Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/690d3e4c-3927-4ce0-a787-35ad7dbecaa1/4594ec4e-deaf-3ef5-9aa2-945cacbc3b43.roa
File:                     4594ec4e-deaf-3ef5-9aa2-945cacbc3b43.roa (raw, json)
Hash identifier:          zBvbe4rbP3dpr37x9cPCb8P49w3cekgnC98oQDTly7k=
Subject key identifier:   A2:C4:DD:DF:70:B9:B4:3B:63:DC:D7:9B:DF:32:8F:BA:7D:85:0A:A1
Certificate issuer:       /CN=690d3e4c-3927-4ce0-a787-35ad7dbecaa1
Certificate serial:       010D0C9F4328584EA788A375E508AFC878531E40
Authority key identifier: 82:8F:AF:9A:53:49:2B:74:29:45:D4:70:D8:A5:2A:60:AE:BB:8C:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/690d3e4c-3927-4ce0-a787-35ad7dbecaa1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/690d3e4c-3927-4ce0-a787-35ad7dbecaa1/4594ec4e-deaf-3ef5-9aa2-945cacbc3b43.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     20001
IP address blocks:        208.113.6.0/23 maxlen: 24
                          208.113.16.0/23 maxlen: 24
                          208.113.22.0/23 maxlen: 24
                          208.113.32.0/23 maxlen: 24
                          208.113.46.0/23 maxlen: 24
                          208.113.48.0/23 maxlen: 24
                          208.113.58.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/690d3e4c-3927-4ce0-a787-35ad7dbecaa1/690d3e4c-3927-4ce0-a787-35ad7dbecaa1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/690d3e4c-3927-4ce0-a787-35ad7dbecaa1/690d3e4c-3927-4ce0-a787-35ad7dbecaa1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/690d3e4c-3927-4ce0-a787-35ad7dbecaa1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:a3:75:e5:08:af:c8:78:53:1e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=690d3e4c-3927-4ce0-a787-35ad7dbecaa1
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=6e228381-d10e-4457-a95b-b4717c485829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:9f:a9:9b:84:d9:2c:8c:16:b7:11:3d:3e:78:
                    6b:ee:d0:3c:b6:1a:d5:01:14:1c:ab:62:13:9e:6e:
                    e9:fa:33:b5:5a:4b:44:bd:2b:a9:21:f8:5a:99:3a:
                    75:a6:db:87:95:e0:9d:f6:ec:3c:ab:3f:67:63:fb:
                    55:a9:3c:ea:9a:db:71:a2:36:34:01:a1:0d:31:cd:
                    b8:25:40:01:fa:81:f3:7f:78:fd:69:3c:4b:d2:d2:
                    25:bf:a0:af:99:10:2b:ca:7c:39:10:ca:f7:8b:e4:
                    4f:56:7e:51:5e:92:e5:9e:eb:cf:80:4f:dd:8f:cf:
                    ad:cf:fd:8d:f6:f8:f1:ca:ef:8b:3d:14:70:f5:98:
                    b2:12:98:51:b3:23:86:2e:51:c4:e3:a5:78:23:61:
                    ef:53:b5:17:e2:18:50:52:71:69:e2:d8:23:35:76:
                    42:d2:36:d4:80:e3:48:c3:8d:e5:33:41:1b:87:10:
                    59:26:02:b3:05:cf:05:43:b3:bf:ea:97:2e:97:02:
                    d9:40:b7:28:e5:a6:91:e1:a3:c2:0f:cf:6e:d0:97:
                    33:ac:ba:a7:32:62:3a:39:a1:4a:9b:19:29:ac:80:
                    52:59:f7:90:fd:34:ad:eb:df:d3:8b:71:e9:b3:4c:
                    05:5b:38:3a:48:0a:be:70:c3:b4:b2:37:30:bc:cb:
                    35:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:C4:DD:DF:70:B9:B4:3B:63:DC:D7:9B:DF:32:8F:BA:7D:85:0A:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/690d3e4c-3927-4ce0-a787-35ad7dbecaa1/4594ec4e-deaf-3ef5-9aa2-945cacbc3b43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/690d3e4c-3927-4ce0-a787-35ad7dbecaa1/690d3e4c-3927-4ce0-a787-35ad7dbecaa1.crl

            X509v3 Authority Key Identifier:
                keyid:82:8F:AF:9A:53:49:2B:74:29:45:D4:70:D8:A5:2A:60:AE:BB:8C:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/690d3e4c-3927-4ce0-a787-35ad7dbecaa1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.113.6.0/23
                  208.113.16.0/23
                  208.113.22.0/23
                  208.113.32.0/23
                  208.113.46.0-208.113.49.255
                  208.113.58.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:44:8d:14:3c:02:5d:b9:cb:e1:fd:05:62:76:12:73:a4:84:
         71:f0:03:f2:e5:de:21:04:57:0e:5a:ce:d6:d6:82:f2:d8:2b:
         77:fd:a6:6f:19:f7:8a:e1:d0:e0:3a:5e:ad:f0:93:06:81:32:
         3a:cd:b7:79:6f:0d:5f:30:ea:af:28:4f:b8:77:fe:5b:ea:03:
         1c:38:07:35:77:4b:4e:a7:ed:af:84:e7:9f:af:aa:72:98:86:
         2f:94:5c:97:4c:3d:5d:8a:06:ea:08:57:ef:cc:2f:f6:d3:c2:
         04:fa:69:d9:5d:11:b0:b4:90:d6:3c:73:90:c9:5b:63:e8:a3:
         0e:c1:f2:ab:28:7f:94:6a:33:71:9c:fb:88:cf:96:ea:c7:5a:
         1e:a9:ec:86:83:22:8a:e4:ab:82:12:92:bd:3e:e7:d6:ac:41:
         b5:74:c1:dd:2e:ea:17:5c:22:a6:04:d5:03:5f:3e:84:05:dc:
         3a:9a:66:fb:55:01:f1:e7:e3:3c:e4:a8:29:38:6c:3f:bc:60:
         76:8e:7c:7f:39:4b:37:05:df:7c:18:2f:17:9a:53:9d:8a:aa:
         86:2f:a9:d0:8f:fc:7c:84:9a:c1:ab:17:6e:50:7b:0d:30:0b:
         65:4f:93:3d:3a:68:0f:01:63:67:c4:12:ca:43:e1:ed:4e:8f:
         0c:85:b4:7e
-----BEGIN CERTIFICATE-----
MIIGaTCCBVGgAwIBAgIUAQ0Mn0MoWE6niKN15QivyHhTHkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjkwZDNlNGMtMzkyNy00Y2UwLWE3ODctMzVhZDdkYmVj
YWExMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NmUyMjgzODEtZDEwZS00NDU3LWE5NWItYjQ3MTdjNDg1ODI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjp+pm4TZLIwWtxE9Pnhr7tA8thrVARQcq2IT
nm7p+jO1WktEvSupIfhamTp1ptuHleCd9uw8qz9nY/tVqTzqmttxojY0AaENMc24
JUAB+oHzf3j9aTxL0tIlv6CvmRArynw5EMr3i+RPVn5RXpLlnuvPgE/dj8+tz/2N
9vjxyu+LPRRw9ZiyEphRsyOGLlHE46V4I2HvU7UX4hhQUnFp4tgjNXZC0jbUgONI
w43lM0EbhxBZJgKzBc8FQ7O/6pculwLZQLco5aaR4aPCD89u0JczrLqnMmI6OaFK
mxkprIBSWfeQ/TSt69/Ti3Hps0wFWzg6SAq+cMO0sjcwvMs10wIDAQABo4IDezCC
A3cwHQYDVR0OBBYEFKLE3d9wubQ7Y9zXm98yj7p9hQqhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82OTBk
M2U0Yy0zOTI3LTRjZTAtYTc4Ny0zNWFkN2RiZWNhYTEvNDU5NGVjNGUtZGVhZi0z
ZWY1LTlhYTItOTQ1Y2FjYmMzYjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNjkwZDNlNGMtMzkyNy00Y2UwLWE3
ODctMzVhZDdkYmVjYWExLzY5MGQzZTRjLTM5MjctNGNlMC1hNzg3LTM1YWQ3ZGJl
Y2FhMS5jcmwwHwYDVR0jBBgwFoAUgo+vmlNJK3QpRdRw2KUqYK67jNowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy82OTBkM2U0Yy0zOTI3LTRjZTAtYTc4Ny0zNWFk
N2RiZWNhYTEuY2VyMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQB0HEGAwQB
0HEQAwQB0HEWAwQB0HEgMAwDBAHQcS4DBAHQcTADBAHQcTowVAYDVR0gAQH/BEow
SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l
dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAG0SN
FDwCXbnL4f0FYnYSc6SEcfAD8uXeIQRXDlrO1taC8tgrd/2mbxn3iuHQ4DperfCT
BoEyOs23eW8NXzDqryhPuHf+W+oDHDgHNXdLTqftr4Tnn6+qcpiGL5Rcl0w9XYoG
6ghX78wv9tPCBPpp2V0RsLSQ1jxzkMlbY+ijDsHyqyh/lGozcZz7iM+W6sdaHqns
hoMiiuSrghKSvT7n1qxBtXTB3S7qF1wipgTVA18+hAXcOppm+1UB8efjPOSoKThs
P7xgdo58fzlLNwXffBgvF5pTnYqqhi+p0I/8fISawasXblB7DTALZU+TPTpoDwFj
Z8QSykPh7U6PDIW0fg==
-----END CERTIFICATE-----
Generated at Fri Sep 4 20:18:32 2026 by rpki-client