Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/e97ab990-0948-38b8-87a3-71b5cbf6add0.roa
File:                     e97ab990-0948-38b8-87a3-71b5cbf6add0.roa (raw, json)
Hash identifier:          IQlnmE1alJDU/gqWZi02Eq7B747MNxEuUzoKVWL2sr4=
Subject key identifier:   8E:1F:FD:5A:B5:B0:43:E3:03:53:37:B9:38:F0:57:CD:C6:D4:4D:C0
Certificate issuer:       /CN=f9441892-5f50-4eb3-a218-8dada1be8f65
Certificate serial:       010D0C9F4328584E577F52989BA6BD0B11F87780
Authority key identifier: 5A:12:BF:4D:73:FD:98:40:60:30:56:D7:B6:3C:BC:9E:37:AA:B3:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/e97ab990-0948-38b8-87a3-71b5cbf6add0.roa
Signing time:             Tue 30 Jun 2026 09:00:12 +0000
ROA not before:           Tue 30 Jun 2026 09:00:12 +0000
ROA not after:            Mon 28 Sep 2026 09:00:12 +0000
asID:                     62640
IP address blocks:        162.218.192.0/21 maxlen: 21
                          162.218.194.0/24 maxlen: 24
                          162.218.195.0/24 maxlen: 24
                          2605:540:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/f9441892-5f50-4eb3-a218-8dada1be8f65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/f9441892-5f50-4eb3-a218-8dada1be8f65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:57:7f:52:98:9b:a6:bd:0b:11:f8:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9441892-5f50-4eb3-a218-8dada1be8f65
        Validity
            Not Before: Jun 30 09:00:12 2026 GMT
            Not After : Sep 28 09:00:12 2026 GMT
        Subject: CN=25428286-1460-4db5-8c07-0f98b5156ba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:37:40:d8:56:ee:21:b7:1a:38:7b:86:64:61:
                    9d:fa:f5:d4:8a:b3:31:57:e9:f2:fd:23:a1:cf:a5:
                    46:bc:c8:cf:a5:48:78:42:71:33:fb:88:9f:67:be:
                    ed:cd:5a:51:6e:e5:ec:e0:e3:a1:1d:fc:cd:87:21:
                    6f:96:ca:39:84:f2:a4:01:7b:1c:22:2b:32:73:2f:
                    09:c3:75:f3:a3:85:fc:74:21:7e:1a:a2:99:e6:89:
                    b7:ff:ff:fb:25:bf:9a:08:b8:48:0b:f2:44:16:d8:
                    e8:54:4c:a5:78:30:8a:9d:88:14:df:10:6f:e4:ca:
                    f4:df:9b:41:39:c2:d9:65:81:61:64:17:3d:05:52:
                    ba:f4:04:29:ad:98:21:6f:27:4b:9f:cc:6c:e9:be:
                    cf:06:6f:69:82:7f:26:46:dd:eb:8a:31:42:a8:18:
                    e5:0d:fa:04:d6:10:e8:83:09:49:9f:50:de:f7:4e:
                    65:70:a7:0a:33:1b:98:3f:c3:08:fb:bc:a2:1d:a0:
                    c5:08:5d:56:69:cc:f6:56:59:9d:c1:2b:71:7b:cc:
                    e8:bd:1b:fb:c8:bf:de:af:56:59:17:02:cd:43:9e:
                    82:b8:45:dc:6e:98:ea:97:42:a2:c3:67:0e:fb:88:
                    d3:4d:cd:9f:b0:6d:2a:81:9a:e5:3c:85:c5:5a:be:
                    dd:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:1F:FD:5A:B5:B0:43:E3:03:53:37:B9:38:F0:57:CD:C6:D4:4D:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/e97ab990-0948-38b8-87a3-71b5cbf6add0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/f9441892-5f50-4eb3-a218-8dada1be8f65.crl

            X509v3 Authority Key Identifier:
                keyid:5A:12:BF:4D:73:FD:98:40:60:30:56:D7:B6:3C:BC:9E:37:AA:B3:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.218.192.0/21
                IPv6:
                  2605:540:2000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:7f:ad:69:3f:c4:7b:44:11:ec:75:31:13:76:57:5d:08:ab:
         08:a1:f6:28:bb:b7:2d:d6:56:28:b2:c9:89:7e:27:c3:e1:c7:
         67:b0:db:04:2a:e4:89:de:d9:68:b8:65:00:41:0f:c4:8f:63:
         30:23:85:ce:e2:2e:df:eb:a3:a9:6b:63:d9:88:a0:a5:9d:51:
         0d:46:51:3a:0e:56:8e:c1:7e:85:b3:de:af:4f:0f:e3:3c:35:
         8f:8d:76:00:17:91:94:e0:29:9c:07:93:bd:8e:79:46:ed:b8:
         b9:60:61:16:ef:8b:6d:e5:b4:05:93:42:e5:f5:b8:b0:00:47:
         c5:e6:dd:fb:72:fd:ed:68:d3:4c:39:a8:b8:cf:67:ce:45:b4:
         cd:19:50:27:ed:34:4d:5c:b2:30:37:4f:29:f5:2d:05:56:3e:
         11:51:79:8c:a8:45:3e:e1:ae:ef:00:84:96:c0:f4:e2:5d:ff:
         a3:c1:03:e4:10:f3:f9:12:a1:df:25:dc:57:61:76:f7:e0:9b:
         d9:2d:15:8c:73:19:52:b2:0d:09:dd:c9:b8:d8:49:0d:1e:a9:
         ae:71:fe:53:b0:b9:c4:8d:db:e9:bc:73:35:99:8d:df:77:ed:
         21:f2:65:98:a4:f2:2f:db:de:90:d7:13:d1:d2:7f:7d:bb:ae:
         c1:ec:eb:28
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE5Xf1KYm6a9CxH4d4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk0NDE4OTItNWY1MC00ZWIzLWEyMTgtOGRhZGExYmU4
ZjY1MB4XDTI2MDYzMDA5MDAxMloXDTI2MDkyODA5MDAxMlowLzEtMCsGA1UEAxMk
MjU0MjgyODYtMTQ2MC00ZGI1LThjMDctMGY5OGI1MTU2YmEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijdA2FbuIbcaOHuGZGGd+vXUirMxV+ny/SOh
z6VGvMjPpUh4QnEz+4ifZ77tzVpRbuXs4OOhHfzNhyFvlso5hPKkAXscIisycy8J
w3Xzo4X8dCF+GqKZ5om3///7Jb+aCLhIC/JEFtjoVEyleDCKnYgU3xBv5Mr035tB
OcLZZYFhZBc9BVK69AQprZghbydLn8xs6b7PBm9pgn8mRt3rijFCqBjlDfoE1hDo
gwlJn1De905lcKcKMxuYP8MI+7yiHaDFCF1Wacz2VlmdwStxe8zovRv7yL/er1ZZ
FwLNQ56CuEXcbpjql0Kiw2cO+4jTTc2fsG0qgZrlPIXFWr7d7wIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFI4f/Vq1sEPjA1M3uTjwV83G1E3AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mOTQ0
MTg5Mi01ZjUwLTRlYjMtYTIxOC04ZGFkYTFiZThmNjUvZTk3YWI5OTAtMDk0OC0z
OGI4LTg3YTMtNzFiNWNiZjZhZGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjk0NDE4OTItNWY1MC00ZWIzLWEy
MTgtOGRhZGExYmU4ZjY1L2Y5NDQxODkyLTVmNTAtNGViMy1hMjE4LThkYWRhMWJl
OGY2NS5jcmwwHwYDVR0jBBgwFoAUWhK/TXP9mEBgMFbXtjy8njeqs8kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mOTQ0MTg5Mi01ZjUwLTRlYjMtYTIxOC04ZGFk
YTFiZThmNjUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQDotrAMA4E
AgACMAgDBgQmBQVAIDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQArf61pP8R7RBHsdTETdlddCKsIofYou7ct
1lYossmJfifD4cdnsNsEKuSJ3tlouGUAQQ/Ej2MwI4XO4i7f66Opa2PZiKClnVEN
RlE6DlaOwX6Fs96vTw/jPDWPjXYAF5GU4CmcB5O9jnlG7bi5YGEW74tt5bQFk0Ll
9biwAEfF5t37cv3taNNMOai4z2fORbTNGVAn7TRNXLIwN08p9S0FVj4RUXmMqEU+
4a7vAISWwPTiXf+jwQPkEPP5EqHfJdxXYXb34JvZLRWMcxlSsg0J3cm42EkNHqmu
cf5TsLnEjdvpvHM1mY3fd+0h8mWYpPIv296Q1xPR0n99u67B7Oso
-----END CERTIFICATE-----
Generated at Thu Jul 9 21:06:06 2026 by rpki-client