Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/6cc61ba5-5f34-3b37-b5d1-04f7411caff6.roa
File:                     6cc61ba5-5f34-3b37-b5d1-04f7411caff6.roa (raw, json)
Hash identifier:          gxW3XYAhG9hb+dGSNTWBGz/Pu1AU7al5nHXnWPaKTkg=
Subject key identifier:   81:82:61:FF:D9:82:59:4D:6E:D1:FB:FA:FA:6A:49:D9:93:8F:41:95
Certificate issuer:       /CN=09440a93-986f-41da-8723-7b67f81bdbce
Certificate serial:       010D0C9F4328584D8D9003264C71B04977DBEB60
Authority key identifier: 48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/6cc61ba5-5f34-3b37-b5d1-04f7411caff6.roa
Signing time:             Sun 19 Apr 2026 01:00:23 +0000
ROA not before:           Sun 19 Apr 2026 01:00:23 +0000
ROA not after:            Sat 18 Jul 2026 01:00:23 +0000
asID:                     19901
IP address blocks:        67.147.208.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8d:90:03:26:4c:71:b0:49:77:db:eb:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09440a93-986f-41da-8723-7b67f81bdbce
        Validity
            Not Before: Apr 19 01:00:23 2026 GMT
            Not After : Jul 18 01:00:23 2026 GMT
        Subject: CN=94876583-d01c-4ee9-94db-e0e1ca787867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:94:bf:e0:48:e6:d1:77:82:5c:26:20:21:39:
                    dc:c4:d7:d8:48:c5:3f:48:b8:15:a5:d1:fc:0a:1d:
                    3e:ce:65:8f:09:0f:56:92:f8:ad:bc:bc:7d:b7:19:
                    9f:bb:5d:f7:9b:27:2d:5b:61:e4:79:f7:31:46:2d:
                    15:73:6a:8a:ba:ff:9a:9c:b9:19:db:cb:0a:6d:bc:
                    45:e2:c0:da:79:f5:2f:31:ec:cc:d9:16:81:3a:10:
                    44:e8:25:cc:3b:78:ca:9a:4d:21:7c:95:cb:cf:35:
                    2e:16:e6:11:99:36:c4:f5:10:fc:0f:ad:91:6a:8c:
                    6d:dd:ba:5c:f9:57:a3:ca:fa:7e:7c:3d:f4:52:40:
                    3d:b9:13:b3:20:b4:55:c1:df:a6:53:06:9f:12:8b:
                    7c:61:2a:72:6b:1f:2e:4d:52:96:4b:56:a6:d9:7d:
                    23:bd:c6:dc:f5:33:fb:d5:ac:30:f4:d9:44:a3:c1:
                    fd:44:74:64:46:7c:ec:b5:73:58:d1:5b:46:3e:e7:
                    04:3d:3e:ca:95:48:b4:8b:ba:4a:fd:e7:75:dd:8f:
                    2d:7c:a8:a4:93:70:5f:a0:a4:d6:b9:95:86:fa:65:
                    49:77:fb:03:98:55:2f:e8:4b:f4:ef:94:70:15:fb:
                    58:22:da:93:17:65:5d:4b:25:22:fb:93:a8:53:93:
                    9d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:82:61:FF:D9:82:59:4D:6E:D1:FB:FA:FA:6A:49:D9:93:8F:41:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/6cc61ba5-5f34-3b37-b5d1-04f7411caff6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl

            X509v3 Authority Key Identifier:
                keyid:48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.147.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:4a:a0:ac:fa:27:52:3c:5b:40:d9:0a:0c:2e:3d:12:fb:74:
         07:fd:34:62:79:bf:74:2f:e9:72:65:16:e4:3b:4f:ae:5b:7c:
         83:5b:be:9d:54:23:fa:68:fd:07:b2:06:9c:8e:37:58:92:d2:
         72:ab:f9:b7:ac:02:fd:13:79:31:e6:7c:84:40:12:3b:e9:7b:
         dc:7f:3a:bd:d2:ca:08:f7:cf:b2:f6:2b:ac:e5:49:42:9a:fe:
         08:da:09:16:d0:8d:3f:c2:47:0f:0e:65:86:9d:45:54:6f:81:
         7e:c8:02:28:2b:03:e8:bb:cf:18:e4:69:ba:73:2f:7d:89:a5:
         31:de:54:b5:73:34:0c:2b:e0:08:c2:84:0e:2d:e0:90:a4:76:
         d2:22:06:88:85:28:53:6f:51:2b:3a:d6:a9:e2:e2:55:05:0e:
         f9:a3:b0:51:a5:fd:95:c5:35:6f:3d:98:71:8d:35:7c:75:19:
         b9:6f:e7:06:53:69:d4:be:99:33:b5:fc:fe:f1:14:4b:9c:bf:
         db:1c:95:60:ba:b7:ba:fd:b4:1a:5a:3a:e5:e6:89:9a:ca:b5:
         da:b0:a6:65:33:13:43:ef:ea:a0:da:f7:53:6d:1d:ff:40:c5:
         6a:c9:58:b6:c6:d5:87:57:f3:35:e1:99:e6:58:aa:da:6d:e1:
         a8:5f:26:2f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2NkAMmTHGwSXfb62AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDk0NDBhOTMtOTg2Zi00MWRhLTg3MjMtN2I2N2Y4MWJk
YmNlMB4XDTI2MDQxOTAxMDAyM1oXDTI2MDcxODAxMDAyM1owLzEtMCsGA1UEAxMk
OTQ4NzY1ODMtZDAxYy00ZWU5LTk0ZGItZTBlMWNhNzg3ODY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5S/4Ejm0XeCXCYgITncxNfYSMU/SLgVpdH8
Ch0+zmWPCQ9WkvitvLx9txmfu133myctW2HkefcxRi0Vc2qKuv+anLkZ28sKbbxF
4sDaefUvMezM2RaBOhBE6CXMO3jKmk0hfJXLzzUuFuYRmTbE9RD8D62Raoxt3bpc
+Vejyvp+fD30UkA9uROzILRVwd+mUwafEot8YSpyax8uTVKWS1am2X0jvcbc9TP7
1aww9NlEo8H9RHRkRnzstXNY0VtGPucEPT7KlUi0i7pK/ed13Y8tfKikk3BfoKTW
uZWG+mVJd/sDmFUv6Ev075RwFftYItqTF2VdSyUi+5OoU5OdTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIGCYf/ZgllNbtH7+vpqSdmTj0GVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wOTQ0
MGE5My05ODZmLTQxZGEtODcyMy03YjY3ZjgxYmRiY2UvNmNjNjFiYTUtNWYzNC0z
YjM3LWI1ZDEtMDRmNzQxMWNhZmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMDk0NDBhOTMtOTg2Zi00MWRhLTg3
MjMtN2I2N2Y4MWJkYmNlLzA5NDQwYTkzLTk4NmYtNDFkYS04NzIzLTdiNjdmODFi
ZGJjZS5jcmwwHwYDVR0jBBgwFoAUSEuB66mWlz+y3uneit7pXEIwQ4MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8wOTQ0MGE5My05ODZmLTQxZGEtODcyMy03YjY3
ZjgxYmRiY2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ5PQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAChKoKz6J1I8W0DZCgwuPRL7dAf9NGJ5v3Qv6XJlFuQ7T65bfINbvp1U
I/po/QeyBpyON1iS0nKr+besAv0TeTHmfIRAEjvpe9x/Or3Sygj3z7L2K6zlSUKa
/gjaCRbQjT/CRw8OZYadRVRvgX7IAigrA+i7zxjkabpzL32JpTHeVLVzNAwr4AjC
hA4t4JCkdtIiBoiFKFNvUSs61qni4lUFDvmjsFGl/ZXFNW89mHGNNXx1Gblv5wZT
adS+mTO1/P7xFEucv9sclWC6t7r9tBpaOuXmiZrKtdqwpmUzE0Pv6qDa91NtHf9A
xWrJWLbG1YdX8zXhmeZYqtpt4ahfJi8=
-----END CERTIFICATE-----
Generated at Wed Apr 29 15:32:19 2026 by rpki-client