Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/969f25a1-c856-32d6-9b9a-d3b05ea24ec3.roa
File:                     969f25a1-c856-32d6-9b9a-d3b05ea24ec3.roa (raw, json)
Hash identifier:          OEDb9e8FKGaFnJwrK+Cufc97jrDnjgz6GD2bc/wo+Eg=
Subject key identifier:   63:5B:81:2F:66:06:65:14:1E:B6:BA:4C:0C:E5:E1:32:3F:02:52:CB
Certificate issuer:       /CN=c6228f86-bf54-49fc-835c-588cd2aadb49
Certificate serial:       010D0C9F4328584E740C970EF3AE26C001872320
Authority key identifier: D3:6C:AC:E6:33:A2:EE:D4:AF:82:1E:F5:97:60:89:BE:D8:47:3C:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/969f25a1-c856-32d6-9b9a-d3b05ea24ec3.roa
Signing time:             Fri 10 Jul 2026 14:27:39 +0000
ROA not before:           Fri 10 Jul 2026 14:27:39 +0000
ROA not after:            Thu 08 Oct 2026 14:14:14 +0000
asID:                     6325
IP address blocks:        209.175.0.0/16 maxlen: 16
                          209.175.0.0/17 maxlen: 17
                          209.175.0.0/18 maxlen: 18
                          209.175.64.0/18 maxlen: 18
                          209.175.128.0/17 maxlen: 17
                          209.175.128.0/18 maxlen: 18
                          209.175.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c6228f86-bf54-49fc-835c-588cd2aadb49.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c6228f86-bf54-49fc-835c-588cd2aadb49.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:74:0c:97:0e:f3:ae:26:c0:01:87:23:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6228f86-bf54-49fc-835c-588cd2aadb49
        Validity
            Not Before: Jul 10 14:27:39 2026 GMT
            Not After : Oct  8 14:14:14 2026 GMT
        Subject: CN=9e2509ea-e69f-41a9-911f-db2be40b9f7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e3:54:dc:e5:92:2c:4a:b6:26:ef:57:be:f2:
                    57:f8:60:e5:8d:22:88:6b:56:fb:8b:62:2f:e8:2b:
                    36:fa:52:a4:a6:7e:39:34:be:d5:47:04:c1:01:ad:
                    b2:c3:9b:6b:ae:82:c7:46:6e:0f:a5:56:b8:29:46:
                    68:94:8b:59:a1:7c:ad:db:86:ac:12:7a:f0:8b:12:
                    22:b9:ca:16:72:e9:92:73:ce:6b:c6:f6:d1:bf:0f:
                    82:1b:d9:9b:1d:8f:b5:1a:12:d5:aa:37:6a:13:28:
                    1b:f2:d5:9a:5c:aa:57:07:ca:f6:b5:88:84:3d:00:
                    11:19:6d:13:74:a1:0f:51:31:16:74:22:1e:e2:01:
                    fe:a3:22:3e:2f:cd:11:c5:a4:35:4b:86:7e:4c:c0:
                    fa:65:01:87:21:de:4b:e4:bd:96:d7:90:07:9c:6a:
                    eb:81:d1:49:80:2f:88:25:8a:1e:1c:52:6b:49:bf:
                    98:2b:dd:db:f2:30:48:d9:6e:ed:93:22:da:92:38:
                    e9:08:c2:4a:88:59:fa:c6:39:c9:65:50:08:b9:d0:
                    79:bc:da:32:dd:c9:eb:ee:63:e0:a9:22:c1:c6:9c:
                    f4:b5:c5:56:4d:62:07:a8:d6:e3:55:14:fb:a2:09:
                    bf:46:b4:6e:66:ad:14:0a:1a:42:df:83:b0:0c:8f:
                    df:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:5B:81:2F:66:06:65:14:1E:B6:BA:4C:0C:E5:E1:32:3F:02:52:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/969f25a1-c856-32d6-9b9a-d3b05ea24ec3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c6228f86-bf54-49fc-835c-588cd2aadb49.crl

            X509v3 Authority Key Identifier:
                keyid:D3:6C:AC:E6:33:A2:EE:D4:AF:82:1E:F5:97:60:89:BE:D8:47:3C:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.175.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:df:f9:ce:75:47:7f:19:a2:55:0c:31:67:ce:3e:db:cc:a7:
         41:9e:fd:a0:18:60:45:2e:ce:86:99:15:45:33:38:fb:e8:39:
         54:12:43:17:bf:41:54:5c:e4:01:dd:9b:f2:57:5d:26:86:d8:
         e5:3a:1f:71:87:a6:b8:02:62:bf:7c:db:cc:e9:c4:78:60:1a:
         1f:a5:89:d2:af:be:6a:51:92:46:df:28:67:d8:a8:51:3a:4a:
         a5:61:b0:be:47:11:bb:d4:49:ea:b8:b6:23:ec:96:ab:04:a6:
         32:30:88:3a:fb:d1:5b:27:a0:dd:02:3e:d3:8b:60:b6:d4:cb:
         6e:0c:d6:50:50:79:70:30:b1:50:f5:da:12:61:04:48:bd:9d:
         31:3e:99:d4:8b:d1:11:98:a3:07:6e:b1:7e:75:ff:8b:5f:7b:
         3d:fd:88:11:c4:f4:f4:18:ab:9a:17:7b:7c:ed:19:56:51:d4:
         28:ec:83:90:c5:4f:81:66:8c:c5:ee:13:f8:65:8f:06:fc:07:
         f3:df:bf:52:4a:ab:6f:3a:0d:8a:6c:ad:53:7b:47:67:74:bd:
         39:a0:ce:eb:01:54:29:7e:88:fc:9b:f3:c9:7d:7d:95:d8:d3:
         41:63:a7:76:47:d0:6c:e9:40:11:79:a5:11:f7:d7:f6:ea:a8:
         11:a6:6b:dd
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE50DJcO864mwAGHIyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzYyMjhmODYtYmY1NC00OWZjLTgzNWMtNTg4Y2QyYWFk
YjQ5MB4XDTI2MDcxMDE0MjczOVoXDTI2MTAwODE0MTQxNFowLzEtMCsGA1UEAxMk
OWUyNTA5ZWEtZTY5Zi00MWE5LTkxMWYtZGIyYmU0MGI5ZjdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+NU3OWSLEq2Ju9XvvJX+GDljSKIa1b7i2Iv
6Cs2+lKkpn45NL7VRwTBAa2yw5trroLHRm4PpVa4KUZolItZoXyt24asEnrwixIi
ucoWcumSc85rxvbRvw+CG9mbHY+1GhLVqjdqEygb8tWaXKpXB8r2tYiEPQARGW0T
dKEPUTEWdCIe4gH+oyI+L80RxaQ1S4Z+TMD6ZQGHId5L5L2W15AHnGrrgdFJgC+I
JYoeHFJrSb+YK93b8jBI2W7tkyLakjjpCMJKiFn6xjnJZVAIudB5vNoy3cnr7mPg
qSLBxpz0tcVWTWIHqNbjVRT7ogm/RrRuZq0UChpC34OwDI/fAwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGNbgS9mBmUUHra6TAzl4TI/AlLLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9jNjIy
OGY4Ni1iZjU0LTQ5ZmMtODM1Yy01ODhjZDJhYWRiNDkvOTY5ZjI1YTEtYzg1Ni0z
MmQ2LTliOWEtZDNiMDVlYTI0ZWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYzYyMjhmODYtYmY1NC00OWZjLTgz
NWMtNTg4Y2QyYWFkYjQ5L2M2MjI4Zjg2LWJmNTQtNDlmYy04MzVjLTU4OGNkMmFh
ZGI0OS5jcmwwHwYDVR0jBBgwFoAU02ys5jOi7tSvgh71l2CJvthHPJkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi9jNjIyOGY4Ni1iZjU0LTQ5ZmMtODM1Yy01ODhj
ZDJhYWRiNDkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA0a8wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAOt/5znVHfxmiVQwxZ84+28ynQZ79oBhgRS7OhpkVRTM4++g5VBJDF79B
VFzkAd2b8lddJobY5TofcYemuAJiv3zbzOnEeGAaH6WJ0q++alGSRt8oZ9ioUTpK
pWGwvkcRu9RJ6ri2I+yWqwSmMjCIOvvRWyeg3QI+04tgttTLbgzWUFB5cDCxUPXa
EmEESL2dMT6Z1IvREZijB26xfnX/i197Pf2IEcT09Birmhd7fO0ZVlHUKOyDkMVP
gWaMxe4T+GWPBvwH89+/UkqrbzoNimytU3tHZ3S9OaDO6wFUKX6I/JvzyX19ldjT
QWOndkfQbOlAEXmlEffX9uqoEaZr3Q==
-----END CERTIFICATE-----
Generated at Mon Jul 13 07:16:07 2026 by rpki-client