Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/14c6bd91-791c-37e8-bb9c-d847c0d361c2.roa
File:                     14c6bd91-791c-37e8-bb9c-d847c0d361c2.roa (raw, json)
Hash identifier:          VOlEy70xGbOfPU5njc9/NhfNY4KTrYgI7Db7D1OimAg=
Subject key identifier:   6D:38:43:4D:0F:48:D1:19:CB:AA:32:32:CA:89:79:3A:2D:EC:15:04
Certificate issuer:       /CN=27c7a344-4bc7-468b-ad30-3b9c006cd0c8
Certificate serial:       010D0C9F4328584EA5AA6A0AF26A6AB82D6CCD00
Authority key identifier: D9:4A:87:E9:9F:64:F3:92:1C:80:49:03:D0:E0:01:6E:63:18:33:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/14c6bd91-791c-37e8-bb9c-d847c0d361c2.roa
Signing time:             Tue 28 Jul 2026 09:00:11 +0000
ROA not before:           Tue 28 Jul 2026 09:00:11 +0000
ROA not after:            Mon 26 Oct 2026 09:00:11 +0000
asID:                     63267
IP address blocks:        104.171.208.0/20 maxlen: 20
                          2602:fd43::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a5:aa:6a:0a:f2:6a:6a:b8:2d:6c:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27c7a344-4bc7-468b-ad30-3b9c006cd0c8
        Validity
            Not Before: Jul 28 09:00:11 2026 GMT
            Not After : Oct 26 09:00:11 2026 GMT
        Subject: CN=92cc12c0-eed7-4eaf-924e-07764eb0f486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:89:a0:54:45:c5:ec:b5:cf:fc:07:43:32:d9:
                    c1:41:0e:ec:67:45:2a:69:33:df:9e:ef:81:8a:f3:
                    6b:2f:72:e6:8b:ee:31:49:25:36:7b:4b:28:3e:5f:
                    49:84:8d:72:ab:47:62:45:51:c2:e7:f7:2c:7c:29:
                    3f:fd:d5:2b:c3:2c:c6:cc:bc:0c:3f:7e:4a:0a:f2:
                    4d:38:3c:0d:6d:7b:02:8d:99:1d:4a:18:a1:54:06:
                    3a:7e:bd:56:20:c5:56:a9:b8:ea:c4:2f:e5:18:0b:
                    32:e0:69:c7:f1:03:49:5e:a2:17:9b:ea:13:31:37:
                    01:fd:2e:df:70:85:66:4c:f1:de:cc:ef:82:6d:8f:
                    3c:43:d8:59:ef:19:ac:45:99:4f:a3:58:71:70:df:
                    90:f9:13:3a:84:e9:4d:8b:94:0c:89:29:68:7c:72:
                    c6:09:44:59:94:81:ff:a7:f4:bd:3a:d2:44:b3:6d:
                    c3:2e:0a:5e:58:bb:22:c4:e5:90:dd:d9:ad:01:40:
                    cb:0d:4e:bd:69:1a:ee:7d:79:4e:6c:49:7a:f4:91:
                    f0:ae:a0:6e:40:28:32:84:02:87:05:a0:d8:c7:33:
                    82:e7:f0:e8:3c:ea:7f:60:fc:f7:ef:4b:8c:7e:6b:
                    c6:f8:ed:e4:1a:b3:59:10:b7:45:a7:1e:e1:7f:97:
                    00:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:38:43:4D:0F:48:D1:19:CB:AA:32:32:CA:89:79:3A:2D:EC:15:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/14c6bd91-791c-37e8-bb9c-d847c0d361c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.crl

            X509v3 Authority Key Identifier:
                keyid:D9:4A:87:E9:9F:64:F3:92:1C:80:49:03:D0:E0:01:6E:63:18:33:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.171.208.0/20
                IPv6:
                  2602:fd43::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:33:a6:15:82:39:45:79:4f:97:d1:2d:ef:1a:b1:66:67:c9:
         00:eb:19:47:d5:02:63:cd:17:18:a7:03:10:66:a6:a7:84:12:
         51:db:cb:e9:c6:d6:25:cc:2c:fc:61:d4:79:c2:f1:70:29:83:
         e9:71:35:41:69:10:6a:bb:2b:89:21:a4:79:90:f1:04:53:96:
         94:a5:d8:3e:ea:e8:02:60:c7:b4:18:7b:70:31:94:f7:70:b4:
         9f:4b:86:56:71:5e:b1:20:63:f7:3f:1e:36:7d:a6:ac:7b:a3:
         d5:13:9b:87:5f:d6:eb:9a:60:9b:69:38:b7:e9:99:dd:17:0c:
         c1:e5:87:83:84:26:46:20:b0:8e:20:19:29:68:9e:5e:07:12:
         22:87:96:9e:98:8a:4d:dd:e9:12:a4:8d:24:12:c3:2d:60:eb:
         1d:04:0b:9f:22:1f:9e:cf:89:96:65:2f:f4:08:9a:6a:e1:8e:
         62:c9:98:f4:24:83:ef:9b:3c:e8:76:71:44:f4:6b:85:e1:96:
         f5:90:21:9b:08:f0:f0:16:c7:38:59:25:f8:ac:46:cd:3f:66:
         5a:d8:cc:80:4a:9b:e2:66:af:de:e0:eb:b9:ae:61:e3:0d:1e:
         c2:58:5f:0d:20:bc:55:f6:39:6f:60:39:1c:4c:d4:d1:48:3b:
         61:f1:fe:6e
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE6lqmoK8mpquC1szQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjdjN2EzNDQtNGJjNy00NjhiLWFkMzAtM2I5YzAwNmNk
MGM4MB4XDTI2MDcyODA5MDAxMVoXDTI2MTAyNjA5MDAxMVowLzEtMCsGA1UEAxMk
OTJjYzEyYzAtZWVkNy00ZWFmLTkyNGUtMDc3NjRlYjBmNDg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlomgVEXF7LXP/AdDMtnBQQ7sZ0UqaTPfnu+B
ivNrL3Lmi+4xSSU2e0soPl9JhI1yq0diRVHC5/csfCk//dUrwyzGzLwMP35KCvJN
ODwNbXsCjZkdShihVAY6fr1WIMVWqbjqxC/lGAsy4GnH8QNJXqIXm+oTMTcB/S7f
cIVmTPHezO+CbY88Q9hZ7xmsRZlPo1hxcN+Q+RM6hOlNi5QMiSlofHLGCURZlIH/
p/S9OtJEs23DLgpeWLsixOWQ3dmtAUDLDU69aRrufXlObEl69JHwrqBuQCgyhAKH
BaDYxzOC5/DoPOp/YPz370uMfmvG+O3kGrNZELdFpx7hf5cAmwIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFG04Q00PSNEZy6oyMsqJeTot7BUEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yN2M3
YTM0NC00YmM3LTQ2OGItYWQzMC0zYjljMDA2Y2QwYzgvMTRjNmJkOTEtNzkxYy0z
N2U4LWJiOWMtZDg0N2MwZDM2MWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjdjN2EzNDQtNGJjNy00NjhiLWFk
MzAtM2I5YzAwNmNkMGM4LzI3YzdhMzQ0LTRiYzctNDY4Yi1hZDMwLTNiOWMwMDZj
ZDBjOC5jcmwwHwYDVR0jBBgwFoAU2UqH6Z9k85IcgEkD0OABbmMYM90wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yN2M3YTM0NC00YmM3LTQ2OGItYWQzMC0zYjlj
MDA2Y2QwYzguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQEaKvQMA4E
AgACMAgDBgQmAv1DADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBcM6YVgjlFeU+X0S3vGrFmZ8kA6xlH1QJj
zRcYpwMQZqanhBJR28vpxtYlzCz8YdR5wvFwKYPpcTVBaRBquyuJIaR5kPEEU5aU
pdg+6ugCYMe0GHtwMZT3cLSfS4ZWcV6xIGP3Px42faase6PVE5uHX9brmmCbaTi3
6ZndFwzB5YeDhCZGILCOIBkpaJ5eBxIih5aemIpN3ekSpI0kEsMtYOsdBAufIh+e
z4mWZS/0CJpq4Y5iyZj0JIPvmzzodnFE9GuF4Zb1kCGbCPDwFsc4WSX4rEbNP2Za
2MyASpviZq/e4Ou5rmHjDR7CWF8NILxV9jlvYDkcTNTRSDth8f5u
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:30:04 2026 by rpki-client