Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/5779877d-a72c-3f92-a856-95a7f692b924.roa
File:                     5779877d-a72c-3f92-a856-95a7f692b924.roa (raw, json)
Hash identifier:          XOPss3lewcLk6xeMOCwTPMqORMKOWcwChCKUMndE0CY=
Subject key identifier:   DD:53:94:84:58:67:09:67:62:81:5D:AC:AE:D7:7E:FE:02:CD:FA:AA
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584EA2DFC373047DCFED3EE64643
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/5779877d-a72c-3f92-a856-95a7f692b924.roa
Signing time:             Mon 27 Jul 2026 09:00:12 +0000
ROA not before:           Mon 27 Jul 2026 09:00:12 +0000
ROA not after:            Sun 25 Oct 2026 09:00:12 +0000
asID:                     11105
IP address blocks:        206.12.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a2:df:c3:73:04:7d:cf:ed:3e:e6:46:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Jul 27 09:00:12 2026 GMT
            Not After : Oct 25 09:00:12 2026 GMT
        Subject: CN=cbac8fc2-0ab3-4b71-ad9d-2e5431aca379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:18:e9:3f:27:22:12:a7:16:2c:55:83:7d:74:
                    10:fe:f1:3c:62:cd:dd:2e:15:72:33:20:ac:fa:2b:
                    74:13:b9:1e:8a:05:6e:6b:c3:91:7d:b2:4f:89:8e:
                    55:c4:07:c6:ed:69:ac:43:6d:dd:c8:08:38:61:ea:
                    35:fb:bb:11:19:5b:86:a4:49:ef:1c:23:80:31:c6:
                    f3:c2:f1:0a:51:54:86:9f:f6:49:95:7d:da:05:fb:
                    b8:42:8e:47:cb:3e:89:a7:06:f4:fd:b7:cf:bb:8a:
                    ae:4b:7c:46:da:29:5c:7e:a2:74:07:dc:77:1d:77:
                    10:79:c1:21:e7:65:30:44:a7:3d:d7:9c:5e:ac:77:
                    9e:4e:4d:d1:32:0c:f4:46:6f:12:0b:77:25:0f:9b:
                    fb:ce:9e:0c:46:cf:99:27:01:4e:f2:b0:3e:fd:88:
                    65:ab:49:31:45:b1:92:d9:66:26:fe:55:2e:1a:28:
                    e8:29:5a:0b:92:3e:6e:da:01:8c:15:4d:d5:b2:c1:
                    43:10:28:12:56:20:5f:3f:60:be:63:6b:78:09:14:
                    eb:42:ef:ce:dd:ed:a7:19:f1:2c:78:3e:65:c1:0a:
                    b4:37:ac:f6:fc:7c:dc:50:af:36:c8:88:74:26:dc:
                    1a:b7:69:9f:41:5d:2c:54:76:14:4f:4f:5e:1f:f5:
                    cd:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:53:94:84:58:67:09:67:62:81:5D:AC:AE:D7:7E:FE:02:CD:FA:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/5779877d-a72c-3f92-a856-95a7f692b924.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.12.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:4e:8d:fb:dd:8a:e7:a0:f3:a1:76:62:c1:21:36:a2:28:a5:
         81:a2:59:39:29:37:82:93:0b:12:92:36:55:9c:b2:2c:13:eb:
         e0:02:40:4e:e7:b4:78:63:eb:35:c6:f1:00:1a:8c:1f:bd:8a:
         b4:4f:f6:a7:86:49:34:77:94:2f:86:c8:de:dc:a4:9d:0c:81:
         cf:d4:fd:80:2f:f8:87:d4:35:08:86:28:f5:c1:1c:5a:66:70:
         ee:59:86:f5:f6:b7:8c:f3:24:8d:5d:e5:fc:28:07:86:30:04:
         27:d8:3b:27:b8:98:93:87:78:81:a3:b5:dd:b0:9a:26:97:56:
         72:8f:28:e8:d8:e6:48:ee:e1:9b:43:38:be:1c:0d:90:25:b5:
         b7:2a:1f:7b:35:6d:17:92:9a:9d:fa:5b:fa:ba:34:98:e7:a4:
         d6:e7:cd:45:41:35:4b:71:c2:da:f3:26:ab:ec:ca:e5:7a:8b:
         2c:73:cc:73:7e:5d:d3:ca:2b:54:4c:f1:0c:b0:39:d7:55:0d:
         a7:4b:59:f7:75:6e:32:82:e4:28:f6:73:e4:c5:83:90:31:3d:
         d7:85:ac:08:3b:70:f8:4a:a3:01:fc:32:4e:e0:7e:fc:1b:f9:
         ae:b0:2c:46:bd:66:3d:23:74:4a:c5:da:ae:7f:0a:d5:91:12:
         88:7c:9c:fc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6i38NzBH3P7T7mRkMwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2
OTZjMB4XDTI2MDcyNzA5MDAxMloXDTI2MTAyNTA5MDAxMlowLzEtMCsGA1UEAxMk
Y2JhYzhmYzItMGFiMy00YjcxLWFkOWQtMmU1NDMxYWNhMzc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBjpPyciEqcWLFWDfXQQ/vE8Ys3dLhVyMyCs
+it0E7keigVua8ORfbJPiY5VxAfG7WmsQ23dyAg4Yeo1+7sRGVuGpEnvHCOAMcbz
wvEKUVSGn/ZJlX3aBfu4Qo5Hyz6Jpwb0/bfPu4quS3xG2ilcfqJ0B9x3HXcQecEh
52UwRKc915xerHeeTk3RMgz0Rm8SC3clD5v7zp4MRs+ZJwFO8rA+/Yhlq0kxRbGS
2WYm/lUuGijoKVoLkj5u2gGMFU3VssFDECgSViBfP2C+Y2t4CRTrQu/O3e2nGfEs
eD5lwQq0N6z2/HzcUK82yIh0Jtwat2mfQV0sVHYUT09eH/XNCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN1TlIRYZwlnYoFdrK7Xfv4CzfqqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy
ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvNTc3OTg3N2QtYTcyYy0z
ZjkyLWE4NTYtOTVhN2Y2OTJiOTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh
NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli
Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj
MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzgwQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKVOjfvdiueg86F2YsEhNqIopYGiWTkpN4KTCxKSNlWcsiwT6+ACQE7n
tHhj6zXG8QAajB+9irRP9qeGSTR3lC+GyN7cpJ0Mgc/U/YAv+IfUNQiGKPXBHFpm
cO5ZhvX2t4zzJI1d5fwoB4YwBCfYOye4mJOHeIGjtd2wmiaXVnKPKOjY5kju4ZtD
OL4cDZAltbcqH3s1bReSmp36W/q6NJjnpNbnzUVBNUtxwtrzJqvsyuV6iyxzzHN+
XdPKK1RM8QywOddVDadLWfd1bjKC5Cj2c+TFg5AxPdeFrAg7cPhKowH8Mk7gfvwb
+a6wLEa9Zj0jdErF2q5/CtWREoh8nPw=
-----END CERTIFICATE-----
Generated at Wed Jul 29 13:33:40 2026 by rpki-client