Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/4a6719b2-f0b5-3118-a1d6-1abc2e8f33ec.roa
File:                     4a6719b2-f0b5-3118-a1d6-1abc2e8f33ec.roa (raw, json)
Hash identifier:          f0HeCw7uNTtGlL+uh2z/PMlprS5bEVX3Sgotfu/KjBU=
Subject key identifier:   49:C6:62:E5:6B:C5:8A:57:5D:41:2A:0A:00:77:D2:37:72:2B:17:35
Certificate issuer:       /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial:       010D0C9F4328584E4AEF52DDC0A57BB27D995740
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/4a6719b2-f0b5-3118-a1d6-1abc2e8f33ec.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     14297
IP address blocks:        206.201.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:52:dd:c0:a5:7b:b2:7d:99:57:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=c516437a-174e-4257-bc7f-43205567d378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5f:49:a8:a1:64:7f:d2:25:00:8b:94:10:81:
                    a1:c3:51:5c:71:9a:53:ff:45:42:33:b1:3b:65:7e:
                    11:a2:00:ac:eb:f1:35:81:fa:0a:6b:bb:06:a4:47:
                    fd:dc:ca:96:e8:31:ae:38:75:ee:3e:7d:bc:e9:b0:
                    60:e7:55:11:9f:1c:72:26:16:1c:e0:01:42:39:5a:
                    50:9f:7d:4b:9c:1d:ff:30:2f:f9:2e:73:08:90:2f:
                    91:49:57:33:89:3a:6a:a2:b3:57:88:a5:67:5b:92:
                    1c:d3:56:b4:67:56:47:89:5f:3e:aa:fd:17:8f:3f:
                    61:2f:5c:06:0a:66:af:4d:cf:83:64:eb:68:56:0f:
                    ad:01:c4:77:b1:f7:a3:a4:27:48:7a:59:48:ac:c0:
                    25:37:bd:97:25:21:a4:51:86:1a:85:18:e8:c9:ef:
                    81:2a:7c:95:57:d5:02:8f:22:f9:fc:27:20:19:04:
                    a9:ee:ab:af:48:06:8d:e3:34:72:e4:48:ca:c8:c0:
                    44:e2:7a:64:83:14:30:b0:a8:0e:6a:07:91:9f:d6:
                    14:b3:6d:25:5c:65:a0:85:c8:22:35:ee:31:bf:13:
                    43:3d:b2:80:d9:5f:4e:de:50:83:67:bc:38:46:be:
                    9a:19:08:ed:3b:9d:22:b3:0b:4f:6c:67:58:e4:3c:
                    94:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:C6:62:E5:6B:C5:8A:57:5D:41:2A:0A:00:77:D2:37:72:2B:17:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/4a6719b2-f0b5-3118-a1d6-1abc2e8f33ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.201.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:f2:6d:58:bf:41:63:37:7a:f1:1a:ba:7b:47:80:2e:08:af:
         80:76:5d:57:d6:db:f7:e5:95:8f:5c:de:ce:7b:97:11:a8:8b:
         13:f0:07:f3:9c:4d:82:59:74:d8:3f:e6:bd:35:b6:29:c3:38:
         9c:92:62:c5:7d:51:ea:b6:a5:f4:21:a3:c4:2b:95:09:77:db:
         e4:4d:32:2a:e6:11:82:1d:e2:93:2b:79:64:ec:16:1c:fa:fb:
         ff:29:5f:09:08:5d:4a:04:9a:fa:7d:d0:f6:e9:e5:1e:a9:17:
         f5:6c:66:24:92:27:b4:06:17:bf:9e:ae:bc:59:fd:5b:b5:b2:
         02:6f:47:9b:06:4a:c4:90:71:65:e7:16:0a:21:cb:23:31:b3:
         ed:07:e6:9f:f7:0d:96:86:94:39:7c:fb:76:12:6a:2b:31:a2:
         4c:0f:30:35:de:aa:34:6b:19:85:f2:91:3f:6c:14:15:c7:29:
         cf:27:0d:89:56:0c:8e:ec:56:16:de:a7:26:60:02:13:ac:44:
         8a:01:5e:45:c0:ca:ce:19:22:87:c0:ec:8d:71:33:b4:10:a5:
         d9:46:1e:38:c2:fc:1f:0b:cb:7d:6b:0e:bf:f8:49:1b:d9:f1:
         a2:b0:aa:ad:c9:c2:d7:cc:3e:12:bc:3a:a5:bd:ec:2d:54:dd:
         7f:28:a8:aa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5K71LdwKV7sn2ZV0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz
N2U2MB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk
YzUxNjQzN2EtMTc0ZS00MjU3LWJjN2YtNDMyMDU1NjdkMzc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu19JqKFkf9IlAIuUEIGhw1FccZpT/0VCM7E7
ZX4RogCs6/E1gfoKa7sGpEf93MqW6DGuOHXuPn286bBg51URnxxyJhYc4AFCOVpQ
n31LnB3/MC/5LnMIkC+RSVcziTpqorNXiKVnW5Ic01a0Z1ZHiV8+qv0Xjz9hL1wG
CmavTc+DZOtoVg+tAcR3sfejpCdIellIrMAlN72XJSGkUYYahRjoye+BKnyVV9UC
jyL5/CcgGQSp7quvSAaN4zRy5EjKyMBE4npkgxQwsKgOageRn9YUs20lXGWghcgi
Ne4xvxNDPbKA2V9O3lCDZ7w4Rr6aGQjtO50iswtPbGdY5DyU3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEnGYuVrxYpXXUEqCgB30jdyKxc1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw
NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvNGE2NzE5YjItZjBiNS0z
MTE4LWExZDYtMWFiYzJlOGYzM2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm
NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl
MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz
YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzskcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKrybVi/QWM3evEauntHgC4Ir4B2XVfW2/fllY9c3s57lxGoixPwB/Oc
TYJZdNg/5r01tinDOJySYsV9Ueq2pfQho8QrlQl32+RNMirmEYId4pMreWTsFhz6
+/8pXwkIXUoEmvp90Pbp5R6pF/VsZiSSJ7QGF7+errxZ/Vu1sgJvR5sGSsSQcWXn
FgohyyMxs+0H5p/3DZaGlDl8+3YSaisxokwPMDXeqjRrGYXykT9sFBXHKc8nDYlW
DI7sVhbepyZgAhOsRIoBXkXAys4ZIofA7I1xM7QQpdlGHjjC/B8Ly31rDr/4SRvZ
8aKwqq3JwtfMPhK8OqW97C1U3X8oqKo=
-----END CERTIFICATE-----
Generated at Wed Jul 8 16:01:33 2026 by rpki-client