Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/21406178-dc16-3dd1-93ef-c3c2c20fa29c.roa
File:                     21406178-dc16-3dd1-93ef-c3c2c20fa29c.roa (raw, json)
Hash identifier:          Ci4Xqfh8qcBRTZom5guWA1rF2MuIu4tp6+P6FbOMZIA=
Subject key identifier:   CD:80:42:D5:BA:A6:C9:28:4B:B9:0D:0D:BB:29:44:B1:CF:78:1E:01
Certificate issuer:       /CN=0699cec8-3851-41f8-aee8-2e225865699c
Certificate serial:       010D0C9F4328584EABB6EEEF19BC223A5A766C00
Authority key identifier: 04:3A:13:A4:9A:F1:19:6C:60:B7:74:79:3E:AA:82:F6:12:4B:E6:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/21406178-dc16-3dd1-93ef-c3c2c20fa29c.roa
Signing time:             Thu 30 Jul 2026 13:00:12 +0000
ROA not before:           Thu 30 Jul 2026 13:00:12 +0000
ROA not after:            Wed 28 Oct 2026 13:00:12 +0000
asID:                     11911
IP address blocks:        170.61.252.0/24 maxlen: 24
                          170.61.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/0699cec8-3851-41f8-aee8-2e225865699c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/0699cec8-3851-41f8-aee8-2e225865699c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ab:b6:ee:ef:19:bc:22:3a:5a:76:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0699cec8-3851-41f8-aee8-2e225865699c
        Validity
            Not Before: Jul 30 13:00:12 2026 GMT
            Not After : Oct 28 13:00:12 2026 GMT
        Subject: CN=6f5119a7-ed99-4eda-8e7a-5be4bfd7e2ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7e:de:4e:1a:ec:0c:dc:71:fe:1e:89:68:35:
                    64:7e:69:a1:19:b1:ca:67:bc:46:27:cd:9c:60:6f:
                    87:20:d8:07:ac:c5:7b:79:4f:c2:df:6f:fe:fc:22:
                    87:1d:fc:d6:03:1f:12:fd:f5:0b:fb:0a:38:cc:b4:
                    a5:cd:14:87:df:89:d2:4d:b2:78:c7:ff:09:bf:37:
                    8b:b0:f5:f8:7e:3f:bc:bb:94:4c:d8:4b:4d:7b:cb:
                    85:0f:92:4a:0c:1b:12:80:9c:b7:9c:54:9e:43:fb:
                    75:b5:ac:bf:c1:dc:37:95:b1:65:95:76:74:80:60:
                    d0:7d:b2:f8:22:1c:03:89:76:d0:ad:39:cd:1d:f2:
                    ab:e4:16:74:82:c9:bd:71:b0:21:e6:31:27:77:56:
                    1f:e2:cd:22:3f:f3:4b:85:7d:41:3b:48:80:89:18:
                    ca:30:ea:64:c0:c1:4a:96:a1:7b:8b:99:8c:f0:1a:
                    0c:c5:d4:3d:04:24:6a:34:10:a0:9d:71:70:a3:25:
                    0e:fd:a6:db:6f:0a:d1:c6:33:64:19:8a:d7:65:53:
                    e9:b7:5f:b2:ef:0b:2d:ce:0b:b9:52:79:0a:8d:8e:
                    7b:1c:24:1e:e8:3a:cd:dd:22:da:eb:b5:11:41:0f:
                    bb:f1:3d:98:fd:3c:91:a8:6f:d3:72:e2:9e:85:1e:
                    e7:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:80:42:D5:BA:A6:C9:28:4B:B9:0D:0D:BB:29:44:B1:CF:78:1E:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/21406178-dc16-3dd1-93ef-c3c2c20fa29c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/0699cec8-3851-41f8-aee8-2e225865699c.crl

            X509v3 Authority Key Identifier:
                keyid:04:3A:13:A4:9A:F1:19:6C:60:B7:74:79:3E:AA:82:F6:12:4B:E6:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.61.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:8b:68:c7:78:b1:cf:52:44:c7:28:06:c0:1c:c7:cb:8c:ed:
         94:52:5d:a4:77:cf:cb:ec:c8:72:2f:00:f2:8c:56:f5:f8:e3:
         ba:91:d2:43:32:dd:20:83:2c:ac:f0:f2:a7:0f:84:f8:81:28:
         35:08:28:d2:e6:a4:5f:6e:4b:20:24:78:3d:f9:91:cb:0e:e2:
         c3:0e:4f:58:d5:61:81:56:93:a1:7f:74:1f:ca:f3:3e:ae:fd:
         2e:7e:c3:12:9f:81:d0:5e:60:40:f5:59:f9:ac:0f:5a:f9:ba:
         5d:d1:9e:87:1c:0c:43:ca:9c:61:76:82:1d:26:43:46:23:31:
         2d:72:ca:d2:51:24:f5:a8:46:8b:c5:44:87:29:9c:b5:58:bb:
         b4:90:59:d7:24:51:32:45:e8:8b:2c:90:5d:09:39:d5:71:87:
         db:01:55:b9:2b:e1:14:9f:37:c4:92:52:d7:fa:ba:7a:88:11:
         bb:d6:ce:d2:37:c7:b6:a9:55:9f:29:07:1d:38:cc:d5:dc:84:
         7d:e5:79:4f:12:70:53:42:e1:4d:f6:3e:57:4e:ca:0e:17:35:
         98:3b:fb:6d:6e:6a:40:9c:af:8c:dc:08:5d:96:74:14:24:b1:
         41:f3:5e:0a:ac:67:76:f6:24:ca:c5:22:8a:d1:51:3a:71:8e:
         3d:1a:26:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6rtu7vGbwiOlp2bAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDY5OWNlYzgtMzg1MS00MWY4LWFlZTgtMmUyMjU4NjU2
OTljMB4XDTI2MDczMDEzMDAxMloXDTI2MTAyODEzMDAxMlowLzEtMCsGA1UEAxMk
NmY1MTE5YTctZWQ5OS00ZWRhLThlN2EtNWJlNGJmZDdlMmVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtn7eThrsDNxx/h6JaDVkfmmhGbHKZ7xGJ82c
YG+HINgHrMV7eU/C32/+/CKHHfzWAx8S/fUL+wo4zLSlzRSH34nSTbJ4x/8JvzeL
sPX4fj+8u5RM2EtNe8uFD5JKDBsSgJy3nFSeQ/t1tay/wdw3lbFllXZ0gGDQfbL4
IhwDiXbQrTnNHfKr5BZ0gsm9cbAh5jEnd1Yf4s0iP/NLhX1BO0iAiRjKMOpkwMFK
lqF7i5mM8BoMxdQ9BCRqNBCgnXFwoyUO/abbbwrRxjNkGYrXZVPpt1+y7wstzgu5
UnkKjY57HCQe6DrN3SLa67URQQ+78T2Y/TyRqG/TcuKehR7nBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM2AQtW6pskoS7kNDbspRLHPeB4BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8wNjk5
Y2VjOC0zODUxLTQxZjgtYWVlOC0yZTIyNTg2NTY5OWMvMjE0MDYxNzgtZGMxNi0z
ZGQxLTkzZWYtYzNjMmMyMGZhMjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMDY5OWNlYzgtMzg1MS00MWY4LWFl
ZTgtMmUyMjU4NjU2OTljLzA2OTljZWM4LTM4NTEtNDFmOC1hZWU4LTJlMjI1ODY1
Njk5Yy5jcmwwHwYDVR0jBBgwFoAUBDoTpJrxGWxgt3R5PqqC9hJL5p0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi8wNjk5Y2VjOC0zODUxLTQxZjgtYWVlOC0yZTIy
NTg2NTY5OWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqj38MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG6LaMd4sc9SRMcoBsAcx8uM7ZRSXaR3z8vsyHIvAPKMVvX447qR0kMy
3SCDLKzw8qcPhPiBKDUIKNLmpF9uSyAkeD35kcsO4sMOT1jVYYFWk6F/dB/K8z6u
/S5+wxKfgdBeYED1WfmsD1r5ul3RnoccDEPKnGF2gh0mQ0YjMS1yytJRJPWoRovF
RIcpnLVYu7SQWdckUTJF6IsskF0JOdVxh9sBVbkr4RSfN8SSUtf6unqIEbvWztI3
x7apVZ8pBx04zNXchH3leU8ScFNC4U32PldOyg4XNZg7+21uakCcr4zcCF2WdBQk
sUHzXgqsZ3b2JMrFIorRUTpxjj0aJmg=
-----END CERTIFICATE-----
Generated at Sat Sep 5 03:53:46 2026 by rpki-client