Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/c0670f7b-03ee-399b-83ee-0b09148904bb.roa
File:                     c0670f7b-03ee-399b-83ee-0b09148904bb.roa (raw, json)
Hash identifier:          Nth3U0f067TU440RdaN9iGCaMPv3c+2SgM5kAW6Dt6I=
Subject key identifier:   B1:70:19:BD:72:C7:11:9C:27:77:D3:1D:4A:48:64:FB:9A:1A:0A:D0
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F4328584E2D9F21C40FB5D949D339A7C0
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/c0670f7b-03ee-399b-83ee-0b09148904bb.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     2734
IP address blocks:        67.212.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:21:c4:0f:b5:d9:49:d3:39:a7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=a4e8f5a3-8b97-487f-8c5d-66b6e0d50c5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:be:ee:ac:8c:6e:77:2a:12:5f:4b:50:cb:09:
                    e8:02:4d:3e:cb:69:c3:91:4a:a7:13:64:77:10:c2:
                    41:54:44:a1:48:00:ef:ec:7b:63:69:4d:c1:81:ac:
                    f1:4f:ea:07:44:ac:02:f3:20:54:54:78:33:51:e0:
                    9d:4f:3d:89:88:50:91:1d:b3:75:02:b1:72:ea:6d:
                    ce:9b:f3:26:c2:4d:57:c5:96:bc:3b:90:bf:62:53:
                    86:69:74:70:2a:30:31:36:ef:10:b2:0f:d5:e6:eb:
                    56:f1:9d:21:f2:92:c6:24:cf:ce:65:7f:dd:7b:93:
                    ac:b2:f8:62:95:3c:dc:92:e5:86:f2:5b:f0:b5:04:
                    dc:5b:dd:9f:0e:4b:17:55:e5:a6:15:ba:1d:71:ed:
                    7e:f2:46:3e:68:94:b5:ee:91:96:66:e1:7f:ad:02:
                    22:1e:60:b5:20:d4:16:02:0f:4d:72:e7:f8:af:63:
                    ba:68:1a:ca:8b:44:05:0d:67:98:ea:e3:66:2d:99:
                    e6:fa:b4:c2:16:7b:5c:c6:ed:dc:fa:48:84:27:63:
                    28:df:e0:13:fe:90:9f:b3:f8:5e:e0:e7:18:b2:09:
                    2e:a2:3b:62:b4:ff:cf:b3:61:c1:b2:df:43:0b:a4:
                    c5:01:c0:ef:9d:52:c0:c8:2a:ac:ea:2e:64:2a:38:
                    4a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:70:19:BD:72:C7:11:9C:27:77:D3:1D:4A:48:64:FB:9A:1A:0A:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/c0670f7b-03ee-399b-83ee-0b09148904bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.212.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:7e:fb:d0:ac:b8:a0:40:53:fe:4c:60:ba:a8:b3:98:f0:d2:
         8d:3e:97:4d:f5:f6:74:51:6f:98:46:7e:31:07:1a:92:32:e6:
         bd:7c:34:7d:62:2f:ea:3f:3a:4e:42:62:23:f1:6e:bf:7a:f9:
         11:be:97:e2:20:ff:44:c4:62:e4:d1:e1:f6:44:46:ba:20:20:
         2b:51:86:5e:e9:b3:d3:c6:de:75:12:d9:7c:f9:2a:d8:40:39:
         85:a7:f6:6a:a6:32:36:48:d9:fa:88:0c:be:73:a5:a0:41:c7:
         e5:a2:cb:12:a5:47:8c:0c:69:d0:22:c0:ed:6b:5c:98:c7:4c:
         9a:74:bf:65:af:81:05:75:c7:0f:fd:c6:52:4b:e7:e9:b8:a2:
         ac:4f:ad:b3:65:50:6a:cd:f2:b2:ec:90:40:c9:4c:2e:28:1a:
         35:16:dd:89:0c:5e:57:f8:06:16:d2:d0:7d:a3:16:8a:3e:1e:
         cc:99:e1:97:95:4d:1c:85:dc:92:0d:9f:6e:7d:83:b9:21:46:
         47:bc:29:f6:a8:ad:20:50:8c:6f:dc:b0:c1:e4:15:4b:2b:53:
         38:3c:58:72:57:53:99:59:ac:79:ff:81:45:af:fe:5e:b8:79:
         0c:db:f7:a6:be:04:c4:a5:1f:c1:ba:b5:7b:a8:be:b0:fd:57:
         39:d9:31:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4tnyHED7XZSdM5p8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjlmNWU0OTYtOGZmOC00MDFmLWFkMjctYTFiNjI0Zjkw
MTRhMB4XDTI2MDYxNTA5MDAxMloXDTI2MDkxMzA5MDAxMlowLzEtMCsGA1UEAxMk
YTRlOGY1YTMtOGI5Ny00ODdmLThjNWQtNjZiNmUwZDUwYzVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiL7urIxudyoSX0tQywnoAk0+y2nDkUqnE2R3
EMJBVEShSADv7HtjaU3BgazxT+oHRKwC8yBUVHgzUeCdTz2JiFCRHbN1ArFy6m3O
m/Mmwk1XxZa8O5C/YlOGaXRwKjAxNu8Qsg/V5utW8Z0h8pLGJM/OZX/de5Ossvhi
lTzckuWG8lvwtQTcW92fDksXVeWmFbodce1+8kY+aJS17pGWZuF/rQIiHmC1INQW
Ag9Ncuf4r2O6aBrKi0QFDWeY6uNmLZnm+rTCFntcxu3c+kiEJ2Mo3+AT/pCfs/he
4OcYsgkuojtitP/Ps2HBst9DC6TFAcDvnVLAyCqs6i5kKjhKewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLFwGb1yxxGcJ3fTHUpIZPuaGgrQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOWY1
ZTQ5Ni04ZmY4LTQwMWYtYWQyNy1hMWI2MjRmOTAxNGEvYzA2NzBmN2ItMDNlZS0z
OTliLTgzZWUtMGIwOTE0ODkwNGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjlmNWU0OTYtOGZmOC00MDFmLWFk
MjctYTFiNjI0ZjkwMTRhLzI5ZjVlNDk2LThmZjgtNDAxZi1hZDI3LWExYjYyNGY5
MDE0YS5jcmwwHwYDVR0jBBgwFoAUsHS8ugFMyPdv9/jKlpR/Lims27EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8yOWY1ZTQ5Ni04ZmY4LTQwMWYtYWQyNy1hMWI2
MjRmOTAxNGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9SbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHl++9CsuKBAU/5MYLqos5jw0o0+l0319nRRb5hGfjEHGpIy5r18NH1i
L+o/Ok5CYiPxbr96+RG+l+Ig/0TEYuTR4fZERrogICtRhl7ps9PG3nUS2Xz5KthA
OYWn9mqmMjZI2fqIDL5zpaBBx+WiyxKlR4wMadAiwO1rXJjHTJp0v2WvgQV1xw/9
xlJL5+m4oqxPrbNlUGrN8rLskEDJTC4oGjUW3YkMXlf4BhbS0H2jFoo+HsyZ4ZeV
TRyF3JINn259g7khRke8KfaorSBQjG/csMHkFUsrUzg8WHJXU5lZrHn/gUWv/l64
eQzb96a+BMSlH8G6tXuovrD9VznZMd0=
-----END CERTIFICATE-----
Generated at Tue Jun 16 11:32:13 2026 by rpki-client