Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19eb256a-4db0-45f5-95c3-26a618298e21/698c34f0-112e-3311-9be0-cb35fb62f459.roa
File:                     698c34f0-112e-3311-9be0-cb35fb62f459.roa (raw, json)
Hash identifier:          +cPA3VthtrRPZ85vFCWRLQRaZYc+imxTvdcHInPKxOk=
Subject key identifier:   42:17:D3:A2:4A:19:DF:C5:94:9D:A5:9D:81:56:01:0F:56:D4:B2:55
Certificate issuer:       /CN=19eb256a-4db0-45f5-95c3-26a618298e21
Certificate serial:       010D0C9F4328584E4C5487BC8BE59C8561528C00
Authority key identifier: D3:6B:B7:B4:90:BB:05:13:0F:6A:EE:07:0C:17:85:68:8E:F1:3E:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19eb256a-4db0-45f5-95c3-26a618298e21.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19eb256a-4db0-45f5-95c3-26a618298e21/698c34f0-112e-3311-9be0-cb35fb62f459.roa
Signing time:             Fri 26 Jun 2026 09:00:12 +0000
ROA not before:           Fri 26 Jun 2026 09:00:12 +0000
ROA not after:            Thu 24 Sep 2026 09:00:12 +0000
asID:                     55002
IP address blocks:        63.143.16.0/20 maxlen: 24
                          68.66.16.0/20 maxlen: 24
                          97.107.80.0/20 maxlen: 24
                          2604:f200::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19eb256a-4db0-45f5-95c3-26a618298e21/19eb256a-4db0-45f5-95c3-26a618298e21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19eb256a-4db0-45f5-95c3-26a618298e21/19eb256a-4db0-45f5-95c3-26a618298e21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19eb256a-4db0-45f5-95c3-26a618298e21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4c:54:87:bc:8b:e5:9c:85:61:52:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19eb256a-4db0-45f5-95c3-26a618298e21
        Validity
            Not Before: Jun 26 09:00:12 2026 GMT
            Not After : Sep 24 09:00:12 2026 GMT
        Subject: CN=71ba1ffc-bb00-4ff4-b14f-ad99393324c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:35:91:f9:ca:19:d9:14:5c:24:4c:e9:fb:97:
                    14:65:14:31:a5:b5:8a:14:16:72:fa:27:a0:32:86:
                    2d:a2:55:1f:8e:a6:5a:ba:b8:39:9f:fe:08:c2:8a:
                    df:c9:f9:4b:ec:a9:52:eb:c9:89:be:73:f1:d4:3c:
                    05:b9:d3:1f:44:08:ee:d1:fe:33:c0:36:d5:1b:22:
                    00:2e:f3:be:9a:fc:44:35:61:67:b0:63:5b:74:b3:
                    1d:0f:9b:15:c0:ea:ef:27:99:c5:11:51:40:02:23:
                    87:d0:ab:32:2a:47:fc:f5:a3:17:ae:24:c8:c2:42:
                    5e:bf:07:9b:74:32:55:b5:49:40:8c:c4:67:d0:48:
                    ee:63:80:a0:e9:34:d9:8b:4c:cf:c0:25:93:63:78:
                    b8:eb:84:10:7f:bc:52:6b:ba:54:05:7e:60:cf:3b:
                    31:f5:f3:19:79:da:d0:63:d5:05:e2:e5:e0:64:3c:
                    6a:7a:fa:41:bd:ff:ae:d2:9a:9e:5b:6a:5d:42:de:
                    e3:17:94:d3:67:2f:8d:09:bd:e8:8a:71:30:66:58:
                    22:9e:37:e1:5a:00:34:29:38:78:43:bf:96:c1:73:
                    21:1c:c6:16:1b:a5:a6:0a:2f:1a:96:f3:68:7b:f5:
                    4d:5a:58:3d:3e:ef:3b:4e:f4:f2:71:ab:a5:7f:fa:
                    b0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:17:D3:A2:4A:19:DF:C5:94:9D:A5:9D:81:56:01:0F:56:D4:B2:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19eb256a-4db0-45f5-95c3-26a618298e21/698c34f0-112e-3311-9be0-cb35fb62f459.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19eb256a-4db0-45f5-95c3-26a618298e21/19eb256a-4db0-45f5-95c3-26a618298e21.crl

            X509v3 Authority Key Identifier:
                keyid:D3:6B:B7:B4:90:BB:05:13:0F:6A:EE:07:0C:17:85:68:8E:F1:3E:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19eb256a-4db0-45f5-95c3-26a618298e21.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.143.16.0/20
                  68.66.16.0/20
                  97.107.80.0/20
                IPv6:
                  2604:f200::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:18:b2:6c:58:3f:81:c1:54:52:8e:96:92:3a:61:53:d7:fc:
         c0:08:c5:5b:9a:e1:aa:85:88:16:d2:cd:60:46:69:e0:d0:dd:
         68:69:62:42:f6:9e:49:09:af:37:c0:d8:84:4b:69:89:e4:89:
         26:11:6e:57:63:22:ec:d5:11:42:11:19:9f:40:40:ac:7c:c0:
         0b:a1:d4:79:4a:50:0a:ef:88:66:19:2f:7e:88:32:3e:85:67:
         0d:b2:6c:e6:b5:68:7e:ad:70:64:2a:1a:5e:b3:51:59:ae:7d:
         f3:a5:ca:b7:c6:48:01:cd:5b:e6:79:cb:5d:76:69:fc:04:74:
         26:b2:2c:c8:61:1a:eb:3e:c9:b7:ad:8a:16:fd:14:46:07:47:
         c7:e6:d1:56:3b:b0:b8:92:17:05:9e:4b:1b:d6:b6:a9:e1:88:
         f0:9c:20:ec:3c:25:64:46:49:d4:66:0e:55:4a:ad:73:00:00:
         20:36:3d:8d:a7:a3:23:88:cc:de:56:7f:64:da:eb:87:82:58:
         04:5e:45:47:f1:a0:2f:f7:e4:97:31:b0:15:72:02:df:fa:9a:
         b8:fc:7e:da:24:44:35:c1:77:46:1a:d8:2a:49:64:f5:54:dc:
         c0:39:bf:fe:72:a9:4b:c5:a8:c0:b1:ff:8a:49:60:35:44:2b:
         d3:68:4d:61
-----BEGIN CERTIFICATE-----
MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWE5MVIe8i+WchWFSjAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTllYjI1NmEtNGRiMC00NWY1LTk1YzMtMjZhNjE4Mjk4
ZTIxMB4XDTI2MDYyNjA5MDAxMloXDTI2MDkyNDA5MDAxMlowLzEtMCsGA1UEAxMk
NzFiYTFmZmMtYmIwMC00ZmY0LWIxNGYtYWQ5OTM5MzMyNGMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDWR+coZ2RRcJEzp+5cUZRQxpbWKFBZy+ieg
MoYtolUfjqZaurg5n/4IworfyflL7KlS68mJvnPx1DwFudMfRAju0f4zwDbVGyIA
LvO+mvxENWFnsGNbdLMdD5sVwOrvJ5nFEVFAAiOH0KsyKkf89aMXriTIwkJevweb
dDJVtUlAjMRn0EjuY4Cg6TTZi0zPwCWTY3i464QQf7xSa7pUBX5gzzsx9fMZedrQ
Y9UF4uXgZDxqevpBvf+u0pqeW2pdQt7jF5TTZy+NCb3oinEwZlginjfhWgA0KTh4
Q7+WwXMhHMYWG6WmCi8alvNoe/VNWlg9Pu87TvTycaulf/qwFQIDAQABo4IDcDCC
A2wwHQYDVR0OBBYEFEIX06JKGd/FlJ2lnYFWAQ9W1LJVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xOWVi
MjU2YS00ZGIwLTQ1ZjUtOTVjMy0yNmE2MTgyOThlMjEvNjk4YzM0ZjAtMTEyZS0z
MzExLTliZTAtY2IzNWZiNjJmNDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMTllYjI1NmEtNGRiMC00NWY1LTk1
YzMtMjZhNjE4Mjk4ZTIxLzE5ZWIyNTZhLTRkYjAtNDVmNS05NWMzLTI2YTYxODI5
OGUyMS5jcmwwHwYDVR0jBBgwFoAU02u3tJC7BRMPau4HDBeFaI7xPuUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8xOWViMjU2YS00ZGIwLTQ1ZjUtOTVjMy0yNmE2
MTgyOThlMjEuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQEP48QAwQE
REIQAwQEYWtQMA0EAgACMAcDBQAmBPIAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH
DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz
L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAKkYsmxYP4HBVFKOlpI6
YVPX/MAIxVua4aqFiBbSzWBGaeDQ3WhpYkL2nkkJrzfA2IRLaYnkiSYRbldjIuzV
EUIRGZ9AQKx8wAuh1HlKUArviGYZL36IMj6FZw2ybOa1aH6tcGQqGl6zUVmuffOl
yrfGSAHNW+Z5y112afwEdCayLMhhGus+ybetihb9FEYHR8fm0VY7sLiSFwWeSxvW
tqnhiPCcIOw8JWRGSdRmDlVKrXMAACA2PY2noyOIzN5Wf2Ta64eCWAReRUfxoC/3
5JcxsBVyAt/6mrj8ftokRDXBd0Ya2CpJZPVU3MA5v/5yqUvFqMCx/4pJYDVEK9No
TWE=
-----END CERTIFICATE-----
Generated at Tue Jul 21 23:50:34 2026 by rpki-client