Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/8b466fc3-8038-3f38-b91f-93d37a58dec6.roa
File:                     8b466fc3-8038-3f38-b91f-93d37a58dec6.roa (raw, json)
Hash identifier:          P/0zFVu1VdY2Np/j0nw7tNQHJRdTOTT+zfAZjb5aV5s=
Subject key identifier:   26:9E:5B:D9:7D:D7:D8:6C:81:54:5B:46:C7:E9:A5:22:18:89:3B:F5
Certificate issuer:       /CN=61532adb-ed7d-43ba-a66f-2a333fb9cf62
Certificate serial:       010D0C9F4328584BBE402D8CF86F527CDA32D200
Authority key identifier: C9:65:22:CD:0A:BC:3A:D6:00:B2:BD:17:FD:42:C2:66:C6:45:5F:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/8b466fc3-8038-3f38-b91f-93d37a58dec6.roa
Signing time:             Tue 04 Nov 2025 02:00:31 +0000
ROA not before:           Tue 04 Nov 2025 02:00:31 +0000
ROA not after:            Mon 02 Feb 2026 02:00:31 +0000
asID:                     27773
IP address blocks:        205.211.226.0/23 maxlen: 24
                          205.211.228.0/24 maxlen: 24
                          205.211.235.0/24 maxlen: 24
                          205.211.243.0/24 maxlen: 24
                          209.124.98.0/24 maxlen: 24
                          209.124.99.0/24 maxlen: 24
                          209.124.102.0/24 maxlen: 24
                          209.124.108.0/23 maxlen: 24
                          209.124.110.0/24 maxlen: 24
                          209.124.112.0/21 maxlen: 24
                          209.124.126.0/24 maxlen: 24
                          209.124.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/61532adb-ed7d-43ba-a66f-2a333fb9cf62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/61532adb-ed7d-43ba-a66f-2a333fb9cf62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:be:40:2d:8c:f8:6f:52:7c:da:32:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61532adb-ed7d-43ba-a66f-2a333fb9cf62
        Validity
            Not Before: Nov  4 02:00:31 2025 GMT
            Not After : Feb  2 02:00:31 2026 GMT
        Subject: CN=4996232f-9ee2-42a2-927f-f2205e79f63c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ba:fe:32:2f:12:19:26:20:1f:bd:c6:0e:52:
                    ba:7a:1b:a5:4e:c1:19:0f:32:e0:a0:0f:45:63:06:
                    ea:5d:5f:24:29:b4:e9:86:6a:b3:d5:93:f5:81:22:
                    39:e8:6f:b5:3e:00:67:ba:c1:93:b1:fc:f3:20:65:
                    b8:3d:87:33:f0:34:04:e7:3f:79:86:96:57:7d:1b:
                    7a:5f:97:1b:ee:f1:60:77:f1:68:7f:dc:7e:9e:17:
                    2d:dd:d5:d5:96:8b:1e:ae:d5:6e:ac:fe:bb:0d:cf:
                    4d:44:4f:a2:14:71:d7:ea:0a:18:8d:49:25:63:69:
                    99:d2:ab:15:05:f2:57:5c:53:77:d5:04:7a:8e:dc:
                    2b:44:44:68:69:d0:39:54:c1:b3:d1:b1:48:67:53:
                    38:cb:68:f4:7a:b0:60:9e:91:e7:06:a0:2c:a1:5e:
                    44:76:b5:f1:99:df:a5:e8:fd:cd:03:21:39:e6:34:
                    9c:6f:6f:bf:02:c9:56:85:f4:68:66:40:6f:e6:8c:
                    6c:cc:b4:f7:32:cb:f3:2c:8a:24:8b:42:2a:ea:b2:
                    67:98:1d:38:f7:52:c3:39:8f:d9:ae:3d:30:4f:af:
                    5f:57:9c:77:e1:46:b7:5e:e3:56:ec:95:a7:8c:58:
                    3d:a9:a4:c0:68:98:34:7f:4f:a1:07:a6:b0:21:7a:
                    b0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:9E:5B:D9:7D:D7:D8:6C:81:54:5B:46:C7:E9:A5:22:18:89:3B:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/8b466fc3-8038-3f38-b91f-93d37a58dec6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/61532adb-ed7d-43ba-a66f-2a333fb9cf62.crl

            X509v3 Authority Key Identifier:
                keyid:C9:65:22:CD:0A:BC:3A:D6:00:B2:BD:17:FD:42:C2:66:C6:45:5F:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.211.226.0-205.211.228.255
                  205.211.235.0/24
                  205.211.243.0/24
                  209.124.98.0/23
                  209.124.102.0/24
                  209.124.108.0-209.124.110.255
                  209.124.112.0/21
                  209.124.126.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:ee:26:49:4e:e1:e6:1c:e3:52:28:50:74:b3:3e:14:e7:f7:
         ef:cd:c9:48:3e:7a:17:66:40:f8:77:3f:d4:38:f9:01:3f:e0:
         a7:1c:e2:3a:0d:c7:43:ef:3d:23:6c:06:3b:6b:fd:a4:c0:51:
         8a:e8:e4:56:37:b9:bc:5f:7d:1d:e0:c5:0a:d0:f0:d7:eb:9d:
         60:46:f3:76:3c:6e:d2:18:28:44:a3:a5:5e:d8:d0:ec:11:40:
         ee:03:ab:3d:d4:fe:df:84:e4:3b:a1:a1:01:5d:47:b4:26:3a:
         88:05:5a:07:33:c6:f5:67:70:92:68:49:43:1f:f0:71:8a:85:
         91:f1:5d:f6:b9:3b:82:1f:87:c4:65:2b:53:5b:0d:07:22:19:
         95:12:b6:df:eb:b6:4d:c8:53:80:f1:39:cb:ab:8e:02:99:59:
         68:14:a4:01:63:95:c4:e4:05:b0:b2:3f:22:44:96:8a:4d:6e:
         10:f3:38:da:08:fc:62:51:0a:22:d9:0b:60:4f:9b:e8:48:c6:
         ff:24:5e:28:64:03:46:fc:be:43:f7:e1:ad:e0:20:32:fe:6f:
         12:9c:c7:cd:35:89:85:73:6d:8a:db:09:00:cb:36:fe:dd:31:
         7a:4d:d0:ef:54:ed:08:b2:49:98:19:3e:7c:e1:f9:cf:93:99:
         d0:b7:43:58
-----BEGIN CERTIFICATE-----
MIIGfTCCBWWgAwIBAgIUAQ0Mn0MoWEu+QC2M+G9SfNoy0gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjE1MzJhZGItZWQ3ZC00M2JhLWE2NmYtMmEzMzNmYjlj
ZjYyMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk
NDk5NjIzMmYtOWVlMi00MmEyLTkyN2YtZjIyMDVlNzlmNjNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrr+Mi8SGSYgH73GDlK6ehulTsEZDzLgoA9F
YwbqXV8kKbTphmqz1ZP1gSI56G+1PgBnusGTsfzzIGW4PYcz8DQE5z95hpZXfRt6
X5cb7vFgd/Fof9x+nhct3dXVlosertVurP67Dc9NRE+iFHHX6goYjUklY2mZ0qsV
BfJXXFN31QR6jtwrRERoadA5VMGz0bFIZ1M4y2j0erBgnpHnBqAsoV5EdrXxmd+l
6P3NAyE55jScb2+/AslWhfRoZkBv5oxszLT3MsvzLIoki0Iq6rJnmB0491LDOY/Z
rj0wT69fV5x34Ua3XuNW7JWnjFg9qaTAaJg0f0+hB6awIXqwnwIDAQABo4IDjzCC
A4swHQYDVR0OBBYEFCaeW9l919hsgVRbRsfppSIYiTv1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82MTUz
MmFkYi1lZDdkLTQzYmEtYTY2Zi0yYTMzM2ZiOWNmNjIvOGI0NjZmYzMtODAzOC0z
ZjM4LWI5MWYtOTNkMzdhNThkZWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjE1MzJhZGItZWQ3ZC00M2JhLWE2
NmYtMmEzMzNmYjljZjYyLzYxNTMyYWRiLWVkN2QtNDNiYS1hNjZmLTJhMzMzZmI5
Y2Y2Mi5jcmwwHwYDVR0jBBgwFoAUyWUizQq8OtYAsr0X/ULCZsZFX80wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82MTUzMmFkYi1lZDdkLTQzYmEtYTY2Zi0yYTMz
M2ZiOWNmNjIuY2VyMFkGCCsGAQUFBwEHAQH/BEowSDBGBAIAATBAMAwDBAHN0+ID
BADN0+QDBADN0+sDBADN0/MDBAHRfGIDBADRfGYwDAMEAtF8bAMEANF8bgMEA9F8
cAMEAdF8fjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW
LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G
CSqGSIb3DQEBCwUAA4IBAQB87iZJTuHmHONSKFB0sz4U5/fvzclIPnoXZkD4dz/U
OPkBP+CnHOI6DcdD7z0jbAY7a/2kwFGK6ORWN7m8X30d4MUK0PDX651gRvN2PG7S
GChEo6Ve2NDsEUDuA6s91P7fhOQ7oaEBXUe0JjqIBVoHM8b1Z3CSaElDH/BxioWR
8V32uTuCH4fEZStTWw0HIhmVErbf67ZNyFOA8TnLq44CmVloFKQBY5XE5AWwsj8i
RJaKTW4Q8zjaCPxiUQoi2QtgT5voSMb/JF4oZANG/L5D9+Gt4CAy/m8SnMfNNYmF
c22K2wkAyzb+3TF6TdDvVO0IskmYGT584fnPk5nQt0NY
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:50:46 2025 by rpki-client