Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410/36863e60-1d4c-31d4-bc24-b41e7f3489c6.roa
File:                     36863e60-1d4c-31d4-bc24-b41e7f3489c6.roa (raw, json)
Hash identifier:          bisvq4OAei3kmI39Gu0YS3W4VOa3WYO0AlIHMjNAFig=
Subject key identifier:   BE:78:B0:8A:25:50:52:7F:EB:6A:07:64:3E:11:F3:16:81:79:F2:2E
Certificate issuer:       /CN=ec8ef17e-d8d3-48e9-92e7-84e96fa64410
Certificate serial:       010D0C9F4328584EA7917A2B54298FFF5185E3FB
Authority key identifier: 65:0C:4A:76:B2:7A:A5:C8:07:02:8E:FF:32:02:C4:75:B4:34:F7:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410/36863e60-1d4c-31d4-bc24-b41e7f3489c6.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     20213
IP address blocks:        172.99.160.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410/ec8ef17e-d8d3-48e9-92e7-84e96fa64410.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410/ec8ef17e-d8d3-48e9-92e7-84e96fa64410.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:7a:2b:54:29:8f:ff:51:85:e3:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec8ef17e-d8d3-48e9-92e7-84e96fa64410
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=939b0c11-6cc7-487d-91a3-7b43dcfd6214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ac:68:69:bc:0a:d6:3c:2f:89:04:ac:ec:75:
                    a0:55:0a:9f:96:ce:dc:65:35:73:b1:e1:76:00:c1:
                    55:69:b9:f8:ac:df:a2:79:15:a2:17:7c:df:19:54:
                    41:0a:32:66:2d:75:a4:66:f1:2c:ba:e0:f3:85:5f:
                    b9:a1:5e:dc:07:3b:6c:15:ec:c0:eb:74:7f:7d:74:
                    02:a9:6f:b6:68:78:04:b9:f8:2c:30:36:4f:e4:4e:
                    76:c8:c4:41:99:59:74:42:44:35:49:1d:a0:ab:0a:
                    53:fe:b6:ed:e8:d2:de:17:5a:29:52:c2:ff:37:07:
                    60:de:7d:76:45:df:1c:61:2b:0a:d8:d4:2f:0b:7d:
                    05:0c:c9:47:28:b1:95:f5:5d:a6:19:a8:8f:6c:af:
                    97:85:b0:82:69:ce:42:dd:c9:bb:45:e1:70:1c:0f:
                    8f:3e:1d:d8:34:44:c4:57:33:21:4f:39:5d:ec:59:
                    4d:69:ec:c2:2a:16:42:45:9e:53:e6:ec:d9:b2:71:
                    42:38:22:d1:fb:74:08:8f:44:17:23:ef:77:57:89:
                    31:f4:ef:ed:56:f4:fc:00:cc:24:9b:e3:da:d8:44:
                    09:bf:6d:72:cb:d8:d3:b8:44:2d:42:d4:6c:b8:47:
                    a8:f7:47:dd:c0:c2:32:8b:16:ef:6a:32:5e:db:b4:
                    eb:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:78:B0:8A:25:50:52:7F:EB:6A:07:64:3E:11:F3:16:81:79:F2:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410/36863e60-1d4c-31d4-bc24-b41e7f3489c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410/ec8ef17e-d8d3-48e9-92e7-84e96fa64410.crl

            X509v3 Authority Key Identifier:
                keyid:65:0C:4A:76:B2:7A:A5:C8:07:02:8E:FF:32:02:C4:75:B4:34:F7:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.99.160.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:e0:4e:5b:cc:a5:1f:32:5e:ed:31:4c:c9:22:8d:a7:d0:ed:
         6a:f3:d6:fe:0e:aa:2f:82:e6:dd:8b:f5:44:a8:2b:37:0d:49:
         e2:1e:eb:dd:bd:c3:5a:a6:02:26:d1:45:02:a4:d6:8f:0c:f4:
         d5:9c:6f:07:1a:cc:28:26:0b:94:95:98:7f:8c:ce:ee:0f:d2:
         5e:7f:08:63:fc:08:cf:5f:e1:ff:19:30:d0:cc:48:0c:c7:42:
         61:a0:a7:fa:33:30:7f:cc:c4:7a:dc:cb:7b:dc:cb:fe:d8:38:
         97:4a:8d:95:9f:d4:b3:bb:5e:e5:b4:53:05:f3:78:f1:37:cf:
         bb:68:ee:c1:90:6e:22:36:51:78:ac:34:c3:67:07:59:2a:a7:
         c0:4a:29:e9:06:f3:97:64:5d:1f:c3:bd:3d:1e:22:cb:20:6c:
         3d:c4:75:12:59:f0:c1:27:c4:ff:57:cb:d8:71:2a:c5:86:7d:
         ac:4b:45:d8:b0:a9:a2:53:bd:a3:f7:0c:77:fc:f1:12:4e:0c:
         e3:aa:6b:ff:3b:ee:9b:1c:14:f9:92:ab:20:95:3b:de:bc:b6:
         72:d4:ba:8d:d8:b7:6e:cf:72:4b:75:48:5e:5b:9b:57:78:90:
         cc:81:17:b6:6f:90:ef:67:73:a6:d0:c4:9f:09:4e:e8:ed:a1:
         55:fb:b6:e6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkXorVCmP/1GF4/swDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWM4ZWYxN2UtZDhkMy00OGU5LTkyZTctODRlOTZmYTY0
NDEwMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
OTM5YjBjMTEtNmNjNy00ODdkLTkxYTMtN2I0M2RjZmQ2MjE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKxoabwK1jwviQSs7HWgVQqfls7cZTVzseF2
AMFVabn4rN+ieRWiF3zfGVRBCjJmLXWkZvEsuuDzhV+5oV7cBztsFezA63R/fXQC
qW+2aHgEufgsMDZP5E52yMRBmVl0QkQ1SR2gqwpT/rbt6NLeF1opUsL/Nwdg3n12
Rd8cYSsK2NQvC30FDMlHKLGV9V2mGaiPbK+XhbCCac5C3cm7ReFwHA+PPh3YNETE
VzMhTzld7FlNaezCKhZCRZ5T5uzZsnFCOCLR+3QIj0QXI+93V4kx9O/tVvT8AMwk
m+Pa2EQJv21yy9jTuEQtQtRsuEeo90fdwMIyixbvajJe27TrYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL54sIolUFJ/62oHZD4R8xaBefIuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9lYzhl
ZjE3ZS1kOGQzLTQ4ZTktOTJlNy04NGU5NmZhNjQ0MTAvMzY4NjNlNjAtMWQ0Yy0z
MWQ0LWJjMjQtYjQxZTdmMzQ4OWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZWM4ZWYxN2UtZDhkMy00OGU5LTky
ZTctODRlOTZmYTY0NDEwL2VjOGVmMTdlLWQ4ZDMtNDhlOS05MmU3LTg0ZTk2ZmE2
NDQxMC5jcmwwHwYDVR0jBBgwFoAUZQxKdrJ6pcgHAo7/MgLEdbQ0974wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9lYzhlZjE3ZS1kOGQzLTQ4ZTktOTJlNy04NGU5
NmZhNjQ0MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrGOgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD/gTlvMpR8yXu0xTMkijafQ7Wrz1v4Oqi+C5t2L9USoKzcNSeIe6929
w1qmAibRRQKk1o8M9NWcbwcazCgmC5SVmH+Mzu4P0l5/CGP8CM9f4f8ZMNDMSAzH
QmGgp/ozMH/MxHrcy3vcy/7YOJdKjZWf1LO7XuW0UwXzePE3z7to7sGQbiI2UXis
NMNnB1kqp8BKKekG85dkXR/DvT0eIssgbD3EdRJZ8MEnxP9Xy9hxKsWGfaxLRdiw
qaJTvaP3DHf88RJODOOqa/877pscFPmSqyCVO968tnLUuo3Yt27Pckt1SF5bm1d4
kMyBF7ZvkO9nc6bQxJ8JTujtoVX7tuY=
-----END CERTIFICATE-----
Generated at Wed Jul 29 20:35:32 2026 by rpki-client