Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/bd89da8b-bd32-33a2-8093-1b5f44bc7bf3.roa
File:                     bd89da8b-bd32-33a2-8093-1b5f44bc7bf3.roa (raw, json)
Hash identifier:          OVw/0FEeSwVQAPn87ojP0x/6S14o8rJSJhl9XEYcSog=
Subject key identifier:   08:3A:0F:D0:74:29:FC:42:96:C2:C5:E5:39:40:DC:2B:7A:8E:6F:B7
Certificate issuer:       /CN=6ce95cb2-398f-4574-bae0-522b74e03f71
Certificate serial:       010D0C9F4328584ED431F47954E84C5937632D00
Authority key identifier: CC:A9:17:F8:E6:45:3A:31:6D:87:06:F6:D1:6E:36:3E:6C:84:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/bd89da8b-bd32-33a2-8093-1b5f44bc7bf3.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     1299
IP address blocks:        204.15.220.0/22 maxlen: 24
                          208.86.120.0/21 maxlen: 24
                          2606:3840::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:31:f4:79:54:e8:4c:59:37:63:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ce95cb2-398f-4574-bae0-522b74e03f71
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=a32cde43-5674-4eb2-91fa-1015126575b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:46:84:86:e3:2e:85:17:7c:ca:18:0f:60:72:
                    70:6c:fc:24:1c:dd:d9:6a:9f:e9:ba:c9:2c:bc:e1:
                    a0:f7:49:6b:70:60:37:0f:71:aa:57:e4:af:0f:e3:
                    11:4d:cb:e4:82:e5:a8:f6:14:9d:ba:74:f1:80:57:
                    86:c0:74:e9:61:bd:5b:ed:b5:a2:9e:a7:f9:1e:7b:
                    e1:ba:b9:e4:29:dc:37:d0:a1:89:2a:a0:ad:cf:8f:
                    0f:77:bd:71:dc:6c:85:82:1d:a2:15:50:e2:1e:3b:
                    42:ae:ff:62:aa:04:ae:59:3d:02:76:66:5c:b9:d3:
                    3d:82:d0:2f:0b:c2:af:f9:c9:a0:22:81:25:eb:f6:
                    6a:97:3f:ed:f7:f3:c5:b7:c1:46:bd:41:92:ec:d1:
                    ff:3c:36:02:b1:00:ec:be:ca:6c:d0:be:8c:57:c1:
                    8e:2f:50:6d:7a:ab:37:2e:25:bc:32:de:3e:77:86:
                    a2:95:97:7f:16:09:88:2b:e8:9b:67:39:f6:75:00:
                    2d:b9:7a:4b:f7:2a:2b:7b:eb:69:d0:f2:64:b3:e6:
                    fe:0d:30:0c:de:59:d9:7f:fd:cd:d4:6e:5c:14:21:
                    ea:9d:1a:07:e6:63:c8:02:8d:0e:34:f3:e8:7b:7d:
                    41:b0:77:14:29:47:13:06:c0:00:a6:9c:5e:19:05:
                    33:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:3A:0F:D0:74:29:FC:42:96:C2:C5:E5:39:40:DC:2B:7A:8E:6F:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/bd89da8b-bd32-33a2-8093-1b5f44bc7bf3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.crl

            X509v3 Authority Key Identifier:
                keyid:CC:A9:17:F8:E6:45:3A:31:6D:87:06:F6:D1:6E:36:3E:6C:84:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.15.220.0/22
                  208.86.120.0/21
                IPv6:
                  2606:3840::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:31:90:a0:83:fa:e6:e8:c1:ee:88:65:78:bc:ad:cb:dd:10:
         ac:22:d4:0d:02:ec:a6:d2:1e:2e:be:09:91:2b:74:b0:f5:34:
         a8:79:49:ff:ed:89:a4:c7:8f:04:c2:e9:67:44:07:45:47:38:
         3b:ca:a3:e5:ee:6a:78:fa:6d:7b:17:36:05:37:2a:22:d6:ed:
         3c:0c:3a:10:4a:21:b5:07:a2:0b:87:da:f6:f6:29:0c:00:7f:
         3e:4b:20:57:41:22:51:da:45:a7:af:1f:b8:f6:12:5c:b4:5d:
         ce:6b:ee:72:bd:3a:ec:82:bb:a8:af:69:7d:a5:c3:93:f5:39:
         88:21:70:f3:58:ad:fc:f9:53:d7:2c:44:2f:d6:6d:62:b6:4c:
         3e:78:64:d8:1e:af:ce:6b:02:3b:21:85:ea:da:e3:23:07:1a:
         c9:40:3d:3d:47:61:32:a3:d5:bc:bc:e7:d7:d2:9b:75:cc:7d:
         4a:9f:91:60:4e:4e:96:a5:d1:67:66:b2:48:8f:b8:7f:6f:3f:
         41:ea:70:8b:5c:cb:f4:d5:64:36:69:67:dd:87:11:5f:35:9f:
         ad:d2:50:e8:bc:4f:32:52:68:60:fa:ce:4f:0a:00:76:b1:ef:
         41:1d:61:3e:8c:73:86:30:5d:15:d6:7b:2e:37:81:6e:d7:55:
         d4:be:6c:6e
-----BEGIN CERTIFICATE-----
MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWE7UMfR5VOhMWTdjLQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmNlOTVjYjItMzk4Zi00NTc0LWJhZTAtNTIyYjc0ZTAz
ZjcxMB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk
YTMyY2RlNDMtNTY3NC00ZWIyLTkxZmEtMTAxNTEyNjU3NWI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEaEhuMuhRd8yhgPYHJwbPwkHN3Zap/pusks
vOGg90lrcGA3D3GqV+SvD+MRTcvkguWo9hSdunTxgFeGwHTpYb1b7bWinqf5Hnvh
urnkKdw30KGJKqCtz48Pd71x3GyFgh2iFVDiHjtCrv9iqgSuWT0CdmZcudM9gtAv
C8Kv+cmgIoEl6/Zqlz/t9/PFt8FGvUGS7NH/PDYCsQDsvsps0L6MV8GOL1Bteqs3
LiW8Mt4+d4ailZd/FgmIK+ibZzn2dQAtuXpL9yore+tp0PJks+b+DTAM3lnZf/3N
1G5cFCHqnRoH5mPIAo0ONPPoe31BsHcUKUcTBsAAppxeGQUzaQIDAQABo4IDajCC
A2YwHQYDVR0OBBYEFAg6D9B0KfxClsLF5TlA3Ct6jm+3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82Y2U5
NWNiMi0zOThmLTQ1NzQtYmFlMC01MjJiNzRlMDNmNzEvYmQ4OWRhOGItYmQzMi0z
M2EyLTgwOTMtMWI1ZjQ0YmM3YmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmNlOTVjYjItMzk4Zi00NTc0LWJh
ZTAtNTIyYjc0ZTAzZjcxLzZjZTk1Y2IyLTM5OGYtNDU3NC1iYWUwLTUyMmI3NGUw
M2Y3MS5jcmwwHwYDVR0jBBgwFoAUzKkX+OZFOjFthwb20W42PmyEf7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82Y2U5NWNiMi0zOThmLTQ1NzQtYmFlMC01MjJi
NzRlMDNmNzEuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCzA/cAwQD
0FZ4MA0EAgACMAcDBQAmBjhAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAH8xkKCD+ubowe6IZXi8rcvdEKwi
1A0C7KbSHi6+CZErdLD1NKh5Sf/tiaTHjwTC6WdEB0VHODvKo+Xuanj6bXsXNgU3
KiLW7TwMOhBKIbUHoguH2vb2KQwAfz5LIFdBIlHaRaevH7j2Ely0Xc5r7nK9OuyC
u6ivaX2lw5P1OYghcPNYrfz5U9csRC/WbWK2TD54ZNger85rAjshhera4yMHGslA
PT1HYTKj1by859fSm3XMfUqfkWBOTpal0WdmskiPuH9vP0HqcItcy/TVZDZpZ92H
EV81n63SUOi8TzJSaGD6zk8KAHax70EdYT6Mc4YwXRXWey43gW7XVdS+bG4=
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:36:48 2026 by rpki-client