Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/e2210da3-0122-3d9c-898b-b2cc95169f2a.roa
File:                     e2210da3-0122-3d9c-898b-b2cc95169f2a.roa (raw, json)
Hash identifier:          mdprnzNqXskNTJzxqsVFxYDzfpXuUmHSsGPJOOL2bNc=
Subject key identifier:   20:B6:A0:7A:EE:B4:A6:5B:9A:BA:AF:9F:7B:D4:30:F0:99:41:29:A5
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F4328584E5FDF5EC5D63D801575F5AB00
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/e2210da3-0122-3d9c-898b-b2cc95169f2a.roa
Signing time:             Fri 03 Jul 2026 09:00:12 +0000
ROA not before:           Fri 03 Jul 2026 09:00:12 +0000
ROA not after:            Thu 01 Oct 2026 09:00:12 +0000
asID:                     7979
IP address blocks:        172.98.170.0/24 maxlen: 24
                          206.127.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5f:df:5e:c5:d6:3d:80:15:75:f5:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Jul  3 09:00:12 2026 GMT
            Not After : Oct  1 09:00:12 2026 GMT
        Subject: CN=536a2f88-7a51-48fe-8248-ab2b05cc6e80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c6:fd:f9:d9:a5:fd:4a:8f:ae:ec:07:49:7e:
                    5b:6b:73:98:50:b8:dd:71:4d:ad:c8:c3:e5:9b:df:
                    03:bf:89:82:33:60:91:9f:13:7e:bd:51:b0:91:7a:
                    09:bc:d1:73:16:08:d0:9b:bf:b8:be:4c:34:3c:b7:
                    5a:3a:3d:e1:23:89:d2:92:de:4b:eb:0f:64:a6:92:
                    92:b8:86:4c:e4:89:e8:70:6d:92:63:3c:dd:26:73:
                    35:a4:ab:3f:42:1f:58:f3:74:02:b8:ad:3e:c9:8d:
                    34:30:76:86:6e:22:a6:57:ea:7f:5a:4e:96:68:4a:
                    b3:25:ad:90:57:05:97:5e:62:d3:96:3b:4b:df:83:
                    96:90:f0:62:64:6e:27:e9:d9:8c:eb:75:65:d9:85:
                    79:52:d8:5c:a9:bc:c1:58:c6:0f:87:25:cd:e9:e9:
                    2d:ba:f8:96:d1:53:0b:e7:a1:fc:d6:13:0a:54:60:
                    6c:3b:8c:e4:6a:b3:d5:fd:6f:28:74:b4:b1:94:ae:
                    8a:76:89:11:c9:16:27:5c:81:31:e3:c0:cf:19:81:
                    f7:6f:41:8f:f6:5a:a7:cf:19:86:9c:b9:92:25:e4:
                    12:bb:51:c9:84:87:73:79:1f:69:c2:4b:17:95:d3:
                    94:5e:0a:bc:bf:4f:57:8d:76:30:5b:9c:a7:37:fd:
                    54:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:B6:A0:7A:EE:B4:A6:5B:9A:BA:AF:9F:7B:D4:30:F0:99:41:29:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/e2210da3-0122-3d9c-898b-b2cc95169f2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.98.170.0/24
                  206.127.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:09:83:46:fa:9f:99:7c:a7:ef:18:7c:f0:a9:79:3d:9f:80:
         09:09:18:9e:06:86:ed:3d:5e:3a:be:3f:56:de:ab:05:7f:c0:
         85:6d:bb:c9:0e:1e:b3:4c:d5:da:06:7e:c7:66:17:32:94:76:
         3b:dc:3c:49:26:06:0f:73:69:a6:07:21:c0:87:a5:6d:81:bd:
         44:41:74:e9:01:7e:7c:df:b5:b5:de:b6:ff:1e:c6:94:a0:45:
         e3:39:71:ee:b1:ae:ec:c2:40:1a:8f:6a:bb:2f:e8:c4:bf:03:
         31:a8:18:82:4c:04:72:08:cc:60:82:1c:b8:3d:da:9c:c6:41:
         fb:7c:f0:20:f0:bf:70:88:3a:f6:18:79:d0:1a:49:7d:a8:8f:
         7c:ca:b0:e8:6c:93:86:3a:58:e4:71:33:20:a2:cf:57:64:c6:
         b3:e1:a5:f4:1c:df:9f:95:16:5a:3d:5c:d0:6d:99:30:db:2b:
         30:4b:ef:43:8e:fd:60:ce:ea:3f:87:8c:76:7a:21:be:f4:bf:
         3b:b2:99:2e:85:cb:82:7d:64:47:de:19:96:ab:6e:7a:b6:eb:
         6f:f4:8a:e5:f8:ff:5e:b9:39:f4:ef:35:8b:9f:11:47:b7:33:
         a8:db:4d:52:09:00:4d:5c:10:87:73:6f:1f:9d:55:f5:7c:50:
         8d:14:0e:1e
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE5f317F1j2AFXX1qwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi
NWVlMB4XDTI2MDcwMzA5MDAxMloXDTI2MTAwMTA5MDAxMlowLzEtMCsGA1UEAxMk
NTM2YTJmODgtN2E1MS00OGZlLTgyNDgtYWIyYjA1Y2M2ZTgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMb9+dml/UqPruwHSX5ba3OYULjdcU2tyMPl
m98Dv4mCM2CRnxN+vVGwkXoJvNFzFgjQm7+4vkw0PLdaOj3hI4nSkt5L6w9kppKS
uIZM5InocG2SYzzdJnM1pKs/Qh9Y83QCuK0+yY00MHaGbiKmV+p/Wk6WaEqzJa2Q
VwWXXmLTljtL34OWkPBiZG4n6dmM63Vl2YV5UthcqbzBWMYPhyXN6ektuviW0VML
56H81hMKVGBsO4zkarPV/W8odLSxlK6KdokRyRYnXIEx48DPGYH3b0GP9lqnzxmG
nLmSJeQSu1HJhIdzeR9pwksXldOUXgq8v09XjXYwW5ynN/1UNwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFCC2oHrutKZbmrqvn3vUMPCZQSmlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2
ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvZTIyMTBkYTMtMDEyMi0z
ZDljLTg5OGItYjJjYzk1MTY5ZjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3
ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz
YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm
ODljM2I1ZWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQArGKqAwQA
zn/UMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAEgJg0b6n5l8p+8YfPCpeT2fgAkJGJ4Ghu09Xjq+P1beqwV/
wIVtu8kOHrNM1doGfsdmFzKUdjvcPEkmBg9zaaYHIcCHpW2BvURBdOkBfnzftbXe
tv8expSgReM5ce6xruzCQBqParsv6MS/AzGoGIJMBHIIzGCCHLg92pzGQft88CDw
v3CIOvYYedAaSX2oj3zKsOhsk4Y6WORxMyCiz1dkxrPhpfQc35+VFlo9XNBtmTDb
KzBL70OO/WDO6j+HjHZ6Ib70vzuymS6Fy4J9ZEfeGZarbnq262/0iuX4/165OfTv
NYufEUe3M6jbTVIJAE1cEIdzbx+dVfV8UI0UDh4=
-----END CERTIFICATE-----
Generated at Sat Jul 18 03:32:12 2026 by rpki-client