Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/06db186c-61e2-3ee4-89aa-2cd012349663.roa
File:                     06db186c-61e2-3ee4-89aa-2cd012349663.roa (raw, json)
Hash identifier:          7YiYR8wvWvDGG0lWRHI9CY04kb1RfF8XlpB+PXFXlhY=
Subject key identifier:   F5:32:8B:71:A9:0A:35:E7:AA:C8:61:51:26:DE:80:55:E2:2F:3C:D1
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584ECD37362E1F1E77F2968090F0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/06db186c-61e2-3ee4-89aa-2cd012349663.roa
Signing time:             Tue 11 Aug 2026 13:00:11 +0000
ROA not before:           Tue 11 Aug 2026 13:00:11 +0000
ROA not after:            Mon 09 Nov 2026 14:00:11 +0000
asID:                     7029
IP address blocks:        68.182.80.0/20 maxlen: 24
                          68.182.96.0/20 maxlen: 24
                          68.182.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cd:37:36:2e:1f:1e:77:f2:96:80:90:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Aug 11 13:00:11 2026 GMT
            Not After : Nov  9 14:00:11 2026 GMT
        Subject: CN=f84df51d-200d-43ce-9570-809e850d4d27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:70:4e:23:b1:b5:a1:2e:1b:a9:0c:be:a9:95:
                    ae:51:80:df:d3:6c:fd:10:2e:4e:7f:e3:1a:c0:51:
                    f0:3e:ef:d5:fb:d4:23:f2:52:74:46:9e:c1:a5:63:
                    d5:f3:9b:f8:76:70:ff:ab:e7:2a:6c:81:3c:3d:68:
                    69:2e:79:9a:93:aa:70:b3:c9:66:d6:dd:1d:b3:25:
                    ea:bc:41:33:2a:b3:c7:72:5b:65:a1:2e:69:5c:eb:
                    07:34:36:0b:5f:0e:9a:ad:2d:92:ff:ef:7e:8d:bf:
                    46:1e:10:33:63:05:21:ed:f5:7c:ec:15:74:5a:a9:
                    12:81:cf:7a:3d:ad:c8:13:56:67:bc:cc:fd:df:df:
                    cf:55:a1:8b:fd:37:af:4d:ca:5b:7e:1f:05:6a:91:
                    65:1c:a4:0d:c0:67:99:69:51:11:3c:05:d1:95:2e:
                    28:7a:b4:58:ca:03:ca:0f:ee:da:11:45:09:1d:d4:
                    21:e9:72:88:e0:56:4b:2d:5b:ce:21:5b:e6:58:fd:
                    68:f1:7f:c1:86:3a:95:24:cd:f9:34:d9:dc:dd:a8:
                    90:2d:e8:91:ba:ad:e2:20:41:b1:38:b9:47:12:69:
                    3c:79:66:f0:19:88:e9:4b:b8:49:fd:64:23:56:e1:
                    76:59:43:e4:d3:84:3b:f1:50:8b:da:16:b9:2c:3e:
                    50:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:32:8B:71:A9:0A:35:E7:AA:C8:61:51:26:DE:80:55:E2:2F:3C:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/06db186c-61e2-3ee4-89aa-2cd012349663.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.182.80.0-68.182.127.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e3:f1:61:2c:9e:3b:70:43:16:4d:83:22:af:aa:a1:3e:2f:0c:
         45:34:5a:f6:b2:16:18:2d:76:1b:9e:3d:3d:c7:34:74:e6:55:
         50:ba:a6:6e:7b:02:08:58:79:25:98:13:76:2f:84:de:20:0e:
         4b:b3:76:35:8b:01:f0:32:f2:4f:c7:ed:84:59:b4:f3:8b:f5:
         8e:cb:60:85:d0:18:01:3c:b9:a5:f6:11:34:ff:7d:db:fd:d2:
         f6:d0:f4:b3:45:50:f6:88:81:73:ca:8f:7a:a3:f2:dd:69:cd:
         5e:06:2e:84:e9:a9:7d:f9:8e:3c:c5:3a:45:a2:48:af:01:82:
         6b:7d:9f:ff:51:90:2a:df:d7:c4:ed:1f:38:65:24:9b:e7:ef:
         49:ad:7a:e0:f7:ea:c1:67:9c:2f:9b:b7:b2:2a:09:37:b7:e4:
         41:d5:c7:c0:f3:9e:6c:95:3c:2b:33:f4:9f:24:2f:00:57:bf:
         09:31:ee:bb:95:df:8c:30:75:3a:57:21:30:77:18:f9:c5:c9:
         2c:6b:dc:6b:92:91:46:ca:05:ff:41:4b:bb:53:c1:73:78:12:
         76:60:e2:55:ff:4c:c2:56:bc:ce:69:d6:15:b6:6d:ec:ad:55:
         0d:96:f6:df:ac:18:ff:5a:ad:14:92:30:d5:26:46:54:78:91:
         fe:8b:68:2f
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE7NNzYuHx538paAkPAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI2MDgxMTEzMDAxMVoXDTI2MTEwOTE0MDAxMVowLzEtMCsGA1UEAxMk
Zjg0ZGY1MWQtMjAwZC00M2NlLTk1NzAtODA5ZTg1MGQ0ZDI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHBOI7G1oS4bqQy+qZWuUYDf02z9EC5Of+Ma
wFHwPu/V+9Qj8lJ0Rp7BpWPV85v4dnD/q+cqbIE8PWhpLnmak6pws8lm1t0dsyXq
vEEzKrPHcltloS5pXOsHNDYLXw6arS2S/+9+jb9GHhAzYwUh7fV87BV0WqkSgc96
Pa3IE1ZnvMz939/PVaGL/TevTcpbfh8FapFlHKQNwGeZaVERPAXRlS4oerRYygPK
D+7aEUUJHdQh6XKI4FZLLVvOIVvmWP1o8X/BhjqVJM35NNnc3aiQLeiRuq3iIEGx
OLlHEmk8eWbwGYjpS7hJ/WQjVuF2WUPk04Q78VCL2ha5LD5QhwIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFPUyi3GpCjXnqshhUSbegFXiLzzRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMDZkYjE4NmMtNjFlMi0z
ZWU0LTg5YWEtMmNkMDEyMzQ5NjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAREtlAD
BAdEtgAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEA4/FhLJ47cEMWTYMir6qhPi8MRTRa9rIWGC12G549Pcc0
dOZVULqmbnsCCFh5JZgTdi+E3iAOS7N2NYsB8DLyT8fthFm084v1jstghdAYATy5
pfYRNP992/3S9tD0s0VQ9oiBc8qPeqPy3WnNXgYuhOmpffmOPMU6RaJIrwGCa32f
/1GQKt/XxO0fOGUkm+fvSa164PfqwWecL5u3sioJN7fkQdXHwPOebJU8KzP0nyQv
AFe/CTHuu5XfjDB1OlchMHcY+cXJLGvca5KRRsoF/0FLu1PBc3gSdmDiVf9Mwla8
zmnWFbZt7K1VDZb236wY/1qtFJIw1SZGVHiR/otoLw==
-----END CERTIFICATE-----
Generated at Mon Sep 14 21:54:33 2026 by rpki-client