Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/04625a27-28ef-3bef-a7a8-07c9ce6580f0.roa
File:                     04625a27-28ef-3bef-a7a8-07c9ce6580f0.roa (raw, json)
Hash identifier:          1qrUlX4L7vbSl0AoWjVaN3jjchCFPNsWfvX2YvGYE+w=
Subject key identifier:   58:2D:05:5E:B4:6E:CE:14:2F:62:B3:8E:86:BF:94:DC:92:ED:EC:FA
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F4328584E059C39937E0751F7576B2A00
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/04625a27-28ef-3bef-a7a8-07c9ce6580f0.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     36492
IP address blocks:        209.107.176.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:39:93:7e:07:51:f7:57:6b:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=8bda09c1-77bd-4e55-91db-3674bccbb369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a2:8f:df:67:17:38:7f:02:4b:03:49:4d:0d:
                    73:8f:03:d1:04:d3:3c:8e:b5:3a:d9:45:9c:dc:3c:
                    5d:c1:70:fc:82:15:9f:8d:b6:24:0a:92:c3:d7:3e:
                    7c:15:dd:5d:73:ea:f6:99:e1:30:36:2c:c4:c8:ec:
                    63:8f:4c:d0:35:21:c2:47:7f:ee:36:8b:3e:56:94:
                    0d:a5:84:81:77:30:82:dd:69:48:47:b8:03:5f:51:
                    de:0b:c2:92:71:ce:86:a3:9e:12:6c:5f:71:c9:79:
                    37:e9:d6:7a:09:ed:f5:6b:74:0e:c2:1a:29:63:0d:
                    53:05:3d:c9:5a:4f:e9:1d:9b:72:58:a6:f0:9b:18:
                    dc:5b:f9:58:b4:b5:7b:7a:49:48:c7:8a:cc:f2:5a:
                    80:2a:9f:6e:79:8e:f5:72:90:23:d8:d7:67:2a:85:
                    05:32:06:45:e3:a7:6f:ff:f7:58:18:4f:ad:24:02:
                    fb:ac:26:8e:3c:99:90:07:4f:56:f7:eb:9d:60:2f:
                    cf:50:b6:b2:76:99:b0:5b:55:61:d7:71:53:33:f8:
                    17:d5:1b:28:f1:d1:c1:51:8e:ef:b9:8f:85:3c:5c:
                    3b:cc:7e:8b:65:b6:7b:6b:98:79:eb:ae:43:e8:08:
                    4b:d8:6f:e1:b5:e8:0b:b0:cc:3c:ee:73:71:1e:75:
                    ef:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:2D:05:5E:B4:6E:CE:14:2F:62:B3:8E:86:BF:94:DC:92:ED:EC:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/04625a27-28ef-3bef-a7a8-07c9ce6580f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.107.176.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:13:80:09:72:58:83:df:b3:c8:03:0d:ba:03:31:3f:20:d5:
         3c:59:05:ae:3d:ea:52:62:a9:70:e3:ee:31:6c:9a:d1:52:ab:
         ad:30:fc:f3:15:ac:57:13:75:10:aa:cc:f4:b6:c6:08:8b:e2:
         65:a2:5d:3c:12:9d:c6:56:be:39:77:46:98:db:15:8f:9d:e4:
         e6:bc:4e:81:2e:3f:b1:d4:9d:53:70:36:37:64:30:5e:ad:43:
         fe:0b:00:35:47:23:b0:4c:92:95:ce:de:9c:86:b8:e2:b5:25:
         08:96:ea:8d:55:02:cc:f9:0c:4d:95:0b:65:73:aa:05:11:7e:
         a1:67:58:26:26:fa:03:bf:24:10:c3:53:ba:73:4d:78:54:5a:
         41:50:e4:4f:a7:d8:f0:f1:42:ce:ba:ed:cd:87:38:a0:b6:22:
         02:78:30:42:25:91:a4:97:85:f6:8f:8f:b1:60:2f:17:ea:87:
         76:b1:59:cd:e7:3d:e7:01:98:09:c9:2b:28:f2:d5:55:fe:91:
         00:8e:63:75:68:a7:23:5c:5b:3e:1a:7e:50:6d:6b:4e:a1:99:
         62:38:96:55:8c:4f:1e:01:cb:d0:55:de:85:45:b3:e0:98:71:
         b1:22:76:b2:1f:0f:ad:0b:49:37:b3:0f:ff:0c:c6:e6:33:b3:
         b2:57:67:1b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnDmTfgdR91drKgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWY0M2U1MmYtOTBkZC00YmFmLThiMzYtNzk1Y2FiZTY5
ZTJkMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk
OGJkYTA5YzEtNzdiZC00ZTU1LTkxZGItMzY3NGJjY2JiMzY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqKP32cXOH8CSwNJTQ1zjwPRBNM8jrU62UWc
3DxdwXD8ghWfjbYkCpLD1z58Fd1dc+r2meEwNizEyOxjj0zQNSHCR3/uNos+VpQN
pYSBdzCC3WlIR7gDX1HeC8KScc6Go54SbF9xyXk36dZ6Ce31a3QOwhopYw1TBT3J
Wk/pHZtyWKbwmxjcW/lYtLV7eklIx4rM8lqAKp9ueY71cpAj2NdnKoUFMgZF46dv
//dYGE+tJAL7rCaOPJmQB09W9+udYC/PULaydpmwW1Vh13FTM/gX1Rso8dHBUY7v
uY+FPFw7zH6LZbZ7a5h5665D6AhL2G/htegLsMw87nNxHnXveQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFgtBV60bs4UL2Kzjoa/lNyS7ez6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQz
ZTUyZi05MGRkLTRiYWYtOGIzNi03OTVjYWJlNjllMmQvMDQ2MjVhMjctMjhlZi0z
YmVmLWE3YTgtMDdjOWNlNjU4MGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZWY0M2U1MmYtOTBkZC00YmFmLThi
MzYtNzk1Y2FiZTY5ZTJkL2VmNDNlNTJmLTkwZGQtNGJhZi04YjM2LTc5NWNhYmU2
OWUyZC5jcmwwHwYDVR0jBBgwFoAU6iNeR234DQxqzLkCn+8rY968DzEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQzZTUyZi05MGRkLTRiYWYtOGIzNi03OTVj
YWJlNjllMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0WuwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABwTgAlyWIPfs8gDDboDMT8g1TxZBa496lJiqXDj7jFsmtFSq60w/PMV
rFcTdRCqzPS2xgiL4mWiXTwSncZWvjl3RpjbFY+d5Oa8ToEuP7HUnVNwNjdkMF6t
Q/4LADVHI7BMkpXO3pyGuOK1JQiW6o1VAsz5DE2VC2VzqgURfqFnWCYm+gO/JBDD
U7pzTXhUWkFQ5E+n2PDxQs667c2HOKC2IgJ4MEIlkaSXhfaPj7FgLxfqh3axWc3n
PecBmAnJKyjy1VX+kQCOY3VopyNcWz4aflBta06hmWI4llWMTx4By9BV3oVFs+CY
cbEidrIfD60LSTezD/8MxuYzs7JXZxs=
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:50:28 2026 by rpki-client