Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/69494d8e-96f3-3097-9ab3-f5f01f8b4789.roa
File:                     69494d8e-96f3-3097-9ab3-f5f01f8b4789.roa (raw, json)
Hash identifier:          10w8ibS//RbbvCyvqT20YS6BCSUKbgu9rshMn5sG4Hk=
Subject key identifier:   E3:E6:41:F6:AC:F0:16:21:18:F1:18:61:83:6E:C3:A3:28:16:DC:0C
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584CBDB2009C1034002A1AD5AE00
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/69494d8e-96f3-3097-9ab3-f5f01f8b4789.roa
Signing time:             Tue 03 Feb 2026 14:00:39 +0000
ROA not before:           Tue 03 Feb 2026 14:00:39 +0000
ROA not after:            Mon 04 May 2026 13:00:39 +0000
asID:                     3356
IP address blocks:        207.83.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bd:b2:00:9c:10:34:00:2a:1a:d5:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Feb  3 14:00:39 2026 GMT
            Not After : May  4 13:00:39 2026 GMT
        Subject: CN=a38d7d01-6fee-40ad-9154-39f4903d3042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:35:4c:c5:73:1e:de:3f:10:21:0c:67:98:10:
                    09:69:dd:40:5b:70:90:1a:66:18:40:1e:f7:9c:f6:
                    eb:b1:d7:61:04:64:9e:2b:de:47:eb:c7:31:44:dd:
                    6a:ab:06:cf:5c:28:eb:a4:b4:d1:68:81:d0:0c:58:
                    57:a7:d6:64:49:aa:9b:db:c3:40:74:7b:f8:47:73:
                    80:9a:14:7e:3b:e3:6f:af:f5:d8:dc:dc:6a:1d:34:
                    9f:ed:e3:4e:9c:a6:dd:f6:68:e6:63:e4:0d:be:12:
                    cf:6f:ac:dd:c2:d7:46:c3:52:d0:06:64:e7:d2:82:
                    d7:6f:07:62:07:bd:96:3a:e5:72:f1:fa:e4:25:fa:
                    44:bf:f2:cf:ad:35:51:cc:57:25:d2:d8:8a:c6:7e:
                    6f:ca:61:b1:95:86:a9:c4:63:f8:3b:cf:d5:d2:ff:
                    38:a0:1c:4d:57:b5:5f:ca:99:45:4a:b2:32:e7:78:
                    de:89:d3:33:db:10:21:13:48:57:69:ca:8d:da:a8:
                    e4:c1:1c:db:14:35:df:48:9d:1b:1a:c5:b5:bb:93:
                    4c:cc:a6:ea:af:ae:6b:c0:12:7c:9c:4a:2b:6b:ed:
                    bc:7a:94:82:d7:b1:a7:e9:66:4f:56:55:f3:d0:07:
                    0d:e3:fa:17:c0:a6:07:04:6c:f4:1d:aa:e8:b1:b5:
                    61:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:E6:41:F6:AC:F0:16:21:18:F1:18:61:83:6E:C3:A3:28:16:DC:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/69494d8e-96f3-3097-9ab3-f5f01f8b4789.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.83.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:2c:9d:9f:3f:50:51:d8:94:2d:4c:14:60:8b:61:01:c2:49:
         b3:17:d5:19:7f:08:97:f9:a3:b3:1b:ab:6e:a9:82:42:ce:1c:
         7b:a3:d0:d6:d6:3f:23:9b:fe:06:07:43:61:ea:cf:14:fa:f4:
         5d:7b:4a:14:f2:65:00:77:ad:c4:42:ec:86:86:6d:19:59:1a:
         a9:98:ba:2d:f1:5f:6d:09:89:9a:61:a7:dd:49:58:bc:d0:69:
         46:da:33:48:49:b7:fc:87:b4:c0:3e:b3:4b:7d:f4:7a:08:96:
         0f:9c:ff:86:c3:d9:d6:60:bf:d6:7a:da:5e:13:23:ce:a3:92:
         8e:1f:aa:d5:5d:53:a5:8d:e4:8c:48:fa:be:90:9d:aa:7e:41:
         4c:13:41:25:1a:22:90:01:03:64:40:b2:02:51:4e:a2:bc:43:
         d0:74:a7:65:7a:36:ef:82:55:ab:32:ed:94:42:b1:ab:85:68:
         5d:26:5b:56:d6:b7:0f:94:0a:ec:67:44:9c:5c:70:68:b1:e2:
         f2:d1:23:54:07:6a:9c:49:93:2a:8c:b4:1b:97:f9:95:cf:ad:
         fd:c0:f8:14:dc:c5:2c:f3:c6:a8:2f:fa:0d:71:e2:d1:33:ad:
         77:a3:ac:99:9f:73:f2:51:28:32:6a:f1:9e:d0:37:d0:31:3c:
         1d:c4:0f:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy9sgCcEDQAKhrVrgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1
MTJkMB4XDTI2MDIwMzE0MDAzOVoXDTI2MDUwNDEzMDAzOVowLzEtMCsGA1UEAxMk
YTM4ZDdkMDEtNmZlZS00MGFkLTkxNTQtMzlmNDkwM2QzMDQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjVMxXMe3j8QIQxnmBAJad1AW3CQGmYYQB73
nPbrsddhBGSeK95H68cxRN1qqwbPXCjrpLTRaIHQDFhXp9ZkSaqb28NAdHv4R3OA
mhR+O+Nvr/XY3NxqHTSf7eNOnKbd9mjmY+QNvhLPb6zdwtdGw1LQBmTn0oLXbwdi
B72WOuVy8frkJfpEv/LPrTVRzFcl0tiKxn5vymGxlYapxGP4O8/V0v84oBxNV7Vf
yplFSrIy53jeidMz2xAhE0hXacqN2qjkwRzbFDXfSJ0bGsW1u5NMzKbqr65rwBJ8
nEora+28epSC17Gn6WZPVlXz0AcN4/oXwKYHBGz0HarosbVh2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOPmQfas8BYhGPEYYYNuw6MoFtwMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk
YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvNjk0OTRkOGUtOTZmMy0z
MDk3LTlhYjMtZjVmMDFmOGI0Nzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm
MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw
NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi
NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEz1MgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFcsnZ8/UFHYlC1MFGCLYQHCSbMX1Rl/CJf5o7Mbq26pgkLOHHuj0NbW
PyOb/gYHQ2HqzxT69F17ShTyZQB3rcRC7IaGbRlZGqmYui3xX20JiZphp91JWLzQ
aUbaM0hJt/yHtMA+s0t99HoIlg+c/4bD2dZgv9Z62l4TI86jko4fqtVdU6WN5IxI
+r6Qnap+QUwTQSUaIpABA2RAsgJRTqK8Q9B0p2V6Nu+CVasy7ZRCsauFaF0mW1bW
tw+UCuxnRJxccGix4vLRI1QHapxJkyqMtBuX+ZXPrf3A+BTcxSzzxqgv+g1x4tEz
rXejrJmfc/JRKDJq8Z7QN9AxPB3ED/I=
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:51:17 2026 by rpki-client