Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/7c290f4d-05e2-3e2f-9bde-fcfac0c9fc57.roa
File:                     7c290f4d-05e2-3e2f-9bde-fcfac0c9fc57.roa (raw, json)
Hash identifier:          WSGHD/UqsFmKB0n77I40kcPNITiopC7TSR8sAYy9wXM=
Subject key identifier:   DE:DB:3E:1C:97:FB:EB:E6:19:6E:6D:D6:72:B7:07:87:47:62:EC:05
Certificate issuer:       /CN=6fda6c5c-9c11-4f77-8128-71e07d46806c
Certificate serial:       010D0C9F4328584ECD3725634615AECC81B66B80
Authority key identifier: 34:52:EC:75:65:9C:71:A0:F7:4D:93:FD:8A:BB:05:7F:63:F1:AC:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/7c290f4d-05e2-3e2f-9bde-fcfac0c9fc57.roa
Signing time:             Tue 11 Aug 2026 13:00:11 +0000
ROA not before:           Tue 11 Aug 2026 13:00:11 +0000
ROA not after:            Mon 09 Nov 2026 14:00:11 +0000
asID:                     62728
IP address blocks:        192.210.16.0/20 maxlen: 24
                          2620:44:4000::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/6fda6c5c-9c11-4f77-8128-71e07d46806c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/6fda6c5c-9c11-4f77-8128-71e07d46806c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cd:37:25:63:46:15:ae:cc:81:b6:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fda6c5c-9c11-4f77-8128-71e07d46806c
        Validity
            Not Before: Aug 11 13:00:11 2026 GMT
            Not After : Nov  9 14:00:11 2026 GMT
        Subject: CN=c3ff89da-439b-4923-b751-2fc41f6a0aea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:13:dc:36:1c:28:e6:4a:fe:18:ed:dc:0e:b2:
                    36:de:be:3d:15:41:cf:c3:1a:30:18:07:13:30:a1:
                    7f:84:f5:b5:32:fa:43:a9:b4:11:99:bf:7e:fc:2a:
                    8e:5b:f1:81:03:6d:f9:db:c1:23:e0:25:aa:1f:e6:
                    44:47:11:38:84:02:63:13:6e:d5:39:2b:c0:b3:8e:
                    fc:b9:17:c1:5b:04:64:14:be:e4:a8:63:de:35:b9:
                    99:ac:54:68:7a:60:1e:a5:ce:8f:69:a4:05:48:92:
                    e0:13:18:a9:47:7b:46:83:5e:d6:46:21:b6:93:14:
                    85:ca:06:b6:93:43:da:e0:cc:2c:35:d8:9a:28:97:
                    6f:cc:60:24:8d:48:55:64:69:3e:cf:eb:b5:cb:59:
                    a6:a6:40:fe:55:0f:53:3e:43:ff:c2:e7:a3:87:4a:
                    df:ec:be:42:10:2a:8e:36:0b:e5:96:04:7e:3c:14:
                    5c:df:dd:6c:ae:f1:ab:b0:06:7c:23:15:84:ac:b7:
                    eb:7b:78:ae:f3:45:b6:0d:6c:18:78:ff:a0:8c:73:
                    e4:c0:02:4b:2e:71:42:2c:f4:99:15:85:d4:a7:c0:
                    aa:2a:66:c9:82:50:ab:e1:7c:97:18:69:61:c9:8c:
                    20:c7:7c:d6:89:10:66:f5:d7:1d:27:e1:f9:b1:f6:
                    c9:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:DB:3E:1C:97:FB:EB:E6:19:6E:6D:D6:72:B7:07:87:47:62:EC:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/7c290f4d-05e2-3e2f-9bde-fcfac0c9fc57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/6fda6c5c-9c11-4f77-8128-71e07d46806c.crl

            X509v3 Authority Key Identifier:
                keyid:34:52:EC:75:65:9C:71:A0:F7:4D:93:FD:8A:BB:05:7F:63:F1:AC:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.210.16.0/20
                IPv6:
                  2620:44:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:e1:32:c5:cd:6f:d6:ea:0a:23:1a:b9:30:f4:7f:98:5e:80:
         a3:f4:d5:12:b9:43:3d:db:10:45:b5:44:51:92:dd:79:7a:ca:
         e5:c0:aa:28:81:48:fa:74:ad:c6:ee:0c:e2:38:34:6c:ec:64:
         12:0d:78:99:f6:45:57:ae:b8:5e:84:50:76:d6:d3:89:9d:fc:
         14:0e:61:11:fa:b1:20:eb:3a:a1:31:52:aa:48:d5:5d:8b:ca:
         02:95:9a:fe:19:07:06:bd:8c:6b:65:3e:7d:dd:75:bc:b1:e4:
         6e:49:bd:f2:f0:14:9d:9d:75:bb:12:ef:72:fb:93:45:8b:74:
         a6:a8:cd:d8:b1:6a:7c:e1:6b:9a:d9:f2:a6:cc:f6:76:9e:7e:
         ff:68:c8:5f:7b:8a:db:2b:e7:b4:1f:80:6f:16:83:e5:71:01:
         04:f9:6f:62:53:4f:2e:37:dc:d2:49:c4:f2:70:7f:0a:bf:e9:
         3c:8a:8c:db:ad:b4:5a:9f:4f:c8:f7:be:11:91:0e:20:37:b0:
         76:3b:e2:3c:e5:eb:3e:c4:1e:03:4a:e1:12:59:2f:5b:e3:a7:
         1c:a4:43:f3:ac:28:72:cc:3e:3b:25:bf:f6:bc:c6:e3:77:48:
         b0:f5:5e:6d:b7:6c:35:8b:86:25:71:33:55:ce:3d:82:d1:e4:
         23:22:b5:89
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE7NNyVjRhWuzIG2a4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmZkYTZjNWMtOWMxMS00Zjc3LTgxMjgtNzFlMDdkNDY4
MDZjMB4XDTI2MDgxMTEzMDAxMVoXDTI2MTEwOTE0MDAxMVowLzEtMCsGA1UEAxMk
YzNmZjg5ZGEtNDM5Yi00OTIzLWI3NTEtMmZjNDFmNmEwYWVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxPcNhwo5kr+GO3cDrI23r49FUHPwxowGAcT
MKF/hPW1MvpDqbQRmb9+/CqOW/GBA23528Ej4CWqH+ZERxE4hAJjE27VOSvAs478
uRfBWwRkFL7kqGPeNbmZrFRoemAepc6PaaQFSJLgExipR3tGg17WRiG2kxSFyga2
k0Pa4MwsNdiaKJdvzGAkjUhVZGk+z+u1y1mmpkD+VQ9TPkP/wuejh0rf7L5CECqO
NgvllgR+PBRc391srvGrsAZ8IxWErLfre3iu80W2DWwYeP+gjHPkwAJLLnFCLPSZ
FYXUp8CqKmbJglCr4XyXGGlhyYwgx3zWiRBm9dcdJ+H5sfbJKwIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFN7bPhyX++vmGW5t1nK3B4dHYuwFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82ZmRh
NmM1Yy05YzExLTRmNzctODEyOC03MWUwN2Q0NjgwNmMvN2MyOTBmNGQtMDVlMi0z
ZTJmLTliZGUtZmNmYWMwYzlmYzU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNmZkYTZjNWMtOWMxMS00Zjc3LTgx
MjgtNzFlMDdkNDY4MDZjLzZmZGE2YzVjLTljMTEtNGY3Ny04MTI4LTcxZTA3ZDQ2
ODA2Yy5jcmwwHwYDVR0jBBgwFoAUNFLsdWWccaD3TZP9irsFf2PxrNkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82ZmRhNmM1Yy05YzExLTRmNzctODEyOC03MWUw
N2Q0NjgwNmMuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQEwNIQMA8E
AgACMAkDBwAmIABEQAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEASOEyxc1v1uoKIxq5MPR/mF6Ao/TVErlD
PdsQRbVEUZLdeXrK5cCqKIFI+nStxu4M4jg0bOxkEg14mfZFV664XoRQdtbTiZ38
FA5hEfqxIOs6oTFSqkjVXYvKApWa/hkHBr2Ma2U+fd11vLHkbkm98vAUnZ11uxLv
cvuTRYt0pqjN2LFqfOFrmtnypsz2dp5+/2jIX3uK2yvntB+AbxaD5XEBBPlvYlNP
Ljfc0knE8nB/Cr/pPIqM2620Wp9PyPe+EZEOIDewdjviPOXrPsQeA0rhElkvW+On
HKRD86wocsw+OyW/9rzG43dIsPVebbdsNYuGJXEzVc49gtHkIyK1iQ==
-----END CERTIFICATE-----
Generated at Thu Aug 20 23:39:05 2026 by rpki-client