Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/57621f0d-a7b4-34dd-b649-ec05ab4f5900.roa
File:                     57621f0d-a7b4-34dd-b649-ec05ab4f5900.roa (raw, json)
Hash identifier:          Acp04vJlPeg13pol1/57I5zqGYrES4+/cCLOOS2KxDo=
Subject key identifier:   05:04:7C:26:C5:86:3F:17:E1:B4:18:C7:4A:70:19:54:59:E2:EE:45
Certificate issuer:       /CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df
Certificate serial:       010D0C9F4328584E2D9F14C879D81606F3781B00
Authority key identifier: 97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/57621f0d-a7b4-34dd-b649-ec05ab4f5900.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     14618
IP address blocks:        206.225.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:14:c8:79:d8:16:06:f3:78:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=47f6ab67-4954-418d-99f1-4552e281b9c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:23:0a:49:de:3b:cf:01:39:bd:09:99:d7:72:
                    72:22:ae:03:4b:54:5d:96:1f:d0:df:38:e9:83:af:
                    87:6f:4d:8e:cd:7c:10:d9:fe:de:09:aa:d0:a7:30:
                    3c:fe:6a:4e:7b:c3:24:ec:d0:22:7b:45:37:6b:b0:
                    a6:d4:2f:29:20:c1:cc:35:10:72:ba:08:fc:24:1b:
                    5a:5a:9e:60:73:a7:de:d8:5c:34:4a:35:b5:3c:8b:
                    68:52:71:75:3f:4e:91:47:38:95:6b:36:d4:90:26:
                    32:d6:0f:cd:a9:1e:5c:0f:38:d7:43:7b:c6:e0:fc:
                    f6:36:8c:bc:26:1b:25:c4:1f:68:38:a5:10:90:43:
                    12:4f:31:ab:af:a2:94:ff:bd:38:ce:eb:91:52:80:
                    1a:49:9e:be:7a:11:c7:18:ce:cb:0b:3a:e4:f4:6d:
                    6f:8b:cc:83:8f:bb:b2:18:79:6d:1e:6f:db:ee:0a:
                    91:ee:92:b5:40:a1:f4:6d:29:9c:08:e6:3a:0f:b2:
                    23:63:a5:44:88:e4:8c:2d:6a:73:63:1a:7b:38:b3:
                    23:e2:e4:ec:0e:98:57:d1:b3:8f:47:ed:23:17:b5:
                    61:79:96:7e:79:7b:da:07:22:92:6a:eb:f9:09:a9:
                    61:f2:32:83:12:e8:3a:35:95:d3:40:dd:b0:45:13:
                    ae:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:04:7C:26:C5:86:3F:17:E1:B4:18:C7:4A:70:19:54:59:E2:EE:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/57621f0d-a7b4-34dd-b649-ec05ab4f5900.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.crl

            X509v3 Authority Key Identifier:
                keyid:97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.225.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:fc:2b:84:1c:79:fd:c6:8e:a7:57:bd:2c:e2:46:8a:6a:b1:
         8d:80:6c:51:d5:8e:00:5e:e4:e2:9d:82:ea:9b:23:1a:a9:09:
         5b:64:66:d4:1f:cd:d4:aa:51:72:0f:10:60:79:dd:a9:66:b3:
         56:c1:5a:93:bc:6d:bd:83:a8:6d:fc:c7:e3:fa:51:0f:ce:d0:
         b0:c5:ee:19:60:5d:5e:61:28:af:e0:7d:85:cb:23:c6:b4:94:
         c6:67:a5:70:93:b7:7e:7f:93:48:ce:3d:c0:8b:c7:04:94:5a:
         19:49:0a:e3:bb:91:aa:72:1a:b5:27:0a:ef:de:f5:c1:2b:3b:
         fe:71:d3:61:c7:e3:a3:8a:ce:c2:6d:80:9d:a7:83:5e:07:d2:
         d8:e3:b7:a3:85:6f:c1:e0:8b:92:5c:3a:6a:8e:fd:0b:5f:42:
         78:41:d5:6d:51:e4:b2:12:65:2f:77:14:f7:a3:33:43:65:14:
         73:6d:02:e2:81:d8:c9:3f:9d:93:48:af:70:cf:71:9a:7a:9a:
         8c:8a:be:1d:33:47:24:30:7e:df:d2:b8:e1:54:70:a5:36:88:
         a3:05:d2:c1:76:e9:30:33:b9:d9:18:f9:aa:49:36:58:5e:87:
         61:66:8d:77:0f:73:93:42:44:3c:3a:af:77:b7:32:01:68:e0:
         9f:f3:0b:02
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4tnxTIedgWBvN4GwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjE4YThhZTQtYmU2Mi00ZWYwLTlkYzctNGM0ZDgyNmE0
MGRmMB4XDTI2MDYxNTA5MDAxMloXDTI2MDkxMzA5MDAxMlowLzEtMCsGA1UEAxMk
NDdmNmFiNjctNDk1NC00MThkLTk5ZjEtNDU1MmUyODFiOWM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniMKSd47zwE5vQmZ13JyIq4DS1Rdlh/Q3zjp
g6+Hb02OzXwQ2f7eCarQpzA8/mpOe8Mk7NAie0U3a7Cm1C8pIMHMNRByugj8JBta
Wp5gc6fe2Fw0SjW1PItoUnF1P06RRziVazbUkCYy1g/NqR5cDzjXQ3vG4Pz2Noy8
JhslxB9oOKUQkEMSTzGrr6KU/704zuuRUoAaSZ6+ehHHGM7LCzrk9G1vi8yDj7uy
GHltHm/b7gqR7pK1QKH0bSmcCOY6D7IjY6VEiOSMLWpzYxp7OLMj4uTsDphX0bOP
R+0jF7VheZZ+eXvaByKSauv5Calh8jKDEug6NZXTQN2wRROu0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAUEfCbFhj8X4bQYx0pwGVRZ4u5FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82MThh
OGFlNC1iZTYyLTRlZjAtOWRjNy00YzRkODI2YTQwZGYvNTc2MjFmMGQtYTdiNC0z
NGRkLWI2NDktZWMwNWFiNGY1OTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjE4YThhZTQtYmU2Mi00ZWYwLTlk
YzctNGM0ZDgyNmE0MGRmLzYxOGE4YWU0LWJlNjItNGVmMC05ZGM3LTRjNGQ4MjZh
NDBkZi5jcmwwHwYDVR0jBBgwFoAUlz5X9TGBsVJSZ9MGK6XxSki+o3UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82MThhOGFlNC1iZTYyLTRlZjAtOWRjNy00YzRk
ODI2YTQwZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzuHZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEP8K4Qcef3GjqdXvSziRopqsY2AbFHVjgBe5OKdguqbIxqpCVtkZtQf
zdSqUXIPEGB53alms1bBWpO8bb2DqG38x+P6UQ/O0LDF7hlgXV5hKK/gfYXLI8a0
lMZnpXCTt35/k0jOPcCLxwSUWhlJCuO7kapyGrUnCu/e9cErO/5x02HH46OKzsJt
gJ2ng14H0tjjt6OFb8Hgi5JcOmqO/QtfQnhB1W1R5LISZS93FPejM0NlFHNtAuKB
2Mk/nZNIr3DPcZp6moyKvh0zRyQwft/SuOFUcKU2iKMF0sF26TAzudkY+apJNlhe
h2FmjXcPc5NCRDw6r3e3MgFo4J/zCwI=
-----END CERTIFICATE-----
Generated at Mon Jun 29 14:42:47 2026 by rpki-client