Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/c8f0cd86-4ebb-32b7-ac3e-e84be7296847.roa
File:                     c8f0cd86-4ebb-32b7-ac3e-e84be7296847.roa (raw, json)
Hash identifier:          IsayZ19kWUYi2Cl4sklz3u23Ux7eHvhMIUtUL5rNvNY=
Subject key identifier:   26:CC:09:9B:F3:FE:5D:19:06:C5:4E:69:9D:16:F4:7F:30:59:45:23
Certificate issuer:       /CN=109733f6-670d-4e02-a6e2-403ebf727263
Certificate serial:       010D0C9F4328584C93D1A474BAC062C9BF83B280
Authority key identifier: E9:5C:E4:04:D3:8F:E8:AD:35:EE:F9:60:53:56:92:9D:0E:C1:79:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/c8f0cd86-4ebb-32b7-ac3e-e84be7296847.roa
Signing time:             Mon 19 Jan 2026 14:00:38 +0000
ROA not before:           Mon 19 Jan 2026 14:00:38 +0000
ROA not after:            Sun 19 Apr 2026 13:00:38 +0000
asID:                     7761
IP address blocks:        206.220.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/109733f6-670d-4e02-a6e2-403ebf727263.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/109733f6-670d-4e02-a6e2-403ebf727263.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:93:d1:a4:74:ba:c0:62:c9:bf:83:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=109733f6-670d-4e02-a6e2-403ebf727263
        Validity
            Not Before: Jan 19 14:00:38 2026 GMT
            Not After : Apr 19 13:00:38 2026 GMT
        Subject: CN=8a4c359b-5493-4706-8e39-4eaeb5e2d5c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:49:48:c2:fe:45:39:05:36:91:44:83:7e:61:
                    7d:59:cb:4a:f9:b1:91:fd:58:2f:a6:2d:c2:f6:ca:
                    b3:d6:a3:2b:78:0a:34:ad:36:58:46:28:5a:85:98:
                    5c:00:51:b0:0c:5c:fb:b7:ab:0d:4d:0e:17:27:21:
                    a3:02:ae:74:25:08:39:86:36:27:c1:c7:e5:fd:ca:
                    32:6b:08:70:aa:c9:2e:75:f4:35:0a:9d:65:95:a5:
                    0f:96:23:6d:63:3e:41:a5:49:11:69:ba:5b:de:83:
                    5c:59:b6:03:9a:92:ce:8d:17:2e:28:cc:aa:aa:36:
                    eb:0e:33:5d:a5:b6:1b:bd:15:cd:8c:35:96:b3:37:
                    8f:87:98:54:44:6f:d2:cc:d4:fa:76:9f:2f:93:cd:
                    e9:87:b5:fa:7f:25:43:16:bf:03:72:e9:df:39:19:
                    2b:24:71:76:ce:21:6d:62:a4:5e:dc:c4:9c:da:3c:
                    82:1b:5e:13:e0:4a:0c:f0:f8:4f:98:88:52:82:d5:
                    11:da:ae:73:5e:64:30:3a:32:97:54:e7:de:f9:e0:
                    94:96:32:81:a5:9a:69:ad:29:e5:9b:5a:33:df:af:
                    a5:67:25:20:76:0a:16:06:c2:96:a5:94:2f:f7:61:
                    ec:5a:1e:47:24:88:25:b0:b8:c3:98:e9:00:be:b2:
                    5d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:CC:09:9B:F3:FE:5D:19:06:C5:4E:69:9D:16:F4:7F:30:59:45:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/c8f0cd86-4ebb-32b7-ac3e-e84be7296847.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/109733f6-670d-4e02-a6e2-403ebf727263.crl

            X509v3 Authority Key Identifier:
                keyid:E9:5C:E4:04:D3:8F:E8:AD:35:EE:F9:60:53:56:92:9D:0E:C1:79:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.220.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:7c:d4:5e:9f:6e:e7:93:bc:cf:45:6a:7c:2d:e6:20:91:32:
         09:3b:0b:e3:d6:90:1a:88:ea:41:c2:a7:38:7a:71:8e:0c:95:
         d8:af:35:52:36:24:4a:c5:b3:34:7e:58:83:1c:8d:b9:04:57:
         7c:62:c9:18:73:3a:c3:76:8b:00:4e:6b:8c:ae:5a:20:e0:63:
         f6:c8:e8:a3:79:54:d3:b4:38:9b:4d:b0:84:2b:71:84:9e:df:
         f1:b7:c3:4b:17:3c:83:1d:70:a8:78:91:e6:57:dc:2a:e8:63:
         18:1a:d4:fb:0d:32:55:76:52:0d:eb:ed:9e:bd:2a:1d:98:22:
         3a:70:dc:18:90:aa:77:a5:b2:7c:72:e1:0e:ed:ba:d3:97:6b:
         02:70:38:e4:88:5d:b8:ee:62:88:46:5f:77:e6:3a:f2:c5:26:
         dd:0d:1b:26:35:d7:3b:56:6a:2c:ce:24:e6:66:28:87:e5:e7:
         71:cd:5f:f6:ab:de:1f:bd:ae:70:d7:55:cd:3e:65:2f:24:03:
         83:df:d3:59:a7:4a:ea:d3:4a:91:75:08:8a:31:d5:24:14:29:
         d0:23:0b:83:59:dd:87:a4:82:ec:d0:23:73:35:0c:dd:0b:a0:
         a1:73:c2:30:0a:a1:6f:e8:fc:68:3b:7d:ef:9d:74:97:b8:8e:
         56:aa:14:28
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyT0aR0usBiyb+DsoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTA5NzMzZjYtNjcwZC00ZTAyLWE2ZTItNDAzZWJmNzI3
MjYzMB4XDTI2MDExOTE0MDAzOFoXDTI2MDQxOTEzMDAzOFowLzEtMCsGA1UEAxMk
OGE0YzM1OWItNTQ5My00NzA2LThlMzktNGVhZWI1ZTJkNWMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3UlIwv5FOQU2kUSDfmF9WctK+bGR/Vgvpi3C
9sqz1qMreAo0rTZYRihahZhcAFGwDFz7t6sNTQ4XJyGjAq50JQg5hjYnwcfl/coy
awhwqskudfQ1Cp1llaUPliNtYz5BpUkRabpb3oNcWbYDmpLOjRcuKMyqqjbrDjNd
pbYbvRXNjDWWszePh5hURG/SzNT6dp8vk83ph7X6fyVDFr8DcunfORkrJHF2ziFt
YqRe3MSc2jyCG14T4EoM8PhPmIhSgtUR2q5zXmQwOjKXVOfe+eCUljKBpZpprSnl
m1oz36+lZyUgdgoWBsKWpZQv92HsWh5HJIglsLjDmOkAvrJdmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCbMCZvz/l0ZBsVOaZ0W9H8wWUUjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xMDk3
MzNmNi02NzBkLTRlMDItYTZlMi00MDNlYmY3MjcyNjMvYzhmMGNkODYtNGViYi0z
MmI3LWFjM2UtZTg0YmU3Mjk2ODQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTA5NzMzZjYtNjcwZC00ZTAyLWE2
ZTItNDAzZWJmNzI3MjYzLzEwOTczM2Y2LTY3MGQtNGUwMi1hNmUyLTQwM2ViZjcy
NzI2My5jcmwwHwYDVR0jBBgwFoAU6VzkBNOP6K017vlgU1aSnQ7BeSswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8xMDk3MzNmNi02NzBkLTRlMDItYTZlMi00MDNl
YmY3MjcyNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAztwQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJF81F6fbueTvM9Fanwt5iCRMgk7C+PWkBqI6kHCpzh6cY4MldivNVI2
JErFszR+WIMcjbkEV3xiyRhzOsN2iwBOa4yuWiDgY/bI6KN5VNO0OJtNsIQrcYSe
3/G3w0sXPIMdcKh4keZX3CroYxga1PsNMlV2Ug3r7Z69Kh2YIjpw3BiQqnelsnxy
4Q7tutOXawJwOOSIXbjuYohGX3fmOvLFJt0NGyY11ztWaizOJOZmKIfl53HNX/ar
3h+9rnDXVc0+ZS8kA4Pf01mnSurTSpF1CIox1SQUKdAjC4NZ3YekguzQI3M1DN0L
oKFzwjAKoW/o/Gg7fe+ddJe4jlaqFCg=
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:10:25 2026 by rpki-client