Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/9ecfb9bc-da44-3fc8-8ee2-8f9914c20487.roa
File:                     9ecfb9bc-da44-3fc8-8ee2-8f9914c20487.roa (raw, json)
Hash identifier:          i7w9aDSeN72J87bJnuPKk1Qx5rno6QPcG+8GmsoRA0E=
Subject key identifier:   D7:FC:D9:A5:73:68:5D:97:0C:82:7C:AF:DF:94:5E:38:CE:FA:7F:87
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584CC34744C67B3AEC2F5D52F4C0
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/9ecfb9bc-da44-3fc8-8ee2-8f9914c20487.roa
Signing time:             Thu 05 Feb 2026 14:00:40 +0000
ROA not before:           Thu 05 Feb 2026 14:00:40 +0000
ROA not after:            Wed 06 May 2026 13:00:40 +0000
asID:                     393249
IP address blocks:        206.12.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c3:47:44:c6:7b:3a:ec:2f:5d:52:f4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Feb  5 14:00:40 2026 GMT
            Not After : May  6 13:00:40 2026 GMT
        Subject: CN=667946cf-1a0c-40f8-bade-76462ade3050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:28:9b:ec:0b:2e:ba:ef:8b:4f:d2:92:12:89:
                    f3:22:a8:df:7c:12:d9:1b:d1:77:a7:09:b8:4b:24:
                    fe:8e:d8:24:5a:e0:15:31:5b:28:58:c2:b2:c6:8e:
                    12:86:34:d8:af:73:d7:0e:9e:13:b2:da:c9:5f:d6:
                    30:a5:59:3a:b5:95:10:5b:fa:e5:3c:29:fd:8a:61:
                    6c:02:3f:fb:aa:7f:77:0d:09:f4:2d:f2:2f:58:83:
                    f5:39:51:c4:05:58:0b:d0:c4:3b:b5:58:b3:dc:56:
                    50:04:2b:63:be:94:41:98:92:2a:7c:bb:f5:9c:26:
                    e0:a8:3b:f5:bd:6a:0f:16:13:76:75:1c:39:a7:f4:
                    e5:70:a4:d2:4a:97:14:64:43:70:07:63:3b:f4:01:
                    3d:f6:fa:9e:50:29:23:d9:e5:ac:14:97:02:ac:ea:
                    01:dc:80:38:06:4a:f0:4d:de:c2:73:5c:32:f6:99:
                    dc:b9:cd:ef:67:24:cf:28:32:3a:d3:60:fb:d7:7c:
                    d7:16:ee:b3:67:58:76:63:3a:65:ec:16:d0:aa:cd:
                    09:c1:86:49:3c:af:34:e9:ee:b1:22:9f:02:bc:5b:
                    fc:df:d3:0c:5e:37:4f:82:3e:0d:e2:5b:21:6d:18:
                    46:8e:f4:e8:61:d4:77:4b:ed:04:33:46:ed:82:5f:
                    20:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:FC:D9:A5:73:68:5D:97:0C:82:7C:AF:DF:94:5E:38:CE:FA:7F:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/9ecfb9bc-da44-3fc8-8ee2-8f9914c20487.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.12.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:b6:2f:08:d5:56:98:c5:d4:4c:16:52:63:a3:7f:59:47:50:
         fd:fe:49:46:a5:bf:b6:90:41:8b:08:6e:04:3c:ed:40:41:68:
         d8:d6:b9:43:03:1c:5b:49:a3:f3:d0:a6:dd:1f:35:ce:bc:9d:
         66:e3:25:d5:00:b5:6e:87:21:16:12:70:2f:99:a7:1e:d9:15:
         4e:b9:5b:6a:14:9f:00:89:f3:7f:7e:fb:ab:0b:c0:f3:05:3d:
         21:ae:b0:2c:87:ee:6b:1f:36:8f:77:02:54:cc:b7:8d:b6:cb:
         e2:31:f4:84:59:97:95:d0:c3:66:52:ea:48:63:a8:d5:53:1b:
         64:61:be:6c:4e:bf:2d:0f:47:60:df:8b:fb:e9:b4:49:9b:46:
         c8:6f:d7:a1:bb:9a:a1:fd:13:ad:d6:ac:77:47:83:69:a5:18:
         e7:0c:21:45:b5:1d:58:6d:65:66:30:46:3c:ef:1b:99:91:74:
         02:a0:b3:8a:ce:c6:fa:c3:21:f4:78:18:23:84:8b:1a:50:66:
         02:25:82:20:4a:f3:fc:d2:a5:e2:ed:52:bd:14:e0:33:ff:9a:
         99:a5:0d:49:88:3b:65:16:df:b5:07:98:20:a6:f3:49:3e:28:
         01:cb:8b:19:e0:22:f1:c5:16:c6:35:11:ff:ca:ad:d1:da:15:
         a8:52:63:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzDR0TGezrsL11S9MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2
OTZjMB4XDTI2MDIwNTE0MDA0MFoXDTI2MDUwNjEzMDA0MFowLzEtMCsGA1UEAxMk
NjY3OTQ2Y2YtMWEwYy00MGY4LWJhZGUtNzY0NjJhZGUzMDUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiib7Asuuu+LT9KSEonzIqjffBLZG9F3pwm4
SyT+jtgkWuAVMVsoWMKyxo4ShjTYr3PXDp4TstrJX9YwpVk6tZUQW/rlPCn9imFs
Aj/7qn93DQn0LfIvWIP1OVHEBVgL0MQ7tViz3FZQBCtjvpRBmJIqfLv1nCbgqDv1
vWoPFhN2dRw5p/TlcKTSSpcUZENwB2M79AE99vqeUCkj2eWsFJcCrOoB3IA4Bkrw
Td7Cc1wy9pncuc3vZyTPKDI602D713zXFu6zZ1h2Yzpl7BbQqs0JwYZJPK806e6x
Ip8CvFv839MMXjdPgj4N4lshbRhGjvToYdR3S+0EM0btgl8g4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNf82aVzaF2XDIJ8r9+UXjjO+n+HMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy
ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvOWVjZmI5YmMtZGE0NC0z
ZmM4LThlZTItOGY5OTE0YzIwNDg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh
NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli
Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj
MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzgxAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAu2LwjVVpjF1EwWUmOjf1lHUP3+SUalv7aQQYsIbgQ87UBBaNjWuUMD
HFtJo/PQpt0fNc68nWbjJdUAtW6HIRYScC+Zpx7ZFU65W2oUnwCJ839++6sLwPMF
PSGusCyH7msfNo93AlTMt422y+Ix9IRZl5XQw2ZS6khjqNVTG2RhvmxOvy0PR2Df
i/vptEmbRshv16G7mqH9E63WrHdHg2mlGOcMIUW1HVhtZWYwRjzvG5mRdAKgs4rO
xvrDIfR4GCOEixpQZgIlgiBK8/zSpeLtUr0U4DP/mpmlDUmIO2UW37UHmCCm80k+
KAHLixngIvHFFsY1Ef/KrdHaFahSY/8=
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:36:56 2026 by rpki-client