Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/48f08d96-e785-349f-a3b6-72f721f02ddf.roa
File:                     48f08d96-e785-349f-a3b6-72f721f02ddf.roa (raw, json)
Hash identifier:          94NHoQ5c6MS7nUpAxwhZzF9cK0MkRHubLgOd+BJuFNY=
Subject key identifier:   E2:0A:08:29:0D:D9:E7:DB:03:F1:5D:37:E0:D7:64:C5:8C:66:FA:96
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F4328584F497CD9AA8BEF70630592BAC0
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/48f08d96-e785-349f-a3b6-72f721f02ddf.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36492
IP address blocks:        209.107.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7c:d9:aa:8b:ef:70:63:05:92:ba:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=e4796cd8-e068-490d-b4c8-cd539dd8f6f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:41:83:16:35:91:d9:df:04:84:8a:3c:9f:e0:
                    b7:7a:f7:61:fc:84:e7:45:e2:2f:d3:ec:db:22:03:
                    da:ef:5b:16:11:93:44:d2:c5:25:82:13:67:79:16:
                    39:1e:26:a3:ea:4b:30:ad:67:a9:8c:1b:32:d1:87:
                    0c:c0:34:03:34:69:86:e6:c8:6c:16:8f:f5:0c:ad:
                    a9:36:66:99:6c:28:46:71:d3:2a:60:56:89:37:aa:
                    ab:cc:e7:87:df:77:4e:f5:28:98:c6:83:cd:4f:52:
                    7c:f0:d8:2c:ee:1c:82:1e:e8:04:f5:88:9b:d5:31:
                    70:fc:07:d5:7b:cf:25:05:0e:93:e7:d1:4b:91:69:
                    d2:7d:a1:31:16:9d:a7:a1:c3:9b:12:b3:75:3c:10:
                    26:19:de:bd:8d:bc:3b:ef:25:b5:cd:c0:17:02:4d:
                    23:61:2a:df:7b:a0:28:db:38:09:79:ba:c1:8c:68:
                    6c:e1:9c:08:9e:71:0f:40:69:9c:09:67:e2:fd:78:
                    f5:dd:86:dd:ec:a2:b0:ac:8c:d4:3b:5c:ea:aa:c3:
                    b5:fc:19:fe:41:ab:1e:23:2a:ce:08:d9:83:d0:cb:
                    f2:8f:f7:73:74:c0:5d:e1:2c:bf:fc:68:0a:46:ba:
                    80:4f:34:f7:c8:c2:08:b8:91:99:2a:9f:88:23:2c:
                    b6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:0A:08:29:0D:D9:E7:DB:03:F1:5D:37:E0:D7:64:C5:8C:66:FA:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/48f08d96-e785-349f-a3b6-72f721f02ddf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.107.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:be:0f:02:9b:74:31:a0:b2:3d:d4:b7:27:97:f1:27:22:e6:
         e0:af:bc:ce:5e:4f:24:e6:60:30:1a:81:c4:8a:ca:55:e0:b0:
         c4:f7:cd:63:ea:b2:44:8e:66:7f:c4:77:d8:cf:00:0a:55:2a:
         75:a3:84:10:9f:5b:f8:e2:ec:c1:6c:a2:98:3c:2c:1a:b7:dd:
         8a:42:cb:4e:12:41:b2:38:c7:ee:91:37:e0:91:b2:3a:8e:82:
         f0:53:93:d1:96:7a:fb:67:23:f1:94:65:52:73:83:da:4b:13:
         8b:a5:fd:15:8b:71:21:86:19:08:d4:3b:18:34:ca:ba:96:6c:
         f2:7a:e6:b6:05:9d:5d:89:ea:fd:ec:53:ba:b9:18:7c:77:13:
         48:79:b8:cf:b3:b5:4d:3d:ab:05:5c:9b:b9:95:2c:9c:80:8f:
         74:3b:83:4a:d5:9c:12:17:a3:4f:49:91:7a:d9:1a:29:a2:57:
         bf:a4:24:40:88:aa:20:7b:36:e2:7b:f8:a8:94:4b:a4:b1:fd:
         70:2d:aa:44:12:6c:b9:8e:42:5d:3b:de:63:44:df:e5:8b:b7:
         50:2a:f3:e5:ea:51:e5:53:8d:8e:be:d6:ac:0c:ff:bf:a6:a8:
         91:75:b2:e2:08:07:33:f3:94:08:58:8e:ae:9f:68:aa:f5:99:
         6b:e4:2f:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfNmqi+9wYwWSusAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWY0M2U1MmYtOTBkZC00YmFmLThiMzYtNzk1Y2FiZTY5
ZTJkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZTQ3OTZjZDgtZTA2OC00OTBkLWI0YzgtY2Q1MzlkZDhmNmY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikGDFjWR2d8EhIo8n+C3evdh/ITnReIv0+zb
IgPa71sWEZNE0sUlghNneRY5Hiaj6kswrWepjBsy0YcMwDQDNGmG5shsFo/1DK2p
NmaZbChGcdMqYFaJN6qrzOeH33dO9SiYxoPNT1J88Ngs7hyCHugE9Yib1TFw/AfV
e88lBQ6T59FLkWnSfaExFp2nocObErN1PBAmGd69jbw77yW1zcAXAk0jYSrfe6Ao
2zgJebrBjGhs4ZwInnEPQGmcCWfi/Xj13Ybd7KKwrIzUO1zqqsO1/Bn+QaseIyrO
CNmD0Mvyj/dzdMBd4Sy//GgKRrqATzT3yMIIuJGZKp+IIyy2rwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOIKCCkN2efbA/FdN+DXZMWMZvqWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQz
ZTUyZi05MGRkLTRiYWYtOGIzNi03OTVjYWJlNjllMmQvNDhmMDhkOTYtZTc4NS0z
NDlmLWEzYjYtNzJmNzIxZjAyZGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZWY0M2U1MmYtOTBkZC00YmFmLThi
MzYtNzk1Y2FiZTY5ZTJkL2VmNDNlNTJmLTkwZGQtNGJhZi04YjM2LTc5NWNhYmU2
OWUyZC5jcmwwHwYDVR0jBBgwFoAU6iNeR234DQxqzLkCn+8rY968DzEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQzZTUyZi05MGRkLTRiYWYtOGIzNi03OTVj
YWJlNjllMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Wu0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADu+DwKbdDGgsj3UtyeX8Sci5uCvvM5eTyTmYDAagcSKylXgsMT3zWPq
skSOZn/Ed9jPAApVKnWjhBCfW/ji7MFsopg8LBq33YpCy04SQbI4x+6RN+CRsjqO
gvBTk9GWevtnI/GUZVJzg9pLE4ul/RWLcSGGGQjUOxg0yrqWbPJ65rYFnV2J6v3s
U7q5GHx3E0h5uM+ztU09qwVcm7mVLJyAj3Q7g0rVnBIXo09JkXrZGimiV7+kJECI
qiB7NuJ7+KiUS6Sx/XAtqkQSbLmOQl073mNE3+WLt1Aq8+XqUeVTjY6+1qwM/7+m
qJF1suIIBzPzlAhYjq6faKr1mWvkL9I=
-----END CERTIFICATE-----
Generated at Sun Sep 27 04:10:43 2026 by rpki-client