Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a6b962cd-d36a-4673-8d04-bc6f84e0b6ef/a111952e-cfed-31b6-a7aa-4a2c28cf4381.roa
File:                     a111952e-cfed-31b6-a7aa-4a2c28cf4381.roa (raw, json)
Hash identifier:          HshlGiESwyvSbf9Bs2E02MU6UfQTBqb+UXgNbKCm1d4=
Subject key identifier:   4E:9D:04:7A:73:5F:2C:CC:40:98:EF:F3:9A:21:17:C1:2F:38:AC:BC
Certificate issuer:       /CN=a6b962cd-d36a-4673-8d04-bc6f84e0b6ef
Certificate serial:       010D0C9F4328584E0B022B44EDF4D9EF56E34B00
Authority key identifier: DE:D8:8F:EB:35:B0:BE:79:41:0A:41:62:52:2C:1D:C1:44:8A:D3:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a6b962cd-d36a-4673-8d04-bc6f84e0b6ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a6b962cd-d36a-4673-8d04-bc6f84e0b6ef/a111952e-cfed-31b6-a7aa-4a2c28cf4381.roa
Signing time:             Tue 02 Jun 2026 23:26:46 +0000
ROA not before:           Tue 02 Jun 2026 23:26:46 +0000
ROA not after:            Mon 31 Aug 2026 23:26:46 +0000
asID:                     27411
IP address blocks:        67.208.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a6b962cd-d36a-4673-8d04-bc6f84e0b6ef/a6b962cd-d36a-4673-8d04-bc6f84e0b6ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a6b962cd-d36a-4673-8d04-bc6f84e0b6ef/a6b962cd-d36a-4673-8d04-bc6f84e0b6ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a6b962cd-d36a-4673-8d04-bc6f84e0b6ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0b:02:2b:44:ed:f4:d9:ef:56:e3:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b962cd-d36a-4673-8d04-bc6f84e0b6ef
        Validity
            Not Before: Jun  2 23:26:46 2026 GMT
            Not After : Aug 31 23:26:46 2026 GMT
        Subject: CN=6b1bbfa4-6968-491b-8347-3d858aecc18f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b2:cf:2c:91:3a:f0:f3:40:fd:0b:d5:f2:33:
                    f2:06:f5:6b:de:f0:da:eb:67:72:e2:f8:4e:d0:25:
                    f2:24:dc:95:ab:64:3d:9b:14:20:76:91:82:1b:47:
                    c0:65:5c:45:47:4a:9f:da:02:6b:4c:72:22:f8:09:
                    00:38:a7:09:73:13:9c:58:34:1f:86:93:17:5e:7f:
                    a7:cd:a6:8e:60:e3:b5:42:3a:33:6b:1c:73:de:60:
                    da:b6:eb:3e:ea:9d:38:d3:6c:1c:fe:fa:e9:48:8d:
                    3b:83:9c:30:83:56:79:1d:74:8c:44:3e:86:9d:23:
                    b8:83:0d:6b:aa:37:c8:bf:28:8a:09:71:b3:5e:bd:
                    10:31:6e:1f:0f:cf:92:ec:81:65:78:97:a2:c7:30:
                    67:5e:19:ab:48:4a:8e:8c:da:24:1e:26:d0:74:69:
                    ca:37:de:43:35:7c:47:59:b6:e5:c1:2d:89:0a:73:
                    df:2c:1e:6e:c1:2d:d8:e8:66:f7:8d:f1:d3:1b:9e:
                    19:74:f4:bd:df:81:6a:ae:b4:d8:bf:d3:8d:76:50:
                    66:d2:46:c0:66:a6:25:09:a7:a3:a7:91:df:8f:e4:
                    c6:4c:1c:4a:58:e0:db:70:89:5e:66:fc:4f:35:ac:
                    e5:84:90:c1:c1:2c:f6:ab:28:5b:71:4f:15:3d:a5:
                    d9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:9D:04:7A:73:5F:2C:CC:40:98:EF:F3:9A:21:17:C1:2F:38:AC:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a6b962cd-d36a-4673-8d04-bc6f84e0b6ef/a111952e-cfed-31b6-a7aa-4a2c28cf4381.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a6b962cd-d36a-4673-8d04-bc6f84e0b6ef/a6b962cd-d36a-4673-8d04-bc6f84e0b6ef.crl

            X509v3 Authority Key Identifier:
                keyid:DE:D8:8F:EB:35:B0:BE:79:41:0A:41:62:52:2C:1D:C1:44:8A:D3:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a6b962cd-d36a-4673-8d04-bc6f84e0b6ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.208.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:ae:14:98:ea:ea:ae:1f:ad:3e:6e:e9:be:0c:0b:92:cc:45:
         a2:94:5f:1a:81:2f:14:7a:5a:ad:be:5b:eb:3d:e1:ad:64:cd:
         c8:b1:15:da:f4:be:69:4a:90:52:ab:ec:ef:bd:19:09:f2:65:
         1b:17:41:4d:11:2d:97:19:33:26:4e:5d:e5:3e:38:9c:56:85:
         59:89:e8:94:e8:9b:69:ad:ba:89:20:fb:3a:b1:e3:ac:4c:a2:
         0a:a1:fb:a8:11:88:4d:02:0b:c3:b4:cd:2e:56:61:9f:d1:06:
         e8:14:65:63:e7:4c:46:27:46:bd:69:4a:ff:b3:af:17:6f:35:
         ca:bd:46:a5:a6:a5:ae:8e:80:fa:d7:16:0f:9c:c5:75:73:c5:
         40:91:ad:c5:fd:28:21:07:11:3a:82:e6:61:00:ec:1e:95:56:
         4f:bd:d1:62:14:73:61:df:0c:c9:bd:3e:35:65:da:02:39:8d:
         25:82:a0:a3:d2:94:66:fc:4e:4c:19:35:3b:03:5b:de:5b:46:
         0c:b1:6e:22:16:03:83:2c:08:96:5f:64:df:93:57:cf:0a:ad:
         28:e1:9f:59:3a:16:ab:bd:be:81:c8:e9:75:db:5b:e6:59:66:
         55:08:dc:7c:8f:8b:cf:b8:56:ff:53:d2:ad:58:2e:f0:96:c0:
         16:e6:c2:f5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4LAitE7fTZ71bjSwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTZiOTYyY2QtZDM2YS00NjczLThkMDQtYmM2Zjg0ZTBi
NmVmMB4XDTI2MDYwMjIzMjY0NloXDTI2MDgzMTIzMjY0NlowLzEtMCsGA1UEAxMk
NmIxYmJmYTQtNjk2OC00OTFiLTgzNDctM2Q4NThhZWNjMThmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurLPLJE68PNA/QvV8jPyBvVr3vDa62dy4vhO
0CXyJNyVq2Q9mxQgdpGCG0fAZVxFR0qf2gJrTHIi+AkAOKcJcxOcWDQfhpMXXn+n
zaaOYOO1Qjozaxxz3mDatus+6p0402wc/vrpSI07g5wwg1Z5HXSMRD6GnSO4gw1r
qjfIvyiKCXGzXr0QMW4fD8+S7IFleJeixzBnXhmrSEqOjNokHibQdGnKN95DNXxH
WbblwS2JCnPfLB5uwS3Y6Gb3jfHTG54ZdPS934FqrrTYv9ONdlBm0kbAZqYlCaej
p5Hfj+TGTBxKWODbcIleZvxPNazlhJDBwSz2qyhbcU8VPaXZuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE6dBHpzXyzMQJjv85ohF8EvOKy8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hNmI5
NjJjZC1kMzZhLTQ2NzMtOGQwNC1iYzZmODRlMGI2ZWYvYTExMTk1MmUtY2ZlZC0z
MWI2LWE3YWEtNGEyYzI4Y2Y0MzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYTZiOTYyY2QtZDM2YS00NjczLThk
MDQtYmM2Zjg0ZTBiNmVmL2E2Yjk2MmNkLWQzNmEtNDY3My04ZDA0LWJjNmY4NGUw
YjZlZi5jcmwwHwYDVR0jBBgwFoAU3tiP6zWwvnlBCkFiUiwdwUSK054wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9hNmI5NjJjZC1kMzZhLTQ2NzMtOGQwNC1iYzZm
ODRlMGI2ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9AuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH2uFJjq6q4frT5u6b4MC5LMRaKUXxqBLxR6Wq2+W+s94a1kzcixFdr0
vmlKkFKr7O+9GQnyZRsXQU0RLZcZMyZOXeU+OJxWhVmJ6JTom2mtuokg+zqx46xM
ogqh+6gRiE0CC8O0zS5WYZ/RBugUZWPnTEYnRr1pSv+zrxdvNcq9RqWmpa6OgPrX
Fg+cxXVzxUCRrcX9KCEHETqC5mEA7B6VVk+90WIUc2HfDMm9PjVl2gI5jSWCoKPS
lGb8TkwZNTsDW95bRgyxbiIWA4MsCJZfZN+TV88KrSjhn1k6Fqu9voHI6XXbW+ZZ
ZlUI3HyPi8+4Vv9T0q1YLvCWwBbmwvU=
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:55:38 2026 by rpki-client