Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/4a004214-a14d-3e21-9522-3ffa7964b41f.roa
File:                     4a004214-a14d-3e21-9522-3ffa7964b41f.roa (raw, json)
Hash identifier:          wBYK/fDDKiYCrspvDfPRg96gMDRmjaTeZWgNdEHWCU8=
Subject key identifier:   17:E6:D7:D4:50:51:C0:58:60:D5:6D:39:34:28:67:7D:5A:6F:7B:C5
Certificate issuer:       /CN=c6921896-3c0f-4cb4-9c99-e2d60d1d2e41
Certificate serial:       010D0C9F4328584E37F8969E7F810855025D4140
Authority key identifier: AE:57:89:B5:6E:58:19:47:0D:45:25:4E:58:B2:70:00:DA:93:82:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/4a004214-a14d-3e21-9522-3ffa7964b41f.roa
Signing time:             Fri 19 Jun 2026 01:58:51 +0000
ROA not before:           Fri 19 Jun 2026 01:58:51 +0000
ROA not after:            Thu 17 Sep 2026 01:58:51 +0000
asID:                     46263
IP address blocks:        173.213.12.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:37:f8:96:9e:7f:81:08:55:02:5d:41:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6921896-3c0f-4cb4-9c99-e2d60d1d2e41
        Validity
            Not Before: Jun 19 01:58:51 2026 GMT
            Not After : Sep 17 01:58:51 2026 GMT
        Subject: CN=008e802d-b3a0-4752-a10f-919bf968e727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:05:75:7a:73:4a:9c:a1:9a:95:5a:e9:18:4b:
                    af:ea:06:8c:6d:7b:ee:b7:4d:eb:ea:6a:14:c1:91:
                    e8:ea:23:79:43:82:c9:52:91:7a:b9:db:c7:34:3a:
                    27:a4:b2:9a:bc:2c:21:06:29:a0:0d:36:8c:e2:a6:
                    78:24:aa:79:76:f7:1b:5a:4c:a4:2f:4e:cc:19:40:
                    fc:6b:fd:b8:ee:46:26:93:d0:fc:bc:6f:67:b4:d4:
                    30:d4:35:bf:0b:03:01:07:b9:8b:bd:41:7e:44:eb:
                    31:88:c1:de:8b:5a:fe:2a:c0:fc:4f:13:76:66:8e:
                    e0:f2:d7:7d:f3:e0:64:1d:52:28:95:c7:02:a1:ed:
                    c9:82:d2:c1:6c:16:73:25:6e:5f:13:a9:4d:47:0c:
                    76:eb:b3:ab:ea:46:db:2e:57:6c:28:0f:64:93:26:
                    5c:e7:8c:ad:8e:7a:1d:cd:92:f1:b8:36:ce:fe:bf:
                    3d:40:58:4e:d8:4d:5c:55:ef:fc:a5:1f:56:c6:13:
                    1b:33:ef:b0:8c:17:3a:a4:f4:24:82:b7:d0:fc:86:
                    ed:35:fa:86:47:9f:a5:05:51:3b:2a:64:f9:7b:b6:
                    7c:32:96:c5:f6:fa:b2:ad:d4:69:6a:61:c9:ef:26:
                    77:7d:8b:c6:b3:92:3a:0a:ae:7b:97:10:68:95:01:
                    6c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:E6:D7:D4:50:51:C0:58:60:D5:6D:39:34:28:67:7D:5A:6F:7B:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/4a004214-a14d-3e21-9522-3ffa7964b41f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.crl

            X509v3 Authority Key Identifier:
                keyid:AE:57:89:B5:6E:58:19:47:0D:45:25:4E:58:B2:70:00:DA:93:82:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.213.12.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:e1:a6:07:c3:1b:14:ea:bd:24:2f:3a:0a:cf:91:a9:03:48:
         09:11:c3:12:51:9c:cb:e7:88:be:2b:95:36:04:b3:95:56:9a:
         44:71:d7:aa:03:05:c0:46:24:09:d2:5d:a0:9a:86:20:13:c1:
         f1:2b:ee:77:62:39:fe:1e:e1:73:62:4e:49:c3:31:6f:4d:fd:
         28:50:a2:01:61:3b:b4:f5:6c:8d:ba:a9:15:aa:7f:7a:67:b7:
         2a:65:94:93:7b:36:a0:0b:8e:f6:f6:03:1d:21:6f:5c:32:2b:
         a4:d0:f4:e4:17:8c:0b:09:ed:08:cb:2f:0a:e7:e5:cd:59:22:
         a5:2d:ef:3d:94:dd:d7:2b:59:21:60:17:37:6c:fa:09:26:31:
         f0:7c:e3:64:fd:25:83:7c:ea:4e:1a:72:ef:ac:0a:70:10:83:
         1e:e2:6d:c5:9d:0b:19:22:cc:25:25:3e:cd:21:50:68:59:84:
         cd:c5:f3:1f:10:2f:46:94:bd:4f:e3:d8:b8:15:2a:0f:9a:fc:
         45:c5:8d:4d:b7:df:aa:ed:69:84:f7:72:a4:c9:11:8a:b6:31:
         7d:c8:f8:5d:a8:a8:90:0b:0a:2b:f4:83:e8:fc:64:4b:8e:96:
         2a:88:8e:a8:77:ad:e2:04:dc:2b:12:20:d9:40:a2:ef:7a:63:
         25:14:8f:92
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE43+Jaef4EIVQJdQUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzY5MjE4OTYtM2MwZi00Y2I0LTljOTktZTJkNjBkMWQy
ZTQxMB4XDTI2MDYxOTAxNTg1MVoXDTI2MDkxNzAxNTg1MVowLzEtMCsGA1UEAxMk
MDA4ZTgwMmQtYjNhMC00NzUyLWExMGYtOTE5YmY5NjhlNzI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAV1enNKnKGalVrpGEuv6gaMbXvut03r6moU
wZHo6iN5Q4LJUpF6udvHNDonpLKavCwhBimgDTaM4qZ4JKp5dvcbWkykL07MGUD8
a/247kYmk9D8vG9ntNQw1DW/CwMBB7mLvUF+ROsxiMHei1r+KsD8TxN2Zo7g8td9
8+BkHVIolccCoe3JgtLBbBZzJW5fE6lNRwx267Or6kbbLldsKA9kkyZc54ytjnod
zZLxuDbO/r89QFhO2E1cVe/8pR9WxhMbM++wjBc6pPQkgrfQ/IbtNfqGR5+lBVE7
KmT5e7Z8MpbF9vqyrdRpamHJ7yZ3fYvGs5I6Cq57lxBolQFsbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBfm19RQUcBYYNVtOTQoZ31ab3vFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jNjky
MTg5Ni0zYzBmLTRjYjQtOWM5OS1lMmQ2MGQxZDJlNDEvNGEwMDQyMTQtYTE0ZC0z
ZTIxLTk1MjItM2ZmYTc5NjRiNDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzY5MjE4OTYtM2MwZi00Y2I0LTlj
OTktZTJkNjBkMWQyZTQxL2M2OTIxODk2LTNjMGYtNGNiNC05Yzk5LWUyZDYwZDFk
MmU0MS5jcmwwHwYDVR0jBBgwFoAUrleJtW5YGUcNRSVOWLJwANqTgo4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jNjkyMTg5Ni0zYzBmLTRjYjQtOWM5OS1lMmQ2
MGQxZDJlNDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrdUMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD3hpgfDGxTqvSQvOgrPkakDSAkRwxJRnMvniL4rlTYEs5VWmkRx16oD
BcBGJAnSXaCahiATwfEr7ndiOf4e4XNiTknDMW9N/ShQogFhO7T1bI26qRWqf3pn
typllJN7NqALjvb2Ax0hb1wyK6TQ9OQXjAsJ7QjLLwrn5c1ZIqUt7z2U3dcrWSFg
Fzds+gkmMfB842T9JYN86k4acu+sCnAQgx7ibcWdCxkizCUlPs0hUGhZhM3F8x8Q
L0aUvU/j2LgVKg+a/EXFjU2336rtaYT3cqTJEYq2MX3I+F2oqJALCiv0g+j8ZEuO
liqIjqh3reIE3CsSINlAou96YyUUj5I=
-----END CERTIFICATE-----
Generated at Wed Jul 22 06:57:43 2026 by rpki-client