Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4f5bbf3-704e-4cc5-b232-3cd3a653dce8/747c6581-50cb-3a9c-9297-7671371de328.roa
File:                     747c6581-50cb-3a9c-9297-7671371de328.roa (raw, json)
Hash identifier:          1uZdtVdsY7aj4oegMytgwsbFnxpLgfk1gKiydvsa/KA=
Subject key identifier:   40:6F:E6:7C:A0:11:B8:2D:FC:03:2F:AE:B2:EF:91:57:2C:64:BE:93
Certificate issuer:       /CN=d4f5bbf3-704e-4cc5-b232-3cd3a653dce8
Certificate serial:       010D0C9F4328584EFD96CE59D030C417A02CAAD4
Authority key identifier: E1:46:05:2B:BA:EC:68:8F:50:73:C6:6F:64:3F:F1:CE:F1:DD:4A:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4f5bbf3-704e-4cc5-b232-3cd3a653dce8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4f5bbf3-704e-4cc5-b232-3cd3a653dce8/747c6581-50cb-3a9c-9297-7671371de328.roa
Signing time:             Fri 28 Aug 2026 20:51:53 +0000
ROA not before:           Fri 28 Aug 2026 20:51:53 +0000
ROA not after:            Thu 26 Nov 2026 21:51:53 +0000
asID:                     29893
IP address blocks:        208.93.228.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4f5bbf3-704e-4cc5-b232-3cd3a653dce8/d4f5bbf3-704e-4cc5-b232-3cd3a653dce8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4f5bbf3-704e-4cc5-b232-3cd3a653dce8/d4f5bbf3-704e-4cc5-b232-3cd3a653dce8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4f5bbf3-704e-4cc5-b232-3cd3a653dce8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fd:96:ce:59:d0:30:c4:17:a0:2c:aa:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4f5bbf3-704e-4cc5-b232-3cd3a653dce8
        Validity
            Not Before: Aug 28 20:51:53 2026 GMT
            Not After : Nov 26 21:51:53 2026 GMT
        Subject: CN=1cb6454a-e6ea-4939-822c-9ea4b99b8134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:89:1f:99:9b:3f:dd:16:38:e7:7f:75:76:0d:
                    e3:60:4d:0d:7b:a1:1c:bb:f8:c2:37:28:a1:22:73:
                    d1:94:27:59:59:fd:1a:2a:43:00:32:df:ca:ae:b4:
                    ec:bd:a0:ae:6b:eb:e1:98:8e:27:31:86:15:7e:fb:
                    4f:2f:1b:cc:02:d5:b5:1b:34:19:32:89:27:9e:32:
                    31:33:9e:4a:cd:b9:9d:67:67:e3:a3:a5:2d:83:f6:
                    e5:af:9e:e0:8e:3f:e4:59:b5:e9:36:2c:31:b2:d9:
                    4f:6f:88:62:ed:9e:95:e2:81:3d:cb:b0:22:55:69:
                    49:dc:38:26:24:9c:df:5a:6e:73:7e:d9:2b:1c:da:
                    10:7f:c4:db:c5:3a:07:85:0f:1d:84:90:9d:84:d7:
                    09:a7:c7:a1:79:cf:51:49:c1:69:81:10:86:f3:65:
                    bb:8e:9c:90:f9:e4:ee:88:c9:08:7f:b7:28:eb:fe:
                    00:15:fe:64:2e:8e:ca:42:9f:ad:c0:94:15:c9:8a:
                    0a:28:d4:c2:2f:53:53:25:de:7d:69:47:c1:ff:79:
                    dd:7d:42:e5:6e:22:df:67:37:63:36:7f:75:59:9f:
                    8a:b7:cf:a1:cd:61:53:c0:e2:2c:7e:30:1f:90:ca:
                    8f:26:92:95:99:65:45:09:30:2a:f3:69:30:ac:05:
                    ce:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:6F:E6:7C:A0:11:B8:2D:FC:03:2F:AE:B2:EF:91:57:2C:64:BE:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4f5bbf3-704e-4cc5-b232-3cd3a653dce8/747c6581-50cb-3a9c-9297-7671371de328.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4f5bbf3-704e-4cc5-b232-3cd3a653dce8/d4f5bbf3-704e-4cc5-b232-3cd3a653dce8.crl

            X509v3 Authority Key Identifier:
                keyid:E1:46:05:2B:BA:EC:68:8F:50:73:C6:6F:64:3F:F1:CE:F1:DD:4A:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4f5bbf3-704e-4cc5-b232-3cd3a653dce8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.93.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:99:2a:54:2b:28:d1:3a:93:b8:98:57:cc:8c:f1:87:52:fc:
         e1:02:c7:79:86:6e:fc:57:34:54:63:21:20:cf:3f:f4:33:06:
         05:ba:4a:d8:5d:c8:df:8d:43:56:73:84:dd:5b:13:75:b7:95:
         99:d9:82:d3:41:79:be:57:6e:bb:29:49:72:29:0a:40:19:85:
         c8:7c:e9:7b:14:66:a4:2d:9b:2a:6a:d5:90:e3:e3:6f:0e:17:
         f5:72:74:72:27:13:d6:a1:65:07:8c:2a:5b:6e:46:17:5c:7e:
         a0:20:3c:29:64:d7:19:87:9c:2b:71:06:5e:7f:e8:b4:d5:f0:
         ab:d2:19:18:85:75:92:0b:0a:5b:e6:0a:cb:98:8a:97:07:d9:
         64:88:0a:ea:ff:20:29:47:ce:52:4d:f6:d2:6f:c0:28:66:a3:
         84:9f:10:ef:7b:2a:d8:12:b2:83:5d:72:69:1e:3f:d0:34:f3:
         02:ef:99:42:c6:45:53:8a:ba:94:49:67:5d:d4:3f:ac:e1:fb:
         26:11:5e:03:4d:5e:e8:5a:ce:16:a3:69:49:f5:e9:46:bb:09:
         7c:65:39:40:63:40:3b:d8:66:81:8d:c0:07:53:d8:39:59:54:
         3a:27:e1:f7:a3:fb:7d:d1:d7:7e:a6:16:cf:6c:37:2e:bc:92:
         c2:39:0d:09
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE79ls5Z0DDEF6AsqtQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDRmNWJiZjMtNzA0ZS00Y2M1LWIyMzItM2NkM2E2NTNk
Y2U4MB4XDTI2MDgyODIwNTE1M1oXDTI2MTEyNjIxNTE1M1owLzEtMCsGA1UEAxMk
MWNiNjQ1NGEtZTZlYS00OTM5LTgyMmMtOWVhNGI5OWI4MTM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4kfmZs/3RY45391dg3jYE0Ne6Ecu/jCNyih
InPRlCdZWf0aKkMAMt/KrrTsvaCua+vhmI4nMYYVfvtPLxvMAtW1GzQZMoknnjIx
M55KzbmdZ2fjo6Utg/blr57gjj/kWbXpNiwxstlPb4hi7Z6V4oE9y7AiVWlJ3Dgm
JJzfWm5zftkrHNoQf8TbxToHhQ8dhJCdhNcJp8ehec9RScFpgRCG82W7jpyQ+eTu
iMkIf7co6/4AFf5kLo7KQp+twJQVyYoKKNTCL1NTJd59aUfB/3ndfULlbiLfZzdj
Nn91WZ+Kt8+hzWFTwOIsfjAfkMqPJpKVmWVFCTAq82kwrAXOMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEBv5nygEbgt/AMvrrLvkVcsZL6TMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNGY1
YmJmMy03MDRlLTRjYzUtYjIzMi0zY2QzYTY1M2RjZTgvNzQ3YzY1ODEtNTBjYi0z
YTljLTkyOTctNzY3MTM3MWRlMzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDRmNWJiZjMtNzA0ZS00Y2M1LWIy
MzItM2NkM2E2NTNkY2U4L2Q0ZjViYmYzLTcwNGUtNGNjNS1iMjMyLTNjZDNhNjUz
ZGNlOC5jcmwwHwYDVR0jBBgwFoAU4UYFK7rsaI9Qc8ZvZD/xzvHdSnEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kNGY1YmJmMy03MDRlLTRjYzUtYjIzMi0zY2Qz
YTY1M2RjZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0F3kMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFyZKlQrKNE6k7iYV8yM8YdS/OECx3mGbvxXNFRjISDPP/QzBgW6Sthd
yN+NQ1ZzhN1bE3W3lZnZgtNBeb5XbrspSXIpCkAZhch86XsUZqQtmypq1ZDj428O
F/VydHInE9ahZQeMKltuRhdcfqAgPClk1xmHnCtxBl5/6LTV8KvSGRiFdZILClvm
CsuYipcH2WSICur/IClHzlJN9tJvwChmo4SfEO97KtgSsoNdcmkeP9A08wLvmULG
RVOKupRJZ13UP6zh+yYRXgNNXuhazhajaUn16Ua7CXxlOUBjQDvYZoGNwAdT2DlZ
VDon4fej+33R136mFs9sNy68ksI5DQk=
-----END CERTIFICATE-----
Generated at Mon Sep 21 19:14:20 2026 by rpki-client