Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/36dcd74a-01ba-35bf-a6aa-95841d136d7a.roa
File:                     36dcd74a-01ba-35bf-a6aa-95841d136d7a.roa (raw, json)
Hash identifier:          mzL8AndQih+wiNsBKMyb5uArvbTvp8T7ht8FzOdPsW4=
Subject key identifier:   C6:06:09:47:4E:4B:ED:5F:74:94:9A:35:C7:33:00:23:30:64:4E:6C
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584B0CDC145ED60A598BBA46C620
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/36dcd74a-01ba-35bf-a6aa-95841d136d7a.roa
Signing time:             Mon 01 Sep 2025 13:00:40 +0000
ROA not before:           Mon 01 Sep 2025 13:00:40 +0000
ROA not after:            Sun 30 Nov 2025 14:00:40 +0000
asID:                     26744
IP address blocks:        68.170.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Sep 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0c:dc:14:5e:d6:0a:59:8b:ba:46:c6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Sep  1 13:00:40 2025 GMT
            Not After : Nov 30 14:00:40 2025 GMT
        Subject: CN=243d6ad8-e23c-44ba-9257-120c18e1bc72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:69:0c:8b:46:46:cb:0b:f9:89:46:b2:f0:7d:
                    73:08:cd:0f:da:1f:ec:bf:b6:0a:ba:1e:8f:2b:9e:
                    8c:22:ca:43:2a:1f:35:13:8a:64:65:b8:f5:9b:f1:
                    de:79:47:1b:77:cb:83:34:b5:4f:d2:97:48:4e:b4:
                    98:c6:cf:e5:48:af:72:84:34:cf:73:7a:18:f8:e8:
                    82:72:a2:6b:2a:8e:15:c5:d3:6d:67:31:0f:d6:f7:
                    c0:af:78:02:57:fa:db:38:71:73:41:21:f1:ca:21:
                    de:0e:cc:6b:53:41:ae:d4:aa:11:1d:6b:d6:43:8f:
                    20:e3:c1:fa:cf:5c:c0:7f:90:3a:5c:d8:02:bc:7f:
                    db:03:a0:6b:0a:d5:7d:06:4d:79:06:77:13:be:a7:
                    03:12:44:04:38:aa:00:6b:e3:e0:e9:a5:62:ef:db:
                    7c:75:69:06:53:f4:b4:96:ab:92:da:f5:3a:67:16:
                    4e:fd:67:36:a4:d8:42:82:50:d5:de:99:fb:52:5c:
                    69:f1:7e:f9:34:bf:65:b1:af:7c:31:4b:c0:4f:46:
                    85:2e:87:fb:23:6e:4e:db:4c:52:79:eb:31:3d:45:
                    fb:69:69:91:c8:18:02:0f:af:41:ce:00:fe:81:2a:
                    3e:51:99:e8:d5:0b:0f:5e:0d:4c:5e:8e:1d:4c:eb:
                    30:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:06:09:47:4E:4B:ED:5F:74:94:9A:35:C7:33:00:23:30:64:4E:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/36dcd74a-01ba-35bf-a6aa-95841d136d7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.170.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:d1:6d:ea:46:98:9c:bf:f6:e8:c5:78:3b:95:0a:57:27:03:
         68:04:a1:f6:80:4f:eb:d2:02:a7:b4:05:51:f9:cf:77:97:dd:
         17:da:40:e7:26:58:8a:02:a9:b8:e4:f7:27:44:a2:30:0b:fb:
         02:31:65:a8:a9:95:de:83:04:f9:69:f3:1c:97:00:39:d9:1a:
         59:41:26:9b:63:99:63:28:03:7b:3e:20:23:c6:3f:67:56:a5:
         b7:1f:22:90:0e:40:f5:fa:50:53:d7:96:45:71:d7:38:77:89:
         dd:ae:e5:e3:7d:7f:c3:c6:21:bb:ed:56:15:70:b8:99:8b:d2:
         fc:a0:79:36:6f:b5:1a:80:b1:e9:f9:ab:d8:5c:1b:7d:10:67:
         1f:d6:de:82:d9:cc:5e:f2:5b:41:62:36:10:0f:f5:4b:0e:a8:
         98:6a:45:68:e9:d1:94:38:5b:24:dc:96:88:f9:05:fe:4b:e4:
         5a:94:30:a4:bb:9b:c6:f4:e6:ea:4e:95:8c:19:b1:b2:a1:54:
         d5:c5:81:85:b0:64:54:4c:5a:18:c8:72:cc:9f:7d:4a:a7:eb:
         6a:0c:24:b1:fa:6b:1c:f1:4c:d5:36:3b:fd:5c:b5:ae:cd:90:
         ab:15:9a:62:f3:48:59:b0:b8:1f:7e:17:a3:c7:23:b9:b5:ee:
         b4:95:35:d4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3BRe1gpZi7pGxiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj
ZjFhMB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk
MjQzZDZhZDgtZTIzYy00NGJhLTkyNTctMTIwYzE4ZTFiYzcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5mkMi0ZGywv5iUay8H1zCM0P2h/sv7YKuh6P
K56MIspDKh81E4pkZbj1m/HeeUcbd8uDNLVP0pdITrSYxs/lSK9yhDTPc3oY+OiC
cqJrKo4VxdNtZzEP1vfAr3gCV/rbOHFzQSHxyiHeDsxrU0Gu1KoRHWvWQ48g48H6
z1zAf5A6XNgCvH/bA6BrCtV9Bk15BncTvqcDEkQEOKoAa+Pg6aVi79t8dWkGU/S0
lquS2vU6ZxZO/Wc2pNhCglDV3pn7Ulxp8X75NL9lsa98MUvAT0aFLof7I25O20xS
eesxPUX7aWmRyBgCD69BzgD+gSo+UZno1QsPXg1MXo4dTOswNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMYGCUdOS+1fdJSaNcczACMwZE5sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4
NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvMzZkY2Q3NGEtMDFiYS0z
NWJmLWE2YWEtOTU4NDFkMTM2ZDdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm
ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk
Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx
OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKrxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMDRbepGmJy/9ujFeDuVClcnA2gEofaAT+vSAqe0BVH5z3eX3RfaQOcm
WIoCqbjk9ydEojAL+wIxZaipld6DBPlp8xyXADnZGllBJptjmWMoA3s+ICPGP2dW
pbcfIpAOQPX6UFPXlkVx1zh3id2u5eN9f8PGIbvtVhVwuJmL0vygeTZvtRqAsen5
q9hcG30QZx/W3oLZzF7yW0FiNhAP9UsOqJhqRWjp0ZQ4WyTcloj5Bf5L5FqUMKS7
m8b05upOlYwZsbKhVNXFgYWwZFRMWhjIcsyffUqn62oMJLH6axzxTNU2O/1cta7N
kKsVmmLzSFmwuB9+F6PHI7m17rSVNdQ=
-----END CERTIFICATE-----
Generated at Fri Sep 19 14:20:05 2025 by rpki-client