Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6fd85916-02bc-3832-a467-d2dc1bd5e700.roa
File:                     6fd85916-02bc-3832-a467-d2dc1bd5e700.roa (raw, json)
Hash identifier:          YNZbobHQOTNvsLbKfX1zfmW1UT5UuWJXBUtdpHcbzwk=
Subject key identifier:   F1:D8:CC:0F:0B:78:C5:51:29:46:69:42:A2:58:9B:A4:A5:A9:E5:F8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F49744D15E300FF70B8F7A340
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6fd85916-02bc-3832-a467-d2dc1bd5e700.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        174.255.184.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:4d:15:e3:00:ff:70:b8:f7:a3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=f6bf688f-d28b-4a6d-a58b-aea0dc3df6a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b6:48:1a:59:db:97:f1:1d:23:a7:7d:ad:ce:
                    dd:6a:06:2f:65:4a:4c:7d:9c:f2:b8:e0:2f:e9:ac:
                    0b:cf:83:b7:83:84:32:4a:33:f1:de:ea:e3:ca:e0:
                    85:23:72:fe:1b:ba:05:08:96:52:e5:22:06:bb:a3:
                    63:e4:c9:2c:f5:08:c8:8b:20:9e:74:61:ff:16:d5:
                    76:eb:c8:b3:72:9b:3a:5d:03:17:e0:b8:96:f3:66:
                    8f:ea:b0:74:b0:a7:4a:83:33:e4:86:d6:8e:7c:58:
                    6a:5b:10:12:92:34:44:3a:a8:db:7f:a8:e5:68:97:
                    3d:be:4b:f8:89:d7:ee:b3:1d:e1:3f:76:69:13:44:
                    24:69:e5:40:ec:9e:9b:4d:fa:2a:ad:44:0f:b7:8e:
                    c2:52:23:ec:9e:a7:99:dd:0b:7e:ab:5e:3a:cc:c7:
                    79:99:11:dd:41:9e:24:d3:16:aa:d5:a6:00:b2:34:
                    c5:55:9e:7b:4e:5d:d1:c5:9a:65:f5:f0:9c:00:1f:
                    c0:a8:35:ce:bd:a0:b9:94:4f:d8:e3:1f:d7:d6:af:
                    71:49:94:32:5a:fd:14:9a:36:2d:17:25:c8:79:29:
                    8e:d4:c7:61:77:fe:66:25:1e:c3:e1:ca:66:56:25:
                    e8:22:33:66:61:89:ea:be:ee:46:e5:12:17:41:a3:
                    21:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:D8:CC:0F:0B:78:C5:51:29:46:69:42:A2:58:9B:A4:A5:A9:E5:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6fd85916-02bc-3832-a467-d2dc1bd5e700.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.255.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:ac:13:0e:77:b4:7f:c9:aa:2b:21:4c:89:3a:77:f3:24:81:
         ea:a0:83:41:c1:4f:27:a6:5b:8e:92:c6:54:40:76:5a:b1:84:
         91:7b:16:25:85:ca:2b:5b:ad:6e:be:a4:e7:6e:16:6a:16:ab:
         13:55:fe:d1:2c:a9:24:e1:26:46:44:59:96:1e:8f:bd:35:0c:
         a5:82:9f:8d:ff:a8:55:93:95:26:55:ed:24:8d:2c:15:82:8b:
         21:bb:7c:27:94:7f:0d:5e:29:68:e8:dc:dc:d2:47:6a:35:b3:
         1b:a3:a8:f8:7e:d6:3b:87:7e:a9:cc:9d:55:2b:ad:9e:da:2e:
         58:1b:68:75:ca:9c:01:fb:62:9e:50:a2:a6:b5:ec:62:60:c4:
         ac:89:91:b4:79:09:0b:55:fb:ba:d4:c3:5c:7a:ef:63:b9:7b:
         1e:d3:3c:cf:94:ac:75:59:44:cb:f4:cc:4d:29:db:06:1f:03:
         0a:05:26:f1:12:ca:b1:62:a0:b9:a7:7c:78:a9:99:9d:71:fe:
         49:34:fd:c0:c8:29:45:34:f7:16:26:83:1b:d3:66:fd:dc:20:
         38:18:ef:be:53:bb:74:ae:c5:7e:f2:7b:09:cf:f3:e0:e7:8d:
         a9:8b:9e:bb:0c:c4:c1:88:12:5f:9f:fd:60:21:4f:a9:f9:8d:
         0a:0f:d3:ba
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdE0V4wD/cLj3o0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZjZiZjY4OGYtZDI4Yi00YTZkLWE1OGItYWVhMGRjM2RmNmEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbZIGlnbl/EdI6d9rc7dagYvZUpMfZzyuOAv
6awLz4O3g4QySjPx3urjyuCFI3L+G7oFCJZS5SIGu6Nj5Mks9QjIiyCedGH/FtV2
68izcps6XQMX4LiW82aP6rB0sKdKgzPkhtaOfFhqWxASkjREOqjbf6jlaJc9vkv4
idfusx3hP3ZpE0QkaeVA7J6bTfoqrUQPt47CUiPsnqeZ3Qt+q146zMd5mRHdQZ4k
0xaq1aYAsjTFVZ57Tl3RxZpl9fCcAB/AqDXOvaC5lE/Y4x/X1q9xSZQyWv0UmjYt
FyXIeSmO1Mdhd/5mJR7D4cpmViXoIjNmYYnqvu5G5RIXQaMhUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPHYzA8LeMVRKUZpQqJYm6SlqeX4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNmZkODU5MTYtMDJiYy0z
ODMyLWE0NjctZDJkYzFiZDVlNzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrv+4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFWsEw53tH/JqishTIk6d/Mkgeqgg0HBTyemW46SxlRAdlqxhJF7FiWF
yitbrW6+pOduFmoWqxNV/tEsqSThJkZEWZYej701DKWCn43/qFWTlSZV7SSNLBWC
iyG7fCeUfw1eKWjo3NzSR2o1sxujqPh+1juHfqnMnVUrrZ7aLlgbaHXKnAH7Yp5Q
oqa17GJgxKyJkbR5CQtV+7rUw1x672O5ex7TPM+UrHVZRMv0zE0p2wYfAwoFJvES
yrFioLmnfHipmZ1x/kk0/cDIKUU09xYmgxvTZv3cIDgY775Tu3SuxX7yewnP8+Dn
jamLnrsMxMGIEl+f/WAhT6n5jQoP07o=
-----END CERTIFICATE-----
Generated at Sun Sep 27 04:19:14 2026 by rpki-client