Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6027b68d-6713-45e3-9a56-d365f2872224/74df5990-123f-3c0a-a03e-0d7b4e0adf0b.roa
File:                     74df5990-123f-3c0a-a03e-0d7b4e0adf0b.roa (raw, json)
Hash identifier:          AQeL9M4VRKviLjlLOCuSbNU5RANMqXDvsR98YrYzUKU=
Subject key identifier:   D0:69:89:99:76:66:DC:8F:8E:74:63:CB:83:9F:31:55:C3:7B:28:10
Certificate issuer:       /CN=6027b68d-6713-45e3-9a56-d365f2872224
Certificate serial:       010D0C9F4328584EED51FA3538B5BA1DFEF27C40
Authority key identifier: 35:42:FB:45:F5:40:39:F8:78:73:BD:C2:0A:C0:29:5E:6B:C9:7D:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6027b68d-6713-45e3-9a56-d365f2872224.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6027b68d-6713-45e3-9a56-d365f2872224/74df5990-123f-3c0a-a03e-0d7b4e0adf0b.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     398456
IP address blocks:        185.212.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6027b68d-6713-45e3-9a56-d365f2872224/6027b68d-6713-45e3-9a56-d365f2872224.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6027b68d-6713-45e3-9a56-d365f2872224/6027b68d-6713-45e3-9a56-d365f2872224.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6027b68d-6713-45e3-9a56-d365f2872224.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:51:fa:35:38:b5:ba:1d:fe:f2:7c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6027b68d-6713-45e3-9a56-d365f2872224
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=bcbf8412-d966-4875-9f43-a869238bde2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f6:59:b4:02:a7:3f:3a:f4:fb:84:17:ab:62:
                    f3:be:c9:e0:4f:9d:2e:61:3a:f8:db:ab:f3:c6:dc:
                    38:8d:c4:34:39:b0:14:58:cb:d7:19:42:0c:39:60:
                    23:94:9e:df:16:56:d5:07:e7:bc:8c:45:9b:09:43:
                    ad:08:da:e9:d7:74:13:96:6b:16:b4:3a:45:6c:03:
                    80:d7:1e:12:aa:22:3d:06:b3:2a:c8:02:d3:01:58:
                    14:e0:27:24:63:2d:3c:d1:f5:f7:ce:9c:6e:11:4d:
                    4e:1c:cd:36:c8:02:fd:fd:54:7b:ec:cd:5f:b1:88:
                    dc:94:b6:fd:e5:1a:30:6a:b1:10:c5:06:37:69:1c:
                    ee:5e:c0:bf:16:43:9e:40:42:56:ab:d8:ab:55:c4:
                    eb:b7:ce:ac:bc:f1:9c:bf:0c:c2:f1:76:b1:99:71:
                    81:9e:10:f7:57:91:26:ed:0c:47:e2:5b:ad:6f:a3:
                    9f:a9:5b:ed:41:46:8b:03:c4:bb:f3:11:79:48:02:
                    ab:60:42:ad:8f:c4:7a:69:8e:1b:b4:51:10:e5:96:
                    08:c1:89:b4:62:7e:9d:bd:26:8b:39:5d:52:24:17:
                    7b:79:0b:87:56:8a:62:02:50:f6:ac:ff:d5:90:11:
                    52:0c:54:bf:30:a3:be:47:5d:8f:05:15:6f:fa:02:
                    5c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:69:89:99:76:66:DC:8F:8E:74:63:CB:83:9F:31:55:C3:7B:28:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6027b68d-6713-45e3-9a56-d365f2872224/74df5990-123f-3c0a-a03e-0d7b4e0adf0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6027b68d-6713-45e3-9a56-d365f2872224/6027b68d-6713-45e3-9a56-d365f2872224.crl

            X509v3 Authority Key Identifier:
                keyid:35:42:FB:45:F5:40:39:F8:78:73:BD:C2:0A:C0:29:5E:6B:C9:7D:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6027b68d-6713-45e3-9a56-d365f2872224.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.212.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:10:df:f0:19:99:52:9e:01:52:65:f0:d7:e2:5b:01:b7:50:
         45:59:dd:96:cf:a1:62:99:a0:03:d5:7d:7e:b7:f8:db:1e:96:
         6c:aa:77:10:db:04:e3:5c:e6:23:42:12:24:45:a2:3c:80:b6:
         a8:c1:dd:70:5b:68:ca:db:20:86:58:71:32:34:fe:89:d2:af:
         dc:c8:f2:8e:b2:7d:ca:f9:60:a5:ea:9c:e5:93:a8:df:55:13:
         de:4e:a1:a4:fb:46:53:1a:a1:84:34:8c:77:15:35:36:1b:bf:
         bc:0e:47:05:4a:2e:5e:16:de:be:46:a6:7b:56:a3:95:a8:da:
         56:17:30:97:62:57:4f:e5:9f:88:8a:7a:15:72:a7:ed:f1:90:
         fe:3f:05:89:e4:df:0c:3f:ff:f5:0c:7b:b1:9c:55:92:da:05:
         0b:1b:98:ff:02:5d:1f:30:5a:93:ad:78:e5:25:b4:e0:c3:a0:
         dc:5e:3d:d4:f1:e5:75:97:85:0a:33:b9:36:25:75:79:57:4a:
         9c:13:1d:cb:fa:0a:6d:ac:9d:e5:76:36:c0:8d:7c:25:7e:14:
         a4:19:66:3f:30:71:85:d6:8a:91:15:07:7a:6e:44:f2:d0:f8:
         2c:a0:5f:a9:f8:a4:89:e8:d1:d6:2f:42:a9:18:7c:dd:99:7e:
         11:17:5c:ec
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUfo1OLW6Hf7yfEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjAyN2I2OGQtNjcxMy00NWUzLTlhNTYtZDM2NWYyODcy
MjI0MB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk
YmNiZjg0MTItZDk2Ni00ODc1LTlmNDMtYTg2OTIzOGJkZTJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfZZtAKnPzr0+4QXq2LzvsngT50uYTr426vz
xtw4jcQ0ObAUWMvXGUIMOWAjlJ7fFlbVB+e8jEWbCUOtCNrp13QTlmsWtDpFbAOA
1x4SqiI9BrMqyALTAVgU4CckYy080fX3zpxuEU1OHM02yAL9/VR77M1fsYjclLb9
5RowarEQxQY3aRzuXsC/FkOeQEJWq9irVcTrt86svPGcvwzC8XaxmXGBnhD3V5Em
7QxH4lutb6OfqVvtQUaLA8S78xF5SAKrYEKtj8R6aY4btFEQ5ZYIwYm0Yn6dvSaL
OV1SJBd7eQuHVopiAlD2rP/VkBFSDFS/MKO+R12PBRVv+gJc8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNBpiZl2ZtyPjnRjy4OfMVXDeygQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82MDI3
YjY4ZC02NzEzLTQ1ZTMtOWE1Ni1kMzY1ZjI4NzIyMjQvNzRkZjU5OTAtMTIzZi0z
YzBhLWEwM2UtMGQ3YjRlMGFkZjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNjAyN2I2OGQtNjcxMy00NWUzLTlh
NTYtZDM2NWYyODcyMjI0LzYwMjdiNjhkLTY3MTMtNDVlMy05YTU2LWQzNjVmMjg3
MjIyNC5jcmwwHwYDVR0jBBgwFoAUNUL7RfVAOfh4c73CCsApXmvJfUswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi82MDI3YjY4ZC02NzEzLTQ1ZTMtOWE1Ni1kMzY1
ZjI4NzIyMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudQGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAAQ3/AZmVKeAVJl8NfiWwG3UEVZ3ZbPoWKZoAPVfX63+NselmyqdxDb
BONc5iNCEiRFojyAtqjB3XBbaMrbIIZYcTI0/onSr9zI8o6yfcr5YKXqnOWTqN9V
E95OoaT7RlMaoYQ0jHcVNTYbv7wORwVKLl4W3r5GpntWo5Wo2lYXMJdiV0/ln4iK
ehVyp+3xkP4/BYnk3ww///UMe7GcVZLaBQsbmP8CXR8wWpOteOUltODDoNxePdTx
5XWXhQozuTYldXlXSpwTHcv6Cm2sneV2NsCNfCV+FKQZZj8wcYXWipEVB3puRPLQ
+CygX6n4pIno0dYvQqkYfN2ZfhEXXOw=
-----END CERTIFICATE-----
Generated at Sat Sep 5 05:22:13 2026 by rpki-client