Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/61ad7677-7d67-434f-9051-821a223997ce/9602437f-1414-32d1-81d0-b26fcc003200.roa
File:                     9602437f-1414-32d1-81d0-b26fcc003200.roa (raw, json)
Hash identifier:          2UtgVATR0lKHwLu0dCp0d1v7PvvcUq6z/Zoi/2KXNnU=
Subject key identifier:   F6:78:6B:24:2E:7F:C5:0B:A4:86:5A:AC:48:BA:6B:25:C7:81:EA:57
Certificate issuer:       /CN=61ad7677-7d67-434f-9051-821a223997ce
Certificate serial:       010D0C9F4328584E43E60F86727BC23CDBE255A0
Authority key identifier: FB:C9:AB:63:01:42:08:0C:F1:F0:7E:CA:61:F4:9E:35:E6:82:42:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/61ad7677-7d67-434f-9051-821a223997ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/61ad7677-7d67-434f-9051-821a223997ce/9602437f-1414-32d1-81d0-b26fcc003200.roa
Signing time:             Tue 23 Jun 2026 08:31:13 +0000
ROA not before:           Tue 23 Jun 2026 08:31:13 +0000
ROA not after:            Mon 21 Sep 2026 08:31:13 +0000
asID:                     14618
IP address blocks:        216.177.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/61ad7677-7d67-434f-9051-821a223997ce/61ad7677-7d67-434f-9051-821a223997ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/61ad7677-7d67-434f-9051-821a223997ce/61ad7677-7d67-434f-9051-821a223997ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/61ad7677-7d67-434f-9051-821a223997ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:43:e6:0f:86:72:7b:c2:3c:db:e2:55:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61ad7677-7d67-434f-9051-821a223997ce
        Validity
            Not Before: Jun 23 08:31:13 2026 GMT
            Not After : Sep 21 08:31:13 2026 GMT
        Subject: CN=bb7e87b2-a29e-4179-9aab-74b861a687c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:67:a8:34:bc:27:97:7e:1e:57:09:0b:0a:c5:
                    86:f6:fa:8c:b9:72:e9:56:35:f9:33:50:44:66:56:
                    d8:be:8c:76:15:d8:b3:23:fe:87:bc:98:b2:02:14:
                    75:a1:27:ea:c9:8e:b6:85:6a:eb:71:f4:16:d8:36:
                    eb:c3:00:16:be:77:60:d1:ea:47:10:05:2e:c6:70:
                    4e:fa:bc:e6:f9:9b:48:d5:64:c2:c1:a2:3a:e4:35:
                    1a:e8:4f:78:f6:9d:be:7a:f7:82:42:aa:02:29:36:
                    85:e0:2e:6d:b3:e0:eb:46:14:32:dd:9c:97:da:66:
                    b9:2e:b1:21:02:84:28:dd:f1:c5:b7:2e:bd:e8:0b:
                    14:38:f5:20:3d:53:16:2b:31:7e:d6:84:7d:22:b5:
                    af:2a:02:34:a9:b5:35:65:a2:f6:e5:e8:db:b8:74:
                    56:3c:c0:30:5e:89:f6:6d:c8:7b:45:c2:dd:2b:b6:
                    b2:a0:da:44:90:76:4c:df:40:34:7c:14:36:e4:38:
                    58:30:67:81:3b:35:aa:e2:37:74:c2:93:f4:dd:f5:
                    84:73:0c:57:15:7e:7e:88:73:c2:6e:58:34:cd:dd:
                    14:e4:53:00:09:01:6c:8f:74:8b:8a:ed:33:be:6d:
                    92:7c:70:e4:03:44:b9:54:4c:1f:6e:5c:aa:ef:dd:
                    29:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:78:6B:24:2E:7F:C5:0B:A4:86:5A:AC:48:BA:6B:25:C7:81:EA:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/61ad7677-7d67-434f-9051-821a223997ce/9602437f-1414-32d1-81d0-b26fcc003200.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/61ad7677-7d67-434f-9051-821a223997ce/61ad7677-7d67-434f-9051-821a223997ce.crl

            X509v3 Authority Key Identifier:
                keyid:FB:C9:AB:63:01:42:08:0C:F1:F0:7E:CA:61:F4:9E:35:E6:82:42:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/61ad7677-7d67-434f-9051-821a223997ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.177.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:9d:42:f3:84:18:d5:ff:a2:31:2a:90:72:53:c6:3f:9d:2f:
         c9:48:d6:fa:86:0a:dc:95:8d:3e:d6:4f:00:69:b3:03:7d:82:
         b3:ec:ab:15:4f:80:42:43:f6:f5:78:22:f8:3e:66:c0:07:33:
         47:81:44:a6:2c:57:75:d3:af:6a:38:84:ad:ed:7a:0a:c9:ef:
         55:01:db:c8:83:47:4a:b7:85:16:a4:da:a1:25:d4:61:6e:ca:
         de:c8:ce:16:d3:b7:9e:76:2f:e6:b1:b8:46:51:ae:1e:57:b8:
         08:61:99:c8:e8:cb:cc:84:1b:21:12:d6:b9:8e:ef:9d:ad:67:
         01:24:6c:53:ad:9f:07:92:6d:a7:b9:04:d8:92:5f:c6:4f:97:
         a7:9f:44:1f:c1:45:c8:c2:46:fd:56:dd:9f:d5:9e:b8:e3:41:
         2a:c3:c7:33:91:1e:06:ed:27:77:4b:15:de:6a:d8:4a:be:59:
         73:cd:b0:bd:cb:e6:fb:a4:2f:68:52:d2:d5:1b:75:01:cb:09:
         e6:94:e6:50:74:d5:f7:d2:32:5d:e0:2c:58:23:1a:52:6f:2f:
         4a:7e:2b:48:94:51:bc:f9:44:90:c7:34:de:d4:89:be:5e:c3:
         16:b0:ad:9d:6c:86:61:99:64:c5:5f:c9:80:c0:e9:d2:83:6a:
         f7:c1:95:fe
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5D5g+GcnvCPNviVaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjFhZDc2NzctN2Q2Ny00MzRmLTkwNTEtODIxYTIyMzk5
N2NlMB4XDTI2MDYyMzA4MzExM1oXDTI2MDkyMTA4MzExM1owLzEtMCsGA1UEAxMk
YmI3ZTg3YjItYTI5ZS00MTc5LTlhYWItNzRiODYxYTY4N2MwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumeoNLwnl34eVwkLCsWG9vqMuXLpVjX5M1BE
ZlbYvox2FdizI/6HvJiyAhR1oSfqyY62hWrrcfQW2DbrwwAWvndg0epHEAUuxnBO
+rzm+ZtI1WTCwaI65DUa6E949p2+eveCQqoCKTaF4C5ts+DrRhQy3ZyX2ma5LrEh
AoQo3fHFty696AsUOPUgPVMWKzF+1oR9IrWvKgI0qbU1ZaL25ejbuHRWPMAwXon2
bch7RcLdK7ayoNpEkHZM30A0fBQ25DhYMGeBOzWq4jd0wpP03fWEcwxXFX5+iHPC
blg0zd0U5FMACQFsj3SLiu0zvm2SfHDkA0S5VEwfblyq790paQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPZ4ayQuf8ULpIZarEi6ayXHgepXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82MWFk
NzY3Ny03ZDY3LTQzNGYtOTA1MS04MjFhMjIzOTk3Y2UvOTYwMjQzN2YtMTQxNC0z
MmQxLTgxZDAtYjI2ZmNjMDAzMjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNjFhZDc2NzctN2Q2Ny00MzRmLTkw
NTEtODIxYTIyMzk5N2NlLzYxYWQ3Njc3LTdkNjctNDM0Zi05MDUxLTgyMWEyMjM5
OTdjZS5jcmwwHwYDVR0jBBgwFoAU+8mrYwFCCAzx8H7KYfSeNeaCQm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi82MWFkNzY3Ny03ZDY3LTQzNGYtOTA1MS04MjFh
MjIzOTk3Y2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2LGcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGWdQvOEGNX/ojEqkHJTxj+dL8lI1vqGCtyVjT7WTwBpswN9grPsqxVP
gEJD9vV4Ivg+ZsAHM0eBRKYsV3XTr2o4hK3tegrJ71UB28iDR0q3hRak2qEl1GFu
yt7IzhbTt552L+axuEZRrh5XuAhhmcjoy8yEGyES1rmO752tZwEkbFOtnweSbae5
BNiSX8ZPl6efRB/BRcjCRv1W3Z/VnrjjQSrDxzORHgbtJ3dLFd5q2Eq+WXPNsL3L
5vukL2hS0tUbdQHLCeaU5lB01ffSMl3gLFgjGlJvL0p+K0iUUbz5RJDHNN7Uib5e
wxawrZ1shmGZZMVfyYDA6dKDavfBlf4=
-----END CERTIFICATE-----
Generated at Mon Jul 6 18:15:39 2026 by rpki-client