Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cd14a580-78bb-3506-89cf-f06871a2cfd7.roa
File:                     cd14a580-78bb-3506-89cf-f06871a2cfd7.roa (raw, json)
Hash identifier:          ar0iy1S5O5VcU6q7Sb1RjHLTBAed0pmcLJreKhLtzxI=
Subject key identifier:   68:A1:B8:1B:2D:F4:B1:E8:1B:63:4A:96:C6:AD:62:1C:8C:40:B5:10
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E640F99D3760A512AAC116120
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cd14a580-78bb-3506-89cf-f06871a2cfd7.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     6167
IP address blocks:        96.12.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:99:d3:76:0a:51:2a:ac:11:61:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=dfeb1ce0-fba8-42f4-9616-9ad4d8d26d54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:78:66:5d:d0:b5:5c:99:37:a1:ae:5b:9a:18:
                    2b:80:d7:6f:a0:21:d7:56:c6:63:e6:6b:5f:11:31:
                    59:ba:e9:8a:9a:80:eb:3d:51:69:f1:32:7b:39:f6:
                    4d:bc:04:2f:98:64:40:36:71:be:d0:3f:7b:87:29:
                    07:42:7e:c3:2a:bc:80:3f:6a:af:01:f9:6c:cb:04:
                    ea:77:c2:90:9a:96:23:dc:07:f3:4e:86:df:ac:0e:
                    43:c7:ff:24:11:6c:e6:d9:8f:31:1e:2b:a4:67:df:
                    f1:88:a6:ab:65:f8:df:23:8d:e0:7c:d3:b9:08:2f:
                    02:c3:a7:9f:96:b4:6d:71:8a:fd:39:78:44:06:07:
                    e5:cd:d9:1c:b3:0a:e3:85:1d:14:3c:4a:5f:3b:f6:
                    37:01:a6:f4:32:a0:78:74:86:cc:e5:4e:08:0d:fa:
                    1d:15:2a:ff:cd:49:7e:f0:68:e7:cc:19:82:b2:de:
                    ba:35:92:80:64:b5:8e:3e:50:7c:b0:79:0b:6d:60:
                    6d:23:a2:71:db:f6:9a:52:ee:d3:19:31:91:f8:8a:
                    4c:67:be:de:f1:64:2f:9e:56:99:f0:af:6c:96:1b:
                    83:c2:7d:0a:bd:c3:10:e7:6d:42:0e:e3:96:f8:49:
                    08:4f:b3:27:3b:cc:ed:b9:9c:2a:c5:f0:ba:4e:54:
                    6a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:A1:B8:1B:2D:F4:B1:E8:1B:63:4A:96:C6:AD:62:1C:8C:40:B5:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cd14a580-78bb-3506-89cf-f06871a2cfd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.12.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:40:b6:f8:b2:f8:e5:7c:85:f5:35:b8:74:37:e9:5e:8b:98:
         88:6c:10:5b:3b:8a:d2:94:c0:40:3e:80:32:bb:c5:6e:f1:bc:
         a4:d6:36:52:a4:71:4c:e1:1b:20:90:1f:be:81:4d:45:88:0f:
         eb:11:a4:e8:be:80:33:6c:fd:b6:ee:11:2c:a3:42:d3:68:0b:
         7b:96:c9:2c:1c:9f:e9:e5:94:e6:ca:44:99:32:7c:55:4d:5a:
         09:2e:60:03:bf:83:01:76:b7:8c:68:f1:65:c3:69:72:35:85:
         e6:fa:71:cf:05:c1:3a:86:67:5d:3a:fd:e8:ac:c1:6b:00:ca:
         26:58:94:ca:1a:3d:47:fd:aa:76:3a:9a:8f:4b:8b:e0:25:7d:
         e7:07:97:88:0f:d0:fc:e8:ed:b1:7f:75:5e:8f:d6:15:b4:81:
         10:bd:83:a8:fe:1e:31:87:55:4e:1e:af:a1:27:46:78:d4:14:
         4c:ff:8f:90:e5:35:01:0b:f7:4a:39:c8:86:d2:77:6d:f4:d5:
         89:8b:77:96:72:06:ff:76:8c:23:87:9f:3d:60:eb:94:cb:15:
         f2:c2:8e:13:dc:cc:55:99:36:dd:1e:be:4e:10:06:b5:40:b5:
         b6:43:40:cc:a4:73:40:23:67:c7:26:82:fd:1c:bb:8a:74:9c:
         07:88:2f:7c
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE5kD5nTdgpRKqwRYSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDcwNDIxMDAxMloXDTI2MTAwMjIxMDAxMlowLzEtMCsGA1UEAxMk
ZGZlYjFjZTAtZmJhOC00MmY0LTk2MTYtOWFkNGQ4ZDI2ZDU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHhmXdC1XJk3oa5bmhgrgNdvoCHXVsZj5mtf
ETFZuumKmoDrPVFp8TJ7OfZNvAQvmGRANnG+0D97hykHQn7DKryAP2qvAflsywTq
d8KQmpYj3AfzTobfrA5Dx/8kEWzm2Y8xHiukZ9/xiKarZfjfI43gfNO5CC8Cw6ef
lrRtcYr9OXhEBgflzdkcswrjhR0UPEpfO/Y3Aab0MqB4dIbM5U4IDfodFSr/zUl+
8GjnzBmCst66NZKAZLWOPlB8sHkLbWBtI6Jx2/aaUu7TGTGR+IpMZ77e8WQvnlaZ
8K9slhuDwn0KvcMQ521CDuOW+EkIT7MnO8ztuZwqxfC6TlRqXwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGihuBst9LHoG2NKlsatYhyMQLUQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvY2QxNGE1ODAtNzhiYi0z
NTA2LTg5Y2YtZjA2ODcxYTJjZmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCYAwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAOEC2+LL45XyF9TW4dDfpXouYiGwQWzuK0pTAQD6AMrvFbvG8pNY2UqRx
TOEbIJAfvoFNRYgP6xGk6L6AM2z9tu4RLKNC02gLe5bJLByf6eWU5spEmTJ8VU1a
CS5gA7+DAXa3jGjxZcNpcjWF5vpxzwXBOoZnXTr96KzBawDKJliUyho9R/2qdjqa
j0uL4CV95weXiA/Q/OjtsX91Xo/WFbSBEL2DqP4eMYdVTh6voSdGeNQUTP+PkOU1
AQv3SjnIhtJ3bfTViYt3lnIG/3aMI4efPWDrlMsV8sKOE9zMVZk23R6+ThAGtUC1
tkNAzKRzQCNnxyaC/Ry7inScB4gvfA==
-----END CERTIFICATE-----
Generated at Mon Jul 13 10:40:01 2026 by rpki-client