Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/6ac34efc-b417-35c3-8e9e-422402db22ca.roa
File:                     6ac34efc-b417-35c3-8e9e-422402db22ca.roa (raw, json)
Hash identifier:          paLhvY7Ej0GkLsieCOIr/G13LeyVqQpHoB3G9DVHDJc=
Subject key identifier:   29:DD:91:1C:D0:13:57:7A:70:9A:B4:01:DD:55:83:7A:06:AF:6E:07
Certificate issuer:       /CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345
Certificate serial:       010D0C9F4328584F6292CEE53F0C6E1A1E30B700
Authority key identifier: D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/6ac34efc-b417-35c3-8e9e-422402db22ca.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     138699
IP address blocks:        71.18.227.0/24 maxlen: 24
                          101.45.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:ce:e5:3f:0c:6e:1a:1e:30:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=1b9b6594-838d-4750-bd9c-2ff387492065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:06:68:9b:31:3e:83:fe:07:a2:40:b1:4c:59:
                    70:9d:e7:ca:7a:e2:2b:c7:71:69:6b:a2:af:4d:94:
                    18:08:a2:1a:18:8a:a8:94:e9:64:52:20:2a:62:40:
                    9f:87:b7:85:d4:b1:d2:c0:1d:38:70:89:56:ec:00:
                    40:06:20:cd:78:a7:62:e1:3c:0c:57:97:80:55:b3:
                    11:45:81:dd:ee:0d:1f:ba:0d:e3:fe:2b:fb:88:00:
                    ed:a5:f1:dd:d0:97:ad:73:2f:9d:88:90:c9:b8:93:
                    36:36:0c:bd:40:02:77:fb:2b:69:46:a1:f3:72:f3:
                    dd:3d:86:95:a5:5c:99:8d:0b:f6:fa:5d:a4:ba:4e:
                    99:b7:4c:ea:5c:2c:40:b7:a4:d6:f7:9e:ab:26:e4:
                    06:d8:25:c1:f0:0f:c8:e6:78:83:0b:90:20:cf:cc:
                    39:50:56:77:de:49:53:bf:dd:c7:7c:d0:c6:6d:ff:
                    57:3d:47:9b:c3:77:4e:7c:86:cb:74:31:0c:b3:6a:
                    89:8a:03:ae:9d:87:82:cc:46:72:65:d2:e6:8b:62:
                    14:8d:71:be:aa:d2:f3:be:18:38:1f:73:e3:b0:ed:
                    26:21:11:49:d6:dc:52:fc:0b:ff:69:a9:12:f1:e2:
                    17:74:6d:aa:dc:62:f3:7f:05:ab:68:85:aa:95:5b:
                    a7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:DD:91:1C:D0:13:57:7A:70:9A:B4:01:DD:55:83:7A:06:AF:6E:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/6ac34efc-b417-35c3-8e9e-422402db22ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl

            X509v3 Authority Key Identifier:
                keyid:D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.18.227.0/24
                  101.45.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:1c:a5:91:36:4d:e5:82:8f:70:21:89:7b:e7:30:b5:13:56:
         bc:44:39:42:44:13:c2:70:84:a4:15:dc:fe:40:c6:b6:e3:d6:
         9b:d9:fb:55:09:63:df:67:4b:f1:ea:9f:a8:d0:ad:32:43:36:
         ce:96:b8:24:3f:47:93:04:ab:17:45:03:65:2c:a9:3d:13:62:
         db:d2:91:0f:80:13:53:00:82:28:bd:64:48:17:d9:b8:8e:4d:
         1e:38:7d:a8:6c:4f:3f:8e:c5:60:39:27:5b:0b:22:34:74:8f:
         d2:1d:1b:1c:c5:81:af:ff:dc:03:9d:e8:71:cd:9a:c6:77:1a:
         41:3d:ca:c9:7a:34:77:c1:f2:0b:6d:b7:59:92:af:9c:39:23:
         a8:16:9f:eb:18:db:3b:96:2e:2a:59:2c:43:0a:81:7d:f9:ed:
         7d:bb:6d:ff:02:4e:75:40:4d:3f:25:70:be:ed:23:2e:47:b6:
         6a:a2:28:23:f2:c2:43:30:e0:dc:79:45:1d:98:66:dd:ec:86:
         96:a5:54:eb:89:0b:6b:c7:b2:4b:4d:fe:aa:86:44:01:b9:6d:
         27:5f:5f:86:a1:6a:f1:8d:47:cf:8a:79:29:d1:cc:37:37:4e:
         76:42:64:1d:37:5f:fb:09:60:e6:81:75:0d:90:17:1c:04:17:
         91:dc:e7:c6
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9iks7lPwxuGh4wtwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWQ2MzM4YTUtN2M2MC00ZGM1LWIxZDgtMWM1MDRhNGVm
MzQ1MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk
MWI5YjY1OTQtODM4ZC00NzUwLWJkOWMtMmZmMzg3NDkyMDY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgZomzE+g/4HokCxTFlwnefKeuIrx3Fpa6Kv
TZQYCKIaGIqolOlkUiAqYkCfh7eF1LHSwB04cIlW7ABABiDNeKdi4TwMV5eAVbMR
RYHd7g0fug3j/iv7iADtpfHd0Jetcy+diJDJuJM2Ngy9QAJ3+ytpRqHzcvPdPYaV
pVyZjQv2+l2kuk6Zt0zqXCxAt6TW956rJuQG2CXB8A/I5niDC5Agz8w5UFZ33klT
v93HfNDGbf9XPUebw3dOfIbLdDEMs2qJigOunYeCzEZyZdLmi2IUjXG+qtLzvhg4
H3PjsO0mIRFJ1txS/Av/aakS8eIXdG2q3GLzfwWraIWqlVuntQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFCndkRzQE1d6cJq0Ad1Vg3oGr24HMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xZDYz
MzhhNS03YzYwLTRkYzUtYjFkOC0xYzUwNGE0ZWYzNDUvNmFjMzRlZmMtYjQxNy0z
NWMzLThlOWUtNDIyNDAyZGIyMmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWQ2MzM4YTUtN2M2MC00ZGM1LWIx
ZDgtMWM1MDRhNGVmMzQ1LzFkNjMzOGE1LTdjNjAtNGRjNS1iMWQ4LTFjNTA0YTRl
ZjM0NS5jcmwwHwYDVR0jBBgwFoAU2d97ozrzBBGTcYJwMlTvgkEtX1MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8xZDYzMzhhNS03YzYwLTRkYzUtYjFkOC0xYzUw
NGE0ZWYzNDUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQARxLjAwQA
ZS3/MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAEocpZE2TeWCj3AhiXvnMLUTVrxEOUJEE8JwhKQV3P5Axrbj
1pvZ+1UJY99nS/Hqn6jQrTJDNs6WuCQ/R5MEqxdFA2UsqT0TYtvSkQ+AE1MAgii9
ZEgX2biOTR44fahsTz+OxWA5J1sLIjR0j9IdGxzFga//3AOd6HHNmsZ3GkE9ysl6
NHfB8gttt1mSr5w5I6gWn+sY2zuWLipZLEMKgX357X27bf8CTnVATT8lcL7tIy5H
tmqiKCPywkMw4Nx5RR2YZt3shpalVOuJC2vHsktN/qqGRAG5bSdfX4ahavGNR8+K
eSnRzDc3TnZCZB03X/sJYOaBdQ2QFxwEF5Hc58Y=
-----END CERTIFICATE-----
Generated at Mon Oct 12 00:14:44 2026 by rpki-client