Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6e55f0b6-d9dc-39ef-9f34-36dbd5bef894.roa
File:                     6e55f0b6-d9dc-39ef-9f34-36dbd5bef894.roa (raw, json)
Hash identifier:          T3puG5HSmRqBks42So/2veUnsX6XUm6xaEnCEPEGyrI=
Subject key identifier:   23:A4:52:C8:6A:05:E9:AA:D0:06:86:7E:0A:AB:53:39:E1:63:09:97
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E5A4A158062B16C1CA0B5DA00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6e55f0b6-d9dc-39ef-9f34-36dbd5bef894.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     7713
IP address blocks:        184.25.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:4a:15:80:62:b1:6c:1c:a0:b5:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=e9ddd198-89cf-4f0f-81e9-2c0f5c7fb0c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:81:03:90:f5:6f:0c:19:9f:9f:88:83:be:76:
                    74:da:82:5d:5d:27:87:db:4d:4a:f4:96:8a:bf:18:
                    2a:c7:7d:ec:9d:86:e2:03:3b:fb:4a:02:3d:e2:a9:
                    a5:a9:5c:1d:a3:f1:a6:25:6b:1a:2c:fb:74:cb:57:
                    b7:b8:21:b8:54:aa:a9:23:00:7f:79:bb:9d:a4:d1:
                    fb:08:d0:e1:4e:eb:bd:20:df:f3:1c:94:d5:66:9e:
                    09:5a:04:58:d8:13:43:ed:15:f3:c4:fa:c5:f0:de:
                    af:e9:8b:81:dc:d4:dd:d9:98:11:64:af:f1:8f:5a:
                    c3:34:8b:8a:4f:97:80:e6:83:22:1c:66:c2:0e:6f:
                    96:98:20:61:21:e6:26:9b:c7:a1:8e:a9:cd:8c:ba:
                    7e:55:1b:c4:8b:87:de:91:75:98:b6:60:cc:e1:43:
                    3f:3a:95:ba:52:6e:1d:90:cc:5d:98:f5:dc:66:f1:
                    26:fb:9a:07:e4:a4:d1:09:82:2c:4b:f1:93:52:1e:
                    79:a1:53:a7:85:46:77:a6:2c:9f:d9:91:f8:98:d1:
                    69:c3:4e:78:03:31:6e:fe:b0:dc:93:0c:f1:92:de:
                    a8:17:78:11:a6:38:54:c3:da:b6:25:89:b9:ed:40:
                    4b:fe:a7:60:81:b6:cc:5e:a8:32:d5:6f:db:0d:da:
                    c3:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:A4:52:C8:6A:05:E9:AA:D0:06:86:7E:0A:AB:53:39:E1:63:09:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6e55f0b6-d9dc-39ef-9f34-36dbd5bef894.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.25.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:9d:6f:c6:f5:fe:86:09:b7:77:a0:c2:e8:bf:d8:12:34:54:
         d6:f5:05:4f:26:e2:54:44:e9:9b:46:5d:b8:52:52:63:8f:6c:
         f4:ef:5e:3d:80:d3:83:d8:1e:cc:80:b7:8b:a1:ce:63:62:b2:
         b4:dd:41:57:ad:28:bd:77:c2:1b:46:6d:22:6c:bd:1d:73:bc:
         f0:cf:66:24:24:1f:92:e5:5f:aa:71:32:05:13:ec:31:1e:82:
         74:59:4c:4b:05:c1:62:01:83:21:78:de:91:cf:47:95:d3:4a:
         d9:16:47:0e:ff:c8:a7:ff:13:13:32:31:3d:cd:97:41:59:b8:
         52:df:3e:59:14:42:94:89:fc:99:04:97:bd:0f:49:50:23:a5:
         22:f4:4d:c1:f9:43:53:3d:4c:ea:c1:15:99:96:7e:7e:23:ad:
         3f:76:46:76:0f:e8:70:5e:73:60:c4:86:f1:62:ac:76:4d:e0:
         4c:6a:f7:49:36:08:41:e1:8b:0d:ea:2d:c8:5c:de:2e:7b:29:
         da:2d:74:6b:b6:a2:71:da:7e:72:da:7e:be:f4:43:ab:6b:bd:
         f9:eb:64:0c:44:a6:68:86:dd:95:87:ae:2b:3d:6d:e9:59:b6:
         a7:15:a1:3d:7c:14:d9:52:00:81:ef:10:16:08:5e:05:94:38:
         1a:be:5e:8e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5aShWAYrFsHKC12gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDcwMTA5MDAxMloXDTI2MDkyOTA5MDAxMlowLzEtMCsGA1UEAxMk
ZTlkZGQxOTgtODljZi00ZjBmLTgxZTktMmMwZjVjN2ZiMGM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9YEDkPVvDBmfn4iDvnZ02oJdXSeH201K9JaK
vxgqx33snYbiAzv7SgI94qmlqVwdo/GmJWsaLPt0y1e3uCG4VKqpIwB/ebudpNH7
CNDhTuu9IN/zHJTVZp4JWgRY2BND7RXzxPrF8N6v6YuB3NTd2ZgRZK/xj1rDNIuK
T5eA5oMiHGbCDm+WmCBhIeYmm8ehjqnNjLp+VRvEi4fekXWYtmDM4UM/OpW6Um4d
kMxdmPXcZvEm+5oH5KTRCYIsS/GTUh55oVOnhUZ3piyf2ZH4mNFpw054AzFu/rDc
kwzxkt6oF3gRpjhUw9q2JYm57UBL/qdggbbMXqgy1W/bDdrD/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCOkUshqBemq0AaGfgqrUznhYwmXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNmU1NWYwYjYtZDlkYy0z
OWVmLTlmMzQtMzZkYmQ1YmVmODk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBnsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEOdb8b1/oYJt3egwui/2BI0VNb1BU8m4lRE6ZtGXbhSUmOPbPTvXj2A
04PYHsyAt4uhzmNisrTdQVetKL13whtGbSJsvR1zvPDPZiQkH5LlX6pxMgUT7DEe
gnRZTEsFwWIBgyF43pHPR5XTStkWRw7/yKf/ExMyMT3Nl0FZuFLfPlkUQpSJ/JkE
l70PSVAjpSL0TcH5Q1M9TOrBFZmWfn4jrT92RnYP6HBec2DEhvFirHZN4Exq90k2
CEHhiw3qLchc3i57KdotdGu2onHafnLafr70Q6trvfnrZAxEpmiG3ZWHris9belZ
tqcVoT18FNlSAIHvEBYIXgWUOBq+Xo4=
-----END CERTIFICATE-----
Generated at Sat Jul 18 11:17:39 2026 by rpki-client