Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/8a6cbabd-7336-3337-a6af-1c26eba5d1a3.roa
File:                     8a6cbabd-7336-3337-a6af-1c26eba5d1a3.roa (raw, json)
Hash identifier:          tccPY9Swxli0W01JqYvAvwLbuhGm00woAysZnLrz2tY=
Subject key identifier:   8E:0C:F4:58:48:3A:4A:78:18:5F:DE:CE:F2:59:30:21:B3:95:4D:4B
Certificate issuer:       /CN=66094ef6-a967-4978-81e1-d66227a478fd
Certificate serial:       010D0C9F4328584E779A3724B2E253D05CB3F0F0
Authority key identifier: DC:40:B2:B3:F2:F8:D5:1B:56:E9:5A:27:61:F8:24:01:B5:71:DF:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/8a6cbabd-7336-3337-a6af-1c26eba5d1a3.roa
Signing time:             Sat 11 Jul 2026 21:00:11 +0000
ROA not before:           Sat 11 Jul 2026 21:00:11 +0000
ROA not after:            Fri 09 Oct 2026 21:00:11 +0000
asID:                     13536
IP address blocks:        209.94.96.0/19 maxlen: 24
                          216.59.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:77:9a:37:24:b2:e2:53:d0:5c:b3:f0:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66094ef6-a967-4978-81e1-d66227a478fd
        Validity
            Not Before: Jul 11 21:00:11 2026 GMT
            Not After : Oct  9 21:00:11 2026 GMT
        Subject: CN=8a67956d-5122-4321-a92e-99677c7891a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:90:e6:0c:3f:f8:8c:8f:63:8e:d6:4f:1b:ed:
                    bf:eb:1d:ca:f7:0e:15:12:07:3c:89:4a:11:47:3d:
                    f8:0d:75:3e:3a:35:53:dc:c5:d3:0c:a6:eb:84:3b:
                    98:43:a2:05:d8:23:36:e7:e0:4e:4b:e0:48:ae:e6:
                    b5:11:8a:e4:24:db:1a:7e:08:10:25:28:eb:43:df:
                    d4:7a:bd:f2:27:64:58:51:0a:80:b4:92:0d:65:24:
                    c3:ea:40:33:36:f9:56:ef:40:3a:66:fe:82:03:7b:
                    b2:0e:87:e2:9f:2a:3c:dd:93:4f:4e:09:4f:9b:df:
                    c3:44:7b:c1:13:8f:af:66:83:a6:2f:ff:a2:0a:3f:
                    5e:04:ff:b9:cb:21:4b:51:99:12:22:f2:fb:8b:18:
                    4a:3b:47:4b:4e:c9:0a:e2:61:2d:9f:3a:96:a8:8c:
                    81:eb:d4:f4:8e:03:17:4b:a6:25:0f:3b:24:38:6f:
                    f8:54:a6:85:19:9b:7e:06:81:c2:24:9a:c6:98:7d:
                    cd:fe:19:cd:db:57:1f:5d:56:e0:4d:16:67:99:4f:
                    dd:1e:3d:5a:e3:f1:91:44:36:d0:65:cb:09:b2:3b:
                    39:08:91:27:9e:21:dd:ba:29:89:76:2e:30:ee:32:
                    fb:6a:59:2c:cd:2c:da:c1:80:97:24:2b:f7:9e:11:
                    9d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:0C:F4:58:48:3A:4A:78:18:5F:DE:CE:F2:59:30:21:B3:95:4D:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/8a6cbabd-7336-3337-a6af-1c26eba5d1a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.crl

            X509v3 Authority Key Identifier:
                keyid:DC:40:B2:B3:F2:F8:D5:1B:56:E9:5A:27:61:F8:24:01:B5:71:DF:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.94.96.0/19
                  216.59.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:50:d9:7c:b6:9b:66:5e:b0:12:a6:b1:07:dc:67:59:d6:75:
         06:a6:c7:a9:cf:88:9d:5b:21:49:f8:8c:68:87:f1:bd:aa:3e:
         3f:a5:36:a7:2a:18:1c:8e:d1:b8:fd:a1:c6:ce:c3:59:29:41:
         19:95:50:02:b2:09:19:ff:cb:3a:e7:b4:02:a7:f6:82:4e:16:
         3d:7b:6e:b0:e8:50:45:bb:df:c0:61:f2:5f:7e:fa:6e:a2:0c:
         34:1c:20:2e:27:64:00:bc:16:ce:25:fa:ae:0e:70:46:3b:be:
         ad:0d:91:3a:d7:c8:72:16:5b:74:68:79:dc:95:9f:6c:6e:d1:
         88:54:38:64:27:f2:b0:cf:7a:02:ac:c7:f7:10:b1:4e:db:8b:
         9f:20:4f:be:39:f2:49:34:9d:e7:a6:a5:75:61:0d:e1:0e:6d:
         91:05:b0:e7:14:29:b2:90:55:b6:b8:91:fa:66:ce:85:e8:fc:
         1f:2a:15:18:9c:be:53:ed:eb:da:c4:7c:da:ce:5a:99:71:6c:
         6e:b1:29:e5:9f:44:2e:fd:7a:26:41:02:1c:c9:fb:c1:b6:09:
         16:77:4f:ca:30:ce:a5:9c:5d:39:6e:f9:6b:cd:60:56:c6:11:
         0e:98:f7:09:18:ee:12:6d:44:9e:37:db:75:c0:43:75:b5:8b:
         55:7c:99:7d
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE53mjcksuJT0Fyz8PAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjYwOTRlZjYtYTk2Ny00OTc4LTgxZTEtZDY2MjI3YTQ3
OGZkMB4XDTI2MDcxMTIxMDAxMVoXDTI2MTAwOTIxMDAxMVowLzEtMCsGA1UEAxMk
OGE2Nzk1NmQtNTEyMi00MzIxLWE5MmUtOTk2NzdjNzg5MWEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6pDmDD/4jI9jjtZPG+2/6x3K9w4VEgc8iUoR
Rz34DXU+OjVT3MXTDKbrhDuYQ6IF2CM25+BOS+BIrua1EYrkJNsafggQJSjrQ9/U
er3yJ2RYUQqAtJINZSTD6kAzNvlW70A6Zv6CA3uyDofinyo83ZNPTglPm9/DRHvB
E4+vZoOmL/+iCj9eBP+5yyFLUZkSIvL7ixhKO0dLTskK4mEtnzqWqIyB69T0jgMX
S6YlDzskOG/4VKaFGZt+BoHCJJrGmH3N/hnN21cfXVbgTRZnmU/dHj1a4/GRRDbQ
ZcsJsjs5CJEnniHduimJdi4w7jL7alkszSzawYCXJCv3nhGdMQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFI4M9FhIOkp4GF/ezvJZMCGzlU1LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82NjA5
NGVmNi1hOTY3LTQ5NzgtODFlMS1kNjYyMjdhNDc4ZmQvOGE2Y2JhYmQtNzMzNi0z
MzM3LWE2YWYtMWMyNmViYTVkMWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNjYwOTRlZjYtYTk2Ny00OTc4LTgx
ZTEtZDY2MjI3YTQ3OGZkLzY2MDk0ZWY2LWE5NjctNDk3OC04MWUxLWQ2NjIyN2E0
NzhmZC5jcmwwHwYDVR0jBBgwFoAU3ECys/L41RtW6VonYfgkAbVx3zEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi82NjA5NGVmNi1hOTY3LTQ5NzgtODFlMS1kNjYy
MjdhNDc4ZmQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQF0V5gAwQF
2DtAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAIBQ2Xy2m2ZesBKmsQfcZ1nWdQamx6nPiJ1bIUn4jGiH8b2q
Pj+lNqcqGByO0bj9ocbOw1kpQRmVUAKyCRn/yzrntAKn9oJOFj17brDoUEW738Bh
8l9++m6iDDQcIC4nZAC8Fs4l+q4OcEY7vq0NkTrXyHIWW3RoedyVn2xu0YhUOGQn
8rDPegKsx/cQsU7bi58gT7458kk0neempXVhDeEObZEFsOcUKbKQVba4kfpmzoXo
/B8qFRicvlPt69rEfNrOWplxbG6xKeWfRC79eiZBAhzJ+8G2CRZ3T8owzqWcXTlu
+WvNYFbGEQ6Y9wkY7hJtRJ4323XAQ3W1i1V8mX0=
-----END CERTIFICATE-----
Generated at Mon Jul 13 12:52:42 2026 by rpki-client