Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d022e4d-a2ec-4d14-9342-a503ec63cac1/c97a0ad1-de37-3bf5-8959-a5d761fd468a.roa
File:                     c97a0ad1-de37-3bf5-8959-a5d761fd468a.roa (raw, json)
Hash identifier:          WY60zpNsvmGB9GXfUk3Y2ibjbYA/zr8sHj4UAs24ygM=
Subject key identifier:   6A:17:A3:05:7B:FC:70:51:98:00:D7:53:DB:38:58:77:87:BF:72:15
Certificate issuer:       /CN=3d022e4d-a2ec-4d14-9342-a503ec63cac1
Certificate serial:       010D0C9F4328584F3E47E28D8C24C897494F06C0
Authority key identifier: 80:79:BD:B1:F1:56:2E:6D:24:3C:ED:7E:8C:17:10:2F:A6:30:2B:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d022e4d-a2ec-4d14-9342-a503ec63cac1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d022e4d-a2ec-4d14-9342-a503ec63cac1/c97a0ad1-de37-3bf5-8959-a5d761fd468a.roa
Signing time:             Mon 21 Sep 2026 01:00:11 +0000
ROA not before:           Mon 21 Sep 2026 01:00:11 +0000
ROA not after:            Sun 20 Dec 2026 02:00:11 +0000
asID:                     7029
IP address blocks:        205.236.252.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d022e4d-a2ec-4d14-9342-a503ec63cac1/3d022e4d-a2ec-4d14-9342-a503ec63cac1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d022e4d-a2ec-4d14-9342-a503ec63cac1/3d022e4d-a2ec-4d14-9342-a503ec63cac1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d022e4d-a2ec-4d14-9342-a503ec63cac1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3e:47:e2:8d:8c:24:c8:97:49:4f:06:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d022e4d-a2ec-4d14-9342-a503ec63cac1
        Validity
            Not Before: Sep 21 01:00:11 2026 GMT
            Not After : Dec 20 02:00:11 2026 GMT
        Subject: CN=ca9ba6d8-415c-4a00-947c-44be48dfa6ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ce:72:6d:83:e4:be:a7:db:48:c0:f2:63:82:
                    7c:4c:e8:c3:73:ad:79:45:51:c5:f5:f2:5a:fa:75:
                    90:c8:85:d2:8f:9c:9f:53:98:66:34:11:d6:2f:78:
                    61:ba:ca:21:f7:87:4d:5b:b3:c4:84:85:37:b8:58:
                    ba:95:46:5c:c9:80:11:5e:68:dd:71:31:6f:30:87:
                    50:2f:7a:bc:f7:f8:55:1c:39:7b:96:4f:9b:ec:18:
                    d9:6c:64:27:ad:97:78:56:e0:12:61:5e:7e:43:a7:
                    5a:bd:bf:c0:91:3a:e3:90:fc:4b:88:08:e9:98:f0:
                    06:04:3d:1d:df:35:72:52:bd:ea:ee:6c:a2:a2:49:
                    12:29:54:3c:43:f5:e6:7b:c1:8b:77:83:7c:22:91:
                    9f:10:ce:de:8d:ea:7e:39:2d:14:51:37:b4:b8:65:
                    c5:91:5a:85:fd:91:ae:7c:d0:d2:33:39:aa:78:84:
                    0a:7a:47:7c:cf:9b:b4:4e:49:fc:7c:2e:90:b4:2a:
                    aa:6f:33:08:a7:71:44:25:f7:6c:0f:43:95:f9:b0:
                    46:03:42:7a:48:d6:b3:1f:cb:ce:75:21:d7:84:b2:
                    50:ff:47:8f:24:37:f9:f2:46:24:2a:90:c8:12:32:
                    0a:53:d2:a1:64:22:75:81:05:f8:8a:b8:55:6f:5d:
                    63:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:17:A3:05:7B:FC:70:51:98:00:D7:53:DB:38:58:77:87:BF:72:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d022e4d-a2ec-4d14-9342-a503ec63cac1/c97a0ad1-de37-3bf5-8959-a5d761fd468a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d022e4d-a2ec-4d14-9342-a503ec63cac1/3d022e4d-a2ec-4d14-9342-a503ec63cac1.crl

            X509v3 Authority Key Identifier:
                keyid:80:79:BD:B1:F1:56:2E:6D:24:3C:ED:7E:8C:17:10:2F:A6:30:2B:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d022e4d-a2ec-4d14-9342-a503ec63cac1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.236.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:b7:d2:9d:e1:8b:f9:c3:f6:a4:59:58:fd:b8:f0:a1:b1:4e:
         b8:87:0f:0f:7d:4d:69:22:d8:05:78:8a:77:9a:e7:d0:a2:4e:
         15:9e:d9:97:71:16:67:3f:89:84:23:c4:cb:68:c4:97:cd:af:
         b9:6f:ff:14:2b:43:5b:ca:a3:6e:13:04:0e:3f:9b:a7:b3:c9:
         24:12:63:1a:18:6c:c7:d4:81:46:a2:e6:8f:f4:25:3a:a4:62:
         2c:c1:ba:e9:a5:8d:61:8f:2a:3b:2e:eb:0f:90:03:90:d4:2e:
         f1:2e:b6:40:c4:68:1c:96:fd:f3:fc:07:5d:4d:b7:d0:a7:14:
         f6:25:ec:93:bc:48:9c:05:c6:3e:e0:7f:06:f9:19:0d:3f:a3:
         f0:10:58:ae:46:69:62:a1:14:9f:f5:f9:4d:40:d8:c4:c6:04:
         dd:8e:66:02:d6:95:76:7a:cf:ad:07:80:53:60:a8:f8:a9:a3:
         c5:d8:68:67:c4:ee:aa:89:27:12:9e:b8:73:39:b7:b0:5e:3d:
         f1:d5:59:72:2d:d7:c7:0d:76:f0:53:4b:29:44:45:45:1b:c0:
         d2:16:fc:28:14:ec:6b:7c:60:51:03:94:cf:91:d4:07:80:33:
         10:e6:48:37:37:e4:16:3c:11:38:98:47:88:b9:f8:ff:f7:a1:
         ab:a4:ff:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R+KNjCTIl0lPBsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2QwMjJlNGQtYTJlYy00ZDE0LTkzNDItYTUwM2VjNjNj
YWMxMB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk
Y2E5YmE2ZDgtNDE1Yy00YTAwLTk0N2MtNDRiZTQ4ZGZhNmVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0M5ybYPkvqfbSMDyY4J8TOjDc615RVHF9fJa
+nWQyIXSj5yfU5hmNBHWL3hhusoh94dNW7PEhIU3uFi6lUZcyYARXmjdcTFvMIdQ
L3q89/hVHDl7lk+b7BjZbGQnrZd4VuASYV5+Q6davb/AkTrjkPxLiAjpmPAGBD0d
3zVyUr3q7myiokkSKVQ8Q/Xme8GLd4N8IpGfEM7ejep+OS0UUTe0uGXFkVqF/ZGu
fNDSMzmqeIQKekd8z5u0Tkn8fC6QtCqqbzMIp3FEJfdsD0OV+bBGA0J6SNazH8vO
dSHXhLJQ/0ePJDf58kYkKpDIEjIKU9KhZCJ1gQX4irhVb11j7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGoXowV7/HBRmADXU9s4WHeHv3IVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zZDAy
MmU0ZC1hMmVjLTRkMTQtOTM0Mi1hNTAzZWM2M2NhYzEvYzk3YTBhZDEtZGUzNy0z
YmY1LTg5NTktYTVkNzYxZmQ0NjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvM2QwMjJlNGQtYTJlYy00ZDE0LTkz
NDItYTUwM2VjNjNjYWMxLzNkMDIyZTRkLWEyZWMtNGQxNC05MzQyLWE1MDNlYzYz
Y2FjMS5jcmwwHwYDVR0jBBgwFoAUgHm9sfFWLm0kPO1+jBcQL6YwK8kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8zZDAyMmU0ZC1hMmVjLTRkMTQtOTM0Mi1hNTAz
ZWM2M2NhYzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzez8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALK30p3hi/nD9qRZWP248KGxTriHDw99TWki2AV4inea59CiThWe2Zdx
Fmc/iYQjxMtoxJfNr7lv/xQrQ1vKo24TBA4/m6ezySQSYxoYbMfUgUai5o/0JTqk
YizBuumljWGPKjsu6w+QA5DULvEutkDEaByW/fP8B11Nt9CnFPYl7JO8SJwFxj7g
fwb5GQ0/o/AQWK5GaWKhFJ/1+U1A2MTGBN2OZgLWlXZ6z60HgFNgqPipo8XYaGfE
7qqJJxKeuHM5t7BePfHVWXIt18cNdvBTSylERUUbwNIW/CgU7Gt8YFEDlM+R1AeA
MxDmSDc35BY8ETiYR4i5+P/3oauk/wo=
-----END CERTIFICATE-----
Generated at Fri Sep 25 22:52:59 2026 by rpki-client