Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f079fb3-68a3-45da-bc4a-cc678b0a6f45/22611c85-6a84-3f75-9c87-fbc41f2f6c50.roa
File:                     22611c85-6a84-3f75-9c87-fbc41f2f6c50.roa (raw, json)
Hash identifier:          D1y9k2ZEjyu1C+6FZocdpJroGXJ7QXUFmnxYGj89Hi0=
Subject key identifier:   3C:5A:3C:44:30:36:98:F6:04:4B:6E:A3:07:45:B7:E4:FD:21:99:DA
Certificate issuer:       /CN=6f079fb3-68a3-45da-bc4a-cc678b0a6f45
Certificate serial:       010D0C9F4328584E5084A2EF5E9BB25B5B54E780
Authority key identifier: 97:18:75:88:30:BB:DC:F0:A5:52:C3:9A:7D:72:7B:90:6A:E7:C0:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f079fb3-68a3-45da-bc4a-cc678b0a6f45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f079fb3-68a3-45da-bc4a-cc678b0a6f45/22611c85-6a84-3f75-9c87-fbc41f2f6c50.roa
Signing time:             Sat 27 Jun 2026 21:00:12 +0000
ROA not before:           Sat 27 Jun 2026 21:00:12 +0000
ROA not after:            Fri 25 Sep 2026 21:00:12 +0000
asID:                     6936
IP address blocks:        23.130.164.0/24 maxlen: 24
                          2607:e5c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f079fb3-68a3-45da-bc4a-cc678b0a6f45/6f079fb3-68a3-45da-bc4a-cc678b0a6f45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f079fb3-68a3-45da-bc4a-cc678b0a6f45/6f079fb3-68a3-45da-bc4a-cc678b0a6f45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f079fb3-68a3-45da-bc4a-cc678b0a6f45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:50:84:a2:ef:5e:9b:b2:5b:5b:54:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f079fb3-68a3-45da-bc4a-cc678b0a6f45
        Validity
            Not Before: Jun 27 21:00:12 2026 GMT
            Not After : Sep 25 21:00:12 2026 GMT
        Subject: CN=9051fab4-ddc7-49cd-b236-0a7f13dc0b2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:eb:9c:21:38:35:ae:2d:91:21:a6:8b:7a:61:
                    6c:db:05:a8:17:4a:db:b8:de:a2:01:84:2e:f3:ea:
                    54:5d:27:3c:27:1f:ae:d3:72:74:33:ef:19:e5:40:
                    99:a8:9b:aa:a9:a4:52:ef:b0:26:84:0a:fe:c9:39:
                    f4:ab:46:68:71:05:a5:85:03:89:53:bf:f9:96:14:
                    54:15:5a:c2:73:df:e6:ec:eb:72:65:ce:2e:55:50:
                    a2:19:3d:c1:3b:e6:06:5c:36:5c:4e:66:1f:ee:e9:
                    f4:74:27:66:b5:c4:5d:b5:a9:59:cf:0e:fd:2b:c9:
                    76:7f:25:07:73:e8:26:60:c9:94:de:c9:41:db:26:
                    7d:5a:74:07:3c:21:ef:8b:a0:31:b1:bd:64:d2:78:
                    1b:28:a5:76:e6:7b:35:bf:dd:4f:e0:1f:09:28:c7:
                    27:7e:f7:24:32:8e:52:96:21:49:20:2c:86:b0:dc:
                    86:6e:df:77:cb:91:59:16:0f:56:31:39:72:43:8c:
                    b0:5d:92:16:c8:fe:28:9d:22:f4:20:62:82:8c:81:
                    27:13:21:26:06:dc:5e:8f:e1:53:bc:aa:fb:09:89:
                    b9:50:39:c5:1d:d7:23:cc:ad:d5:85:4a:67:98:44:
                    0d:f0:07:7d:24:05:cf:11:c3:4e:85:53:5a:eb:4b:
                    fc:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:5A:3C:44:30:36:98:F6:04:4B:6E:A3:07:45:B7:E4:FD:21:99:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f079fb3-68a3-45da-bc4a-cc678b0a6f45/22611c85-6a84-3f75-9c87-fbc41f2f6c50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f079fb3-68a3-45da-bc4a-cc678b0a6f45/6f079fb3-68a3-45da-bc4a-cc678b0a6f45.crl

            X509v3 Authority Key Identifier:
                keyid:97:18:75:88:30:BB:DC:F0:A5:52:C3:9A:7D:72:7B:90:6A:E7:C0:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f079fb3-68a3-45da-bc4a-cc678b0a6f45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.164.0/24
                IPv6:
                  2607:e5c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:d3:16:23:ed:99:60:6b:b5:23:ae:a2:d3:df:45:a0:e3:cc:
         c3:c8:a3:d7:5e:50:6a:6c:e4:62:c3:4e:90:3b:38:30:8a:ae:
         fa:e7:48:64:d4:f4:f4:6c:32:83:fa:7a:a8:d5:d7:99:47:d8:
         d7:ab:07:e9:22:78:aa:46:d4:da:00:1a:64:0f:82:15:9a:c7:
         f6:44:e0:b9:a2:e0:59:40:b0:f1:be:e6:f9:d3:3e:eb:65:31:
         9d:b8:63:03:f8:80:92:92:2c:89:6d:92:2b:0d:c3:95:15:ec:
         92:f0:0d:1f:0e:7f:fc:34:16:90:0d:ff:3f:e0:38:42:cd:25:
         6f:ad:e4:50:4c:5f:60:7d:bc:82:d9:c8:66:ab:b3:de:db:7d:
         67:fd:2f:35:2a:d3:d3:95:99:92:b8:09:f8:1a:85:3c:da:f6:
         77:de:fb:d4:35:5d:7d:25:c8:87:90:6a:11:88:ab:ed:73:6f:
         bf:1f:ba:3f:19:82:06:f8:3f:13:9d:58:1b:a2:14:51:87:88:
         f5:ef:3f:3a:7e:df:7c:d6:56:d2:14:76:a7:ea:18:94:cd:d6:
         58:17:0f:ed:32:1e:cf:2a:42:24:4d:88:59:06:79:6e:72:0f:
         f5:ac:63:e6:55:6e:74:50:71:f6:35:b5:6a:f6:ee:d4:ec:0d:
         1f:f7:f2:0a
-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE5QhKLvXpuyW1tU54AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmYwNzlmYjMtNjhhMy00NWRhLWJjNGEtY2M2NzhiMGE2
ZjQ1MB4XDTI2MDYyNzIxMDAxMloXDTI2MDkyNTIxMDAxMlowLzEtMCsGA1UEAxMk
OTA1MWZhYjQtZGRjNy00OWNkLWIyMzYtMGE3ZjEzZGMwYjJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+ucITg1ri2RIaaLemFs2wWoF0rbuN6iAYQu
8+pUXSc8Jx+u03J0M+8Z5UCZqJuqqaRS77AmhAr+yTn0q0ZocQWlhQOJU7/5lhRU
FVrCc9/m7OtyZc4uVVCiGT3BO+YGXDZcTmYf7un0dCdmtcRdtalZzw79K8l2fyUH
c+gmYMmU3slB2yZ9WnQHPCHvi6Axsb1k0ngbKKV25ns1v91P4B8JKMcnfvckMo5S
liFJICyGsNyGbt93y5FZFg9WMTlyQ4ywXZIWyP4onSL0IGKCjIEnEyEmBtxej+FT
vKr7CYm5UDnFHdcjzK3VhUpnmEQN8Ad9JAXPEcNOhVNa60v8dwIDAQABo4IDZDCC
A2AwHQYDVR0OBBYEFDxaPEQwNpj2BEtuowdFt+T9IZnaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82ZjA3
OWZiMy02OGEzLTQ1ZGEtYmM0YS1jYzY3OGIwYTZmNDUvMjI2MTFjODUtNmE4NC0z
Zjc1LTljODctZmJjNDFmMmY2YzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNmYwNzlmYjMtNjhhMy00NWRhLWJj
NGEtY2M2NzhiMGE2ZjQ1LzZmMDc5ZmIzLTY4YTMtNDVkYS1iYzRhLWNjNjc4YjBh
NmY0NS5jcmwwHwYDVR0jBBgwFoAUlxh1iDC73PClUsOafXJ7kGrnwAkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi82ZjA3OWZiMy02OGEzLTQ1ZGEtYmM0YS1jYzY3
OGIwYTZmNDUuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF4KkMA0E
AgACMAcDBQAmB+XAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF
BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0
bWwwDQYJKoZIhvcNAQELBQADggEBAITTFiPtmWBrtSOuotPfRaDjzMPIo9deUGps
5GLDTpA7ODCKrvrnSGTU9PRsMoP6eqjV15lH2NerB+kieKpG1NoAGmQPghWax/ZE
4Lmi4FlAsPG+5vnTPutlMZ24YwP4gJKSLIltkisNw5UV7JLwDR8Of/w0FpAN/z/g
OELNJW+t5FBMX2B9vILZyGars97bfWf9LzUq09OVmZK4CfgahTza9nfe+9Q1XX0l
yIeQahGIq+1zb78fuj8Zggb4PxOdWBuiFFGHiPXvPzp+33zWVtIUdqfqGJTN1lgX
D+0yHs8qQiRNiFkGeW5yD/WsY+ZVbnRQcfY1tWr27tTsDR/38go=
-----END CERTIFICATE-----
Generated at Thu Jul 9 21:05:50 2026 by rpki-client