Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/6c62d9b0-e081-3ed7-83df-1311433bdf7a.roa
File:                     6c62d9b0-e081-3ed7-83df-1311433bdf7a.roa (raw, json)
Hash identifier:          cQr0jjBdTSRLJCh2842x6L24HlmBnUD0jY9Vx24i/ok=
Subject key identifier:   13:CC:16:93:94:F6:F2:70:29:7A:CD:99:43:43:E7:B4:5B:9F:35:A8
Certificate issuer:       /CN=601de417-7cdc-45d3-8d80-7279489a39e0
Certificate serial:       010D0C9F4328584EDC9EEDDBA19C77219FEC32C0
Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/6c62d9b0-e081-3ed7-83df-1311433bdf7a.roa
Signing time:             Mon 17 Aug 2026 01:26:34 +0000
ROA not before:           Mon 17 Aug 2026 01:26:34 +0000
ROA not after:            Sun 15 Nov 2026 02:26:34 +0000
asID:                     63023
IP address blocks:        139.64.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:9e:ed:db:a1:9c:77:21:9f:ec:32:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0
        Validity
            Not Before: Aug 17 01:26:34 2026 GMT
            Not After : Nov 15 02:26:34 2026 GMT
        Subject: CN=618c9988-d795-4cd8-9a97-d8bdc7fe40f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b3:74:c9:e6:81:bb:6a:6f:e5:e6:0b:43:ae:
                    d8:ef:27:8d:9b:5d:80:dc:f5:69:02:e2:be:64:5c:
                    f2:e1:ae:0a:e4:22:f0:79:45:f3:bc:ae:5f:5f:b0:
                    2f:19:4f:6f:c1:3b:cf:b2:9a:5f:74:a5:9f:0e:9b:
                    e4:2a:f1:1f:5a:46:d8:78:38:e6:b2:01:d7:81:2d:
                    56:8e:85:15:fc:48:2c:17:3a:0e:fa:95:9f:de:86:
                    6a:09:31:29:23:72:d7:c2:68:f1:00:a5:5f:1f:59:
                    01:f0:99:55:28:7d:e9:92:74:8b:f3:d1:32:f5:76:
                    bf:ba:40:6c:f4:3b:6c:9b:47:21:07:94:98:9e:04:
                    4c:73:0c:a9:63:9c:d1:a4:f4:3a:85:98:fb:53:72:
                    f4:6d:d2:fc:f1:dd:01:61:f3:bf:3a:fe:28:ba:7b:
                    8e:92:21:70:b9:88:5f:67:17:ed:00:d5:35:d1:fc:
                    d7:68:d1:6e:f9:d7:5c:dd:a3:f5:e1:f6:54:10:b2:
                    e5:4f:9b:8a:76:c2:26:ca:89:c4:4f:22:d2:ca:97:
                    02:41:56:3b:63:66:f2:f8:2d:3c:72:60:21:0d:ef:
                    76:08:f0:b2:2e:01:e4:57:93:29:89:8c:53:79:34:
                    ed:f3:67:02:f5:58:f5:6c:80:9c:fc:a9:71:ef:1b:
                    4d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:CC:16:93:94:F6:F2:70:29:7A:CD:99:43:43:E7:B4:5B:9F:35:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/6c62d9b0-e081-3ed7-83df-1311433bdf7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl

            X509v3 Authority Key Identifier:
                keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.64.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:c7:15:ea:a4:35:54:06:33:a4:dd:9d:3f:a3:2f:2c:85:24:
         8a:41:81:b6:5d:31:8e:12:23:40:0e:59:66:8c:ab:c8:ae:79:
         91:23:3f:ac:a6:da:2a:6d:58:df:5b:c2:df:6a:c6:22:14:83:
         91:52:82:42:62:68:ca:7b:8b:53:84:07:2d:4e:7b:be:e4:97:
         a2:cf:59:5b:9e:f2:3b:0e:59:63:f4:0f:1e:03:24:96:4c:51:
         e4:93:76:d7:42:98:2d:70:a0:f6:66:65:bf:bf:b1:5d:63:7e:
         2d:1f:53:ea:61:75:8e:f3:ad:62:f2:3d:a8:64:a4:cf:79:3b:
         98:42:17:bd:db:3a:99:ad:7c:b4:e0:e6:0e:e2:51:24:09:09:
         4d:5c:06:4a:31:a9:24:5f:8f:ac:69:23:57:37:9a:5c:cc:3c:
         87:48:3f:45:5e:98:15:0e:00:41:e1:86:62:d9:fb:14:08:93:
         41:24:ca:d0:3b:2f:88:65:d2:e9:61:28:90:8f:21:2a:5e:1f:
         eb:1b:74:55:35:26:06:94:68:b2:9b:3a:13:95:ec:82:87:63:
         16:14:86:d3:0c:18:47:6d:41:55:49:77:ee:0d:8e:e8:b1:45:
         df:1f:10:0f:70:19:eb:24:81:84:7b:87:f8:0e:8d:77:5a:1b:
         8f:16:b3:55
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7cnu3boZx3IZ/sMsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz
OWUwMB4XDTI2MDgxNzAxMjYzNFoXDTI2MTExNTAyMjYzNFowLzEtMCsGA1UEAxMk
NjE4Yzk5ODgtZDc5NS00Y2Q4LTlhOTctZDhiZGM3ZmU0MGY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbN0yeaBu2pv5eYLQ67Y7yeNm12A3PVpAuK+
ZFzy4a4K5CLweUXzvK5fX7AvGU9vwTvPsppfdKWfDpvkKvEfWkbYeDjmsgHXgS1W
joUV/EgsFzoO+pWf3oZqCTEpI3LXwmjxAKVfH1kB8JlVKH3pknSL89Ey9Xa/ukBs
9Dtsm0chB5SYngRMcwypY5zRpPQ6hZj7U3L0bdL88d0BYfO/Ov4ounuOkiFwuYhf
ZxftANU10fzXaNFu+ddc3aP14fZUELLlT5uKdsImyonETyLSypcCQVY7Y2by+C08
cmAhDe92CPCyLgHkV5MpiYxTeTTt82cC9Vj1bICc/Klx7xtNpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBPMFpOU9vJwKXrNmUND57RbnzWoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk
ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvNmM2MmQ5YjAtZTA4MS0z
ZWQ3LTgzZGYtMTMxMTQzM2JkZjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk
ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh
MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5
NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi0CmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACfHFeqkNVQGM6TdnT+jLyyFJIpBgbZdMY4SI0AOWWaMq8iueZEjP6ym
2iptWN9bwt9qxiIUg5FSgkJiaMp7i1OEBy1Oe77kl6LPWVue8jsOWWP0Dx4DJJZM
UeSTdtdCmC1woPZmZb+/sV1jfi0fU+phdY7zrWLyPahkpM95O5hCF73bOpmtfLTg
5g7iUSQJCU1cBkoxqSRfj6xpI1c3mlzMPIdIP0VemBUOAEHhhmLZ+xQIk0EkytA7
L4hl0ulhKJCPISpeH+sbdFU1JgaUaLKbOhOV7IKHYxYUhtMMGEdtQVVJd+4Njuix
Rd8fEA9wGeskgYR7h/gOjXdaG48Ws1U=
-----END CERTIFICATE-----
Generated at Thu Sep 3 17:43:20 2026 by rpki-client