Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/e612dc76-d5bb-3c49-9aeb-c02d97dbc376.roa
File:                     e612dc76-d5bb-3c49-9aeb-c02d97dbc376.roa (raw, json)
Hash identifier:          Ir7VsNXlXt64iABCXMkEanF47pUCLWD9MTD7aRCw0NU=
Subject key identifier:   37:B6:62:3E:2E:54:F5:F7:7C:71:7A:85:26:34:46:41:07:23:D7:DC
Certificate issuer:       /CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c
Certificate serial:       010D0C9F4328584EA797ED543299D7359E474000
Authority key identifier: AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/e612dc76-d5bb-3c49-9aeb-c02d97dbc376.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     21581
IP address blocks:        108.161.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:ed:54:32:99:d7:35:9e:47:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=7a134606-beed-475a-bc23-2b6112d04ab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0c:38:47:04:d5:f4:c0:21:9e:8d:e2:db:db:
                    e2:0f:fc:65:78:49:a6:41:69:dd:33:84:ae:46:ae:
                    7f:34:1e:79:b9:fe:6c:5a:d9:e3:97:35:92:23:d7:
                    ac:dd:58:f9:27:89:24:3e:02:5e:e8:cd:31:12:1b:
                    4a:7c:d2:bf:2a:dc:57:0e:c1:c3:73:ce:55:4e:af:
                    05:5c:f6:8c:7c:59:0d:09:e4:ea:40:eb:bf:47:90:
                    7a:49:6c:c2:74:c9:3a:f3:cc:0a:e3:32:53:6e:ac:
                    91:3c:20:ed:82:26:c5:65:95:12:3f:92:58:17:9d:
                    57:75:36:0f:d8:b9:52:9b:e1:2f:b3:c5:45:41:2a:
                    39:73:85:a5:10:46:70:1d:c8:ba:a6:11:94:2e:73:
                    ea:57:5b:0f:5c:aa:0c:73:15:91:65:18:2d:6b:c9:
                    50:fb:d1:7a:e5:9b:1b:51:a7:2c:ff:d5:07:c7:45:
                    3c:7a:90:50:84:ac:31:b7:ca:55:6c:fd:a0:2f:57:
                    76:0d:5b:23:d0:90:49:3b:da:a2:11:c4:bb:43:9d:
                    13:c4:cf:00:da:90:a5:c4:b1:bb:e1:a1:a4:13:77:
                    6e:7c:e8:90:a3:f2:2c:90:ff:a3:18:74:88:7a:a9:
                    b3:2a:d5:e5:a0:9f:01:14:35:f8:2e:a4:9a:91:4c:
                    d0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:B6:62:3E:2E:54:F5:F7:7C:71:7A:85:26:34:46:41:07:23:D7:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/e612dc76-d5bb-3c49-9aeb-c02d97dbc376.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl

            X509v3 Authority Key Identifier:
                keyid:AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.161.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:16:8b:65:99:a8:bc:c7:63:dc:7a:06:5f:72:66:1e:8d:35:
         b9:08:7e:96:34:d2:77:26:02:2f:1b:9b:44:ee:bf:c9:07:56:
         7a:be:4b:21:56:a3:55:f3:72:41:5e:c6:19:5c:ab:4f:17:8e:
         b0:16:b2:bb:bd:8b:e5:7f:14:17:80:fb:14:45:96:f9:5e:0e:
         ad:24:0d:1f:5d:8d:22:01:c5:8a:be:91:17:2d:7c:bd:97:a3:
         6e:47:21:ab:cb:39:9d:16:e5:ad:3f:1a:02:a1:d1:91:e0:2e:
         5e:f9:01:f8:43:05:7f:3a:7e:11:d0:0c:a4:26:f8:3d:b7:d1:
         3c:4d:46:5c:e4:f8:4d:50:c9:69:b2:57:c9:65:7b:b6:5b:9f:
         28:d0:4b:8a:a2:c2:c5:af:1e:1b:b8:f7:e4:87:bb:bf:b8:ca:
         d3:5f:98:3a:8f:77:91:c7:d6:fc:77:8d:15:0d:70:15:c0:64:
         f3:c2:5d:04:d8:ba:f5:cc:65:8f:e8:f9:80:98:c1:00:0e:84:
         9d:8f:ce:e1:ff:42:33:1e:7b:98:d3:83:3f:07:fd:01:b5:4f:
         c1:dc:df:55:09:b1:02:ba:a7:53:c8:29:7e:bc:7a:fb:6c:aa:
         0a:a7:9d:0c:8f:35:81:bc:8a:4c:ed:3f:9e:48:92:03:37:2a:
         4a:53:bc:79
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nl+1UMpnXNZ5HQAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjY5ZTYwYTYtNTFjNC00YTNlLTgyMWEtMmQ3ZDQzOGJh
ZDRjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
N2ExMzQ2MDYtYmVlZC00NzVhLWJjMjMtMmI2MTEyZDA0YWI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgw4RwTV9MAhno3i29viD/xleEmmQWndM4Su
Rq5/NB55uf5sWtnjlzWSI9es3Vj5J4kkPgJe6M0xEhtKfNK/KtxXDsHDc85VTq8F
XPaMfFkNCeTqQOu/R5B6SWzCdMk688wK4zJTbqyRPCDtgibFZZUSP5JYF51XdTYP
2LlSm+Evs8VFQSo5c4WlEEZwHci6phGULnPqV1sPXKoMcxWRZRgta8lQ+9F65Zsb
Uacs/9UHx0U8epBQhKwxt8pVbP2gL1d2DVsj0JBJO9qiEcS7Q50TxM8A2pClxLG7
4aGkE3dufOiQo/IskP+jGHSIeqmzKtXloJ8BFDX4LqSakUzQpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDe2Yj4uVPX3fHF6hSY0RkEHI9fcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNjll
NjBhNi01MWM0LTRhM2UtODIxYS0yZDdkNDM4YmFkNGMvZTYxMmRjNzYtZDViYi0z
YzQ5LTlhZWItYzAyZDk3ZGJjMzc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjY5ZTYwYTYtNTFjNC00YTNlLTgy
MWEtMmQ3ZDQzOGJhZDRjL2Y2OWU2MGE2LTUxYzQtNGEzZS04MjFhLTJkN2Q0Mzhi
YWQ0Yy5jcmwwHwYDVR0jBBgwFoAUreo9MXSqvMcug0IvZpaHEFYYkwUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNjllNjBhNi01MWM0LTRhM2UtODIxYS0yZDdk
NDM4YmFkNGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKGXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJMWi2WZqLzHY9x6Bl9yZh6NNbkIfpY00ncmAi8bm0Tuv8kHVnq+SyFW
o1XzckFexhlcq08XjrAWsru9i+V/FBeA+xRFlvleDq0kDR9djSIBxYq+kRctfL2X
o25HIavLOZ0W5a0/GgKh0ZHgLl75AfhDBX86fhHQDKQm+D230TxNRlzk+E1QyWmy
V8lle7ZbnyjQS4qiwsWvHhu49+SHu7+4ytNfmDqPd5HH1vx3jRUNcBXAZPPCXQTY
uvXMZY/o+YCYwQAOhJ2PzuH/QjMee5jTgz8H/QG1T8Hc31UJsQK6p1PIKX68evts
qgqnnQyPNYG8ikztP55IkgM3KkpTvHk=
-----END CERTIFICATE-----
Generated at Tue Aug 25 23:42:15 2026 by rpki-client