Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/ec2e42b1-0c5f-342d-8e2f-c3fde025b575.roa
File:                     ec2e42b1-0c5f-342d-8e2f-c3fde025b575.roa (raw, json)
Hash identifier:          uDV2CLRPa66yRlfNj1QSsMeAByGW/Dc7AlNvE5mY5x4=
Subject key identifier:   94:8C:E1:9D:00:A5:C7:67:79:19:52:84:E7:CD:9B:C7:BE:C9:74:37
Certificate issuer:       /CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e
Certificate serial:       010D0C9F4328584E1FA9987E081E71922A9AB900
Authority key identifier: 50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/ec2e42b1-0c5f-342d-8e2f-c3fde025b575.roa
Signing time:             Wed 10 Jun 2026 09:00:13 +0000
ROA not before:           Wed 10 Jun 2026 09:00:13 +0000
ROA not after:            Tue 08 Sep 2026 09:00:13 +0000
asID:                     6939
IP address blocks:        209.142.68.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 12 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1f:a9:98:7e:08:1e:71:92:2a:9a:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e
        Validity
            Not Before: Jun 10 09:00:13 2026 GMT
            Not After : Sep  8 09:00:13 2026 GMT
        Subject: CN=a6b42a7b-a280-4517-a88a-7feb5a1da785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:97:02:6d:4a:02:e3:db:95:f2:1a:49:46:95:
                    38:d6:19:68:a9:0a:85:7f:d7:03:02:84:ca:84:cd:
                    34:da:ef:e0:53:2f:07:ef:33:43:a4:30:d1:67:72:
                    93:01:4b:ff:9d:97:a7:ec:e4:fa:12:4e:11:be:18:
                    3b:6e:e3:5d:11:ec:54:34:a6:b1:01:8e:52:57:d1:
                    5d:7d:53:13:4c:4f:c6:70:6e:35:a9:02:e1:0d:4a:
                    70:19:18:33:e2:d7:40:2c:21:05:31:c5:71:79:79:
                    6e:a0:c8:47:b3:f6:b8:66:9e:34:1f:22:9d:e6:e9:
                    84:52:46:3a:c0:47:cb:8a:16:c7:30:77:73:43:18:
                    fe:d9:db:df:b2:15:06:6f:1e:5f:44:b7:6e:bd:76:
                    ea:f8:f6:e4:e0:f3:05:b7:b4:a2:70:1f:16:7f:ba:
                    f8:b6:fc:aa:48:a6:15:98:15:b7:75:f0:01:37:91:
                    36:30:ca:b9:d8:3e:eb:be:77:37:2d:7e:f0:cb:33:
                    6d:33:00:c2:d3:52:49:b3:d1:87:79:35:b9:ca:5a:
                    9c:dd:59:ad:79:87:eb:72:56:41:67:22:df:bc:19:
                    20:ad:1f:5e:6a:9e:8b:93:b2:e0:d9:b1:48:66:92:
                    f2:1b:b2:a7:ba:d5:e8:8c:5a:ce:aa:6f:6d:c7:71:
                    1d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:8C:E1:9D:00:A5:C7:67:79:19:52:84:E7:CD:9B:C7:BE:C9:74:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/ec2e42b1-0c5f-342d-8e2f-c3fde025b575.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.crl

            X509v3 Authority Key Identifier:
                keyid:50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.142.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:94:26:f7:45:a2:22:25:e9:d1:45:b5:24:6f:ac:8d:99:c6:
         8e:7a:f2:98:ec:36:64:5f:85:59:78:2a:63:92:fc:5e:fc:0e:
         b8:84:53:ef:e0:44:2e:a4:a4:16:51:58:89:8d:ff:71:18:14:
         4e:98:2f:36:ac:21:7c:7f:9f:d9:0c:12:3c:c7:60:96:af:ee:
         3f:39:fa:b3:15:c6:6f:aa:03:01:f7:2e:af:64:1f:dc:85:af:
         65:5b:a1:aa:24:2f:de:1c:17:28:c4:b3:fc:11:de:a9:17:84:
         d3:c0:2b:5e:07:e3:01:ac:f1:30:2f:92:86:6b:19:2f:9f:80:
         64:63:cc:5e:00:e3:67:a1:ec:40:45:c2:98:9d:95:3c:0f:f9:
         bc:4a:15:21:61:3a:a3:c8:fe:1c:4c:c9:6b:80:9a:4a:82:c3:
         13:0d:73:17:2e:ed:8e:21:95:a6:15:9b:30:67:6b:e5:07:aa:
         67:2a:4d:85:a2:16:8e:2c:a6:11:91:56:fb:63:1f:f2:be:9a:
         89:50:e8:15:be:91:af:8f:d5:d3:13:3a:9b:d8:58:3c:41:e3:
         f7:b5:84:1c:84:7e:b5:ad:5f:62:b3:97:b8:a6:7e:b3:7c:4e:
         5a:98:42:03:84:7e:6e:13:42:84:1e:d4:fb:70:89:c7:63:7e:
         0d:65:5b:d6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4fqZh+CB5xkiqauQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzViOWNiOGUtN2E3Ny00MDhlLTgxZDktMDc1ZjhlZjcy
MDBlMB4XDTI2MDYxMDA5MDAxM1oXDTI2MDkwODA5MDAxM1owLzEtMCsGA1UEAxMk
YTZiNDJhN2ItYTI4MC00NTE3LWE4OGEtN2ZlYjVhMWRhNzg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJcCbUoC49uV8hpJRpU41hloqQqFf9cDAoTK
hM002u/gUy8H7zNDpDDRZ3KTAUv/nZen7OT6Ek4Rvhg7buNdEexUNKaxAY5SV9Fd
fVMTTE/GcG41qQLhDUpwGRgz4tdALCEFMcVxeXluoMhHs/a4Zp40HyKd5umEUkY6
wEfLihbHMHdzQxj+2dvfshUGbx5fRLduvXbq+Pbk4PMFt7SicB8Wf7r4tvyqSKYV
mBW3dfABN5E2MMq52D7rvnc3LX7wyzNtMwDC01JJs9GHeTW5ylqc3VmteYfrclZB
ZyLfvBkgrR9eap6Lk7Lg2bFIZpLyG7KnutXojFrOqm9tx3EdqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJSM4Z0ApcdneRlShOfNm8e+yXQ3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NWI5
Y2I4ZS03YTc3LTQwOGUtODFkOS0wNzVmOGVmNzIwMGUvZWMyZTQyYjEtMGM1Zi0z
NDJkLThlMmYtYzNmZGUwMjViNTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzViOWNiOGUtN2E3Ny00MDhlLTgx
ZDktMDc1ZjhlZjcyMDBlLzc1YjljYjhlLTdhNzctNDA4ZS04MWQ5LTA3NWY4ZWY3
MjAwZS5jcmwwHwYDVR0jBBgwFoAUUCXJ4rB8e2VaqkLiQ9juoPxY5KIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NWI5Y2I4ZS03YTc3LTQwOGUtODFkOS0wNzVm
OGVmNzIwMGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Y5EMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEyUJvdFoiIl6dFFtSRvrI2Zxo568pjsNmRfhVl4KmOS/F78DriEU+/g
RC6kpBZRWImN/3EYFE6YLzasIXx/n9kMEjzHYJav7j85+rMVxm+qAwH3Lq9kH9yF
r2VboaokL94cFyjEs/wR3qkXhNPAK14H4wGs8TAvkoZrGS+fgGRjzF4A42eh7EBF
wpidlTwP+bxKFSFhOqPI/hxMyWuAmkqCwxMNcxcu7Y4hlaYVmzBna+UHqmcqTYWi
Fo4sphGRVvtjH/K+molQ6BW+ka+P1dMTOpvYWDxB4/e1hByEfrWtX2Kzl7imfrN8
TlqYQgOEfm4TQoQe1Ptwicdjfg1lW9Y=
-----END CERTIFICATE-----
Generated at Thu Jun 11 04:14:26 2026 by rpki-client