Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cbd7d11-5d6b-43e8-95af-8f22df70ae10/7faa0d30-0e2f-3a0b-80c9-29459d80136d.roa
File:                     7faa0d30-0e2f-3a0b-80c9-29459d80136d.roa (raw, json)
Hash identifier:          YzdMjWNqJFQbKOCCm4gG/pISWkipRlrUZ2Mvgcmp+8A=
Subject key identifier:   EE:35:B5:D2:A7:11:9D:52:CE:54:F9:6C:FD:EF:F6:97:28:57:A6:37
Certificate issuer:       /CN=0cbd7d11-5d6b-43e8-95af-8f22df70ae10
Certificate serial:       010D0C9F4328584EA79476E7904020DC98D001C0
Authority key identifier: 5F:E8:42:A0:DC:43:05:81:66:46:2E:57:CD:B6:54:7B:19:F5:65:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cbd7d11-5d6b-43e8-95af-8f22df70ae10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cbd7d11-5d6b-43e8-95af-8f22df70ae10/7faa0d30-0e2f-3a0b-80c9-29459d80136d.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     14618
IP address blocks:        168.100.6.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cbd7d11-5d6b-43e8-95af-8f22df70ae10/0cbd7d11-5d6b-43e8-95af-8f22df70ae10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cbd7d11-5d6b-43e8-95af-8f22df70ae10/0cbd7d11-5d6b-43e8-95af-8f22df70ae10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cbd7d11-5d6b-43e8-95af-8f22df70ae10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:76:e7:90:40:20:dc:98:d0:01:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cbd7d11-5d6b-43e8-95af-8f22df70ae10
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=6ef8f598-5513-476b-a256-646dfdf367fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0d:2e:58:83:39:29:a2:ae:6c:35:6b:1e:89:
                    ae:d7:41:a3:1e:b1:f8:f1:08:76:c4:da:ce:08:bb:
                    85:1b:e6:a5:96:21:c3:56:d8:81:3a:6f:d9:53:89:
                    61:df:21:57:19:2b:0e:94:8d:c3:56:27:c6:f0:22:
                    e7:11:83:07:42:b4:f9:06:99:fd:31:e4:23:99:ef:
                    c4:db:50:d0:34:33:68:9c:37:2b:a0:b3:8d:75:5b:
                    45:28:4e:9e:c5:0c:90:ea:7b:dc:6e:a8:41:b1:1d:
                    60:68:38:98:7b:95:da:24:c6:d5:93:a6:d5:eb:d5:
                    fd:86:98:d7:93:71:80:3f:c5:b4:13:dd:09:ff:12:
                    cd:cf:08:01:58:51:86:09:fa:72:64:36:15:a9:85:
                    9a:0e:87:0a:72:ff:db:5c:9c:8a:fd:dd:70:ba:bf:
                    31:28:5c:1c:68:51:15:e1:fc:3d:16:18:32:f3:58:
                    6d:25:cc:f6:5d:79:63:14:97:c8:3a:96:27:a0:2b:
                    dc:0e:17:5f:68:20:0f:43:d0:74:19:15:85:70:b4:
                    01:61:6d:b1:c3:85:0d:67:ea:f0:dc:28:9a:03:fa:
                    d2:3f:ce:a2:3d:92:99:ce:b9:4d:8b:82:b8:80:6c:
                    66:0e:f1:bf:9c:f6:9f:51:f1:7d:04:74:73:8a:5b:
                    50:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:35:B5:D2:A7:11:9D:52:CE:54:F9:6C:FD:EF:F6:97:28:57:A6:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cbd7d11-5d6b-43e8-95af-8f22df70ae10/7faa0d30-0e2f-3a0b-80c9-29459d80136d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cbd7d11-5d6b-43e8-95af-8f22df70ae10/0cbd7d11-5d6b-43e8-95af-8f22df70ae10.crl

            X509v3 Authority Key Identifier:
                keyid:5F:E8:42:A0:DC:43:05:81:66:46:2E:57:CD:B6:54:7B:19:F5:65:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cbd7d11-5d6b-43e8-95af-8f22df70ae10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.100.6.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:5c:18:ce:57:a1:cf:4b:3c:35:b0:77:5a:62:21:9b:7a:f8:
         ba:c6:6f:c0:13:b2:39:74:74:8a:a3:40:46:3f:75:75:99:25:
         46:c0:0b:82:d9:fd:cd:d2:f1:1d:27:e7:77:e7:b8:d6:3e:bd:
         5f:5e:a3:27:4e:78:a6:88:59:fd:a6:60:6e:04:b0:48:b6:e5:
         6c:ee:b2:af:6d:ba:d7:bb:fd:b9:7c:60:7d:3c:a2:55:4a:ed:
         21:07:01:d8:1a:c4:2d:fe:d1:30:ff:cd:59:17:3b:d6:34:7b:
         66:f9:dc:86:40:c0:f5:f8:82:c7:78:2a:dd:58:6f:22:01:fc:
         dd:52:d0:3e:3e:8a:b0:4a:22:b8:a6:78:b1:fe:f7:fc:ea:e6:
         7d:6b:85:c9:50:49:1c:ff:cc:80:59:c4:11:9e:7a:c3:39:c9:
         b6:4d:e9:d9:55:cc:69:d5:2a:ea:fe:8a:3a:6e:7d:9a:b8:29:
         ff:f9:f9:fb:ac:14:53:1f:7a:70:33:79:13:e0:e2:66:11:71:
         8f:c2:1e:01:b9:07:45:59:85:bb:37:d3:f6:ef:72:6e:17:f2:
         df:27:c4:86:29:35:b2:21:cf:10:45:d7:2c:33:59:24:2a:e5:
         fe:1f:cf:af:74:97:55:cd:d5:41:aa:ed:0c:e1:8a:e2:b0:90:
         ad:0b:a8:c7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlHbnkEAg3JjQAcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGNiZDdkMTEtNWQ2Yi00M2U4LTk1YWYtOGYyMmRmNzBh
ZTEwMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NmVmOGY1OTgtNTUxMy00NzZiLWEyNTYtNjQ2ZGZkZjM2N2ZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQ0uWIM5KaKubDVrHomu10GjHrH48Qh2xNrO
CLuFG+alliHDVtiBOm/ZU4lh3yFXGSsOlI3DVifG8CLnEYMHQrT5Bpn9MeQjme/E
21DQNDNonDcroLONdVtFKE6exQyQ6nvcbqhBsR1gaDiYe5XaJMbVk6bV69X9hpjX
k3GAP8W0E90J/xLNzwgBWFGGCfpyZDYVqYWaDocKcv/bXJyK/d1wur8xKFwcaFEV
4fw9Fhgy81htJcz2XXljFJfIOpYnoCvcDhdfaCAPQ9B0GRWFcLQBYW2xw4UNZ+rw
3CiaA/rSP86iPZKZzrlNi4K4gGxmDvG/nPafUfF9BHRziltQNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO41tdKnEZ1SzlT5bP3v9pcoV6Y3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wY2Jk
N2QxMS01ZDZiLTQzZTgtOTVhZi04ZjIyZGY3MGFlMTAvN2ZhYTBkMzAtMGUyZi0z
YTBiLTgwYzktMjk0NTlkODAxMzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGNiZDdkMTEtNWQ2Yi00M2U4LTk1
YWYtOGYyMmRmNzBhZTEwLzBjYmQ3ZDExLTVkNmItNDNlOC05NWFmLThmMjJkZjcw
YWUxMC5jcmwwHwYDVR0jBBgwFoAUX+hCoNxDBYFmRi5XzbZUexn1ZU8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC8wY2JkN2QxMS01ZDZiLTQzZTgtOTVhZi04ZjIy
ZGY3MGFlMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqGQGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADFcGM5Xoc9LPDWwd1piIZt6+LrGb8ATsjl0dIqjQEY/dXWZJUbAC4LZ
/c3S8R0n53fnuNY+vV9eoydOeKaIWf2mYG4EsEi25Wzusq9tute7/bl8YH08olVK
7SEHAdgaxC3+0TD/zVkXO9Y0e2b53IZAwPX4gsd4Kt1YbyIB/N1S0D4+irBKIrim
eLH+9/zq5n1rhclQSRz/zIBZxBGeesM5ybZN6dlVzGnVKur+ijpufZq4Kf/5+fus
FFMfenAzeRPg4mYRcY/CHgG5B0VZhbs30/bvcm4X8t8nxIYpNbIhzxBF1ywzWSQq
5f4fz690l1XN1UGq7QzhiuKwkK0LqMc=
-----END CERTIFICATE-----
Generated at Thu Aug 20 21:56:51 2026 by rpki-client