Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/566629a7-3529-3587-a936-ca614965d4a7.roa
File:                     566629a7-3529-3587-a936-ca614965d4a7.roa (raw, json)
Hash identifier:          MemOYmiDy/xBPf3Mfw1yPSGiW07ZGGSevasJ7nfS9aU=
Subject key identifier:   62:A0:D8:7E:63:1D:3D:AB:E1:67:A3:78:F7:0B:E6:25:0A:BF:19:13
Certificate issuer:       /CN=e9769409-4db3-443e-9837-3afd4dca595d
Certificate serial:       010D0C9F4328584D2644BA4F8C61F76FD197CCE0
Authority key identifier: F6:C8:09:76:E4:F0:CE:2E:06:48:19:F1:1F:D8:CB:04:C1:FF:B5:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/566629a7-3529-3587-a936-ca614965d4a7.roa
Signing time:             Fri 13 Mar 2026 01:00:31 +0000
ROA not before:           Fri 13 Mar 2026 01:00:31 +0000
ROA not after:            Thu 11 Jun 2026 01:00:31 +0000
asID:                     23316
IP address blocks:        108.60.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/e9769409-4db3-443e-9837-3afd4dca595d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/e9769409-4db3-443e-9837-3afd4dca595d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:26:44:ba:4f:8c:61:f7:6f:d1:97:cc:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9769409-4db3-443e-9837-3afd4dca595d
        Validity
            Not Before: Mar 13 01:00:31 2026 GMT
            Not After : Jun 11 01:00:31 2026 GMT
        Subject: CN=8c10400d-6a6f-477b-992d-6c71d450b1de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:90:ca:28:df:4b:10:38:bf:0d:d3:ee:f9:82:
                    b7:bb:e4:19:1d:bd:d6:ba:33:90:9e:7a:3d:31:1a:
                    9f:94:9d:f1:3f:dc:51:01:0f:08:98:e5:46:e2:e2:
                    a3:14:c0:db:ec:11:58:69:ce:14:d3:a8:88:8f:c0:
                    56:1f:ed:72:fc:d8:c6:b0:2a:c7:7c:82:30:44:55:
                    ea:bb:05:32:30:b9:67:be:86:b2:a2:50:d4:69:e5:
                    21:1c:c0:d1:64:91:f8:fe:3d:3f:ba:53:ab:b7:38:
                    a4:6c:8a:2a:6b:59:e9:ba:64:88:56:84:03:97:a4:
                    97:7e:d8:3e:ad:af:bf:f4:1c:dd:29:10:af:13:2b:
                    a2:75:ea:fa:62:f4:d7:99:94:d1:4a:e6:63:11:d2:
                    3d:58:4a:cb:09:8e:d6:2b:b6:9d:58:da:cd:c0:40:
                    e4:00:b6:48:55:28:00:b3:dd:37:2c:bd:33:08:d3:
                    9b:ac:9f:c5:03:f4:c2:2b:2e:b5:d1:e8:50:5a:cb:
                    b8:28:fb:cb:08:7f:67:91:68:fc:d2:ea:89:8d:90:
                    55:9c:b1:47:63:da:b9:5e:d9:c1:e0:46:5b:8b:95:
                    5a:d7:6a:75:4b:6f:c4:84:12:70:10:7d:43:e9:ea:
                    48:ac:77:9c:b9:f8:71:e1:60:3a:72:7d:df:26:a9:
                    3a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A0:D8:7E:63:1D:3D:AB:E1:67:A3:78:F7:0B:E6:25:0A:BF:19:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/566629a7-3529-3587-a936-ca614965d4a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/e9769409-4db3-443e-9837-3afd4dca595d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:C8:09:76:E4:F0:CE:2E:06:48:19:F1:1F:D8:CB:04:C1:FF:B5:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.60.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:b9:c3:a9:42:6b:98:3b:da:0c:d9:ff:5f:f4:9b:16:14:f0:
         6b:d7:29:e1:87:7c:05:de:68:3a:64:29:81:c6:a0:f5:bf:b9:
         32:8a:19:6a:44:c9:e9:9b:0c:3c:9d:13:18:35:85:49:56:f5:
         3a:f9:a8:7d:17:2e:86:71:de:26:89:78:a6:82:40:cc:4d:55:
         5d:66:30:4d:8f:0c:e6:b6:a0:90:74:cd:01:3d:e3:75:e6:66:
         b2:db:33:86:69:b9:ea:78:2a:fa:12:f1:d4:09:45:48:03:d4:
         d1:dd:d5:27:b1:c9:dd:61:2b:1e:f3:b3:05:5d:e2:63:8d:db:
         04:ee:7b:0b:40:ae:b6:6f:16:2b:6b:fc:b5:cd:2c:3f:0a:36:
         0c:6a:5f:dd:7a:ab:ce:df:f0:d9:fb:ed:8b:87:14:44:eb:08:
         52:6c:02:cd:65:99:15:ff:90:ef:51:f6:67:77:0b:1e:37:22:
         4d:81:2d:17:52:4d:12:de:49:6b:7c:eb:ee:c4:20:25:83:b4:
         25:01:45:9b:fc:e9:27:b1:37:16:b7:32:79:ed:ec:bf:54:0b:
         d0:60:51:4c:80:f5:3b:78:fb:57:14:c4:d4:f8:4b:b0:d0:41:
         43:aa:f0:80:97:4a:99:d2:98:15:b2:ba:3e:30:7f:48:41:da:
         71:a9:73:95
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0mRLpPjGH3b9GXzOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTk3Njk0MDktNGRiMy00NDNlLTk4MzctM2FmZDRkY2E1
OTVkMB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk
OGMxMDQwMGQtNmE2Zi00NzdiLTk5MmQtNmM3MWQ0NTBiMWRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJDKKN9LEDi/DdPu+YK3u+QZHb3WujOQnno9
MRqflJ3xP9xRAQ8ImOVG4uKjFMDb7BFYac4U06iIj8BWH+1y/NjGsCrHfIIwRFXq
uwUyMLlnvoayolDUaeUhHMDRZJH4/j0/ulOrtzikbIoqa1npumSIVoQDl6SXftg+
ra+/9BzdKRCvEyuider6YvTXmZTRSuZjEdI9WErLCY7WK7adWNrNwEDkALZIVSgA
s903LL0zCNObrJ/FA/TCKy610ehQWsu4KPvLCH9nkWj80uqJjZBVnLFHY9q5XtnB
4EZbi5Va12p1S2/EhBJwEH1D6epIrHecufhx4WA6cn3fJqk6bwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGKg2H5jHT2r4WejePcL5iUKvxkTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lOTc2
OTQwOS00ZGIzLTQ0M2UtOTgzNy0zYWZkNGRjYTU5NWQvNTY2NjI5YTctMzUyOS0z
NTg3LWE5MzYtY2E2MTQ5NjVkNGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZTk3Njk0MDktNGRiMy00NDNlLTk4
MzctM2FmZDRkY2E1OTVkL2U5NzY5NDA5LTRkYjMtNDQzZS05ODM3LTNhZmQ0ZGNh
NTk1ZC5jcmwwHwYDVR0jBBgwFoAU9sgJduTwzi4GSBnxH9jLBMH/tewwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9lOTc2OTQwOS00ZGIzLTQ0M2UtOTgzNy0zYWZk
NGRjYTU5NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFbDwgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABe5w6lCa5g72gzZ/1/0mxYU8GvXKeGHfAXeaDpkKYHGoPW/uTKKGWpE
yembDDydExg1hUlW9Tr5qH0XLoZx3iaJeKaCQMxNVV1mME2PDOa2oJB0zQE943Xm
ZrLbM4Zpuep4KvoS8dQJRUgD1NHd1Sexyd1hKx7zswVd4mON2wTuewtArrZvFitr
/LXNLD8KNgxqX916q87f8Nn77YuHFETrCFJsAs1lmRX/kO9R9md3Cx43Ik2BLRdS
TRLeSWt86+7EICWDtCUBRZv86SexNxa3Mnnt7L9UC9BgUUyA9Tt4+1cUxNT4S7DQ
QUOq8ICXSpnSmBWyuj4wf0hB2nGpc5U=
-----END CERTIFICATE-----
Generated at Sat Mar 21 23:05:58 2026 by rpki-client