Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd/dd3cf5fa-299b-3645-b559-d6d9430c6843.roa
File:                     dd3cf5fa-299b-3645-b559-d6d9430c6843.roa (raw, json)
Hash identifier:          J8ZEu2a/JeRgb1cg+SYyjJNI/+EOWpeEmkfn6W3/w/U=
Subject key identifier:   35:6F:79:6B:36:01:65:A1:D2:D5:90:36:30:D5:43:ED:FA:30:52:93
Certificate issuer:       /CN=11111c75-ef67-41bd-b074-4c401bf74ccd
Certificate serial:       010D0C9F4328584EF717B8346CAD6B99726C0F80
Authority key identifier: 29:B8:F7:05:F8:67:60:30:DB:26:B9:66:F3:69:B3:C3:BF:59:90:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd/dd3cf5fa-299b-3645-b559-d6d9430c6843.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     8047
IP address blocks:        206.162.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd/11111c75-ef67-41bd-b074-4c401bf74ccd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd/11111c75-ef67-41bd-b074-4c401bf74ccd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:b8:34:6c:ad:6b:99:72:6c:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11111c75-ef67-41bd-b074-4c401bf74ccd
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=e463d225-e83f-4b59-9220-5e9462ebaf09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:3a:e5:30:7f:8f:01:a4:3d:e4:66:27:e9:56:
                    8b:12:7d:b1:79:e0:2c:17:69:77:c4:d3:93:eb:9d:
                    45:46:fc:80:e4:40:a7:1c:a0:3f:c4:7c:b5:25:f3:
                    45:6c:5f:79:a6:7a:42:87:7f:3b:5f:86:df:db:31:
                    e0:b6:89:8b:c4:6f:a5:fa:3f:7f:2c:6e:02:2f:28:
                    2a:d9:f0:59:ea:dd:e2:48:55:f5:a6:2f:d5:6f:7a:
                    94:43:94:b8:64:43:ee:c3:69:95:c5:7d:21:be:d3:
                    23:c5:c0:d8:e8:a5:a3:b0:77:10:5a:f6:ba:84:72:
                    92:5f:88:d4:de:a9:b2:89:a0:9e:7e:00:b5:92:a6:
                    d5:5f:80:f3:5a:c7:3b:7d:74:7c:97:2f:2c:5f:9f:
                    b6:4b:b1:e7:e6:be:fa:6e:cd:88:9c:ef:27:2f:8e:
                    93:30:b1:31:87:2d:ae:74:bb:6a:c0:43:8f:d1:82:
                    30:21:8e:2e:fb:44:eb:fc:9f:87:d3:4c:9c:0d:e9:
                    76:f2:41:4e:84:4c:55:e5:96:4f:b7:37:93:51:61:
                    69:5a:05:cd:37:6e:a7:cc:e9:af:81:d4:1d:8a:6b:
                    2b:9f:02:6e:c4:0e:eb:e5:9c:47:a3:25:60:e0:9e:
                    14:d3:04:82:16:79:bc:e6:f8:42:84:fa:3d:ee:dc:
                    96:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:6F:79:6B:36:01:65:A1:D2:D5:90:36:30:D5:43:ED:FA:30:52:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd/dd3cf5fa-299b-3645-b559-d6d9430c6843.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd/11111c75-ef67-41bd-b074-4c401bf74ccd.crl

            X509v3 Authority Key Identifier:
                keyid:29:B8:F7:05:F8:67:60:30:DB:26:B9:66:F3:69:B3:C3:BF:59:90:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.162.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:4c:d3:5b:50:e1:bb:51:dc:8d:f0:b0:5f:59:d9:0a:f7:a8:
         00:95:4a:35:03:71:f9:5a:d6:74:70:ac:bb:b2:28:13:aa:77:
         d7:bd:58:7e:86:f1:e0:3c:56:41:51:da:30:c9:f6:3b:55:4e:
         7f:29:58:9c:f8:3f:c8:1f:cd:f9:01:0b:9f:65:58:6c:22:35:
         58:59:a9:64:5b:4e:d6:be:41:34:51:da:b1:71:11:e3:3a:f9:
         09:83:22:5a:21:e2:21:6a:c8:09:79:3b:b7:d6:68:c8:71:66:
         06:fe:00:5d:e0:01:95:45:77:78:69:8c:b1:f9:f8:96:56:99:
         93:77:a1:b4:a2:6e:1a:64:5c:a8:76:79:05:4b:d1:1b:47:35:
         38:88:fc:f6:ec:e2:00:e7:92:7e:c5:4f:17:41:d6:1a:5e:aa:
         cd:0e:98:d4:4b:e7:74:f1:66:99:73:03:ae:bd:a9:34:1e:3f:
         46:3c:c8:4e:d5:bb:26:b2:c9:77:22:44:21:59:72:db:d1:d4:
         8f:37:2e:65:4d:f6:e9:6b:80:ae:86:9a:21:fd:78:5d:f5:99:
         52:2d:61:79:32:7d:11:c2:b4:8f:94:0d:38:58:b4:7c:40:7a:
         da:54:b1:32:93:71:96:96:84:ff:60:73:dc:c5:50:6c:d9:8f:
         11:b0:94:98
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F7g0bK1rmXJsD4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTExMTFjNzUtZWY2Ny00MWJkLWIwNzQtNGM0MDFiZjc0
Y2NkMB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk
ZTQ2M2QyMjUtZTgzZi00YjU5LTkyMjAtNWU5NDYyZWJhZjA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTrlMH+PAaQ95GYn6VaLEn2xeeAsF2l3xNOT
651FRvyA5ECnHKA/xHy1JfNFbF95pnpCh387X4bf2zHgtomLxG+l+j9/LG4CLygq
2fBZ6t3iSFX1pi/Vb3qUQ5S4ZEPuw2mVxX0hvtMjxcDY6KWjsHcQWva6hHKSX4jU
3qmyiaCefgC1kqbVX4DzWsc7fXR8ly8sX5+2S7Hn5r76bs2InO8nL46TMLExhy2u
dLtqwEOP0YIwIY4u+0Tr/J+H00ycDel28kFOhExV5ZZPtzeTUWFpWgXNN26nzOmv
gdQdimsrnwJuxA7r5ZxHoyVg4J4U0wSCFnm85vhChPo97tyWowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDVveWs2AWWh0tWQNjDVQ+36MFKTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMTEx
MWM3NS1lZjY3LTQxYmQtYjA3NC00YzQwMWJmNzRjY2QvZGQzY2Y1ZmEtMjk5Yi0z
NjQ1LWI1NTktZDZkOTQzMGM2ODQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMTExMTFjNzUtZWY2Ny00MWJkLWIw
NzQtNGM0MDFiZjc0Y2NkLzExMTExYzc1LWVmNjctNDFiZC1iMDc0LTRjNDAxYmY3
NGNjZC5jcmwwHwYDVR0jBBgwFoAUKbj3BfhnYDDbJrlm82mzw79ZkP4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMTExMWM3NS1lZjY3LTQxYmQtYjA3NC00YzQw
MWJmNzRjY2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHzqIAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAERM01tQ4btR3I3wsF9Z2Qr3qACVSjUDcfla1nRwrLuyKBOqd9e9WH6G
8eA8VkFR2jDJ9jtVTn8pWJz4P8gfzfkBC59lWGwiNVhZqWRbTta+QTRR2rFxEeM6
+QmDIloh4iFqyAl5O7fWaMhxZgb+AF3gAZVFd3hpjLH5+JZWmZN3obSibhpkXKh2
eQVL0RtHNTiI/Pbs4gDnkn7FTxdB1hpeqs0OmNRL53TxZplzA669qTQeP0Y8yE7V
uyayyXciRCFZctvR1I83LmVN9ulrgK6GmiH9eF31mVItYXkyfRHCtI+UDThYtHxA
etpUsTKTcZaWhP9gc9zFUGzZjxGwlJg=
-----END CERTIFICATE-----
Generated at Tue Sep 22 07:24:34 2026 by rpki-client