Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cc2bfc06-2668-422c-ab3c-525935f88619/d4a6602c-b939-3998-82bc-decadeefdd3b.roa
File:                     d4a6602c-b939-3998-82bc-decadeefdd3b.roa (raw, json)
Hash identifier:          WXXzmfLdMWldSA6AzMGMYFotzbq3JkMv2kz9H4OaFUk=
Subject key identifier:   3C:FD:B4:DE:99:5E:C5:7F:5C:E8:0D:CA:72:81:8F:89:1E:3A:31:48
Certificate issuer:       /CN=cc2bfc06-2668-422c-ab3c-525935f88619
Certificate serial:       010D0C9F4328584E4559F37A9BAFD2FB55ECEA40
Authority key identifier: 6D:CD:1F:EA:8C:A4:4B:87:A1:E7:0D:C7:D7:D1:66:45:01:C0:74:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cc2bfc06-2668-422c-ab3c-525935f88619.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cc2bfc06-2668-422c-ab3c-525935f88619/d4a6602c-b939-3998-82bc-decadeefdd3b.roa
Signing time:             Tue 23 Jun 2026 21:00:12 +0000
ROA not before:           Tue 23 Jun 2026 21:00:12 +0000
ROA not after:            Mon 21 Sep 2026 21:00:12 +0000
asID:                     16509
IP address blocks:        165.124.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cc2bfc06-2668-422c-ab3c-525935f88619/cc2bfc06-2668-422c-ab3c-525935f88619.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cc2bfc06-2668-422c-ab3c-525935f88619/cc2bfc06-2668-422c-ab3c-525935f88619.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cc2bfc06-2668-422c-ab3c-525935f88619.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:45:59:f3:7a:9b:af:d2:fb:55:ec:ea:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc2bfc06-2668-422c-ab3c-525935f88619
        Validity
            Not Before: Jun 23 21:00:12 2026 GMT
            Not After : Sep 21 21:00:12 2026 GMT
        Subject: CN=b34dc01a-77fd-4ee2-95af-dd0bf4b0fb49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:40:c1:ea:81:9e:71:50:91:d4:22:ef:f6:08:
                    ee:01:b0:04:96:61:3a:bd:e5:29:a1:c9:ff:de:1f:
                    ee:26:a7:18:b7:ab:c2:8b:d7:94:2a:02:b1:2f:66:
                    22:bf:f1:d3:e9:c0:2c:21:a8:79:47:f1:b1:db:9b:
                    39:f1:e9:cf:86:d5:0a:d7:9c:d3:cd:e7:50:11:1f:
                    16:f2:71:f4:6e:d9:26:a6:76:24:d6:46:37:4c:bc:
                    38:69:56:9f:e9:33:e2:00:35:4d:99:e2:4e:d8:c2:
                    bb:c8:55:30:b1:4f:12:f1:06:d5:bd:9f:99:61:59:
                    39:10:16:8e:01:24:7f:28:97:fb:d4:5d:c5:3b:b5:
                    3d:e9:ab:3f:86:b9:e4:f4:39:67:1d:62:de:48:94:
                    e9:15:19:0a:c5:ef:62:57:9b:30:45:1b:fe:d1:81:
                    75:0a:ff:72:62:31:21:21:71:54:4c:4b:32:78:eb:
                    cd:11:6f:a5:ae:3c:b1:d8:7b:bb:c9:69:f4:9e:ed:
                    97:44:14:07:f5:80:99:ea:84:1e:38:ec:52:46:2f:
                    e7:d7:a9:ff:0f:f1:4a:c1:8c:c6:17:3c:87:c3:f5:
                    85:a5:9d:09:13:d2:1e:8e:4d:14:1c:d4:46:f0:1a:
                    38:f6:3b:e6:8d:66:ef:9d:10:bf:b3:18:d9:70:90:
                    d1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:FD:B4:DE:99:5E:C5:7F:5C:E8:0D:CA:72:81:8F:89:1E:3A:31:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cc2bfc06-2668-422c-ab3c-525935f88619/d4a6602c-b939-3998-82bc-decadeefdd3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cc2bfc06-2668-422c-ab3c-525935f88619/cc2bfc06-2668-422c-ab3c-525935f88619.crl

            X509v3 Authority Key Identifier:
                keyid:6D:CD:1F:EA:8C:A4:4B:87:A1:E7:0D:C7:D7:D1:66:45:01:C0:74:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cc2bfc06-2668-422c-ab3c-525935f88619.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.124.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:19:71:13:cd:ef:0f:86:db:8f:f4:fe:4e:4a:f2:5c:2d:db:
         47:10:73:c7:6e:3a:46:1d:73:93:ba:ba:87:56:e8:27:6b:ab:
         a7:ba:d9:1d:e4:0e:0f:19:4c:11:03:bd:67:f3:14:c3:1d:c3:
         5f:39:fc:d4:bd:1d:c3:c2:79:93:43:d8:27:6e:1e:73:df:e4:
         ca:8d:03:89:da:42:70:37:82:b9:61:d1:4f:a3:d8:a3:49:7d:
         a9:7a:fb:31:02:28:d1:56:17:99:34:46:b1:c4:97:ea:17:1c:
         55:9a:01:4d:4d:24:f7:c6:57:9d:ce:82:ff:9c:40:69:5e:c8:
         b4:05:cd:14:91:9e:6a:cf:b6:ea:53:71:72:6b:44:97:c5:17:
         e7:a0:88:8c:86:23:8f:cb:c4:41:57:a1:14:c0:f3:7c:a1:b8:
         52:34:15:29:78:b5:37:a7:70:a2:c8:d4:c9:e1:6d:95:60:28:
         a2:e8:6d:25:19:db:80:b6:b1:fa:96:2e:18:d3:b9:aa:c8:d4:
         fa:a9:7c:f5:c0:dc:81:67:bb:97:22:b9:59:c6:8f:a4:fc:d6:
         0b:61:ed:d1:9d:c2:33:44:88:7a:64:fe:03:0c:ea:f2:b9:28:
         13:20:c3:23:7c:7f:f8:92:16:0c:f0:87:3a:2f:69:c0:b5:0c:
         6d:d4:aa:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5FWfN6m6/S+1Xs6kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2MyYmZjMDYtMjY2OC00MjJjLWFiM2MtNTI1OTM1Zjg4
NjE5MB4XDTI2MDYyMzIxMDAxMloXDTI2MDkyMTIxMDAxMlowLzEtMCsGA1UEAxMk
YjM0ZGMwMWEtNzdmZC00ZWUyLTk1YWYtZGQwYmY0YjBmYjQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEDB6oGecVCR1CLv9gjuAbAElmE6veUpocn/
3h/uJqcYt6vCi9eUKgKxL2Yiv/HT6cAsIah5R/Gx25s58enPhtUK15zTzedQER8W
8nH0btkmpnYk1kY3TLw4aVaf6TPiADVNmeJO2MK7yFUwsU8S8QbVvZ+ZYVk5EBaO
ASR/KJf71F3FO7U96as/hrnk9DlnHWLeSJTpFRkKxe9iV5swRRv+0YF1Cv9yYjEh
IXFUTEsyeOvNEW+lrjyx2Hu7yWn0nu2XRBQH9YCZ6oQeOOxSRi/n16n/D/FKwYzG
FzyHw/WFpZ0JE9Iejk0UHNRG8Bo49jvmjWbvnRC/sxjZcJDRmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDz9tN6ZXsV/XOgNynKBj4keOjFIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jYzJi
ZmMwNi0yNjY4LTQyMmMtYWIzYy01MjU5MzVmODg2MTkvZDRhNjYwMmMtYjkzOS0z
OTk4LTgyYmMtZGVjYWRlZWZkZDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2MyYmZjMDYtMjY2OC00MjJjLWFi
M2MtNTI1OTM1Zjg4NjE5L2NjMmJmYzA2LTI2NjgtNDIyYy1hYjNjLTUyNTkzNWY4
ODYxOS5jcmwwHwYDVR0jBBgwFoAUbc0f6oykS4eh5w3H19FmRQHAdCwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9jYzJiZmMwNi0yNjY4LTQyMmMtYWIzYy01MjU5
MzVmODg2MTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApXy7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABgZcRPN7w+G24/0/k5K8lwt20cQc8duOkYdc5O6uodW6Cdrq6e62R3k
Dg8ZTBEDvWfzFMMdw185/NS9HcPCeZND2CduHnPf5MqNA4naQnA3grlh0U+j2KNJ
fal6+zECKNFWF5k0RrHEl+oXHFWaAU1NJPfGV53Ogv+cQGleyLQFzRSRnmrPtupT
cXJrRJfFF+egiIyGI4/LxEFXoRTA83yhuFI0FSl4tTencKLI1MnhbZVgKKLobSUZ
24C2sfqWLhjTuarI1PqpfPXA3IFnu5ciuVnGj6T81gth7dGdwjNEiHpk/gMM6vK5
KBMgwyN8f/iSFgzwhzovacC1DG3Uqjg=
-----END CERTIFICATE-----
Generated at Mon Jul 6 21:10:02 2026 by rpki-client