Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9694678-237c-4d99-9589-b106509825b7/9d0b75c2-1053-3f5e-b132-79c5992e80a4.roa
File:                     9d0b75c2-1053-3f5e-b132-79c5992e80a4.roa (raw, json)
Hash identifier:          UVDD6XGvANYSv9WPa0d5Rffi+sDM82fywMQ35SecGVc=
Subject key identifier:   35:E9:23:2F:55:72:B5:32:98:E6:C0:C8:7D:9D:DF:49:F6:F1:BC:5D
Certificate issuer:       /CN=f9694678-237c-4d99-9589-b106509825b7
Certificate serial:       010D0C9F4328584E23D995E9CC45282A83D9B8B4
Authority key identifier: 8B:CF:88:DA:27:11:AD:8D:37:6D:86:0D:0B:C4:6F:2C:8B:93:74:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9694678-237c-4d99-9589-b106509825b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9694678-237c-4d99-9589-b106509825b7/9d0b75c2-1053-3f5e-b132-79c5992e80a4.roa
Signing time:             Thu 11 Jun 2026 21:00:11 +0000
ROA not before:           Thu 11 Jun 2026 21:00:11 +0000
ROA not after:            Wed 09 Sep 2026 21:00:11 +0000
asID:                     5511
IP address blocks:        167.254.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9694678-237c-4d99-9589-b106509825b7/f9694678-237c-4d99-9589-b106509825b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9694678-237c-4d99-9589-b106509825b7/f9694678-237c-4d99-9589-b106509825b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9694678-237c-4d99-9589-b106509825b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:23:d9:95:e9:cc:45:28:2a:83:d9:b8:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9694678-237c-4d99-9589-b106509825b7
        Validity
            Not Before: Jun 11 21:00:11 2026 GMT
            Not After : Sep  9 21:00:11 2026 GMT
        Subject: CN=d0adcc9e-23be-44c0-889c-e3075bc89a57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:94:c6:82:a5:d8:f8:ff:c2:b6:71:a9:07:09:
                    85:b2:4f:ed:82:61:38:f2:4b:8c:7b:86:78:23:f2:
                    84:be:d9:50:6f:fb:02:15:67:20:99:1c:5d:0a:1e:
                    ec:3e:8f:8b:29:87:2f:b8:d7:27:72:59:08:95:76:
                    03:81:dc:10:d8:b8:c9:8d:85:1a:3b:b3:c4:90:04:
                    59:96:d8:c2:f5:e7:ef:f8:28:5e:d2:7a:30:bd:ab:
                    e2:bd:d9:68:a8:07:c0:9b:d7:7b:d9:32:5a:63:e4:
                    16:2e:af:53:a0:7b:93:7d:b8:f1:83:59:3c:e3:51:
                    cb:01:4e:0f:53:ae:2d:0a:44:96:bd:1e:3e:b8:9d:
                    87:a0:61:db:c4:3f:d4:dc:08:ae:1c:86:12:cf:9a:
                    5e:10:af:49:86:a6:a0:16:89:c7:b8:dd:49:67:fe:
                    d0:b7:46:89:87:cc:6f:86:e9:30:6e:f8:47:9e:8d:
                    11:79:39:fb:12:d6:d6:a2:ef:de:25:86:a1:d9:bd:
                    c2:3e:28:78:1e:87:75:c5:0e:71:b6:11:71:ab:18:
                    06:8a:8b:0f:4b:51:61:d6:bc:db:bd:9d:10:10:2d:
                    b5:03:a1:4b:72:9b:a8:2c:ea:cd:de:cf:f6:f6:81:
                    b4:92:28:2f:6c:ec:ed:ce:3e:09:29:dc:6b:f2:ca:
                    66:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:E9:23:2F:55:72:B5:32:98:E6:C0:C8:7D:9D:DF:49:F6:F1:BC:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9694678-237c-4d99-9589-b106509825b7/9d0b75c2-1053-3f5e-b132-79c5992e80a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9694678-237c-4d99-9589-b106509825b7/f9694678-237c-4d99-9589-b106509825b7.crl

            X509v3 Authority Key Identifier:
                keyid:8B:CF:88:DA:27:11:AD:8D:37:6D:86:0D:0B:C4:6F:2C:8B:93:74:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9694678-237c-4d99-9589-b106509825b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.254.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:d5:2c:13:ae:5e:cf:3a:b1:98:b4:01:e5:7b:3e:1a:3f:a4:
         88:49:fc:57:cf:39:27:4e:dc:a6:5e:78:5d:af:13:18:1b:26:
         27:e8:24:5e:6f:75:63:21:da:be:ec:93:25:ce:f6:f8:21:c8:
         93:c9:94:cb:09:fa:35:02:b5:19:2f:8b:61:5a:59:5f:38:69:
         07:a5:b2:11:62:14:3e:50:e9:06:a9:8a:e9:48:99:fe:a3:cc:
         ac:41:76:38:c0:81:64:9b:6c:05:a8:8c:c9:16:91:cd:11:83:
         bd:bd:ca:f2:98:fe:f2:7b:b4:29:6a:46:a4:8b:7f:07:5b:e0:
         22:d8:4c:e7:d9:a3:ea:12:b6:74:21:f0:d8:87:4a:8a:f4:e7:
         b8:7a:94:54:10:be:38:b6:22:00:a3:9d:47:11:fc:6e:ce:b5:
         1f:43:6a:fb:8e:dc:65:19:37:5c:71:7a:c5:c5:7b:ec:4e:02:
         6d:44:32:e0:5e:2a:50:76:7d:4e:1f:cb:8e:2b:20:7b:c2:53:
         e6:37:73:37:4c:ff:aa:62:81:05:6b:c8:23:6c:11:f4:7c:db:
         1d:1a:02:e7:fd:60:bb:61:93:39:5f:79:9e:1a:47:3a:79:66:
         95:d9:42:cc:32:47:09:30:8f:94:81:c4:87:47:f0:be:bb:de:
         7e:1e:b4:a7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4j2ZXpzEUoKoPZuLQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk2OTQ2NzgtMjM3Yy00ZDk5LTk1ODktYjEwNjUwOTgy
NWI3MB4XDTI2MDYxMTIxMDAxMVoXDTI2MDkwOTIxMDAxMVowLzEtMCsGA1UEAxMk
ZDBhZGNjOWUtMjNiZS00NGMwLTg4OWMtZTMwNzViYzg5YTU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5TGgqXY+P/CtnGpBwmFsk/tgmE48kuMe4Z4
I/KEvtlQb/sCFWcgmRxdCh7sPo+LKYcvuNcnclkIlXYDgdwQ2LjJjYUaO7PEkARZ
ltjC9efv+Che0nowvavivdloqAfAm9d72TJaY+QWLq9ToHuTfbjxg1k841HLAU4P
U64tCkSWvR4+uJ2HoGHbxD/U3AiuHIYSz5peEK9JhqagFonHuN1JZ/7Qt0aJh8xv
hukwbvhHno0ReTn7EtbWou/eJYah2b3CPih4Hod1xQ5xthFxqxgGiosPS1Fh1rzb
vZ0QEC21A6FLcpuoLOrN3s/29oG0kigvbOztzj4JKdxr8spmFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDXpIy9VcrUymObAyH2d30n28bxdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9mOTY5
NDY3OC0yMzdjLTRkOTktOTU4OS1iMTA2NTA5ODI1YjcvOWQwYjc1YzItMTA1My0z
ZjVlLWIxMzItNzljNTk5MmU4MGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZjk2OTQ2NzgtMjM3Yy00ZDk5LTk1
ODktYjEwNjUwOTgyNWI3L2Y5Njk0Njc4LTIzN2MtNGQ5OS05NTg5LWIxMDY1MDk4
MjViNy5jcmwwHwYDVR0jBBgwFoAUi8+I2icRrY03bYYNC8RvLIuTdIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi9mOTY5NDY3OC0yMzdjLTRkOTktOTU4OS1iMTA2
NTA5ODI1YjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/7IMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEfVLBOuXs86sZi0AeV7Pho/pIhJ/FfPOSdO3KZeeF2vExgbJifoJF5v
dWMh2r7skyXO9vghyJPJlMsJ+jUCtRkvi2FaWV84aQelshFiFD5Q6QapiulImf6j
zKxBdjjAgWSbbAWojMkWkc0Rg729yvKY/vJ7tClqRqSLfwdb4CLYTOfZo+oStnQh
8NiHSor057h6lFQQvji2IgCjnUcR/G7OtR9DavuO3GUZN1xxesXFe+xOAm1EMuBe
KlB2fU4fy44rIHvCU+Y3czdM/6pigQVryCNsEfR82x0aAuf9YLthkzlfeZ4aRzp5
ZpXZQswyRwkwj5SBxIdH8L673n4etKc=
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:42:52 2026 by rpki-client