Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/da16e75a-fb76-3431-8cfb-9d696b8121e1.roa
File:                     da16e75a-fb76-3431-8cfb-9d696b8121e1.roa (raw, json)
Hash identifier:          IGx3hnSZkzzz7qdCm7z+gGUTb2BnChOV9OsdGl39j+4=
Subject key identifier:   C2:94:38:D5:8E:55:E5:1B:F7:E7:CC:73:FE:3C:70:B4:A6:6D:2B:68
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E3E5F2CF67B4CFA11EE912600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/da16e75a-fb76-3431-8cfb-9d696b8121e1.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     6167
IP address blocks:        198.225.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:2c:f6:7b:4c:fa:11:ee:91:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=18905812-015a-4e0c-980e-0160ee7876bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:c5:d9:66:a6:9f:f7:c0:3d:71:51:a6:53:d5:
                    86:0e:c4:d7:e3:5e:5f:35:c1:5d:d0:aa:30:ba:70:
                    ba:0a:b6:6a:90:e6:fb:bf:d4:83:f2:f8:be:72:4d:
                    2c:3b:b7:c8:25:a9:ab:e0:97:15:73:71:cf:c1:95:
                    6b:87:e6:99:e7:62:42:a4:12:0f:28:22:74:8f:dc:
                    c8:29:be:cf:8b:31:04:d0:ff:cf:02:c9:18:79:8a:
                    2f:5d:42:66:a7:f2:82:c9:90:1c:4f:b7:63:62:24:
                    ec:07:4b:e0:08:4a:8a:fd:7e:bf:8c:10:5c:dc:a8:
                    1b:c0:56:71:3c:69:21:d6:c7:68:fb:9c:41:9c:9b:
                    ff:e2:75:5a:fd:8c:9e:86:28:85:73:c9:17:e3:57:
                    25:d3:31:81:b1:d9:69:7a:44:ef:99:07:f3:e0:01:
                    79:05:7b:e0:dc:a1:fd:0d:bb:ec:43:d4:ea:3a:c2:
                    3c:1f:e3:5a:12:ae:bc:19:9b:e7:be:72:69:9d:55:
                    42:c0:71:76:43:0b:55:2d:9d:e8:e2:7d:79:cd:f3:
                    e6:a1:6c:a6:94:58:59:37:43:86:2d:4e:06:77:bd:
                    8f:35:81:f0:1d:e5:ef:aa:cd:68:9f:78:f3:57:a3:
                    f0:5e:d2:ab:cc:d5:a5:0e:8b:46:ef:25:ea:e0:e4:
                    e4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:94:38:D5:8E:55:E5:1B:F7:E7:CC:73:FE:3C:70:B4:A6:6D:2B:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/da16e75a-fb76-3431-8cfb-9d696b8121e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.225.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:ec:40:44:58:69:a3:97:98:33:bc:84:6f:7b:06:a7:17:d9:
         1e:8c:0e:89:2e:ca:d5:75:ec:20:be:c7:a2:16:9e:62:a5:1b:
         21:4e:14:7e:39:e2:aa:50:1f:c6:42:bc:7a:36:58:a7:de:26:
         1b:67:0e:91:5b:15:30:21:75:b6:de:9e:25:d5:f6:d0:d1:fa:
         0a:9a:00:3f:4d:ba:db:3a:a7:7d:d3:89:84:89:fd:f9:a2:4c:
         e9:1e:95:94:cf:fb:46:ad:d3:e3:c4:d4:70:01:fb:48:96:70:
         4e:10:7b:a8:d2:f5:fe:2f:4b:6c:04:ec:75:77:59:49:4a:bc:
         4d:75:02:b1:c7:a0:a0:44:cf:3b:64:6d:cc:72:bf:80:86:b3:
         8a:60:f0:3d:29:41:bd:1c:64:5d:e8:66:44:d1:ca:58:cb:d2:
         99:ae:f5:f9:49:55:02:e0:b9:30:e0:20:02:9b:3c:0f:cc:de:
         0e:8d:ed:20:56:a9:19:9a:57:ad:66:a2:9a:f0:6f:c0:4d:96:
         ca:70:78:ba:e4:92:d1:fe:c9:0e:4f:38:55:0b:da:98:9f:dd:
         78:a1:04:21:a3:f2:03:5c:c4:66:90:db:6a:3f:6e:6c:6d:5b:
         49:ab:59:97:7a:32:12:2b:db:4a:d8:e4:54:10:f9:7d:54:d2:
         06:4b:01:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4+Xyz2e0z6Ee6RJgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDYyMTA5MDAxMloXDTI2MDkxOTA5MDAxMlowLzEtMCsGA1UEAxMk
MTg5MDU4MTItMDE1YS00ZTBjLTk4MGUtMDE2MGVlNzg3NmJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8XZZqaf98A9cVGmU9WGDsTX415fNcFd0Kow
unC6CrZqkOb7v9SD8vi+ck0sO7fIJamr4JcVc3HPwZVrh+aZ52JCpBIPKCJ0j9zI
Kb7PizEE0P/PAskYeYovXUJmp/KCyZAcT7djYiTsB0vgCEqK/X6/jBBc3KgbwFZx
PGkh1sdo+5xBnJv/4nVa/YyehiiFc8kX41cl0zGBsdlpekTvmQfz4AF5BXvg3KH9
DbvsQ9TqOsI8H+NaEq68GZvnvnJpnVVCwHF2QwtVLZ3o4n15zfPmoWymlFhZN0OG
LU4Gd72PNYHwHeXvqs1on3jzV6PwXtKrzNWlDotG7yXq4OTk5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMKUONWOVeUb9+fMc/48cLSmbStoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZGExNmU3NWEtZmI3Ni0z
NDMxLThjZmItOWQ2OTZiODEyMWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFxuHgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG7sQERYaaOXmDO8hG97BqcX2R6MDokuytV17CC+x6IWnmKlGyFOFH45
4qpQH8ZCvHo2WKfeJhtnDpFbFTAhdbbeniXV9tDR+gqaAD9Nuts6p33TiYSJ/fmi
TOkelZTP+0at0+PE1HAB+0iWcE4Qe6jS9f4vS2wE7HV3WUlKvE11ArHHoKBEzztk
bcxyv4CGs4pg8D0pQb0cZF3oZkTRyljL0pmu9flJVQLguTDgIAKbPA/M3g6N7SBW
qRmaV61moprwb8BNlspweLrkktH+yQ5POFUL2pif3XihBCGj8gNcxGaQ22o/bmxt
W0mrWZd6MhIr20rY5FQQ+X1U0gZLATQ=
-----END CERTIFICATE-----
Generated at Tue Jul 7 03:44:27 2026 by rpki-client