Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9ae61efc-a402-4975-bfe7-f7ddda75a628/6491a831-6c2b-3cae-8a38-1ca2adc2c3db.roa
File:                     6491a831-6c2b-3cae-8a38-1ca2adc2c3db.roa (raw, json)
Hash identifier:          3rTjndFzmzVaQ3boeHUmXwKDFcWo3Ifv4ibV91owDXY=
Subject key identifier:   EB:88:F4:E4:75:97:84:37:AF:DF:DF:6B:65:EB:F8:14:AD:4A:C3:40
Certificate issuer:       /CN=9ae61efc-a402-4975-bfe7-f7ddda75a628
Certificate serial:       010D0C9F4328584F20F7BCF40C5A4A9864BEB900
Authority key identifier: 57:FC:76:D2:36:2F:CA:A9:90:CD:DA:FB:B7:BF:EE:7B:B6:80:9A:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9ae61efc-a402-4975-bfe7-f7ddda75a628.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9ae61efc-a402-4975-bfe7-f7ddda75a628/6491a831-6c2b-3cae-8a38-1ca2adc2c3db.roa
Signing time:             Thu 10 Sep 2026 13:00:12 +0000
ROA not before:           Thu 10 Sep 2026 13:00:12 +0000
ROA not after:            Wed 09 Dec 2026 14:00:12 +0000
asID:                     207489
IP address blocks:        209.135.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9ae61efc-a402-4975-bfe7-f7ddda75a628/9ae61efc-a402-4975-bfe7-f7ddda75a628.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9ae61efc-a402-4975-bfe7-f7ddda75a628/9ae61efc-a402-4975-bfe7-f7ddda75a628.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9ae61efc-a402-4975-bfe7-f7ddda75a628.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:20:f7:bc:f4:0c:5a:4a:98:64:be:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ae61efc-a402-4975-bfe7-f7ddda75a628
        Validity
            Not Before: Sep 10 13:00:12 2026 GMT
            Not After : Dec  9 14:00:12 2026 GMT
        Subject: CN=1839fd05-95be-4aaf-99e0-99de1b291e8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:53:b2:9f:68:76:e4:11:f5:85:e5:a7:97:69:
                    50:c1:3a:d9:ca:40:10:e2:e3:83:5c:4c:38:fa:c0:
                    5d:44:f8:a5:25:fa:18:40:02:ef:b6:ec:2b:62:56:
                    37:89:48:c0:76:44:b0:3a:46:19:65:84:02:d6:8a:
                    bd:42:78:80:54:73:3a:63:4d:05:4f:56:30:4d:b5:
                    14:b4:02:e4:b0:ca:1e:5c:95:39:64:5f:52:e8:40:
                    25:78:21:4c:79:3a:e0:4c:06:b0:a7:c5:93:a2:12:
                    0b:fc:45:c5:97:1d:95:75:ba:53:be:f4:62:3b:09:
                    de:b3:a9:39:f8:15:e2:ee:b8:3a:38:46:54:62:46:
                    c9:54:29:ad:88:c7:99:87:de:76:6f:46:b5:da:00:
                    65:93:89:17:4a:75:43:df:0c:23:6a:80:4e:9e:35:
                    13:5d:53:ea:5c:9c:b1:f0:d5:f1:df:0e:0e:08:79:
                    70:b1:04:84:d1:f3:86:da:9b:b9:c1:cb:81:79:a6:
                    54:ec:b4:2b:f4:87:df:4e:c7:17:ef:c3:62:f2:2c:
                    b7:22:00:1b:0d:f4:33:11:93:da:7b:55:cc:9b:03:
                    7a:5d:e3:0a:9f:67:52:9e:73:b7:72:c0:16:26:74:
                    a8:d9:b8:53:aa:0d:19:a9:e8:98:e2:52:73:c9:b5:
                    c3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:88:F4:E4:75:97:84:37:AF:DF:DF:6B:65:EB:F8:14:AD:4A:C3:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9ae61efc-a402-4975-bfe7-f7ddda75a628/6491a831-6c2b-3cae-8a38-1ca2adc2c3db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9ae61efc-a402-4975-bfe7-f7ddda75a628/9ae61efc-a402-4975-bfe7-f7ddda75a628.crl

            X509v3 Authority Key Identifier:
                keyid:57:FC:76:D2:36:2F:CA:A9:90:CD:DA:FB:B7:BF:EE:7B:B6:80:9A:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9ae61efc-a402-4975-bfe7-f7ddda75a628.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.135.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:e1:a1:00:f5:b8:0e:be:2f:a0:89:b1:da:c7:31:b1:00:e5:
         cd:30:23:30:a3:25:22:fa:95:5c:4e:30:f1:82:05:9e:a1:c3:
         51:d6:ba:2a:9f:4c:c4:25:5a:75:3d:21:1c:35:b3:5d:40:4c:
         fd:51:5d:d5:b8:ec:79:d5:52:cf:25:7b:a7:d3:cd:fd:d7:cd:
         ea:5b:26:85:71:d1:d4:16:91:02:f2:43:41:28:e3:d2:9e:1b:
         b1:72:12:26:1c:c9:ff:66:49:f5:a3:6c:b7:d2:5a:73:76:7a:
         16:0b:66:96:65:24:f1:3b:45:58:27:d3:f6:b9:7d:fc:75:2f:
         1c:79:de:28:15:c5:6e:b4:3e:95:3d:97:e3:f4:c5:3a:ba:c4:
         9d:e3:6b:e7:b5:fe:a3:f7:52:09:a2:29:88:7e:18:8f:ab:2c:
         39:68:53:8e:33:f2:85:af:01:78:69:1d:88:31:3b:f8:92:68:
         c1:2f:8c:f2:ec:79:34:dd:9b:da:49:b7:ce:f9:a9:74:b3:c0:
         a4:4a:93:3a:73:d8:31:c3:fa:f3:9d:8d:c1:38:f2:13:08:1b:
         99:85:1b:f8:27:cf:d3:6d:0c:5b:ee:a1:29:26:47:12:bf:3b:
         ce:8a:69:a9:1b:f6:b3:78:bc:79:f7:b9:3c:c2:40:06:7c:92:
         ed:90:37:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g97z0DFpKmGS+uQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWFlNjFlZmMtYTQwMi00OTc1LWJmZTctZjdkZGRhNzVh
NjI4MB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk
MTgzOWZkMDUtOTViZS00YWFmLTk5ZTAtOTlkZTFiMjkxZThhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVOyn2h25BH1heWnl2lQwTrZykAQ4uODXEw4
+sBdRPilJfoYQALvtuwrYlY3iUjAdkSwOkYZZYQC1oq9QniAVHM6Y00FT1YwTbUU
tALksMoeXJU5ZF9S6EAleCFMeTrgTAawp8WTohIL/EXFlx2VdbpTvvRiOwnes6k5
+BXi7rg6OEZUYkbJVCmtiMeZh952b0a12gBlk4kXSnVD3wwjaoBOnjUTXVPqXJyx
8NXx3w4OCHlwsQSE0fOG2pu5wcuBeaZU7LQr9IffTscX78Ni8iy3IgAbDfQzEZPa
e1XMmwN6XeMKn2dSnnO3csAWJnSo2bhTqg0ZqeiY4lJzybXDmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOuI9OR1l4Q3r9/fa2Xr+BStSsNAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85YWU2
MWVmYy1hNDAyLTQ5NzUtYmZlNy1mN2RkZGE3NWE2MjgvNjQ5MWE4MzEtNmMyYi0z
Y2FlLThhMzgtMWNhMmFkYzJjM2RiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOWFlNjFlZmMtYTQwMi00OTc1LWJm
ZTctZjdkZGRhNzVhNjI4LzlhZTYxZWZjLWE0MDItNDk3NS1iZmU3LWY3ZGRkYTc1
YTYyOC5jcmwwHwYDVR0jBBgwFoAUV/x20jYvyqmQzdr7t7/ue7aAmuQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85YWU2MWVmYy1hNDAyLTQ5NzUtYmZlNy1mN2Rk
ZGE3NWE2MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YezMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHrhoQD1uA6+L6CJsdrHMbEA5c0wIzCjJSL6lVxOMPGCBZ6hw1HWuiqf
TMQlWnU9IRw1s11ATP1RXdW47HnVUs8le6fTzf3XzepbJoVx0dQWkQLyQ0Eo49Ke
G7FyEiYcyf9mSfWjbLfSWnN2ehYLZpZlJPE7RVgn0/a5ffx1Lxx53igVxW60PpU9
l+P0xTq6xJ3ja+e1/qP3UgmiKYh+GI+rLDloU44z8oWvAXhpHYgxO/iSaMEvjPLs
eTTdm9pJt875qXSzwKRKkzpz2DHD+vOdjcE48hMIG5mFG/gnz9NtDFvuoSkmRxK/
O86Kaakb9rN4vHn3uTzCQAZ8ku2QN68=
-----END CERTIFICATE-----
Generated at Sun Sep 20 21:36:11 2026 by rpki-client