Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/fbf30685-04e3-36db-b832-56e8fe4681ad.roa
File:                     fbf30685-04e3-36db-b832-56e8fe4681ad.roa (raw, json)
Hash identifier:          UG4+6fCMIPaFkDrfz4ojUMWIjveOW/lXv6DXN2STsKs=
Subject key identifier:   3F:D1:D4:37:9A:A8:AF:6D:FD:21:E8:A5:AE:AF:59:C4:4B:DD:E2:EF
Certificate issuer:       /CN=8ac31463-974b-4676-9328-200202ae4d6e
Certificate serial:       010D0C9F4328584E1FA9A852CA3909583714D500
Authority key identifier: 66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/fbf30685-04e3-36db-b832-56e8fe4681ad.roa
Signing time:             Wed 10 Jun 2026 09:00:13 +0000
ROA not before:           Wed 10 Jun 2026 09:00:13 +0000
ROA not after:            Tue 08 Sep 2026 09:00:13 +0000
asID:                     33211
IP address blocks:        206.41.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1f:a9:a8:52:ca:39:09:58:37:14:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ac31463-974b-4676-9328-200202ae4d6e
        Validity
            Not Before: Jun 10 09:00:13 2026 GMT
            Not After : Sep  8 09:00:13 2026 GMT
        Subject: CN=daeb8177-97b5-465c-8730-2dc938895fb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2c:32:2c:71:6a:05:69:ae:52:5a:e0:20:36:
                    7d:3e:15:d1:b6:82:e4:f7:89:8f:55:0f:5c:da:45:
                    b6:39:48:a3:ad:53:d0:eb:a2:f9:f6:42:e8:69:80:
                    db:88:b1:52:a3:11:71:fe:71:96:d1:be:c3:d0:07:
                    f7:82:37:b3:fd:30:c7:1d:01:9e:12:80:98:4d:66:
                    65:61:60:f2:32:1a:f4:12:c5:d2:21:59:ce:f5:b6:
                    8e:6b:e8:10:b7:bb:2c:c9:a2:a7:bd:a1:47:ea:dc:
                    e3:f0:03:0a:6c:18:12:dc:79:93:1e:58:4c:1c:76:
                    52:9e:60:62:2e:28:d0:e5:6d:e5:48:98:bd:45:e8:
                    1f:9a:73:bf:57:ae:19:a8:9f:07:d3:c8:24:fb:3c:
                    c8:eb:6e:5f:e5:1d:24:bc:8f:95:83:36:26:3f:4c:
                    be:09:09:a3:a7:66:af:09:98:5c:73:b1:15:6f:b0:
                    dd:fa:0b:f9:76:59:d6:92:2b:cb:b5:5b:55:7f:af:
                    cd:3c:73:d4:36:12:4c:80:fd:a5:da:4e:63:da:5c:
                    c9:79:d7:f2:42:19:58:7c:df:45:5e:d6:7d:c5:b8:
                    79:5c:42:e4:2b:ed:a4:b4:e8:31:37:4e:74:63:3d:
                    57:b2:45:c3:e1:73:70:d5:60:b4:08:6c:b7:78:69:
                    93:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:D1:D4:37:9A:A8:AF:6D:FD:21:E8:A5:AE:AF:59:C4:4B:DD:E2:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/fbf30685-04e3-36db-b832-56e8fe4681ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl

            X509v3 Authority Key Identifier:
                keyid:66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.41.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:1b:b1:4c:4d:37:57:cb:9c:81:98:f5:4f:d1:92:d6:ef:ef:
         14:35:19:78:65:01:13:b5:2e:15:f1:52:ef:44:17:3f:c7:50:
         6a:b1:c1:b5:b1:51:c4:dc:5b:93:19:87:c2:64:d3:95:fa:1c:
         ad:c1:54:85:4c:15:83:ce:88:1c:4e:71:e1:50:c7:22:e9:51:
         b6:34:8d:b9:37:11:27:3f:09:b6:86:52:e7:2b:12:a2:a3:0e:
         b7:47:13:54:59:ca:f4:3d:a1:01:dd:c7:1c:00:39:01:50:df:
         e4:c2:f7:31:17:92:67:84:35:3a:fe:d5:6d:bb:2c:1d:67:2b:
         c6:e4:73:b1:a6:99:ef:96:27:5d:f2:06:b0:ca:4a:6e:be:37:
         74:55:12:4a:5b:62:aa:88:29:ff:06:5f:8d:0f:80:8b:f6:ef:
         24:2d:31:c0:04:bd:49:e1:9a:21:6b:40:f9:ec:63:79:46:19:
         1c:bc:09:b6:50:f9:09:3f:09:c7:bf:8a:9f:57:c4:6b:c8:05:
         47:c0:ce:0b:ac:a1:d2:28:0f:83:b5:82:6f:c8:fc:a3:25:82:
         50:ba:69:6c:3f:91:97:86:9e:92:8f:36:62:66:02:88:37:c2:
         ba:38:2f:78:41:c0:72:15:d8:74:32:e1:5f:45:a8:d5:3e:74:
         6d:b5:40:d4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4fqahSyjkJWDcU1QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGFjMzE0NjMtOTc0Yi00Njc2LTkzMjgtMjAwMjAyYWU0
ZDZlMB4XDTI2MDYxMDA5MDAxM1oXDTI2MDkwODA5MDAxM1owLzEtMCsGA1UEAxMk
ZGFlYjgxNzctOTdiNS00NjVjLTg3MzAtMmRjOTM4ODk1ZmI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqywyLHFqBWmuUlrgIDZ9PhXRtoLk94mPVQ9c
2kW2OUijrVPQ66L59kLoaYDbiLFSoxFx/nGW0b7D0Af3gjez/TDHHQGeEoCYTWZl
YWDyMhr0EsXSIVnO9baOa+gQt7ssyaKnvaFH6tzj8AMKbBgS3HmTHlhMHHZSnmBi
LijQ5W3lSJi9RegfmnO/V64ZqJ8H08gk+zzI625f5R0kvI+VgzYmP0y+CQmjp2av
CZhcc7EVb7Dd+gv5dlnWkivLtVtVf6/NPHPUNhJMgP2l2k5j2lzJedfyQhlYfN9F
XtZ9xbh5XELkK+2ktOgxN050Yz1XskXD4XNw1WC0CGy3eGmTgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD/R1DeaqK9t/SHopa6vWcRL3eLvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84YWMz
MTQ2My05NzRiLTQ2NzYtOTMyOC0yMDAyMDJhZTRkNmUvZmJmMzA2ODUtMDRlMy0z
NmRiLWI4MzItNTZlOGZlNDY4MWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOGFjMzE0NjMtOTc0Yi00Njc2LTkz
MjgtMjAwMjAyYWU0ZDZlLzhhYzMxNDYzLTk3NGItNDY3Ni05MzI4LTIwMDIwMmFl
NGQ2ZS5jcmwwHwYDVR0jBBgwFoAUZkrPeoeALtWWaZNuDr1s6kFXZvYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy84YWMzMTQ2My05NzRiLTQ2NzYtOTMyOC0yMDAy
MDJhZTRkNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzil+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALobsUxNN1fLnIGY9U/Rktbv7xQ1GXhlARO1LhXxUu9EFz/HUGqxwbWx
UcTcW5MZh8Jk05X6HK3BVIVMFYPOiBxOceFQxyLpUbY0jbk3ESc/CbaGUucrEqKj
DrdHE1RZyvQ9oQHdxxwAOQFQ3+TC9zEXkmeENTr+1W27LB1nK8bkc7Gmme+WJ13y
BrDKSm6+N3RVEkpbYqqIKf8GX40PgIv27yQtMcAEvUnhmiFrQPnsY3lGGRy8CbZQ
+Qk/Cce/ip9XxGvIBUfAzgusodIoD4O1gm/I/KMlglC6aWw/kZeGnpKPNmJmAog3
wro4L3hBwHIV2HQy4V9FqNU+dG21QNQ=
-----END CERTIFICATE-----
Generated at Sun Jun 14 08:10:18 2026 by rpki-client