Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6b5fb706-eeae-3f1c-8f30-1af82d5f3f46.roa
File:                     6b5fb706-eeae-3f1c-8f30-1af82d5f3f46.roa (raw, json)
Hash identifier:          kV1AS6AaPxuIbYume5U3enWgFizOejPG1VKbM2nNkrQ=
Subject key identifier:   02:4B:E6:1B:A1:B9:B2:20:77:71:6F:E7:0E:DD:3E:87:2D:50:C7:9F
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584F51D2AC0D3066AF8D4E5ABC20
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6b5fb706-eeae-3f1c-8f30-1af82d5f3f46.roa
Signing time:             Mon 28 Sep 2026 01:00:12 +0000
ROA not before:           Mon 28 Sep 2026 01:00:12 +0000
ROA not after:            Sun 27 Dec 2026 02:00:12 +0000
asID:                     2914
IP address blocks:        204.141.247.0/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:51:d2:ac:0d:30:66:af:8d:4e:5a:bc:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Sep 28 01:00:12 2026 GMT
            Not After : Dec 27 02:00:12 2026 GMT
        Subject: CN=bdda8cdf-adc5-46db-8cbb-e24be09c11d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:30:fd:46:cb:51:73:d2:c2:4f:00:f6:a2:67:
                    14:5d:42:7b:4c:56:78:85:2e:7c:b9:d5:1f:69:73:
                    36:bb:45:a3:1a:b7:e8:72:7c:6f:3c:75:18:d7:f5:
                    89:d4:3f:25:66:07:a3:49:a6:14:f1:55:a8:73:97:
                    7b:88:c9:eb:9f:9f:af:13:39:3f:a3:bc:00:0f:e5:
                    af:d8:71:19:84:d8:80:71:83:85:1a:5a:3c:76:ed:
                    98:07:13:4d:87:3a:a1:04:64:fc:bd:91:51:5a:e6:
                    d2:af:12:52:41:3a:d4:1f:dd:c8:17:18:35:39:d9:
                    f7:0f:ec:9f:f8:03:bd:d2:37:6f:5a:5f:b4:7a:95:
                    e6:98:79:46:e4:6d:eb:18:57:9e:53:9d:29:2e:49:
                    f4:01:0c:96:a2:be:dd:3e:7e:d3:7b:94:34:62:90:
                    f1:66:46:04:a8:64:3f:a7:8b:af:88:72:24:c2:61:
                    0a:3e:4d:b4:0e:73:4c:59:85:0e:ae:f5:6e:fe:e9:
                    1b:3e:c0:30:69:5c:71:4e:f0:54:be:8e:6e:62:58:
                    fb:e5:85:4f:5b:4b:4f:58:70:c2:ec:cf:71:1a:ed:
                    1e:47:8f:a1:0c:47:8e:63:12:7f:3e:74:ee:de:c9:
                    e9:98:52:74:8a:08:28:00:4e:f6:69:7e:47:9d:15:
                    a5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:4B:E6:1B:A1:B9:B2:20:77:71:6F:E7:0E:DD:3E:87:2D:50:C7:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6b5fb706-eeae-3f1c-8f30-1af82d5f3f46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.141.247.0/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:aa:cf:5e:2b:76:f6:50:c5:7d:28:e5:37:a0:95:36:17:f3:
         e6:09:7d:20:8d:af:2b:1d:a6:cc:05:e6:a0:d8:59:9c:ac:6e:
         e7:c0:a5:35:17:37:55:c0:82:a9:26:ac:45:93:22:b5:20:38:
         94:10:58:87:d1:6f:43:cc:0c:fa:48:30:3d:d7:9e:76:b4:7e:
         d1:49:ff:11:69:71:86:42:ad:0a:95:c1:18:ff:87:16:f9:fe:
         d3:c2:3b:ad:03:73:79:7e:cb:8a:9a:a0:1e:dc:3e:d5:57:23:
         bd:9c:c8:a5:ba:13:a2:63:13:dc:ac:fd:8d:54:56:92:ae:a1:
         56:1e:74:f9:d9:8c:52:92:24:f9:17:be:18:71:3d:2d:d5:7c:
         51:b2:8b:a5:7e:ee:43:6f:7e:1d:84:5e:f9:82:11:16:92:1f:
         06:4a:39:64:e1:e7:90:e2:66:1b:f7:2a:a9:78:00:6c:bd:ca:
         98:70:ba:d6:4c:ac:55:9c:3b:7c:b1:a6:f4:05:4a:e7:df:89:
         5a:ed:fd:26:62:be:2e:8f:82:e6:9e:56:a9:89:8c:a0:c6:16:
         64:55:d0:3c:31:4e:95:63:31:89:84:72:82:e4:00:3c:d9:9b:
         ee:95:7c:97:4e:8c:e4:92:78:f4:91:ce:70:bf:d9:ab:11:9c:
         15:f3:a3:a4
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9R0qwNMGavjU5avCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk
YmRkYThjZGYtYWRjNS00NmRiLThjYmItZTI0YmUwOWMxMWQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDD9RstRc9LCTwD2omcUXUJ7TFZ4hS58udUf
aXM2u0WjGrfocnxvPHUY1/WJ1D8lZgejSaYU8VWoc5d7iMnrn5+vEzk/o7wAD+Wv
2HEZhNiAcYOFGlo8du2YBxNNhzqhBGT8vZFRWubSrxJSQTrUH93IFxg1Odn3D+yf
+AO90jdvWl+0epXmmHlG5G3rGFeeU50pLkn0AQyWor7dPn7Te5Q0YpDxZkYEqGQ/
p4uviHIkwmEKPk20DnNMWYUOrvVu/ukbPsAwaVxxTvBUvo5uYlj75YVPW0tPWHDC
7M9xGu0eR4+hDEeOYxJ/PnTu3snpmFJ0iggoAE72aX5HnRWlGwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFAJL5huhubIgd3Fv5w7dPoctUMefMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNmI1ZmI3MDYtZWVhZS0z
ZjFjLThmMzAtMWFmODJkNWYzZjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEzI33ADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAEqs9eK3b2UMV9KOU3oJU2F/PmCX0gja8rHabMBeag2FmcrG7nwKU1
FzdVwIKpJqxFkyK1IDiUEFiH0W9DzAz6SDA91552tH7RSf8RaXGGQq0KlcEY/4cW
+f7TwjutA3N5fsuKmqAe3D7VVyO9nMiluhOiYxPcrP2NVFaSrqFWHnT52YxSkiT5
F74YcT0t1XxRsoulfu5Db34dhF75ghEWkh8GSjlk4eeQ4mYb9yqpeABsvcqYcLrW
TKxVnDt8sab0BUrn34la7f0mYr4uj4LmnlapiYygxhZkVdA8MU6VYzGJhHKC5AA8
2ZvulXyXTozkknj0kc5wv9mrEZwV86Ok
-----END CERTIFICATE-----
Generated at Thu Nov 5 15:17:59 2026 by rpki-client