Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6ff5a2a2-17d3-3b09-91b2-f258e796bbf1.roa
File:                     6ff5a2a2-17d3-3b09-91b2-f258e796bbf1.roa (raw, json)
Hash identifier:          EhmWc95g9MYKLg4iuBYvHVS64mSmLcwRCJrX37FCCu8=
Subject key identifier:   91:CF:7E:99:1E:1A:70:E4:4A:14:52:B5:85:10:45:8F:49:DD:EA:A8
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F1F9243755F198F7E66AB5F10
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6ff5a2a2-17d3-3b09-91b2-f258e796bbf1.roa
Signing time:             Thu 10 Sep 2026 01:00:12 +0000
ROA not before:           Thu 10 Sep 2026 01:00:12 +0000
ROA not after:            Wed 09 Dec 2026 02:00:12 +0000
asID:                     51048
IP address blocks:        154.59.136.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1f:92:43:75:5f:19:8f:7e:66:ab:5f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep 10 01:00:12 2026 GMT
            Not After : Dec  9 02:00:12 2026 GMT
        Subject: CN=9cc8e169-4330-40ef-ab82-cdaae8c8140f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:4a:2f:25:fb:d7:3a:65:dd:b6:09:30:ff:a0:
                    f1:42:90:0d:79:62:9c:1d:e4:19:28:45:88:13:a2:
                    53:0d:7a:45:cf:4b:32:cb:b0:32:bf:2e:da:58:70:
                    d9:58:cc:d8:cc:3d:88:28:b4:5a:1d:40:50:01:3f:
                    a9:60:aa:48:a0:42:e3:dd:36:ed:1f:04:09:bf:63:
                    63:a1:14:99:c0:07:ea:9f:af:2e:bf:d0:a7:09:85:
                    bd:96:79:d4:a2:77:f8:b2:7a:cc:95:f1:48:34:17:
                    2b:a3:ee:05:4c:a2:93:c3:5a:21:77:d5:8c:b1:92:
                    a3:fe:bb:32:97:eb:89:30:21:75:8e:3b:a7:b4:3c:
                    c4:13:b0:62:3f:13:4e:9b:d2:b3:c1:ca:c0:ad:f7:
                    2d:9a:e0:0f:62:76:f4:47:fa:e7:04:50:c1:f9:18:
                    d8:ca:3a:ca:5b:8b:b6:3a:45:9c:43:0d:35:5b:75:
                    41:ef:e5:26:4e:95:59:54:55:b8:ee:a5:5c:de:1e:
                    96:cf:16:eb:6c:17:87:2b:5f:97:95:a3:7a:06:10:
                    3f:eb:48:d5:b1:13:47:e8:3a:96:87:4d:a6:d6:75:
                    a0:8a:12:a5:85:af:dd:d5:17:96:f1:e6:5d:21:c5:
                    b4:d0:b5:ca:bf:30:01:f8:c6:bc:f9:b6:35:05:dd:
                    cf:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:CF:7E:99:1E:1A:70:E4:4A:14:52:B5:85:10:45:8F:49:DD:EA:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6ff5a2a2-17d3-3b09-91b2-f258e796bbf1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.59.136.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:9e:15:b7:41:cd:43:8e:2c:e2:04:40:ca:b6:8f:68:ae:b1:
         c2:f4:dd:f2:6c:49:2a:36:b3:da:09:08:01:10:7e:d0:21:c9:
         1f:ba:65:95:32:34:21:2b:7f:cf:d2:85:4c:21:0b:65:92:bb:
         85:f1:96:76:1a:14:95:c6:2c:21:6d:f4:66:87:9f:72:3f:b5:
         da:24:7e:fd:38:b4:95:f1:b4:2e:9e:bd:ed:9d:dd:72:c8:c0:
         80:51:e3:fe:16:4e:58:7b:8c:3f:39:2b:50:8e:36:e6:28:70:
         8c:ab:57:ec:3b:ec:af:7a:58:7a:c9:02:01:f4:f4:08:59:ed:
         a8:eb:fd:11:04:e6:ff:cf:6a:44:6f:b9:d6:0f:8c:e2:09:97:
         80:70:59:be:c0:20:da:0c:0a:84:0f:fe:6e:c9:b9:6d:55:7f:
         99:e0:de:f1:7e:01:0f:dc:d9:bd:ff:2f:ec:1a:1d:bd:46:87:
         bc:4b:df:9e:5f:54:ab:d2:ae:50:53:43:c7:7c:d3:6e:22:30:
         f0:0e:a7:8c:39:f5:79:96:e3:76:f2:2f:8e:88:39:87:ca:5d:
         b2:ca:ae:d6:c3:f0:e8:f8:4c:ae:cd:4c:5a:7c:1f:0a:9d:f8:
         f7:db:b6:ac:e7:7c:52:04:d8:19:c4:3f:4c:56:d5:50:07:7c:
         90:a3:70:db
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8fkkN1XxmPfmarXxAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDkxMDAxMDAxMloXDTI2MTIwOTAyMDAxMlowLzEtMCsGA1UEAxMk
OWNjOGUxNjktNDMzMC00MGVmLWFiODItY2RhYWU4YzgxNDBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEovJfvXOmXdtgkw/6DxQpANeWKcHeQZKEWI
E6JTDXpFz0syy7Ayvy7aWHDZWMzYzD2IKLRaHUBQAT+pYKpIoELj3TbtHwQJv2Nj
oRSZwAfqn68uv9CnCYW9lnnUonf4snrMlfFINBcro+4FTKKTw1ohd9WMsZKj/rsy
l+uJMCF1jjuntDzEE7BiPxNOm9KzwcrArfctmuAPYnb0R/rnBFDB+RjYyjrKW4u2
OkWcQw01W3VB7+UmTpVZVFW47qVc3h6WzxbrbBeHK1+XlaN6BhA/60jVsRNH6DqW
h02m1nWgihKlha/d1ReW8eZdIcW00LXKvzAB+Ma8+bY1Bd3PpQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJHPfpkeGnDkShRStYUQRY9J3eqoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNmZmNWEyYTItMTdkMy0z
YjA5LTkxYjItZjI1OGU3OTZiYmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmjuIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHOeFbdBzUOOLOIEQMq2j2iuscL03fJsSSo2s9oJCAEQftAhyR+6ZZUy
NCErf8/ShUwhC2WSu4XxlnYaFJXGLCFt9GaHn3I/tdokfv04tJXxtC6eve2d3XLI
wIBR4/4WTlh7jD85K1CONuYocIyrV+w77K96WHrJAgH09AhZ7ajr/REE5v/PakRv
udYPjOIJl4BwWb7AINoMCoQP/m7JuW1Vf5ng3vF+AQ/c2b3/L+waHb1Gh7xL355f
VKvSrlBTQ8d8024iMPAOp4w59XmW43byL46IOYfKXbLKrtbD8Oj4TK7NTFp8Hwqd
+PfbtqznfFIE2BnEP0xW1VAHfJCjcNs=
-----END CERTIFICATE-----
Generated at Fri Sep 11 13:56:03 2026 by rpki-client