Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/425d6a66-fa23-3bd3-9949-3c155a0ca901.roa
File:                     425d6a66-fa23-3bd3-9949-3c155a0ca901.roa (raw, json)
Hash identifier:          JQoFPjbhhpiJYNSHcjedHD6sM9cEuF7IQQ/kHQjPfAw=
Subject key identifier:   EE:A3:75:99:FE:52:D8:57:1A:31:26:2B:A8:29:D7:9C:09:73:B5:23
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F58CD4EE9F6F62281D499C9E8
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/425d6a66-fa23-3bd3-9949-3c155a0ca901.roa
Signing time:             Wed 30 Sep 2026 13:00:13 +0000
ROA not before:           Wed 30 Sep 2026 13:00:13 +0000
ROA not after:            Tue 29 Dec 2026 14:00:13 +0000
asID:                     265407
IP address blocks:        206.84.202.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:58:cd:4e:e9:f6:f6:22:81:d4:99:c9:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep 30 13:00:13 2026 GMT
            Not After : Dec 29 14:00:13 2026 GMT
        Subject: CN=98a85eda-5433-45d4-a23e-c4f78a01570a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ab:82:66:94:b0:4f:f4:82:b8:1c:bd:0c:ef:
                    8f:b9:c9:32:cf:c9:c9:b6:22:68:53:57:f0:ca:bb:
                    5b:ae:f3:22:7d:0b:0a:ff:f5:42:94:b9:71:0a:67:
                    a4:be:50:ab:c2:bd:54:fd:92:0c:11:75:43:90:cd:
                    60:76:5b:09:a3:44:59:c6:49:c1:22:6b:10:8b:a4:
                    75:7d:7b:da:56:8f:65:b3:c2:0d:8e:2f:63:f3:4a:
                    d9:2b:34:f3:d8:b3:01:3b:30:99:d1:1b:18:b0:82:
                    ed:0c:24:e9:89:c1:5e:db:70:7b:e3:5a:9f:0b:94:
                    54:43:0c:2e:07:47:55:ef:47:83:10:9d:97:b9:48:
                    e3:2b:74:ec:ca:e6:b3:78:70:d5:b1:dd:fc:bb:8c:
                    66:f8:2f:a9:f6:31:6e:dd:0a:02:2b:bd:e6:50:8e:
                    d0:17:77:ba:92:60:27:c9:ab:c3:29:a7:33:e3:b6:
                    eb:a8:5d:25:8d:22:8a:36:26:a9:d8:0c:d8:3c:b0:
                    46:2a:3a:32:48:1c:45:f8:24:2e:fa:83:3c:5b:26:
                    e6:b0:2b:a2:92:07:f7:54:7e:6b:35:71:1b:3f:a1:
                    17:a3:a9:2a:09:19:f6:b0:99:35:cb:f5:36:7e:2d:
                    3f:49:51:ce:9e:58:ff:4c:2b:1e:8e:a7:cf:ab:90:
                    fd:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:A3:75:99:FE:52:D8:57:1A:31:26:2B:A8:29:D7:9C:09:73:B5:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/425d6a66-fa23-3bd3-9949-3c155a0ca901.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.84.202.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:42:88:60:7e:86:9d:6e:76:b4:bc:02:59:2e:26:91:ba:c8:
         df:b2:5f:f5:b4:ea:d4:36:ef:34:c3:2d:e1:d7:6c:83:a1:15:
         6b:e0:75:ab:0d:55:31:0c:97:af:c7:d6:19:19:69:9d:5a:5e:
         86:bd:3e:35:03:7c:46:5b:30:4b:a1:30:9d:07:7a:21:35:fd:
         c5:84:8e:7d:a2:43:e0:22:e6:69:0a:66:79:7b:18:a4:01:70:
         8f:86:56:83:da:ae:4e:86:d4:04:83:f0:ec:32:d9:f0:e5:ce:
         63:3a:86:26:85:5c:14:f2:f5:2d:b5:8a:73:ba:e1:f0:99:6c:
         93:44:49:27:3e:48:47:19:8e:9d:0a:38:00:0c:65:50:5c:02:
         80:b8:89:29:99:12:e5:c9:bc:c7:c2:ae:dc:bb:dc:32:ab:62:
         e6:cb:64:21:21:e9:4e:2a:83:3f:0d:bd:76:67:29:a0:e7:62:
         d4:2e:25:90:95:cc:f5:2d:10:ff:c6:89:65:40:f5:a2:2b:4c:
         1b:0f:4c:22:b8:88:98:dd:71:d6:f5:c6:78:d6:f7:24:45:e1:
         93:e1:86:f9:12:75:f8:83:ea:3d:97:9d:ed:14:74:6a:c4:59:
         47:9c:eb:8c:9f:d1:33:f7:7f:9f:f9:41:ea:0f:45:98:71:78:
         aa:ff:4d:5e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9YzU7p9vYigdSZyegwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDkzMDEzMDAxM1oXDTI2MTIyOTE0MDAxM1owLzEtMCsGA1UEAxMk
OThhODVlZGEtNTQzMy00NWQ0LWEyM2UtYzRmNzhhMDE1NzBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkauCZpSwT/SCuBy9DO+Puckyz8nJtiJoU1fw
yrtbrvMifQsK//VClLlxCmekvlCrwr1U/ZIMEXVDkM1gdlsJo0RZxknBImsQi6R1
fXvaVo9ls8INji9j80rZKzTz2LMBOzCZ0RsYsILtDCTpicFe23B741qfC5RUQwwu
B0dV70eDEJ2XuUjjK3TsyuazeHDVsd38u4xm+C+p9jFu3QoCK73mUI7QF3e6kmAn
yavDKacz47brqF0ljSKKNiap2AzYPLBGKjoySBxF+CQu+oM8WybmsCuikgf3VH5r
NXEbP6EXo6kqCRn2sJk1y/U2fi0/SVHOnlj/TCsejqfPq5D9hwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO6jdZn+UthXGjEmK6gp15wJc7UjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNDI1ZDZhNjYtZmEyMy0z
YmQzLTk5NDktM2MxNTVhMGNhOTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzlTKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALdCiGB+hp1udrS8AlkuJpG6yN+yX/W06tQ27zTDLeHXbIOhFWvgdasN
VTEMl6/H1hkZaZ1aXoa9PjUDfEZbMEuhMJ0HeiE1/cWEjn2iQ+Ai5mkKZnl7GKQB
cI+GVoPark6G1ASD8Owy2fDlzmM6hiaFXBTy9S21inO64fCZbJNESSc+SEcZjp0K
OAAMZVBcAoC4iSmZEuXJvMfCrty73DKrYubLZCEh6U4qgz8NvXZnKaDnYtQuJZCV
zPUtEP/GiWVA9aIrTBsPTCK4iJjdcdb1xnjW9yRF4ZPhhvkSdfiD6j2Xne0UdGrE
WUec64yf0TP3f5/5QeoPRZhxeKr/TV4=
-----END CERTIFICATE-----
Generated at Sun Oct 4 22:04:13 2026 by rpki-client