Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/6cceee4d-2d2e-3ca8-8722-690c995dafdc.roa
File:                     6cceee4d-2d2e-3ca8-8722-690c995dafdc.roa (raw, json)
Hash identifier:          Rgc2j/mbYZU1Wt+rbyOnW4qPUoYLba0JOHhk9grkl2Y=
Subject key identifier:   C0:49:66:75:21:D9:2E:9A:56:43:27:D1:A5:5E:BB:0C:B7:69:8A:86
Certificate issuer:       /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
Certificate serial:       010D0C9F4328584E508491AA7E87C39F5DEA0570
Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/6cceee4d-2d2e-3ca8-8722-690c995dafdc.roa
Signing time:             Sat 27 Jun 2026 21:00:12 +0000
ROA not before:           Sat 27 Jun 2026 21:00:12 +0000
ROA not after:            Fri 25 Sep 2026 21:00:12 +0000
asID:                     13807
IP address blocks:        97.107.196.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:50:84:91:aa:7e:87:c3:9f:5d:ea:05:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
        Validity
            Not Before: Jun 27 21:00:12 2026 GMT
            Not After : Sep 25 21:00:12 2026 GMT
        Subject: CN=4e46da27-586a-4ecc-83f2-96cd90dd4147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:23:fe:c4:c6:ea:9e:22:49:34:83:88:48:43:
                    f7:59:0b:ef:46:ea:e4:39:43:1b:12:2d:4e:25:4c:
                    86:49:49:44:9d:36:18:c2:17:9c:7b:8f:73:0f:81:
                    6d:19:e4:db:df:16:d1:3a:f7:2b:51:e4:0f:c7:9d:
                    55:5c:f8:c4:a8:96:5b:db:4d:c6:cb:e2:aa:05:5b:
                    bb:b2:41:19:a8:21:0b:29:35:47:78:02:9a:f0:24:
                    d7:9e:9e:c9:6d:b0:53:91:0b:ea:90:dc:31:b5:51:
                    ff:fc:f1:9c:a8:df:56:a8:01:4d:5b:1f:35:c8:8c:
                    47:b8:da:3c:c4:bf:7f:d0:86:a1:fe:4e:18:e9:c4:
                    14:34:2c:f0:7c:b8:9f:da:bd:1a:ac:16:04:f6:8a:
                    6d:95:91:12:67:97:ca:4f:a9:f2:df:dd:17:86:9a:
                    37:9e:6c:4d:33:a1:64:8b:c3:d6:c0:87:8b:48:c4:
                    5e:4b:82:bb:dd:c1:bf:b5:71:28:8c:2d:75:6a:ba:
                    f4:0c:41:f5:bc:58:cd:15:cc:ed:e6:54:f6:ac:65:
                    2c:a0:61:37:b2:e1:b2:c4:9b:81:16:a1:7e:df:65:
                    83:ea:8b:10:3a:8b:3f:4e:9e:d6:89:27:39:d1:87:
                    d1:1d:41:35:c0:b8:85:4e:fd:86:f5:48:8d:1e:52:
                    27:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:49:66:75:21:D9:2E:9A:56:43:27:D1:A5:5E:BB:0C:B7:69:8A:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/6cceee4d-2d2e-3ca8-8722-690c995dafdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl

            X509v3 Authority Key Identifier:
                keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.107.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:b8:46:8f:86:d4:f5:3a:8e:98:73:ae:23:ed:c1:eb:f3:0b:
         fe:6d:d3:2f:ff:8c:a1:9f:f8:12:85:b0:da:80:2c:13:c4:81:
         8b:26:5c:f9:1d:6b:3e:50:17:e3:ee:36:f7:85:e0:13:f2:d5:
         44:f8:e2:e6:9e:3e:01:37:2e:ce:f4:00:37:27:34:a7:8c:e6:
         8b:17:c7:82:d6:c0:cd:34:ff:03:47:20:7e:48:84:19:ed:57:
         3e:ad:4d:b4:27:63:7b:69:d0:ed:12:92:ce:5f:74:b3:5c:de:
         a9:e5:59:68:32:f1:d6:d0:bd:63:df:82:d2:aa:84:65:ef:be:
         87:de:a6:38:fb:30:f8:cb:88:aa:44:6f:12:cd:5d:54:4d:25:
         1b:69:43:d7:90:d7:bc:5e:b6:bf:de:53:00:aa:d2:12:f7:35:
         c3:d0:12:9b:c1:de:d5:ba:36:ff:a3:b8:12:a4:d1:32:91:3e:
         78:cd:21:04:cb:61:d5:0a:1c:08:0b:7d:6c:a1:1b:6c:75:35:
         5a:d1:16:4c:31:f8:96:b4:33:b5:20:40:a9:7a:c6:27:54:00:
         2b:c6:19:1a:06:2d:51:4b:14:80:aa:63:bc:ed:b9:b8:16:1b:
         89:d3:6b:91:00:1c:14:97:19:46:cd:34:2c:17:c5:d6:8f:95:
         95:ef:c8:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5QhJGqfofDn13qBXAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3OWItZmU3YWVlMGMw
NTM2MB4XDTI2MDYyNzIxMDAxMloXDTI2MDkyNTIxMDAxMlowLzEtMCsGA1UEAxMk
NGU0NmRhMjctNTg2YS00ZWNjLTgzZjItOTZjZDkwZGQ0MTQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSP+xMbqniJJNIOISEP3WQvvRurkOUMbEi1O
JUyGSUlEnTYYwhece49zD4FtGeTb3xbROvcrUeQPx51VXPjEqJZb203Gy+KqBVu7
skEZqCELKTVHeAKa8CTXnp7JbbBTkQvqkNwxtVH//PGcqN9WqAFNWx81yIxHuNo8
xL9/0Iah/k4Y6cQUNCzwfLif2r0arBYE9optlZESZ5fKT6ny390Xhpo3nmxNM6Fk
i8PWwIeLSMReS4K73cG/tXEojC11arr0DEH1vFjNFczt5lT2rGUsoGE3suGyxJuB
FqF+32WD6osQOos/Tp7WiSc50YfRHUE1wLiFTv2G9UiNHlInWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMBJZnUh2S6aVkMn0aVeuwy3aYqGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBm
MzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdhZWUwYzA1MzYvNmNjZWVlNGQtMmQyZS0z
Y2E4LTg3MjItNjkwYzk5NWRhZmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3
OWItZmU3YWVlMGMwNTM2L2NmMGYzMWI2LWVmNjItNGRkNS04NzliLWZlN2FlZTBj
MDUzNi5jcmwwHwYDVR0jBBgwFoAUuVDNlGKpSLvXorEAEC5ORYttZHswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBmMzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdh
ZWUwYzA1MzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYWvEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACK4Ro+G1PU6jphzriPtwevzC/5t0y//jKGf+BKFsNqALBPEgYsmXPkd
az5QF+PuNveF4BPy1UT44uaePgE3Ls70ADcnNKeM5osXx4LWwM00/wNHIH5IhBnt
Vz6tTbQnY3tp0O0Sks5fdLNc3qnlWWgy8dbQvWPfgtKqhGXvvofepjj7MPjLiKpE
bxLNXVRNJRtpQ9eQ17xetr/eUwCq0hL3NcPQEpvB3tW6Nv+juBKk0TKRPnjNIQTL
YdUKHAgLfWyhG2x1NVrRFkwx+Ja0M7UgQKl6xidUACvGGRoGLVFLFICqY7ztubgW
G4nTa5EAHBSXGUbNNCwXxdaPlZXvyH4=
-----END CERTIFICATE-----
Generated at Tue Jul 14 11:53:28 2026 by rpki-client