Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/af6ef17a-aee2-3de3-bd2c-06cd073afecb.roa
File:                     af6ef17a-aee2-3de3-bd2c-06cd073afecb.roa (raw, json)
Hash identifier:          jYRFCkb97BBGaK2Z/Z2nKJ8UUAzFt7SFwrAKOB1GZTs=
Subject key identifier:   67:03:2A:44:CD:E0:09:B4:49:68:8E:48:FC:ED:F9:CF:A1:5C:1D:E6
Certificate issuer:       /CN=4f9aabcb-26a8-4c57-ae55-7933ba2b51b6
Certificate serial:       010D0C9F4328584DE41B2CA5B146884DD0005D00
Authority key identifier: 7C:70:D2:8C:38:34:29:F5:7A:7B:3B:D8:48:17:5E:03:4E:1D:C1:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/af6ef17a-aee2-3de3-bd2c-06cd073afecb.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     10794
IP address blocks:        206.143.44.0/23 maxlen: 23
                          206.143.44.0/24 maxlen: 24
                          206.143.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:2c:a5:b1:46:88:4d:d0:00:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f9aabcb-26a8-4c57-ae55-7933ba2b51b6
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=86ee6d38-9329-4986-8503-5edf677b9669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9a:5e:75:36:4e:07:9f:d3:fc:41:a0:4b:d1:
                    69:c8:aa:d8:dc:fc:46:3e:1b:27:10:a5:91:ca:03:
                    cb:ff:19:7a:a1:ba:18:9d:6a:89:32:30:e0:be:ce:
                    2d:90:f1:01:ed:d3:df:26:aa:92:81:08:2f:6c:53:
                    6c:66:ba:f4:f7:77:ff:4b:73:46:5e:c3:f2:6b:cb:
                    e9:81:e2:86:61:6b:bf:11:86:f7:42:e0:66:36:01:
                    88:0f:5e:1f:a7:56:60:e5:b2:41:7a:85:f0:9f:df:
                    20:e6:01:f6:9c:0a:a7:15:86:f2:ba:4c:b3:bd:6e:
                    46:28:fa:00:00:35:6d:2a:38:18:d5:eb:69:47:96:
                    18:48:fc:13:9b:eb:95:77:71:20:54:0f:40:22:ab:
                    1e:8d:7e:60:c5:a9:cb:e3:25:1c:ad:27:6c:26:79:
                    9f:c1:fa:d7:f8:44:0e:91:d4:24:17:ab:e7:95:71:
                    72:42:fa:03:c2:29:f3:21:9f:d4:2b:90:9e:f8:1e:
                    88:e9:5b:79:71:21:ea:70:f7:06:bf:42:7f:dd:57:
                    81:3b:d7:a6:46:31:1d:f0:b7:43:25:ae:12:30:c2:
                    f9:b8:e1:d0:a9:bd:15:cc:82:84:e4:00:0c:9e:24:
                    8f:93:92:62:9e:65:0e:f2:61:e1:9f:e3:1a:81:77:
                    bf:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:03:2A:44:CD:E0:09:B4:49:68:8E:48:FC:ED:F9:CF:A1:5C:1D:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/af6ef17a-aee2-3de3-bd2c-06cd073afecb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.crl

            X509v3 Authority Key Identifier:
                keyid:7C:70:D2:8C:38:34:29:F5:7A:7B:3B:D8:48:17:5E:03:4E:1D:C1:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.143.44.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:bb:53:b2:6d:19:ea:36:6a:76:79:c8:51:fd:fd:5d:90:54:
         58:c2:d2:a2:af:d8:66:87:0f:ab:39:c9:59:87:0d:6f:61:55:
         ba:98:75:a7:92:0b:d1:cf:3c:d1:ad:46:08:a5:44:c9:f4:03:
         db:7e:ed:0b:e4:28:d7:52:62:d1:d0:c9:06:ae:a9:23:0f:45:
         35:52:15:ce:60:73:ca:91:13:55:6c:e3:d1:9c:42:cf:4a:29:
         17:06:90:b1:c6:7c:98:a2:5f:a1:3f:91:36:59:45:30:61:10:
         8b:a6:7b:f2:06:23:4b:1f:68:39:37:df:41:1b:53:32:81:bd:
         71:ee:14:04:73:c8:59:22:53:1a:6a:3a:b7:a2:22:3e:0d:30:
         ba:39:f7:e3:59:ec:81:7b:83:6b:72:2e:ad:c8:1b:94:41:b8:
         3b:57:e2:19:ae:bf:01:3c:b5:ec:10:f8:f0:db:6c:6c:0c:ff:
         a6:5b:68:84:37:af:f0:68:4a:f2:b1:ab:70:33:d7:b9:e3:b1:
         cf:d2:3d:c3:50:66:6f:4f:1f:cb:7a:2d:5e:28:57:3c:aa:2c:
         05:d3:35:1c:7b:ae:74:64:ee:0f:12:14:c6:89:1a:4e:05:9a:
         e3:69:17:56:01:99:72:ea:ce:8f:1b:fd:c5:9f:e0:96:50:59:
         b1:08:89:b2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3kGyylsUaITdAAXQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGY5YWFiY2ItMjZhOC00YzU3LWFlNTUtNzkzM2JhMmI1
MWI2MB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk
ODZlZTZkMzgtOTMyOS00OTg2LTg1MDMtNWVkZjY3N2I5NjY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZpedTZOB5/T/EGgS9FpyKrY3PxGPhsnEKWR
ygPL/xl6oboYnWqJMjDgvs4tkPEB7dPfJqqSgQgvbFNsZrr093f/S3NGXsPya8vp
geKGYWu/EYb3QuBmNgGID14fp1Zg5bJBeoXwn98g5gH2nAqnFYbyukyzvW5GKPoA
ADVtKjgY1etpR5YYSPwTm+uVd3EgVA9AIqsejX5gxanL4yUcrSdsJnmfwfrX+EQO
kdQkF6vnlXFyQvoDwinzIZ/UK5Ce+B6I6Vt5cSHqcPcGv0J/3VeBO9emRjEd8LdD
Ja4SMML5uOHQqb0VzIKE5AAMniSPk5JinmUO8mHhn+MagXe/OQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGcDKkTN4Am0SWiOSPzt+c+hXB3mMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80Zjlh
YWJjYi0yNmE4LTRjNTctYWU1NS03OTMzYmEyYjUxYjYvYWY2ZWYxN2EtYWVlMi0z
ZGUzLWJkMmMtMDZjZDA3M2FmZWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNGY5YWFiY2ItMjZhOC00YzU3LWFl
NTUtNzkzM2JhMmI1MWI2LzRmOWFhYmNiLTI2YTgtNGM1Ny1hZTU1LTc5MzNiYTJi
NTFiNi5jcmwwHwYDVR0jBBgwFoAUfHDSjDg0KfV6ezvYSBdeA04dwcIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy80ZjlhYWJjYi0yNmE4LTRjNTctYWU1NS03OTMz
YmEyYjUxYjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzo8sMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHC7U7JtGeo2anZ5yFH9/V2QVFjC0qKv2GaHD6s5yVmHDW9hVbqYdaeS
C9HPPNGtRgilRMn0A9t+7QvkKNdSYtHQyQauqSMPRTVSFc5gc8qRE1Vs49GcQs9K
KRcGkLHGfJiiX6E/kTZZRTBhEIume/IGI0sfaDk330EbUzKBvXHuFARzyFkiUxpq
OreiIj4NMLo59+NZ7IF7g2tyLq3IG5RBuDtX4hmuvwE8tewQ+PDbbGwM/6ZbaIQ3
r/BoSvKxq3Az17njsc/SPcNQZm9PH8t6LV4oVzyqLAXTNRx7rnRk7g8SFMaJGk4F
muNpF1YBmXLqzo8b/cWf4JZQWbEIibI=
-----END CERTIFICATE-----
Generated at Thu May 21 20:02:50 2026 by rpki-client