Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/896f84ed-27b6-3967-9e9c-26986df025ad.roa
File:                     896f84ed-27b6-3967-9e9c-26986df025ad.roa (raw, json)
Hash identifier:          lwapNw372d57QR9ZeaWrP1y9S/v8NUhZIonKyJGcWWA=
Subject key identifier:   22:18:86:88:5B:12:81:5D:F3:13:1C:BE:7F:90:10:B9:43:CF:AB:40
Certificate issuer:       /CN=4e6beedf-bc99-4d7c-9a20-60ec913a6a17
Certificate serial:       010D0C9F4328584EB2B1FBB372C1F6D7AD39F540
Authority key identifier: C9:0E:21:1D:65:F0:29:7C:02:B2:39:2F:9F:36:4D:F5:8E:42:56:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/896f84ed-27b6-3967-9e9c-26986df025ad.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     36734
IP address blocks:        204.153.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:fb:b3:72:c1:f6:d7:ad:39:f5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e6beedf-bc99-4d7c-9a20-60ec913a6a17
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=e7d3f2be-2d43-4d87-bd93-d57104264fea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b0:ee:5b:2f:69:e0:cb:af:19:3b:15:c8:37:
                    9e:a0:92:d5:7d:45:37:5b:c0:73:c1:d3:c6:87:5f:
                    99:36:e0:e8:ff:82:f9:ee:12:4c:b6:99:df:31:b4:
                    dd:29:a8:c9:3b:24:46:02:2e:26:04:e6:aa:ed:91:
                    4b:f4:6d:4a:2b:70:73:ca:bf:2c:58:1f:d2:61:71:
                    d2:b7:b2:37:fe:a3:ce:55:77:47:2d:5f:ce:5c:86:
                    22:77:4e:61:78:a6:5a:d6:78:45:69:02:e9:73:be:
                    a3:f9:fc:c9:bf:ae:30:31:08:4d:3d:46:94:0f:d5:
                    b6:7f:ec:7c:00:07:f1:fd:05:39:b7:e3:2d:62:66:
                    97:ee:92:c4:35:c6:05:59:ca:f7:24:fe:60:d4:6f:
                    98:90:6b:ca:77:41:01:b9:2b:21:c4:2f:e2:7c:67:
                    5d:1e:9d:8e:3b:46:3d:f1:63:f5:16:1c:8e:a8:82:
                    56:64:50:65:3d:97:32:c3:a6:b7:82:1a:1a:4a:c8:
                    b9:12:4b:a8:56:f4:4e:31:de:b9:b5:e5:48:6e:6d:
                    1f:68:a8:b3:69:12:e8:c8:d4:6e:93:f7:75:36:1f:
                    45:1b:fc:90:48:d0:67:75:fb:a8:af:53:1e:22:9d:
                    fe:4d:b3:af:37:b1:dc:07:d6:6b:58:98:0e:18:41:
                    e3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:18:86:88:5B:12:81:5D:F3:13:1C:BE:7F:90:10:B9:43:CF:AB:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/896f84ed-27b6-3967-9e9c-26986df025ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.crl

            X509v3 Authority Key Identifier:
                keyid:C9:0E:21:1D:65:F0:29:7C:02:B2:39:2F:9F:36:4D:F5:8E:42:56:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.153.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:c4:9d:ff:4d:d7:83:20:75:1f:5b:ff:0b:c1:57:33:de:3e:
         37:1e:31:86:15:8f:84:30:c8:5b:bb:ea:72:ec:f2:04:47:63:
         46:2b:63:8c:f2:c8:23:ef:ee:6d:fb:3a:79:13:4f:53:2c:ff:
         0c:17:2a:70:fe:d0:e7:18:a0:af:47:4d:09:af:67:fb:cd:71:
         5e:f0:c0:79:23:7d:8f:55:a5:e4:d1:d3:e8:85:3c:e4:f9:98:
         4c:4f:80:a8:a2:26:94:53:fb:35:d5:6b:95:6a:f0:cd:3e:5c:
         4b:aa:ba:68:38:97:d1:aa:21:e6:a2:a8:4a:2e:48:26:2c:b3:
         55:e1:23:5d:d5:31:70:b6:d5:4c:1d:5d:04:9c:a1:1c:66:0e:
         d6:84:57:ed:85:ac:0a:45:03:27:f6:77:b5:c1:82:c4:df:47:
         8b:c5:41:11:35:8d:e0:f6:a2:ba:3c:13:ee:89:6a:92:88:86:
         c5:79:de:3b:23:c0:2f:83:1f:89:52:f4:7b:40:8a:88:17:20:
         68:04:99:de:65:1a:ff:ec:e9:07:66:e7:d7:e9:ef:fb:58:a2:
         93:de:a5:90:69:23:f5:e4:45:81:7f:72:0a:1f:c7:83:a9:59:
         9b:a4:36:c8:77:f5:4e:2f:92:54:84:22:8a:77:95:b5:91:52:
         89:fa:3a:f1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ysfuzcsH216059UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU2YmVlZGYtYmM5OS00ZDdjLTlhMjAtNjBlYzkxM2E2
YTE3MB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk
ZTdkM2YyYmUtMmQ0My00ZDg3LWJkOTMtZDU3MTA0MjY0ZmVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7DuWy9p4MuvGTsVyDeeoJLVfUU3W8BzwdPG
h1+ZNuDo/4L57hJMtpnfMbTdKajJOyRGAi4mBOaq7ZFL9G1KK3Bzyr8sWB/SYXHS
t7I3/qPOVXdHLV/OXIYid05heKZa1nhFaQLpc76j+fzJv64wMQhNPUaUD9W2f+x8
AAfx/QU5t+MtYmaX7pLENcYFWcr3JP5g1G+YkGvKd0EBuSshxC/ifGddHp2OO0Y9
8WP1FhyOqIJWZFBlPZcyw6a3ghoaSsi5EkuoVvROMd65teVIbm0faKizaRLoyNRu
k/d1Nh9FG/yQSNBndfuor1MeIp3+TbOvN7HcB9ZrWJgOGEHj1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCIYhohbEoFd8xMcvn+QELlDz6tAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80ZTZi
ZWVkZi1iYzk5LTRkN2MtOWEyMC02MGVjOTEzYTZhMTcvODk2Zjg0ZWQtMjdiNi0z
OTY3LTllOWMtMjY5ODZkZjAyNWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGU2YmVlZGYtYmM5OS00ZDdjLTlh
MjAtNjBlYzkxM2E2YTE3LzRlNmJlZWRmLWJjOTktNGQ3Yy05YTIwLTYwZWM5MTNh
NmExNy5jcmwwHwYDVR0jBBgwFoAUyQ4hHWXwKXwCsjkvnzZN9Y5CVlowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS80ZTZiZWVkZi1iYzk5LTRkN2MtOWEyMC02MGVj
OTEzYTZhMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzJnAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEjEnf9N14MgdR9b/wvBVzPePjceMYYVj4QwyFu76nLs8gRHY0YrY4zy
yCPv7m37OnkTT1Ms/wwXKnD+0OcYoK9HTQmvZ/vNcV7wwHkjfY9VpeTR0+iFPOT5
mExPgKiiJpRT+zXVa5Vq8M0+XEuqumg4l9GqIeaiqEouSCYss1XhI13VMXC21Uwd
XQScoRxmDtaEV+2FrApFAyf2d7XBgsTfR4vFQRE1jeD2oro8E+6JapKIhsV53jsj
wC+DH4lS9HtAiogXIGgEmd5lGv/s6Qdm59fp7/tYopPepZBpI/XkRYF/cgofx4Op
WZukNsh39U4vklSEIop3lbWRUon6OvE=
-----END CERTIFICATE-----
Generated at Sun Sep 13 10:19:09 2026 by rpki-client