Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/9e41e3c6-4b01-376d-bc8c-8d6f59184714.roa
File:                     9e41e3c6-4b01-376d-bc8c-8d6f59184714.roa (raw, json)
Hash identifier:          hKjg7QIxce9TOOC4+tZYdY6WmLiSZLF8cwRGlSnZYKE=
Subject key identifier:   6B:F4:06:76:16:FD:9A:E9:30:88:F5:9A:74:61:AF:2A:11:74:93:F7
Certificate issuer:       /CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c
Certificate serial:       010D0C9F4328584EA79872A53F02B68105510F80
Authority key identifier: AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/9e41e3c6-4b01-376d-bc8c-8d6f59184714.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     21581
IP address blocks:        108.161.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:72:a5:3f:02:b6:81:05:51:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=43223a60-8117-4a5e-aec3-904ffb48a584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:4e:78:c6:89:09:70:2a:57:04:50:22:48:bc:
                    f9:97:cb:8f:61:21:9e:89:0e:2c:fc:e9:56:f7:9a:
                    19:55:55:53:be:57:6e:a9:55:14:f6:f9:52:e8:05:
                    61:a4:14:5f:1f:e9:2f:03:5f:61:cf:38:32:dd:1b:
                    6a:fb:5e:68:5b:44:e1:46:bd:a7:46:5d:f2:f4:16:
                    f4:a7:18:69:27:4d:a9:e3:64:68:c1:c7:06:3e:53:
                    4e:84:a9:f0:03:8e:bb:bb:7f:09:0b:ef:53:33:3f:
                    f0:5f:af:0f:36:3b:9c:c6:0d:df:ba:d1:9e:13:a7:
                    a3:b3:91:99:94:7a:47:38:05:8b:1c:bc:d8:32:26:
                    d6:69:cb:42:a2:72:32:aa:25:e0:15:64:31:0a:b8:
                    fb:d8:98:27:ca:f1:e9:f2:1a:ca:04:b9:99:a6:e7:
                    36:9e:0a:f6:af:04:af:d6:e6:7d:5d:3f:32:c6:33:
                    56:aa:c7:3b:62:2e:75:ef:f9:2b:3c:c6:49:08:75:
                    1e:1d:54:1d:e2:cc:05:32:71:18:5a:18:85:14:e1:
                    69:76:fc:3c:88:d7:bb:ea:90:0b:ff:7c:0b:21:44:
                    8b:59:4a:b6:4c:00:38:37:d9:f5:c0:bb:ea:1d:23:
                    3a:8e:2c:99:33:e3:3d:b1:8f:dc:0a:fc:fb:9e:6b:
                    ab:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F4:06:76:16:FD:9A:E9:30:88:F5:9A:74:61:AF:2A:11:74:93:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/9e41e3c6-4b01-376d-bc8c-8d6f59184714.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl

            X509v3 Authority Key Identifier:
                keyid:AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.161.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:e2:e5:8a:13:7a:41:1b:78:2d:73:fe:72:d5:bd:a7:84:13:
         82:95:b3:47:8a:b6:7d:86:c3:16:00:ce:c4:bf:f9:3a:7a:46:
         52:1d:48:55:2d:b0:3d:bb:79:07:c8:28:14:91:10:07:c3:cf:
         84:4b:45:77:f7:f0:38:46:10:17:e0:26:66:fa:86:55:b4:85:
         f7:9c:d7:45:39:b4:e7:5d:38:3f:6f:3a:6e:94:e7:bc:3c:e2:
         d5:77:0a:8e:75:42:84:11:81:5f:bd:d9:88:2a:c9:1d:f4:2e:
         3d:a2:03:14:ce:d4:de:eb:e7:e6:3f:2a:4e:c8:48:d9:2e:f2:
         93:da:42:3c:78:26:2b:5a:d4:b0:46:dd:f8:37:14:51:ac:59:
         08:88:dd:5d:8b:53:57:17:ce:18:48:cb:65:19:db:d0:29:94:
         11:45:02:ff:f0:46:98:ed:08:ce:2f:9b:6b:9e:63:fb:2d:77:
         17:3b:a2:ab:8c:83:e0:38:4c:f3:07:33:97:d3:92:d5:37:b3:
         ff:89:f3:95:b3:df:b7:c2:29:de:d8:0c:43:f0:ec:50:fd:b1:
         5b:b3:56:37:8f:61:d9:b1:e7:57:eb:2e:95:94:94:ee:4d:d3:
         37:f4:e0:8d:a9:99:f6:da:8b:85:c5:e9:05:4d:db:18:45:59:
         eb:70:ab:72
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmHKlPwK2gQVRD4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjY5ZTYwYTYtNTFjNC00YTNlLTgyMWEtMmQ3ZDQzOGJh
ZDRjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NDMyMjNhNjAtODExNy00YTVlLWFlYzMtOTA0ZmZiNDhhNTg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhk54xokJcCpXBFAiSLz5l8uPYSGeiQ4s/OlW
95oZVVVTvlduqVUU9vlS6AVhpBRfH+kvA19hzzgy3Rtq+15oW0ThRr2nRl3y9Bb0
pxhpJ02p42RowccGPlNOhKnwA467u38JC+9TMz/wX68PNjucxg3futGeE6ejs5GZ
lHpHOAWLHLzYMibWactConIyqiXgFWQxCrj72JgnyvHp8hrKBLmZpuc2ngr2rwSv
1uZ9XT8yxjNWqsc7Yi517/krPMZJCHUeHVQd4swFMnEYWhiFFOFpdvw8iNe76pAL
/3wLIUSLWUq2TAA4N9n1wLvqHSM6jiyZM+M9sY/cCvz7nmurfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGv0BnYW/ZrpMIj1mnRhryoRdJP3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNjll
NjBhNi01MWM0LTRhM2UtODIxYS0yZDdkNDM4YmFkNGMvOWU0MWUzYzYtNGIwMS0z
NzZkLWJjOGMtOGQ2ZjU5MTg0NzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjY5ZTYwYTYtNTFjNC00YTNlLTgy
MWEtMmQ3ZDQzOGJhZDRjL2Y2OWU2MGE2LTUxYzQtNGEzZS04MjFhLTJkN2Q0Mzhi
YWQ0Yy5jcmwwHwYDVR0jBBgwFoAUreo9MXSqvMcug0IvZpaHEFYYkwUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNjllNjBhNi01MWM0LTRhM2UtODIxYS0yZDdk
NDM4YmFkNGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKGSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADbi5YoTekEbeC1z/nLVvaeEE4KVs0eKtn2GwxYAzsS/+Tp6RlIdSFUt
sD27eQfIKBSREAfDz4RLRXf38DhGEBfgJmb6hlW0hfec10U5tOddOD9vOm6U57w8
4tV3Co51QoQRgV+92YgqyR30Lj2iAxTO1N7r5+Y/Kk7ISNku8pPaQjx4Jita1LBG
3fg3FFGsWQiI3V2LU1cXzhhIy2UZ29AplBFFAv/wRpjtCM4vm2ueY/stdxc7oquM
g+A4TPMHM5fTktU3s/+J85Wz37fCKd7YDEPw7FD9sVuzVjePYdmx51frLpWUlO5N
0zf04I2pmfbai4XF6QVN2xhFWetwq3I=
-----END CERTIFICATE-----
Generated at Tue Aug 25 14:53:39 2026 by rpki-client