Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/4eaeb893-031e-3cce-8cf6-e77f16c213dc.roa
File:                     4eaeb893-031e-3cce-8cf6-e77f16c213dc.roa (raw, json)
Hash identifier:          xMmnCKMBh7jWnWDU5uII/VH9rYxBlffgYkuzYwMUdcQ=
Subject key identifier:   FC:20:4C:60:DB:AA:18:A2:9D:F1:00:0A:E6:B9:27:92:E6:B6:D7:34
Certificate issuer:       /CN=5f6f7623-0788-410a-b9dd-8040879aa924
Certificate serial:       010D0C9F4328584ED001E340DC1F54BB8284D800
Authority key identifier: 6C:F1:38:A9:DC:91:8A:D7:97:D6:E0:2C:FD:36:EA:97:60:B3:CF:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/4eaeb893-031e-3cce-8cf6-e77f16c213dc.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     19197
IP address blocks:        69.41.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:e3:40:dc:1f:54:bb:82:84:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f6f7623-0788-410a-b9dd-8040879aa924
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=7bc36971-ce11-416b-afc5-fa8b3828c7fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:af:d5:3c:90:75:ad:20:87:6a:8d:00:84:ab:
                    26:82:e1:29:d2:bc:c1:75:ed:14:4e:44:00:21:c7:
                    d5:d8:04:96:79:e8:41:b7:11:70:f8:02:28:9c:19:
                    56:e5:34:c3:37:2c:8d:92:eb:cb:15:00:7f:6d:9b:
                    aa:3d:20:30:b5:48:4e:c9:13:12:58:77:26:29:2e:
                    34:a5:7c:bf:f4:15:5a:95:21:11:05:85:18:4e:71:
                    74:a9:93:69:d1:6d:91:f0:6c:59:6d:2d:cd:e9:d4:
                    08:2a:3f:52:ee:c1:cb:cc:d3:21:d2:58:0f:e1:28:
                    3f:ae:eb:c4:3e:99:cd:8b:97:f7:62:14:78:74:63:
                    34:5b:7c:53:d0:89:df:85:95:5a:8b:93:32:5c:df:
                    c5:e3:20:06:bc:7c:cd:59:ac:e6:4e:6c:37:75:a5:
                    86:0d:79:78:62:4d:ca:37:5c:c0:42:9e:60:8f:b4:
                    6c:de:96:12:09:43:fc:7c:43:51:d2:92:46:8f:73:
                    51:8d:63:14:7c:e1:9a:2d:6d:d0:fb:a7:51:bc:3b:
                    0b:fa:84:0c:ac:4c:bd:b8:12:cd:48:2b:30:22:68:
                    f9:a4:0d:b0:65:3f:6a:c0:81:63:44:d1:65:4e:92:
                    39:5e:8b:a1:6a:29:d9:e8:3c:0d:00:9b:45:65:57:
                    da:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:20:4C:60:DB:AA:18:A2:9D:F1:00:0A:E6:B9:27:92:E6:B6:D7:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/4eaeb893-031e-3cce-8cf6-e77f16c213dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.crl

            X509v3 Authority Key Identifier:
                keyid:6C:F1:38:A9:DC:91:8A:D7:97:D6:E0:2C:FD:36:EA:97:60:B3:CF:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.41.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:fb:b8:0f:50:52:f2:5d:12:28:8b:ad:80:c4:9c:d4:8c:12:
         d1:7d:88:39:9d:a9:85:44:4c:52:a8:96:30:ca:2b:8a:da:69:
         fb:f3:9c:29:4a:db:b5:d4:00:d1:4a:f3:d2:b6:38:a9:e8:3d:
         67:e9:04:e6:cf:3c:b3:a2:cb:72:9e:c5:03:79:97:e1:d0:d6:
         ac:d7:53:3c:2b:98:95:19:e7:5f:17:45:71:b2:8f:7a:5c:48:
         ca:5d:72:ca:07:fc:1f:bc:d0:23:00:95:5d:59:80:f7:93:68:
         aa:da:fb:8a:7c:35:6c:50:88:1f:f4:37:67:f9:b2:7b:1b:66:
         72:b1:55:11:e0:09:ae:13:59:72:da:c9:2d:77:dc:81:ec:db:
         d9:66:84:d4:4c:8b:39:79:30:f3:1b:f8:7b:59:d6:a6:cd:c3:
         d2:0d:cd:6c:73:d3:21:81:f5:5d:28:a3:20:c7:1e:2e:83:aa:
         a2:81:c9:66:b1:55:85:fb:a1:6c:f9:3b:44:f3:dc:11:01:48:
         50:41:83:4a:9d:2c:9a:ea:3c:38:68:f5:e6:fc:92:66:bd:a7:
         8f:c7:88:14:6a:0a:b0:9c:d8:81:7e:4a:a9:2c:34:fc:27:a9:
         9e:ad:4b:d1:52:5f:ee:ec:48:81:25:8d:f0:9e:28:8f:46:8b:
         06:46:1e:48
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7QAeNA3B9Uu4KE2AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWY2Zjc2MjMtMDc4OC00MTBhLWI5ZGQtODA0MDg3OWFh
OTI0MB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk
N2JjMzY5NzEtY2UxMS00MTZiLWFmYzUtZmE4YjM4MjhjN2ZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArK/VPJB1rSCHao0AhKsmguEp0rzBde0UTkQA
IcfV2ASWeehBtxFw+AIonBlW5TTDNyyNkuvLFQB/bZuqPSAwtUhOyRMSWHcmKS40
pXy/9BValSERBYUYTnF0qZNp0W2R8GxZbS3N6dQIKj9S7sHLzNMh0lgP4Sg/ruvE
PpnNi5f3YhR4dGM0W3xT0InfhZVai5MyXN/F4yAGvHzNWazmTmw3daWGDXl4Yk3K
N1zAQp5gj7Rs3pYSCUP8fENR0pJGj3NRjWMUfOGaLW3Q+6dRvDsL+oQMrEy9uBLN
SCswImj5pA2wZT9qwIFjRNFlTpI5XouhainZ6DwNAJtFZVfa9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPwgTGDbqhiinfEACua5J5Lmttc0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZjZm
NzYyMy0wNzg4LTQxMGEtYjlkZC04MDQwODc5YWE5MjQvNGVhZWI4OTMtMDMxZS0z
Y2NlLThjZjYtZTc3ZjE2YzIxM2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWY2Zjc2MjMtMDc4OC00MTBhLWI5
ZGQtODA0MDg3OWFhOTI0LzVmNmY3NjIzLTA3ODgtNDEwYS1iOWRkLTgwNDA4Nzlh
YTkyNC5jcmwwHwYDVR0jBBgwFoAUbPE4qdyRiteX1uAs/Tbql2Czz34wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZjZmNzYyMy0wNzg4LTQxMGEtYjlkZC04MDQw
ODc5YWE5MjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARSkqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFT7uA9QUvJdEiiLrYDEnNSMEtF9iDmdqYVETFKoljDKK4raafvznClK
27XUANFK89K2OKnoPWfpBObPPLOiy3KexQN5l+HQ1qzXUzwrmJUZ518XRXGyj3pc
SMpdcsoH/B+80CMAlV1ZgPeTaKra+4p8NWxQiB/0N2f5snsbZnKxVRHgCa4TWXLa
yS133IHs29lmhNRMizl5MPMb+HtZ1qbNw9INzWxz0yGB9V0ooyDHHi6DqqKByWax
VYX7oWz5O0Tz3BEBSFBBg0qdLJrqPDho9eb8kma9p4/HiBRqCrCc2IF+SqksNPwn
qZ6tS9FSX+7sSIEljfCeKI9GiwZGHkg=
-----END CERTIFICATE-----
Generated at Thu Aug 13 13:05:52 2026 by rpki-client