Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/950373ec-0593-386e-8602-37c09d8513c1.roa
File:                     950373ec-0593-386e-8602-37c09d8513c1.roa (raw, json)
Hash identifier:          49PjP7x+2/awbNQMOf9pWSSqf1L0RHjCEMKmKnqhDZU=
Subject key identifier:   16:5B:E5:F4:EB:9E:60:56:36:2A:96:FB:4E:57:0F:8A:AA:54:39:DD
Certificate issuer:       /CN=f4f85718-cda0-442f-9727-709a536e1e27
Certificate serial:       010D0C9F4328584ED001D9EE022B2A82551BAD00
Authority key identifier: 6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/950373ec-0593-386e-8602-37c09d8513c1.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     6639
IP address blocks:        162.211.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:d9:ee:02:2b:2a:82:55:1b:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4f85718-cda0-442f-9727-709a536e1e27
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=823e2794-e4a9-460b-978e-16a2a7ec3cd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:3f:f9:02:5b:75:97:89:d0:d3:5d:28:e8:bf:
                    21:0e:98:3d:9b:d1:cc:ac:82:45:6c:fd:ef:ab:80:
                    93:e9:88:c1:86:e9:25:7f:fd:2d:03:f5:28:ac:36:
                    75:09:9b:78:42:d8:e3:eb:9c:fd:dd:00:d0:0d:c0:
                    ee:2c:78:51:8f:2c:ee:df:11:fe:e4:66:62:52:39:
                    95:29:e4:69:5a:f4:22:dc:b5:f9:26:c7:fe:25:9e:
                    35:d9:06:c0:bc:da:82:83:00:86:75:64:0f:5f:f8:
                    db:32:85:db:60:64:7a:cd:9d:59:93:fb:72:a1:6c:
                    73:24:43:10:1a:32:35:d5:22:6d:7a:d8:40:b0:20:
                    b2:67:7d:48:54:6b:12:7c:8a:d7:2a:e7:ee:df:fd:
                    9a:b4:d4:49:99:e4:10:ac:d6:b3:dc:8b:46:0f:1c:
                    fc:45:df:81:83:ee:8e:1e:25:ed:69:2d:67:5c:fe:
                    40:ea:8d:68:90:b1:eb:72:85:dc:cf:b4:de:de:76:
                    4c:3f:f0:5d:5f:1d:1c:b2:ed:df:be:4f:f8:95:6b:
                    58:39:22:8c:02:15:e7:00:a3:39:9b:68:dc:5c:d2:
                    e8:ef:e4:e9:7d:b4:b7:21:32:17:ef:3a:cb:63:4e:
                    cb:c0:9f:b1:98:06:c7:c0:2f:41:15:93:b1:fb:53:
                    02:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:5B:E5:F4:EB:9E:60:56:36:2A:96:FB:4E:57:0F:8A:AA:54:39:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/950373ec-0593-386e-8602-37c09d8513c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.crl

            X509v3 Authority Key Identifier:
                keyid:6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.211.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:30:8a:3b:b5:75:e6:0d:66:29:4d:82:63:11:50:4d:d2:38:
         3c:14:5b:c3:31:a0:e5:ae:66:3f:3a:06:43:ad:c4:82:73:73:
         51:fa:f4:d1:56:27:83:d9:38:9b:85:04:37:fe:25:f0:62:6c:
         0f:06:13:ac:23:1c:4a:ce:33:c7:6f:bb:6e:5d:dc:cd:94:9d:
         2a:5a:18:b4:41:bc:82:8d:41:9b:18:ab:f3:c2:b6:54:08:9c:
         b7:a2:e1:17:fe:c3:a9:2c:08:c6:f2:1a:e1:37:37:38:73:d9:
         55:26:c5:58:62:6c:b1:c9:b2:8a:2a:88:a7:17:fb:87:90:8f:
         2f:28:2e:cf:3f:69:1d:f8:22:3e:53:bb:cd:ad:d4:c1:5b:c2:
         c8:b1:90:42:f0:c4:a9:de:c6:2f:e3:f3:ba:2e:83:7d:e2:3d:
         de:22:b5:51:09:f5:5e:05:e3:f0:8b:3a:d5:07:3d:44:6c:5a:
         f8:b6:64:61:13:e3:f3:1f:d1:16:42:6e:a2:df:ec:6d:71:1a:
         42:5c:9a:ae:bf:20:4c:60:f2:0a:ef:38:dc:5a:a0:87:04:6a:
         e9:8b:0a:fe:59:f2:d9:2b:d3:c2:0d:b6:f4:13:b1:89:c8:ef:
         a0:1b:5a:c0:54:f0:ef:37:8b:ef:b0:80:da:15:11:08:35:99:
         55:28:c2:32
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7QAdnuAisqglUbrQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjRmODU3MTgtY2RhMC00NDJmLTk3MjctNzA5YTUzNmUx
ZTI3MB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk
ODIzZTI3OTQtZTRhOS00NjBiLTk3OGUtMTZhMmE3ZWMzY2QxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8D/5Alt1l4nQ010o6L8hDpg9m9HMrIJFbP3v
q4CT6YjBhuklf/0tA/UorDZ1CZt4Qtjj65z93QDQDcDuLHhRjyzu3xH+5GZiUjmV
KeRpWvQi3LX5Jsf+JZ412QbAvNqCgwCGdWQPX/jbMoXbYGR6zZ1Zk/tyoWxzJEMQ
GjI11SJtethAsCCyZ31IVGsSfIrXKufu3/2atNRJmeQQrNaz3ItGDxz8Rd+Bg+6O
HiXtaS1nXP5A6o1okLHrcoXcz7Te3nZMP/BdXx0csu3fvk/4lWtYOSKMAhXnAKM5
m2jcXNLo7+TpfbS3ITIX7zrLY07LwJ+xmAbHwC9BFZOx+1MCDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBZb5fTrnmBWNiqW+05XD4qqVDndMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNGY4
NTcxOC1jZGEwLTQ0MmYtOTcyNy03MDlhNTM2ZTFlMjcvOTUwMzczZWMtMDU5My0z
ODZlLTg2MDItMzdjMDlkODUxM2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjRmODU3MTgtY2RhMC00NDJmLTk3
MjctNzA5YTUzNmUxZTI3L2Y0Zjg1NzE4LWNkYTAtNDQyZi05NzI3LTcwOWE1MzZl
MWUyNy5jcmwwHwYDVR0jBBgwFoAUa2/guyMG6CGl/y1Pb59cNa87Qn8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9mNGY4NTcxOC1jZGEwLTQ0MmYtOTcyNy03MDlh
NTM2ZTFlMjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCotOIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD0wiju1deYNZilNgmMRUE3SODwUW8MxoOWuZj86BkOtxIJzc1H69NFW
J4PZOJuFBDf+JfBibA8GE6wjHErOM8dvu25d3M2UnSpaGLRBvIKNQZsYq/PCtlQI
nLei4Rf+w6ksCMbyGuE3Nzhz2VUmxVhibLHJsooqiKcX+4eQjy8oLs8/aR34Ij5T
u82t1MFbwsixkELwxKnexi/j87oug33iPd4itVEJ9V4F4/CLOtUHPURsWvi2ZGET
4/Mf0RZCbqLf7G1xGkJcmq6/IExg8grvONxaoIcEaumLCv5Z8tkr08INtvQTsYnI
76AbWsBU8O83i++wgNoVEQg1mVUowjI=
-----END CERTIFICATE-----
Generated at Thu Aug 13 12:54:39 2026 by rpki-client