Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4a90e3bd-d802-3c7e-82d3-d46b36ca4554.roa
File:                     4a90e3bd-d802-3c7e-82d3-d46b36ca4554.roa (raw, json)
Hash identifier:          qbl+wgdfxHrTJv9OEDAj7OFkGFyWtYnWw4l47cxjNJE=
Subject key identifier:   4A:26:D8:13:60:45:CA:F9:F7:A1:E3:69:58:C7:FC:0C:41:F6:DF:AB
Certificate issuer:       /CN=4d4940f4-61c2-4251-acdb-36be83cdc744
Certificate serial:       010D0C9F4328584F19FCF25DFC58F297F524E480
Authority key identifier: 3D:D7:AF:D6:4E:83:98:16:38:2C:81:FD:92:56:D2:87:6A:33:99:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4a90e3bd-d802-3c7e-82d3-d46b36ca4554.roa
Signing time:             Tue 08 Sep 2026 01:00:12 +0000
ROA not before:           Tue 08 Sep 2026 01:00:12 +0000
ROA not after:            Mon 07 Dec 2026 02:00:12 +0000
asID:                     1403
IP address blocks:        204.48.0.0/22 maxlen: 24
                          204.48.4.0/24 maxlen: 24
                          204.48.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:19:fc:f2:5d:fc:58:f2:97:f5:24:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d4940f4-61c2-4251-acdb-36be83cdc744
        Validity
            Not Before: Sep  8 01:00:12 2026 GMT
            Not After : Dec  7 02:00:12 2026 GMT
        Subject: CN=171276b5-6f50-4626-895b-a4e9ab1ac8aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:01:f3:69:1e:37:b8:89:d0:69:bf:0b:42:1d:
                    6b:b9:7d:e3:31:66:ce:89:7d:54:3d:bd:6f:26:b3:
                    af:b5:c5:f4:b0:8b:11:b2:64:4c:1c:84:84:95:c5:
                    14:5e:a4:45:33:a3:a9:b8:b1:f5:0c:20:35:74:a4:
                    92:9f:08:07:ab:01:8e:ae:51:41:4c:8f:49:d3:40:
                    70:32:fc:38:dd:11:44:bf:4a:53:bf:c3:41:cf:7f:
                    f7:80:9e:9b:c3:7c:70:b6:a0:4b:d1:21:4c:37:e5:
                    00:72:a6:91:6f:a4:55:ba:55:57:39:14:0a:bc:43:
                    8e:dc:6e:71:da:af:4a:da:1c:eb:14:a1:f5:2b:f4:
                    11:98:ab:94:7e:fb:af:8e:dc:72:5a:84:82:d7:33:
                    86:a0:0e:30:99:fc:c9:67:fc:a7:60:0c:5a:4b:58:
                    b8:7d:d8:10:ff:19:1c:d6:0c:42:01:70:05:52:9f:
                    3a:ea:19:53:e1:69:05:07:45:72:3d:17:b8:19:b5:
                    72:a0:ce:0b:2c:21:d5:1f:d2:f0:08:69:e3:82:8a:
                    90:92:3f:89:a2:14:ff:ea:92:4e:44:7a:66:a6:25:
                    7e:88:ce:77:31:1b:a2:1b:60:16:c7:fc:d8:b3:9a:
                    eb:99:25:6d:0e:77:21:27:8f:1a:28:c9:8e:ca:16:
                    63:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:26:D8:13:60:45:CA:F9:F7:A1:E3:69:58:C7:FC:0C:41:F6:DF:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4a90e3bd-d802-3c7e-82d3-d46b36ca4554.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.crl

            X509v3 Authority Key Identifier:
                keyid:3D:D7:AF:D6:4E:83:98:16:38:2C:81:FD:92:56:D2:87:6A:33:99:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.48.0.0-204.48.4.255
                  204.48.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:04:95:bb:b4:e5:ff:1a:f8:03:19:75:d1:aa:2f:20:5d:f4:
         6b:88:f7:4d:3e:24:77:02:5c:a6:06:5b:d9:25:a1:97:76:89:
         a0:e5:3d:19:04:ea:ab:be:b8:23:ed:f8:74:9e:50:f2:b9:88:
         cd:53:6c:65:96:04:9e:b9:fe:b1:76:1b:12:20:30:c2:98:f9:
         f9:8a:2d:8d:a7:3e:b7:00:3e:ff:e5:ca:ea:91:d7:42:e0:c4:
         7e:e6:ff:a0:2e:a8:ef:22:b5:e2:c7:a9:67:7c:d7:96:aa:af:
         14:4b:d2:24:a2:c0:08:95:2a:75:09:e3:70:dd:15:98:81:9d:
         5c:1b:05:58:d2:1b:dd:6b:e5:6e:c1:15:2f:1e:2d:db:b3:e1:
         89:5c:0e:c8:60:38:8e:9f:6c:aa:2c:ef:f7:81:27:7a:07:47:
         1f:22:4d:c5:52:d7:8d:cc:57:4e:77:e1:de:64:27:66:fa:82:
         66:6b:9b:c8:37:3a:85:3b:ea:56:95:95:a1:99:bb:0f:09:69:
         27:bf:e7:1d:fd:68:d5:a1:b4:21:d6:93:33:0e:e6:26:a9:29:
         18:86:88:42:af:5d:1e:7b:7b:2c:8d:9a:93:8c:65:f2:af:9e:
         4c:49:2e:94:22:0e:6a:42:3e:d5:e5:9e:ef:aa:ef:4e:b9:f5:
         76:8c:bb:e3
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE8Z/PJd/Fjyl/Uk5IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGQ0OTQwZjQtNjFjMi00MjUxLWFjZGItMzZiZTgzY2Rj
NzQ0MB4XDTI2MDkwODAxMDAxMloXDTI2MTIwNzAyMDAxMlowLzEtMCsGA1UEAxMk
MTcxMjc2YjUtNmY1MC00NjI2LTg5NWItYTRlOWFiMWFjOGFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwHzaR43uInQab8LQh1ruX3jMWbOiX1UPb1v
JrOvtcX0sIsRsmRMHISElcUUXqRFM6OpuLH1DCA1dKSSnwgHqwGOrlFBTI9J00Bw
Mvw43RFEv0pTv8NBz3/3gJ6bw3xwtqBL0SFMN+UAcqaRb6RVulVXORQKvEOO3G5x
2q9K2hzrFKH1K/QRmKuUfvuvjtxyWoSC1zOGoA4wmfzJZ/ynYAxaS1i4fdgQ/xkc
1gxCAXAFUp866hlT4WkFB0VyPRe4GbVyoM4LLCHVH9LwCGnjgoqQkj+JohT/6pJO
RHpmpiV+iM53MRuiG2AWx/zYs5rrmSVtDnchJ48aKMmOyhZjhQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFEom2BNgRcr596HjaVjH/AxB9t+rMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80ZDQ5
NDBmNC02MWMyLTQyNTEtYWNkYi0zNmJlODNjZGM3NDQvNGE5MGUzYmQtZDgwMi0z
YzdlLTgyZDMtZDQ2YjM2Y2E0NTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGQ0OTQwZjQtNjFjMi00MjUxLWFj
ZGItMzZiZTgzY2RjNzQ0LzRkNDk0MGY0LTYxYzItNDI1MS1hY2RiLTM2YmU4M2Nk
Yzc0NC5jcmwwHwYDVR0jBBgwFoAUPdev1k6DmBY4LIH9klbSh2ozmcIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS80ZDQ5NDBmNC02MWMyLTQyNTEtYWNkYi0zNmJl
ODNjZGM3NDQuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAATATMAsDAwTMMAME
AMwwBAMEAMwwBzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCVBJW7tOX/GvgDGXXRqi8gXfRriPdNPiR3Alym
BlvZJaGXdomg5T0ZBOqrvrgj7fh0nlDyuYjNU2xllgSeuf6xdhsSIDDCmPn5ii2N
pz63AD7/5crqkddC4MR+5v+gLqjvIrXix6lnfNeWqq8US9IkosAIlSp1CeNw3RWY
gZ1cGwVY0hvda+VuwRUvHi3bs+GJXA7IYDiOn2yqLO/3gSd6B0cfIk3FUteNzFdO
d+HeZCdm+oJma5vINzqFO+pWlZWhmbsPCWknv+cd/WjVobQh1pMzDuYmqSkYhohC
r10ee3ssjZqTjGXyr55MSS6UIg5qQj7V5Z7vqu9OufV2jLvj
-----END CERTIFICATE-----
Generated at Sun Sep 20 22:00:22 2026 by rpki-client