Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/e6ff4323-32bd-3eee-9f33-2548dc06d1b9.roa
File:                     e6ff4323-32bd-3eee-9f33-2548dc06d1b9.roa (raw, json)
Hash identifier:          zlIH73zp7dOebGopXoFkguMt2TwLFBgU2pv0WOY8mwU=
Subject key identifier:   52:5E:9D:AA:6D:06:C6:37:7A:FB:ED:21:66:94:1F:BB:D6:3F:27:17
Certificate issuer:       /CN=d409bef0-b6e9-492d-adf9-0bd8a5610c35
Certificate serial:       010D0C9F4328584EED5221820EA634E9D616CF10
Authority key identifier: 3B:89:AF:36:6D:D2:02:F7:FC:DA:FA:4D:86:6E:9E:74:D2:2A:8B:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/e6ff4323-32bd-3eee-9f33-2548dc06d1b9.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     14618
IP address blocks:        67.199.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/d409bef0-b6e9-492d-adf9-0bd8a5610c35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/d409bef0-b6e9-492d-adf9-0bd8a5610c35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:21:82:0e:a6:34:e9:d6:16:cf:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d409bef0-b6e9-492d-adf9-0bd8a5610c35
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=a0193cba-24c0-4d6a-b6e6-1388ac3b2deb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d7:3d:8e:62:45:0d:5c:0d:a6:be:f1:ec:0a:
                    af:45:2f:5f:fb:6f:ff:c3:a6:e8:d5:49:26:04:ed:
                    d9:af:6d:b2:36:e3:5e:d6:a5:d1:82:eb:02:60:31:
                    c0:0f:61:54:70:a3:eb:e9:43:2d:b5:88:47:ba:75:
                    de:e9:ef:d5:2b:32:ac:e7:fb:dc:e3:6a:0d:bb:80:
                    5f:c2:9d:ae:d4:f2:c4:39:cd:89:c1:7b:dd:35:8f:
                    85:c4:2e:08:a4:da:a1:5f:14:d4:fa:94:16:21:51:
                    c2:68:ce:29:b4:71:1a:1f:74:1b:8d:82:d1:88:8b:
                    95:b2:fe:e2:3f:67:09:26:d7:9f:cd:8c:52:dc:78:
                    92:7c:f9:8a:0a:f8:61:15:7e:28:9b:8f:9a:99:3d:
                    b9:f8:2d:09:c6:ab:27:a4:95:52:13:26:70:28:35:
                    8b:78:ec:bf:2c:5b:3e:be:a3:21:8a:aa:3c:a9:41:
                    55:a6:fb:4e:32:9e:4f:fe:7d:3a:cf:4b:e7:a7:99:
                    30:83:a7:96:a1:8c:0e:4c:a2:4c:2f:fc:52:fb:35:
                    bd:bc:4f:00:0a:34:fd:5a:70:90:b0:1b:90:18:37:
                    0d:44:59:e8:92:01:7a:d9:0c:56:4a:8f:3b:ae:cb:
                    8a:79:93:b4:8d:d6:d9:9e:07:7d:c7:7d:b1:89:a5:
                    45:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:5E:9D:AA:6D:06:C6:37:7A:FB:ED:21:66:94:1F:BB:D6:3F:27:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/e6ff4323-32bd-3eee-9f33-2548dc06d1b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/d409bef0-b6e9-492d-adf9-0bd8a5610c35.crl

            X509v3 Authority Key Identifier:
                keyid:3B:89:AF:36:6D:D2:02:F7:FC:DA:FA:4D:86:6E:9E:74:D2:2A:8B:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.199.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:d2:90:f1:e6:67:9e:74:5a:67:5f:8b:9b:53:7b:fe:07:ee:
         22:8c:13:ff:31:ce:22:93:8c:f8:ca:43:0e:dc:3d:3d:fe:ed:
         29:aa:ac:12:ff:ad:52:bc:48:ac:6e:5b:c1:e3:8c:0b:c8:b5:
         fa:2f:3b:5b:78:cd:9e:b3:02:4d:9c:94:89:de:d9:d7:5c:17:
         7f:58:07:f0:0d:39:90:9b:2a:52:30:88:d2:56:ad:5c:c3:60:
         31:b9:d3:9a:92:3a:36:35:d9:c1:ed:09:96:e4:f4:2a:a0:aa:
         16:23:98:3c:ff:26:61:ea:44:05:5a:1a:00:6e:d2:0f:31:cf:
         9e:36:20:4a:ea:87:d3:7e:9e:1a:48:ee:b1:2f:14:54:78:a4:
         be:e8:c8:9d:fb:13:c3:42:ba:75:5f:fb:02:44:b8:d6:16:d4:
         77:34:5f:f4:f6:63:8e:25:bc:d9:7b:cc:c6:b9:a4:86:44:4d:
         8d:35:74:f9:e7:ec:99:a9:8e:64:67:5b:e6:88:65:08:74:79:
         26:42:08:5c:e9:fa:80:fc:9d:c8:dd:09:86:cf:9e:99:45:a5:
         e9:b7:46:42:f5:0c:08:30:a5:4a:df:9d:58:f8:dc:cf:92:29:
         ab:2f:95:23:26:49:ad:56:89:e6:3c:17:ff:f7:5b:b5:7d:34:
         57:e9:4b:82
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUiGCDqY06dYWzxAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDQwOWJlZjAtYjZlOS00OTJkLWFkZjktMGJkOGE1NjEw
YzM1MB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk
YTAxOTNjYmEtMjRjMC00ZDZhLWI2ZTYtMTM4OGFjM2IyZGViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktc9jmJFDVwNpr7x7AqvRS9f+2//w6bo1Ukm
BO3Zr22yNuNe1qXRgusCYDHAD2FUcKPr6UMttYhHunXe6e/VKzKs5/vc42oNu4Bf
wp2u1PLEOc2JwXvdNY+FxC4IpNqhXxTU+pQWIVHCaM4ptHEaH3QbjYLRiIuVsv7i
P2cJJtefzYxS3HiSfPmKCvhhFX4om4+amT25+C0JxqsnpJVSEyZwKDWLeOy/LFs+
vqMhiqo8qUFVpvtOMp5P/n06z0vnp5kwg6eWoYwOTKJML/xS+zW9vE8ACjT9WnCQ
sBuQGDcNRFnokgF62QxWSo87rsuKeZO0jdbZngd9x32xiaVFLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFJenaptBsY3evvtIWaUH7vWPycXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kNDA5
YmVmMC1iNmU5LTQ5MmQtYWRmOS0wYmQ4YTU2MTBjMzUvZTZmZjQzMjMtMzJiZC0z
ZWVlLTlmMzMtMjU0OGRjMDZkMWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZDQwOWJlZjAtYjZlOS00OTJkLWFk
ZjktMGJkOGE1NjEwYzM1L2Q0MDliZWYwLWI2ZTktNDkyZC1hZGY5LTBiZDhhNTYx
MGMzNS5jcmwwHwYDVR0jBBgwFoAUO4mvNm3SAvf82vpNhm6edNIqi8QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9kNDA5YmVmMC1iNmU5LTQ5MmQtYWRmOS0wYmQ4
YTU2MTBjMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ8f5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAADSkPHmZ550Wmdfi5tTe/4H7iKME/8xziKTjPjKQw7cPT3+7SmqrBL/
rVK8SKxuW8HjjAvItfovO1t4zZ6zAk2clIne2ddcF39YB/ANOZCbKlIwiNJWrVzD
YDG505qSOjY12cHtCZbk9CqgqhYjmDz/JmHqRAVaGgBu0g8xz542IErqh9N+nhpI
7rEvFFR4pL7oyJ37E8NCunVf+wJEuNYW1Hc0X/T2Y44lvNl7zMa5pIZETY01dPnn
7JmpjmRnW+aIZQh0eSZCCFzp+oD8ncjdCYbPnplFpem3RkL1DAgwpUrfnVj43M+S
KasvlSMmSa1WieY8F//3W7V9NFfpS4I=
-----END CERTIFICATE-----
Generated at Sun Sep 13 11:00:06 2026 by rpki-client