Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6c53f198-7a48-4fd5-8edf-26380048b436/ebc8950b-839e-3d63-bac1-417f04e0340a.roa
File:                     ebc8950b-839e-3d63-bac1-417f04e0340a.roa (raw, json)
Hash identifier:          meQeqH648k+dW2TRRmGr7srxAg1WCxKl498fq9uAgHA=
Subject key identifier:   71:F8:A5:F1:BA:0A:33:AC:F2:B9:18:BE:BF:2C:64:D2:E4:C8:C7:48
Certificate issuer:       /CN=6c53f198-7a48-4fd5-8edf-26380048b436
Certificate serial:       010D0C9F4328584E4F1F37B21E525A94CA57F840
Authority key identifier: 2E:AA:85:85:CA:71:7E:87:45:3F:AD:47:DC:02:CA:EA:2E:C5:3E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6c53f198-7a48-4fd5-8edf-26380048b436.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6c53f198-7a48-4fd5-8edf-26380048b436/ebc8950b-839e-3d63-bac1-417f04e0340a.roa
Signing time:             Sat 27 Jun 2026 09:00:12 +0000
ROA not before:           Sat 27 Jun 2026 09:00:12 +0000
ROA not after:            Fri 25 Sep 2026 09:00:12 +0000
asID:                     401203
IP address blocks:        192.75.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6c53f198-7a48-4fd5-8edf-26380048b436/6c53f198-7a48-4fd5-8edf-26380048b436.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6c53f198-7a48-4fd5-8edf-26380048b436/6c53f198-7a48-4fd5-8edf-26380048b436.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6c53f198-7a48-4fd5-8edf-26380048b436.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4f:1f:37:b2:1e:52:5a:94:ca:57:f8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c53f198-7a48-4fd5-8edf-26380048b436
        Validity
            Not Before: Jun 27 09:00:12 2026 GMT
            Not After : Sep 25 09:00:12 2026 GMT
        Subject: CN=3138c2e6-0beb-4f63-a7ec-1f4093cec7f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5c:9b:35:5e:1b:b6:00:98:e1:22:4d:15:cb:
                    e8:66:48:04:51:74:03:6e:f4:3f:0f:7c:58:ed:95:
                    36:17:3a:06:f3:a4:77:08:e2:62:8b:f7:fe:df:1b:
                    85:fe:29:8f:4f:27:d8:9a:85:b1:60:0f:d1:4b:fa:
                    c3:06:ff:5a:c4:2b:66:c6:ad:37:bb:07:fc:b8:0c:
                    8d:74:61:17:26:35:18:e4:08:4e:4d:2f:ee:c4:cb:
                    14:48:ba:45:58:a7:da:83:9f:3f:9b:f5:a4:13:0c:
                    98:cd:27:8f:8b:c6:b6:05:78:ce:29:88:7a:f8:37:
                    ef:8c:6c:9e:2c:f0:96:eb:38:20:dd:88:2a:5a:82:
                    43:e3:28:38:97:f1:3a:7e:75:01:21:3a:b0:d1:36:
                    33:3b:b5:58:53:17:e1:e3:49:a9:b8:47:85:95:4e:
                    c6:84:43:5f:e7:b9:2e:5d:be:11:bb:5a:b3:cd:d3:
                    da:13:7e:14:35:9c:41:cf:63:3b:38:f8:40:9d:18:
                    b4:10:16:e8:02:31:5d:ef:15:fd:7d:f1:ae:54:51:
                    ed:f2:6e:9c:15:f0:d5:98:cb:c3:7e:b8:eb:bf:85:
                    91:4d:ea:d5:6a:38:1e:51:75:d9:73:bd:73:c7:a7:
                    8a:85:22:fd:e5:7d:08:82:ef:6f:42:0d:b2:e4:6c:
                    86:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:F8:A5:F1:BA:0A:33:AC:F2:B9:18:BE:BF:2C:64:D2:E4:C8:C7:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6c53f198-7a48-4fd5-8edf-26380048b436/ebc8950b-839e-3d63-bac1-417f04e0340a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6c53f198-7a48-4fd5-8edf-26380048b436/6c53f198-7a48-4fd5-8edf-26380048b436.crl

            X509v3 Authority Key Identifier:
                keyid:2E:AA:85:85:CA:71:7E:87:45:3F:AD:47:DC:02:CA:EA:2E:C5:3E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6c53f198-7a48-4fd5-8edf-26380048b436.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.75.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:00:1b:f8:17:5f:4c:2d:f0:b8:79:a8:a3:ce:c8:06:56:ac:
         5c:50:0d:40:fa:a4:d0:16:9d:e9:7b:6d:38:3d:e4:5f:f5:89:
         d7:20:50:46:c8:0a:9d:30:43:6c:5e:4e:c3:86:7d:0e:f5:7a:
         05:88:8d:da:4a:94:03:c6:d1:73:dd:b9:dc:06:c2:13:5b:d3:
         96:67:96:9d:2c:18:a1:33:22:af:5c:fc:cc:b6:ef:bd:0c:60:
         d4:ec:a0:99:7c:3b:fb:4b:3b:61:bd:41:eb:d6:6f:03:6b:af:
         95:64:2d:e5:17:16:29:11:57:78:ac:9f:fc:63:74:36:aa:de:
         3d:b2:69:d5:cc:be:3d:b2:98:a9:a4:2c:e9:aa:87:6d:d7:a4:
         aa:b2:79:cc:1f:f8:e7:fe:33:2a:0e:bb:c0:6e:ac:30:dc:ec:
         23:e2:66:a6:75:41:8d:5c:d4:67:9f:c5:37:47:24:d6:4c:cd:
         28:d0:e6:23:cd:d1:9a:16:16:47:ae:3d:de:c7:79:d7:c9:f9:
         35:53:19:57:f8:6e:77:00:e3:b5:8c:28:5a:ed:55:80:72:f9:
         bb:66:82:d3:01:37:86:fc:2a:1a:ed:58:88:0e:cf:db:d3:e3:
         c2:d5:e7:f1:69:87:42:f0:62:23:f0:ba:fb:ee:01:38:52:d6:
         0e:58:69:2e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5PHzeyHlJalMpX+EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmM1M2YxOTgtN2E0OC00ZmQ1LThlZGYtMjYzODAwNDhi
NDM2MB4XDTI2MDYyNzA5MDAxMloXDTI2MDkyNTA5MDAxMlowLzEtMCsGA1UEAxMk
MzEzOGMyZTYtMGJlYi00ZjYzLWE3ZWMtMWY0MDkzY2VjN2Y4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1ybNV4btgCY4SJNFcvoZkgEUXQDbvQ/D3xY
7ZU2FzoG86R3COJii/f+3xuF/imPTyfYmoWxYA/RS/rDBv9axCtmxq03uwf8uAyN
dGEXJjUY5AhOTS/uxMsUSLpFWKfag58/m/WkEwyYzSePi8a2BXjOKYh6+DfvjGye
LPCW6zgg3YgqWoJD4yg4l/E6fnUBITqw0TYzO7VYUxfh40mpuEeFlU7GhENf57ku
Xb4Ru1qzzdPaE34UNZxBz2M7OPhAnRi0EBboAjFd7xX9ffGuVFHt8m6cFfDVmMvD
frjrv4WRTerVajgeUXXZc71zx6eKhSL95X0Igu9vQg2y5GyGJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHH4pfG6CjOs8rkYvr8sZNLkyMdIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82YzUz
ZjE5OC03YTQ4LTRmZDUtOGVkZi0yNjM4MDA0OGI0MzYvZWJjODk1MGItODM5ZS0z
ZDYzLWJhYzEtNDE3ZjA0ZTAzNDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNmM1M2YxOTgtN2E0OC00ZmQ1LThl
ZGYtMjYzODAwNDhiNDM2LzZjNTNmMTk4LTdhNDgtNGZkNS04ZWRmLTI2MzgwMDQ4
YjQzNi5jcmwwHwYDVR0jBBgwFoAULqqFhcpxfodFP61H3ALK6i7FPhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi82YzUzZjE5OC03YTQ4LTRmZDUtOGVkZi0yNjM4
MDA0OGI0MzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwEuaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE4AG/gXX0wt8Lh5qKPOyAZWrFxQDUD6pNAWnel7bTg95F/1idcgUEbI
Cp0wQ2xeTsOGfQ71egWIjdpKlAPG0XPdudwGwhNb05Znlp0sGKEzIq9c/My2770M
YNTsoJl8O/tLO2G9QevWbwNrr5VkLeUXFikRV3isn/xjdDaq3j2yadXMvj2ymKmk
LOmqh23XpKqyecwf+Of+MyoOu8BurDDc7CPiZqZ1QY1c1GefxTdHJNZMzSjQ5iPN
0ZoWFkeuPd7HedfJ+TVTGVf4bncA47WMKFrtVYBy+btmgtMBN4b8KhrtWIgOz9vT
48LV5/Fph0LwYiPwuvvuAThS1g5YaS4=
-----END CERTIFICATE-----
Generated at Thu Jul 9 21:28:01 2026 by rpki-client