUrvVgZL0POEYYANul8=
-----END CERTIFICATE-----
Generated at Sat Oct 3 03:26:40 2026 by rpki-client