Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/6d27e43e-e819-3b95-870c-20a2c7ad726a.roa
File:                     6d27e43e-e819-3b95-870c-20a2c7ad726a.roa (raw, json)
Hash identifier:          pyFQWcGbMsn4cyEPI9kn1s76YOdAd/JYe1k03PgU78c=
Subject key identifier:   F5:F3:39:BD:35:CF:78:99:A9:EA:FC:26:CC:A4:27:8A:EE:F5:7D:02
Certificate issuer:       /CN=7496889c-61af-4c61-8157-4b7f2fde690d
Certificate serial:       010D0C9F4328584E31CF1674D1306B2A07146180
Authority key identifier: 59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/6d27e43e-e819-3b95-870c-20a2c7ad726a.roa
Signing time:             Tue 16 Jun 2026 21:00:12 +0000
ROA not before:           Tue 16 Jun 2026 21:00:12 +0000
ROA not after:            Mon 14 Sep 2026 21:00:12 +0000
asID:                     611
IP address blocks:        198.164.40.0/24 maxlen: 24
                          198.164.41.0/24 maxlen: 24
                          198.164.42.0/24 maxlen: 24
                          198.164.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:31:cf:16:74:d1:30:6b:2a:07:14:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7496889c-61af-4c61-8157-4b7f2fde690d
        Validity
            Not Before: Jun 16 21:00:12 2026 GMT
            Not After : Sep 14 21:00:12 2026 GMT
        Subject: CN=515b43ce-98df-4c62-b1a0-ff9977092194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:91:54:4e:9c:4e:5f:33:e5:46:04:6e:26:5f:
                    b5:bc:19:82:38:90:05:58:97:d3:d4:d7:3e:e0:76:
                    f9:c4:7f:6f:53:a6:cb:80:8e:a4:eb:b3:f6:a7:1d:
                    a9:02:45:1a:8e:32:77:64:e6:61:f5:1b:eb:6f:6e:
                    63:d5:a7:92:b8:f4:2d:1d:35:d0:3d:78:f4:b7:7e:
                    41:97:fe:78:b1:56:6c:99:f0:c9:89:49:b6:f4:d3:
                    b9:d1:f3:4f:7e:00:a0:ab:43:81:52:4c:13:18:6f:
                    a2:97:35:ce:27:d4:68:2f:99:b7:ed:54:7d:fa:8f:
                    43:a4:1e:f1:ed:86:95:32:9e:01:34:6f:0c:62:be:
                    64:d8:19:b9:b9:92:99:33:41:6c:95:65:89:65:bf:
                    2d:94:6e:50:ee:55:70:0d:09:df:f9:00:02:c7:76:
                    f1:d1:28:52:c4:e7:d2:bc:64:e2:98:fc:5b:39:3b:
                    71:31:a3:50:98:2b:6d:12:69:59:94:a2:9d:83:6f:
                    85:fe:fe:69:60:cb:02:20:0e:2a:31:64:ab:5f:62:
                    16:aa:66:0e:87:30:f8:46:42:2a:b0:66:f0:fe:a7:
                    30:a2:c1:eb:e0:9f:4d:da:d7:73:ad:e1:1b:04:e1:
                    50:11:9b:5f:5b:88:e7:51:f8:fc:0e:8b:89:c7:f4:
                    69:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:F3:39:BD:35:CF:78:99:A9:EA:FC:26:CC:A4:27:8A:EE:F5:7D:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/6d27e43e-e819-3b95-870c-20a2c7ad726a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.crl

            X509v3 Authority Key Identifier:
                keyid:59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.164.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:e9:d5:a0:31:89:89:24:b1:36:34:17:25:01:4c:f5:28:a1:
         16:57:a5:ef:e3:f9:3c:57:aa:c1:6b:5e:cf:54:4d:86:9f:37:
         e9:9e:8c:d2:4b:e4:82:b7:1d:39:e6:88:87:97:6b:bb:59:3c:
         42:0f:01:03:03:f6:bb:21:de:71:e0:a8:11:7a:91:0e:2a:4b:
         84:13:1c:7e:ab:13:12:48:7c:86:17:30:6c:95:c0:2c:aa:21:
         5a:73:c2:20:7f:ca:8a:eb:bc:bc:7f:f3:7d:bc:70:3f:53:2c:
         e8:4e:61:c5:e4:83:98:ea:ef:50:f8:19:e9:01:c9:b6:ee:34:
         55:97:a1:ed:7a:9a:d6:a1:c6:0c:7a:d2:06:f3:b3:04:08:92:
         66:b7:4e:b7:67:e7:0d:5f:ae:35:0e:a1:56:0e:7b:1c:79:90:
         14:7f:79:fa:97:fe:bc:85:b4:11:cc:77:8f:c8:ee:dd:d6:5d:
         a6:d5:39:b9:c3:ce:1e:e8:dd:1a:af:02:20:3e:4b:0f:59:da:
         57:1b:c4:b5:ee:8a:e7:ab:65:f4:7b:d8:77:ca:c3:64:26:b6:
         91:8d:9b:d7:ac:cc:a9:31:c6:47:c5:09:59:21:01:cd:01:38:
         74:14:d8:4d:66:5f:8c:01:ee:03:5b:f5:c6:18:ed:30:bc:0e:
         c5:8f:9c:16
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4xzxZ00TBrKgcUYYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5Njg4OWMtNjFhZi00YzYxLTgxNTctNGI3ZjJmZGU2
OTBkMB4XDTI2MDYxNjIxMDAxMloXDTI2MDkxNDIxMDAxMlowLzEtMCsGA1UEAxMk
NTE1YjQzY2UtOThkZi00YzYyLWIxYTAtZmY5OTc3MDkyMTk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5FUTpxOXzPlRgRuJl+1vBmCOJAFWJfT1Nc+
4Hb5xH9vU6bLgI6k67P2px2pAkUajjJ3ZOZh9Rvrb25j1aeSuPQtHTXQPXj0t35B
l/54sVZsmfDJiUm29NO50fNPfgCgq0OBUkwTGG+ilzXOJ9RoL5m37VR9+o9DpB7x
7YaVMp4BNG8MYr5k2Bm5uZKZM0FslWWJZb8tlG5Q7lVwDQnf+QACx3bx0ShSxOfS
vGTimPxbOTtxMaNQmCttEmlZlKKdg2+F/v5pYMsCIA4qMWSrX2IWqmYOhzD4RkIq
sGbw/qcwosHr4J9N2tdzreEbBOFQEZtfW4jnUfj8DouJx/RpHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPXzOb01z3iZqer8JsykJ4ru9X0CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83NDk2
ODg5Yy02MWFmLTRjNjEtODE1Ny00YjdmMmZkZTY5MGQvNmQyN2U0M2UtZTgxOS0z
Yjk1LTg3MGMtMjBhMmM3YWQ3MjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzQ5Njg4OWMtNjFhZi00YzYxLTgx
NTctNGI3ZjJmZGU2OTBkLzc0OTY4ODljLTYxYWYtNGM2MS04MTU3LTRiN2YyZmRl
NjkwZC5jcmwwHwYDVR0jBBgwFoAUWYrA5l80WnZOjSAYuX0BnNESuY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83NDk2ODg5Yy02MWFmLTRjNjEtODE1Ny00Yjdm
MmZkZTY5MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxqQoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACLp1aAxiYkksTY0FyUBTPUooRZXpe/j+TxXqsFrXs9UTYafN+mejNJL
5IK3HTnmiIeXa7tZPEIPAQMD9rsh3nHgqBF6kQ4qS4QTHH6rExJIfIYXMGyVwCyq
IVpzwiB/yorrvLx/8328cD9TLOhOYcXkg5jq71D4GekBybbuNFWXoe16mtahxgx6
0gbzswQIkma3Trdn5w1frjUOoVYOexx5kBR/efqX/ryFtBHMd4/I7t3WXabVObnD
zh7o3RqvAiA+Sw9Z2lcbxLXuiuerZfR72HfKw2QmtpGNm9eszKkxxkfFCVkhAc0B
OHQU2E1mX4wB7gNb9cYY7TC8DsWPnBY=
-----END CERTIFICATE-----
Generated at Tue Jul 21 21:49:48 2026 by rpki-client