Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6b5e5ba4-0bc5-37af-973f-935d6828d802.roa
File:                     6b5e5ba4-0bc5-37af-973f-935d6828d802.roa (raw, json)
Hash identifier:          +YdhGFsTiwXsYIB+OM3ct9zrzb92U7DltDVDD0R2DNY=
Subject key identifier:   84:93:82:2F:DF:AD:6B:A5:F5:D9:A6:08:65:90:7F:22:55:62:A7:F7
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E74BD8849D242097725F98A00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6b5e5ba4-0bc5-37af-973f-935d6828d802.roa
Signing time:             Fri 10 Jul 2026 20:24:10 +0000
ROA not before:           Fri 10 Jul 2026 20:24:10 +0000
ROA not after:            Thu 08 Oct 2026 20:24:10 +0000
asID:                     12083
IP address blocks:        68.167.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:74:bd:88:49:d2:42:09:77:25:f9:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul 10 20:24:10 2026 GMT
            Not After : Oct  8 20:24:10 2026 GMT
        Subject: CN=793ad3e4-8508-4e22-bc88-cd744036dab6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:bf:68:34:84:bb:41:21:fc:f9:74:29:9f:63:
                    77:d2:97:0e:b2:a1:7f:b6:66:11:88:a0:35:3a:93:
                    27:cf:a4:3d:ce:2f:5f:35:f3:7c:16:ef:65:06:27:
                    23:f3:e9:b5:4b:62:a0:7b:67:e7:3a:f3:8d:59:ca:
                    9b:86:42:af:92:e0:0c:49:84:70:1c:dc:a3:2c:86:
                    8c:f9:1b:f5:2d:08:84:a9:e6:4c:56:4f:72:a8:e1:
                    da:ac:d3:5e:3a:2d:3e:eb:23:f9:ca:f6:86:09:9e:
                    03:7f:2e:48:6b:3a:e6:23:cc:36:24:91:51:c1:8b:
                    3c:89:79:b7:be:7f:5d:cf:f0:c3:66:1f:e9:14:78:
                    2f:77:d5:04:56:3a:52:a7:7f:33:13:e3:7f:16:ca:
                    be:2b:ea:23:39:8b:8b:04:1c:c3:79:1c:23:cb:67:
                    58:24:9e:92:1f:ae:01:3a:d5:78:6d:48:20:35:4f:
                    f4:c2:52:0c:c6:e1:6f:7b:f9:5e:12:97:ec:e1:92:
                    28:10:70:d1:98:cd:fe:04:45:05:8a:8b:d8:fb:ec:
                    0c:d5:7f:72:6a:88:c9:87:b4:73:4c:aa:5d:9b:1e:
                    0d:b7:60:f5:38:7b:3b:00:38:fa:d6:b4:ee:ca:76:
                    da:a5:cb:69:3b:f3:45:78:9d:72:a0:3d:56:1f:83:
                    6e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:93:82:2F:DF:AD:6B:A5:F5:D9:A6:08:65:90:7F:22:55:62:A7:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6b5e5ba4-0bc5-37af-973f-935d6828d802.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.167.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:03:a7:af:a6:4f:e2:7e:14:fa:73:c8:39:5b:99:96:57:0a:
         5d:6a:0c:a7:01:bd:f3:ea:12:96:c0:b1:83:fc:18:97:25:e1:
         5e:f3:6f:05:ca:df:f7:76:28:ab:98:30:18:33:01:ee:3b:d0:
         d4:72:51:34:95:f9:26:46:ed:90:86:46:fc:75:9b:8a:4f:f8:
         9f:3e:f7:21:ce:c4:c4:72:59:bf:f4:ac:47:f1:31:96:e2:35:
         df:ba:b7:df:9f:8f:ad:af:ee:be:fa:2b:9b:0a:a5:2a:2f:f0:
         07:3a:20:1b:21:f4:53:c2:a9:58:69:4a:1c:79:2d:f2:cc:9f:
         f6:6e:98:a8:26:46:ff:ea:99:d2:2d:63:8e:9f:da:48:72:30:
         7f:1c:af:6c:87:22:6f:6b:3e:9c:5c:7a:52:3a:ce:a9:ec:5b:
         9f:4e:e6:57:f4:8e:17:1e:69:44:aa:84:e5:5b:91:25:63:4e:
         03:2b:70:03:2e:91:da:81:a3:4b:55:bf:56:22:15:f0:64:8a:
         c6:5f:26:df:1c:b6:72:f5:08:a3:81:8e:07:e5:1f:73:38:5b:
         54:3d:f6:91:60:6c:79:01:eb:dc:31:5c:13:ea:4f:d7:9a:7f:
         af:8f:1f:c7:95:a8:42:dc:29:c3:18:77:4f:af:a4:58:5e:ed:
         5f:c4:11:97
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE50vYhJ0kIJdyX5igAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDcxMDIwMjQxMFoXDTI2MTAwODIwMjQxMFowLzEtMCsGA1UEAxMk
NzkzYWQzZTQtODUwOC00ZTIyLWJjODgtY2Q3NDQwMzZkYWI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3r9oNIS7QSH8+XQpn2N30pcOsqF/tmYRiKA1
OpMnz6Q9zi9fNfN8Fu9lBicj8+m1S2Kge2fnOvONWcqbhkKvkuAMSYRwHNyjLIaM
+Rv1LQiEqeZMVk9yqOHarNNeOi0+6yP5yvaGCZ4Dfy5IazrmI8w2JJFRwYs8iXm3
vn9dz/DDZh/pFHgvd9UEVjpSp38zE+N/Fsq+K+ojOYuLBBzDeRwjy2dYJJ6SH64B
OtV4bUggNU/0wlIMxuFve/leEpfs4ZIoEHDRmM3+BEUFiovY++wM1X9yaojJh7Rz
TKpdmx4Nt2D1OHs7ADj61rTuynbapctpO/NFeJ1yoD1WH4NuhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFISTgi/frWul9dmmCGWQfyJVYqf3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNmI1ZTViYTQtMGJjNS0z
N2FmLTk3M2YtOTM1ZDY4MjhkODAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRKcUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMkDp6+mT+J+FPpzyDlbmZZXCl1qDKcBvfPqEpbAsYP8GJcl4V7zbwXK
3/d2KKuYMBgzAe470NRyUTSV+SZG7ZCGRvx1m4pP+J8+9yHOxMRyWb/0rEfxMZbi
Nd+6t9+fj62v7r76K5sKpSov8Ac6IBsh9FPCqVhpShx5LfLMn/ZumKgmRv/qmdIt
Y46f2khyMH8cr2yHIm9rPpxcelI6zqnsW59O5lf0jhceaUSqhOVbkSVjTgMrcAMu
kdqBo0tVv1YiFfBkisZfJt8ctnL1CKOBjgflH3M4W1Q99pFgbHkB69wxXBPqT9ea
f6+PH8eVqELcKcMYd0+vpFhe7V/EEZc=
-----END CERTIFICATE-----
Generated at Tue Jul 21 03:35:14 2026 by rpki-client