Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/6a2da362-ab8e-30e7-aafe-7e3a59b11f8d.roa
File:                     6a2da362-ab8e-30e7-aafe-7e3a59b11f8d.roa (raw, json)
Hash identifier:          svqrMOdPZfw8CWeiiQkGYb7qGWXlP+B5DMLw1x6kV74=
Subject key identifier:   8D:3C:25:3E:00:41:03:C7:00:D8:87:99:CB:DB:88:BC:04:A6:E9:99
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328584EE38C93EE05A41F927E54A480
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/6a2da362-ab8e-30e7-aafe-7e3a59b11f8d.roa
Signing time:             Wed 19 Aug 2026 13:00:11 +0000
ROA not before:           Wed 19 Aug 2026 13:00:11 +0000
ROA not after:            Tue 17 Nov 2026 14:00:11 +0000
asID:                     16815
IP address blocks:        67.217.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e3:8c:93:ee:05:a4:1f:92:7e:54:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Aug 19 13:00:11 2026 GMT
            Not After : Nov 17 14:00:11 2026 GMT
        Subject: CN=59785dc9-66ac-42fa-8e8b-be2d019f5efb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1f:3e:9a:ab:d4:67:48:ec:1e:3d:7e:f2:a7:
                    6a:03:4d:11:f1:95:64:80:05:46:e7:a5:37:0a:5d:
                    8a:66:60:c5:e7:51:9b:1c:f3:3b:50:86:a3:fc:89:
                    77:97:1e:4b:6e:ea:09:24:03:5f:ed:8c:b9:25:61:
                    0d:aa:ed:7c:4f:15:c5:94:ae:4c:e1:74:e7:6e:03:
                    38:bc:85:15:24:33:0f:b5:97:3d:b4:5b:c3:23:a1:
                    7e:65:1a:85:ea:08:0c:c3:da:91:0e:2d:0b:c6:26:
                    4b:ae:b8:fa:e7:f9:ac:a1:0d:12:f3:60:52:78:78:
                    a5:d4:e1:b9:ad:36:f3:14:bb:f5:1b:f2:76:b7:2d:
                    14:40:17:4f:d0:61:bc:74:e7:8e:74:b2:37:a6:a6:
                    72:2c:e0:f6:4a:49:ba:d5:35:5e:67:ec:91:51:a3:
                    f1:91:dd:36:b9:5c:a1:81:a9:fa:3c:09:ad:8d:bd:
                    c4:fd:50:20:2c:4f:39:50:9b:75:7a:af:79:e0:db:
                    41:72:5b:48:da:32:d6:40:9f:10:fb:64:15:19:44:
                    ad:dc:36:2a:59:55:88:20:58:34:95:1b:60:d8:b1:
                    d0:0e:cb:7b:89:b7:73:53:ec:68:4f:c8:61:a2:c1:
                    98:ad:a6:48:bd:d3:b7:b3:a6:f9:96:07:74:04:3e:
                    b6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:3C:25:3E:00:41:03:C7:00:D8:87:99:CB:DB:88:BC:04:A6:E9:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/6a2da362-ab8e-30e7-aafe-7e3a59b11f8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.217.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:4e:e2:4d:01:ae:c0:50:23:63:5b:40:24:2d:aa:a5:64:2c:
         8e:46:d7:89:e5:03:0b:f5:6d:d2:94:1b:b4:e8:ea:1c:94:ce:
         bc:35:e2:77:70:91:20:6b:6b:e1:21:db:cb:dd:0c:2e:3a:bc:
         52:0f:2e:21:a7:9b:27:c0:6b:67:55:47:34:16:31:11:19:60:
         e3:bc:7d:24:c0:46:e2:7f:94:b3:c9:e9:6a:a1:ac:67:e0:c8:
         41:5e:0e:e6:7e:f5:5c:20:1f:fa:b0:2e:b3:ed:f5:75:61:a8:
         32:3f:5b:11:66:36:90:43:02:6f:35:ff:49:5e:89:70:8e:88:
         a8:08:cf:fa:f0:d0:69:10:ba:9d:0b:61:83:49:ad:09:e0:18:
         c9:16:d4:59:12:ee:4a:06:32:8d:9b:e6:bd:ff:ac:54:38:b2:
         c8:6f:d6:28:42:90:98:dd:ac:fa:23:76:ce:34:33:d9:11:90:
         a0:a8:a3:5c:85:b1:1f:1e:27:2c:9e:63:cc:3c:c5:8d:cd:8f:
         04:e2:33:63:a1:c1:1a:0f:62:06:b4:c5:8f:71:1e:b2:07:61:
         20:b8:7c:33:7b:c1:73:e9:69:d6:f6:29:11:17:e0:7a:dd:c8:
         cb:1c:5a:6b:31:ba:03:6d:9d:ae:d5:59:96:88:5b:ec:cb:9f:
         7a:c6:25:62
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7jjJPuBaQfkn5UpIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy
OWJmMB4XDTI2MDgxOTEzMDAxMVoXDTI2MTExNzE0MDAxMVowLzEtMCsGA1UEAxMk
NTk3ODVkYzktNjZhYy00MmZhLThlOGItYmUyZDAxOWY1ZWZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuh8+mqvUZ0jsHj1+8qdqA00R8ZVkgAVG56U3
Cl2KZmDF51GbHPM7UIaj/Il3lx5LbuoJJANf7Yy5JWENqu18TxXFlK5M4XTnbgM4
vIUVJDMPtZc9tFvDI6F+ZRqF6ggMw9qRDi0LxiZLrrj65/msoQ0S82BSeHil1OG5
rTbzFLv1G/J2ty0UQBdP0GG8dOeOdLI3pqZyLOD2Skm61TVeZ+yRUaPxkd02uVyh
gan6PAmtjb3E/VAgLE85UJt1eq954NtBcltI2jLWQJ8Q+2QVGUSt3DYqWVWIIFg0
lRtg2LHQDst7ibdzU+xoT8hhosGYraZIvdO3s6b5lgd0BD62fwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI08JT4AQQPHANiHmcvbiLwEpumZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2
ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNmEyZGEzNjItYWI4ZS0z
MGU3LWFhZmUtN2UzYTU5YjExZjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx
NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4
MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx
YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQ9lAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADxO4k0BrsBQI2NbQCQtqqVkLI5G14nlAwv1bdKUG7To6hyUzrw14ndw
kSBra+Eh28vdDC46vFIPLiGnmyfAa2dVRzQWMREZYOO8fSTARuJ/lLPJ6WqhrGfg
yEFeDuZ+9VwgH/qwLrPt9XVhqDI/WxFmNpBDAm81/0leiXCOiKgIz/rw0GkQup0L
YYNJrQngGMkW1FkS7koGMo2b5r3/rFQ4sshv1ihCkJjdrPojds40M9kRkKCoo1yF
sR8eJyyeY8w8xY3NjwTiM2OhwRoPYga0xY9xHrIHYSC4fDN7wXPpadb2KREX4Hrd
yMscWmsxugNtna7VWZaIW+zLn3rGJWI=
-----END CERTIFICATE-----
Generated at Fri Sep 25 17:25:36 2026 by rpki-client