Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/c8f0cd86-4ebb-32b7-ac3e-e84be7296847.roa
File:                     c8f0cd86-4ebb-32b7-ac3e-e84be7296847.roa (raw, json)
Hash identifier:          kZtFSJpWzP3GgqC3ZMoHvbn6yvxofhz/+wGQnpya1hQ=
Subject key identifier:   10:E5:B5:94:A3:58:B4:99:A5:D0:DF:F6:EB:57:0C:15:4C:4C:27:AA
Certificate issuer:       /CN=109733f6-670d-4e02-a6e2-403ebf727263
Certificate serial:       010D0C9F4328584EF7176C4C4B11F42516178200
Authority key identifier: E9:5C:E4:04:D3:8F:E8:AD:35:EE:F9:60:53:56:92:9D:0E:C1:79:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/c8f0cd86-4ebb-32b7-ac3e-e84be7296847.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     7761
IP address blocks:        206.220.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/109733f6-670d-4e02-a6e2-403ebf727263.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/109733f6-670d-4e02-a6e2-403ebf727263.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:6c:4c:4b:11:f4:25:16:17:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=109733f6-670d-4e02-a6e2-403ebf727263
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=a4954377-5652-45a7-9692-4dee48c0880d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:15:9a:6c:c7:f3:a1:e4:50:22:fa:69:b4:a3:
                    08:97:3a:95:8b:79:89:73:61:be:91:1a:18:7a:b3:
                    25:48:f5:06:69:32:f0:22:b6:47:28:7b:dd:02:51:
                    e8:8d:2c:95:e4:74:51:d2:2c:59:2a:2f:e7:16:16:
                    51:2d:be:6c:3e:8e:4d:41:04:8f:0b:9b:71:dd:60:
                    37:6e:a3:9f:fb:7b:e2:0f:f3:38:72:d3:80:f3:cf:
                    e3:f7:97:31:f8:a8:43:b4:28:f8:ca:94:dd:5a:8f:
                    da:44:96:b7:df:89:a9:b8:37:44:67:b8:dd:2e:44:
                    98:15:41:ae:7d:a3:2d:a1:9d:21:5f:59:9d:e0:56:
                    95:e6:c6:a2:a2:60:b8:e2:77:dc:a4:ac:28:33:aa:
                    6a:c9:ef:c9:b5:3c:50:34:6b:68:95:0d:7e:8e:21:
                    79:f5:a5:32:57:f0:c6:b0:55:31:e2:e4:2c:1a:84:
                    55:c8:6d:f7:81:9e:0c:aa:a7:62:fc:d9:7b:d2:0a:
                    2f:03:23:5e:cd:88:ed:88:dd:df:2d:c8:ac:a0:76:
                    44:b6:b2:45:57:04:6f:39:de:73:ef:3e:d1:83:56:
                    db:b1:d9:64:8a:5c:ed:72:c9:7a:fc:c3:09:2a:a3:
                    05:e2:cf:a6:ee:7c:ad:98:a1:0c:3d:d0:14:ce:1b:
                    e5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:E5:B5:94:A3:58:B4:99:A5:D0:DF:F6:EB:57:0C:15:4C:4C:27:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/c8f0cd86-4ebb-32b7-ac3e-e84be7296847.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/109733f6-670d-4e02-a6e2-403ebf727263.crl

            X509v3 Authority Key Identifier:
                keyid:E9:5C:E4:04:D3:8F:E8:AD:35:EE:F9:60:53:56:92:9D:0E:C1:79:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.220.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:5f:e9:19:bd:49:68:12:4a:3d:d7:79:9e:78:e3:79:31:27:
         c6:4a:6b:78:09:88:17:09:e3:31:5f:26:14:26:6c:6f:3c:c2:
         64:5c:d7:d6:e9:39:43:eb:91:de:d3:81:10:c3:49:46:95:e9:
         bf:53:30:56:94:f1:9e:7d:37:78:4d:5d:01:9e:6e:d3:8b:1b:
         82:e5:a2:cf:62:10:7e:2e:e0:b4:53:cf:c5:47:78:ec:40:df:
         3c:c5:9f:d4:a6:42:41:f8:d5:03:15:25:71:a3:c9:2c:bf:c8:
         e3:e1:ff:41:04:fd:51:18:08:22:5c:38:d4:20:25:75:c4:f2:
         38:71:8e:db:da:b1:f5:ab:b3:80:79:a4:2e:8d:26:94:15:01:
         e9:91:c5:e0:85:7b:26:a7:c6:53:cc:c4:c0:ec:1f:18:f4:54:
         41:df:e1:e8:41:54:a4:6a:18:f3:cf:b9:d4:f0:7e:3f:87:8b:
         b4:3a:05:b2:7b:74:c5:e2:e2:e9:b2:17:75:4f:b9:42:0b:d5:
         9b:81:2e:55:5f:aa:93:12:e5:b1:49:e0:2e:03:05:e8:81:45:
         b5:74:86:3f:bf:d7:ec:b1:d8:be:cb:38:ad:7e:84:77:66:ab:
         b2:84:bb:ac:85:c6:78:e3:69:3b:21:46:c3:cc:5b:c8:bb:28:
         86:b3:fa:a8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F2xMSxH0JRYXggAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTA5NzMzZjYtNjcwZC00ZTAyLWE2ZTItNDAzZWJmNzI3
MjYzMB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk
YTQ5NTQzNzctNTY1Mi00NWE3LTk2OTItNGRlZTQ4YzA4ODBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxWabMfzoeRQIvpptKMIlzqVi3mJc2G+kRoY
erMlSPUGaTLwIrZHKHvdAlHojSyV5HRR0ixZKi/nFhZRLb5sPo5NQQSPC5tx3WA3
bqOf+3viD/M4ctOA88/j95cx+KhDtCj4ypTdWo/aRJa334mpuDdEZ7jdLkSYFUGu
faMtoZ0hX1md4FaV5saiomC44nfcpKwoM6pqye/JtTxQNGtolQ1+jiF59aUyV/DG
sFUx4uQsGoRVyG33gZ4Mqqdi/Nl70govAyNezYjtiN3fLcisoHZEtrJFVwRvOd5z
7z7Rg1bbsdlkilztcsl6/MMJKqMF4s+m7nytmKEMPdAUzhvlRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBDltZSjWLSZpdDf9utXDBVMTCeqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xMDk3
MzNmNi02NzBkLTRlMDItYTZlMi00MDNlYmY3MjcyNjMvYzhmMGNkODYtNGViYi0z
MmI3LWFjM2UtZTg0YmU3Mjk2ODQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTA5NzMzZjYtNjcwZC00ZTAyLWE2
ZTItNDAzZWJmNzI3MjYzLzEwOTczM2Y2LTY3MGQtNGUwMi1hNmUyLTQwM2ViZjcy
NzI2My5jcmwwHwYDVR0jBBgwFoAU6VzkBNOP6K017vlgU1aSnQ7BeSswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8xMDk3MzNmNi02NzBkLTRlMDItYTZlMi00MDNl
YmY3MjcyNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAztwQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABNf6Rm9SWgSSj3XeZ5443kxJ8ZKa3gJiBcJ4zFfJhQmbG88wmRc19bp
OUPrkd7TgRDDSUaV6b9TMFaU8Z59N3hNXQGebtOLG4Llos9iEH4u4LRTz8VHeOxA
3zzFn9SmQkH41QMVJXGjySy/yOPh/0EE/VEYCCJcONQgJXXE8jhxjtvasfWrs4B5
pC6NJpQVAemRxeCFeyanxlPMxMDsHxj0VEHf4ehBVKRqGPPPudTwfj+Hi7Q6BbJ7
dMXi4umyF3VPuUIL1ZuBLlVfqpMS5bFJ4C4DBeiBRbV0hj+/1+yx2L7LOK1+hHdm
q7KEu6yFxnjjaTshRsPMW8i7KIaz+qg=
-----END CERTIFICATE-----
Generated at Thu Sep 24 23:44:13 2026 by rpki-client