Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7106c59c-b107-4b62-809b-7ed3c693098c/46a5815b-1945-38a0-93f8-7b0ea28f2f04.roa
File:                     46a5815b-1945-38a0-93f8-7b0ea28f2f04.roa (raw, json)
Hash identifier:          F9EGE86FWuq0DY9zisTvcM2V0cRLLIazifxYHhrcCLo=
Subject key identifier:   4A:F0:BE:7A:26:48:2E:A2:37:A9:1A:A0:F3:91:77:13:FA:CC:F7:10
Certificate issuer:       /CN=7106c59c-b107-4b62-809b-7ed3c693098c
Certificate serial:       010D0C9F4328584E42444A75D62BF2134B0E3A80
Authority key identifier: 67:81:3D:89:8E:31:BE:DC:79:6B:15:40:FA:CE:66:D8:95:4C:97:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7106c59c-b107-4b62-809b-7ed3c693098c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7106c59c-b107-4b62-809b-7ed3c693098c/46a5815b-1945-38a0-93f8-7b0ea28f2f04.roa
Signing time:             Mon 22 Jun 2026 18:29:28 +0000
ROA not before:           Mon 22 Jun 2026 18:29:28 +0000
ROA not after:            Sun 20 Sep 2026 18:29:28 +0000
asID:                     15297
IP address blocks:        108.174.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7106c59c-b107-4b62-809b-7ed3c693098c/7106c59c-b107-4b62-809b-7ed3c693098c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7106c59c-b107-4b62-809b-7ed3c693098c/7106c59c-b107-4b62-809b-7ed3c693098c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7106c59c-b107-4b62-809b-7ed3c693098c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:42:44:4a:75:d6:2b:f2:13:4b:0e:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7106c59c-b107-4b62-809b-7ed3c693098c
        Validity
            Not Before: Jun 22 18:29:28 2026 GMT
            Not After : Sep 20 18:29:28 2026 GMT
        Subject: CN=d3ebc18a-5c5f-4f81-9a05-53a78ed10d24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:3f:63:73:7c:92:3a:79:b1:1d:88:31:2a:2f:
                    5e:54:45:43:1e:6b:e9:d0:03:15:d6:cc:66:08:c7:
                    74:9f:b2:85:5a:6e:c4:03:1b:f7:0b:88:15:e5:81:
                    27:99:af:c0:82:a0:22:bd:58:f8:13:bc:7c:2c:72:
                    2c:b4:ca:67:4a:46:cf:15:3b:15:27:21:7c:55:db:
                    7a:72:b6:84:73:b9:0c:14:ba:5c:71:01:ba:1e:61:
                    0c:88:02:2b:a0:19:90:12:cb:00:92:d7:48:bb:b7:
                    5f:10:ac:85:6d:13:96:18:e7:d3:b6:f3:a8:62:42:
                    e9:89:6f:50:92:fc:47:c3:cc:6d:af:3d:7a:82:1a:
                    e6:73:af:0e:5d:be:40:0c:8b:0a:bd:3f:f2:97:49:
                    da:1d:da:8c:e8:39:b5:79:ec:64:45:b9:d2:09:51:
                    70:5e:ad:26:93:d5:d3:f2:5b:3b:aa:3b:02:1d:bc:
                    e9:ae:95:eb:49:fb:70:27:3e:a4:b0:d9:bf:eb:cc:
                    03:45:36:17:5f:aa:41:43:11:c5:16:59:11:8c:87:
                    da:66:c1:7b:b8:50:2e:8d:df:3d:14:9a:84:4d:85:
                    13:55:90:a4:09:93:74:94:e7:b7:07:64:34:e2:ab:
                    53:6d:c1:1e:ed:7f:a8:53:f8:ce:f1:b6:c0:53:44:
                    bd:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:F0:BE:7A:26:48:2E:A2:37:A9:1A:A0:F3:91:77:13:FA:CC:F7:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7106c59c-b107-4b62-809b-7ed3c693098c/46a5815b-1945-38a0-93f8-7b0ea28f2f04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7106c59c-b107-4b62-809b-7ed3c693098c/7106c59c-b107-4b62-809b-7ed3c693098c.crl

            X509v3 Authority Key Identifier:
                keyid:67:81:3D:89:8E:31:BE:DC:79:6B:15:40:FA:CE:66:D8:95:4C:97:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7106c59c-b107-4b62-809b-7ed3c693098c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.174.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:63:a6:16:3c:8e:39:e8:44:19:a4:99:82:ab:11:0d:6e:5f:
         09:ff:40:a5:20:3d:ec:77:90:e2:60:c0:5d:7d:31:3f:a1:bd:
         33:2e:0e:ec:44:ed:7e:ad:3b:5c:6f:f5:1c:2d:18:cd:6b:03:
         49:66:9b:49:8b:55:34:76:68:ec:a3:0b:34:d6:76:2e:22:2f:
         b2:ac:d8:ad:54:61:aa:08:b3:e6:02:de:c1:3e:e7:16:10:43:
         3a:73:d1:7a:9e:61:4a:8a:2f:c8:a0:00:5e:9c:9c:ce:22:08:
         77:15:30:af:63:91:27:96:bb:6d:0b:3d:e5:39:96:a3:3f:98:
         aa:19:a1:3d:32:f1:66:6b:a4:8b:c7:3b:b5:5f:67:44:51:47:
         9b:e3:4a:e9:1a:ee:9e:00:9a:0f:76:c4:4e:62:70:d1:c8:3c:
         97:0f:66:59:35:c8:fd:d2:f5:8a:78:ff:bc:59:f1:6b:86:7f:
         a0:05:98:4d:16:e5:6e:6d:0e:63:84:62:71:72:8c:ce:c2:b9:
         e4:77:d4:0b:a5:b7:f2:c4:b3:54:0c:77:07:94:b6:25:c9:2d:
         cf:31:f2:89:c2:70:2a:9b:24:67:0b:e8:dc:3e:4c:f2:07:10:
         ef:81:0a:c3:4d:f9:1a:38:6e:9e:8b:5c:76:c1:02:55:c1:d3:
         49:7b:f6:d4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5CREp11ivyE0sOOoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzEwNmM1OWMtYjEwNy00YjYyLTgwOWItN2VkM2M2OTMw
OThjMB4XDTI2MDYyMjE4MjkyOFoXDTI2MDkyMDE4MjkyOFowLzEtMCsGA1UEAxMk
ZDNlYmMxOGEtNWM1Zi00ZjgxLTlhMDUtNTNhNzhlZDEwZDI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjT9jc3ySOnmxHYgxKi9eVEVDHmvp0AMV1sxm
CMd0n7KFWm7EAxv3C4gV5YEnma/AgqAivVj4E7x8LHIstMpnSkbPFTsVJyF8Vdt6
craEc7kMFLpccQG6HmEMiAIroBmQEssAktdIu7dfEKyFbROWGOfTtvOoYkLpiW9Q
kvxHw8xtrz16ghrmc68OXb5ADIsKvT/yl0naHdqM6Dm1eexkRbnSCVFwXq0mk9XT
8ls7qjsCHbzprpXrSftwJz6ksNm/68wDRTYXX6pBQxHFFlkRjIfaZsF7uFAujd89
FJqETYUTVZCkCZN0lOe3B2Q04qtTbcEe7X+oU/jO8bbAU0S9cQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFErwvnomSC6iN6kaoPORdxP6zPcQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi83MTA2
YzU5Yy1iMTA3LTRiNjItODA5Yi03ZWQzYzY5MzA5OGMvNDZhNTgxNWItMTk0NS0z
OGEwLTkzZjgtN2IwZWEyOGYyZjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNzEwNmM1OWMtYjEwNy00YjYyLTgw
OWItN2VkM2M2OTMwOThjLzcxMDZjNTljLWIxMDctNGI2Mi04MDliLTdlZDNjNjkz
MDk4Yy5jcmwwHwYDVR0jBBgwFoAUZ4E9iY4xvtx5axVA+s5m2JVMl2kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi83MTA2YzU5Yy1iMTA3LTRiNjItODA5Yi03ZWQz
YzY5MzA5OGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEbK7gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADBjphY8jjnoRBmkmYKrEQ1uXwn/QKUgPex3kOJgwF19MT+hvTMuDuxE
7X6tO1xv9RwtGM1rA0lmm0mLVTR2aOyjCzTWdi4iL7Ks2K1UYaoIs+YC3sE+5xYQ
Qzpz0XqeYUqKL8igAF6cnM4iCHcVMK9jkSeWu20LPeU5lqM/mKoZoT0y8WZrpIvH
O7VfZ0RRR5vjSuka7p4Amg92xE5icNHIPJcPZlk1yP3S9Yp4/7xZ8WuGf6AFmE0W
5W5tDmOEYnFyjM7CueR31Ault/LEs1QMdweUtiXJLc8x8onCcCqbJGcL6Nw+TPIH
EO+BCsNN+Ro4bp6LXHbBAlXB00l79tQ=
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:58:31 2026 by rpki-client