Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0622cee6-db45-4658-9eea-2a0344fcff8c/983f6f0c-c4bd-3eb5-83ab-ca5dfa2a3fa6.roa
File:                     983f6f0c-c4bd-3eb5-83ab-ca5dfa2a3fa6.roa (raw, json)
Hash identifier:          rtd4PsOZ1o2Bf82DUQxDZK85E5/nTZ3NuqrjMijKnM8=
Subject key identifier:   97:F2:1B:C1:99:90:C0:33:72:98:16:60:0C:51:7D:38:8F:F9:C1:C4
Certificate issuer:       /CN=0622cee6-db45-4658-9eea-2a0344fcff8c
Certificate serial:       010D0C9F4328584F3A17DC28E75BE97B2B30E700
Authority key identifier: D5:71:74:54:5A:48:AF:24:39:60:A4:C8:78:B7:DE:B1:2F:81:22:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0622cee6-db45-4658-9eea-2a0344fcff8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0622cee6-db45-4658-9eea-2a0344fcff8c/983f6f0c-c4bd-3eb5-83ab-ca5dfa2a3fa6.roa
Signing time:             Sat 19 Sep 2026 13:00:12 +0000
ROA not before:           Sat 19 Sep 2026 13:00:12 +0000
ROA not after:            Fri 18 Dec 2026 14:00:12 +0000
asID:                     46115
IP address blocks:        74.207.32.0/19 maxlen: 24
                          192.203.196.0/24 maxlen: 24
                          198.133.77.0/24 maxlen: 24
                          2620:dd:4000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0622cee6-db45-4658-9eea-2a0344fcff8c/0622cee6-db45-4658-9eea-2a0344fcff8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0622cee6-db45-4658-9eea-2a0344fcff8c/0622cee6-db45-4658-9eea-2a0344fcff8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0622cee6-db45-4658-9eea-2a0344fcff8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3a:17:dc:28:e7:5b:e9:7b:2b:30:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0622cee6-db45-4658-9eea-2a0344fcff8c
        Validity
            Not Before: Sep 19 13:00:12 2026 GMT
            Not After : Dec 18 14:00:12 2026 GMT
        Subject: CN=8d7bce16-dab9-48e2-996b-78fe2c5e304c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:23:62:63:ab:1b:e7:0a:ad:1b:28:f8:67:b2:
                    7f:03:69:50:93:e4:8f:f8:68:28:d2:d4:bf:9a:d2:
                    c6:1c:73:23:b7:97:7d:77:41:f0:da:30:4f:14:97:
                    bf:d0:a6:c3:06:5c:3a:67:6f:27:c6:16:1b:62:39:
                    63:87:cc:62:16:c3:a9:a3:a4:9d:53:3c:db:ef:14:
                    98:28:cb:a9:ac:cb:cb:4c:89:48:53:46:13:ad:0a:
                    d6:50:91:14:e1:d9:80:c6:a7:ec:70:c5:a7:49:b9:
                    90:9e:1f:b3:e6:ac:18:f5:7f:2b:b8:4b:40:e2:e2:
                    70:38:80:1f:38:de:79:89:df:e2:16:1c:0f:e5:68:
                    14:20:dd:da:f5:60:65:00:ec:ad:8a:25:5a:7e:3c:
                    43:30:c0:d4:69:87:0d:cc:6d:d2:00:fe:a9:b5:70:
                    e3:56:04:90:3a:b1:e5:e7:be:e9:de:33:25:35:1f:
                    e5:8b:69:dc:83:60:a3:5b:59:ea:75:43:83:b9:64:
                    84:9d:3e:2c:83:5f:b6:aa:b9:82:4f:63:4e:25:ff:
                    ea:fa:bc:a2:50:f0:9c:da:d1:86:b4:37:89:d1:eb:
                    67:39:16:05:6d:69:38:f3:70:1b:f2:6c:35:fb:84:
                    16:3c:43:17:20:e8:79:1e:09:b3:43:1a:9d:e0:48:
                    9e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:F2:1B:C1:99:90:C0:33:72:98:16:60:0C:51:7D:38:8F:F9:C1:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0622cee6-db45-4658-9eea-2a0344fcff8c/983f6f0c-c4bd-3eb5-83ab-ca5dfa2a3fa6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0622cee6-db45-4658-9eea-2a0344fcff8c/0622cee6-db45-4658-9eea-2a0344fcff8c.crl

            X509v3 Authority Key Identifier:
                keyid:D5:71:74:54:5A:48:AF:24:39:60:A4:C8:78:B7:DE:B1:2F:81:22:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0622cee6-db45-4658-9eea-2a0344fcff8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.207.32.0/19
                  192.203.196.0/24
                  198.133.77.0/24
                IPv6:
                  2620:dd:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:ff:57:c4:d8:3b:0e:15:20:5e:88:6b:1f:4d:ed:a4:34:a2:
         21:97:c4:e2:98:ad:16:85:6c:58:5c:0a:e5:fa:c7:8c:74:75:
         d7:6a:bb:42:dc:3a:13:dc:6b:0f:d0:b5:0c:2b:eb:5a:60:d9:
         34:15:e7:d0:99:2f:10:7f:e0:fa:d9:47:7f:aa:ab:34:7d:b2:
         ae:8a:5f:9e:41:f1:7b:23:b1:49:d1:c5:28:b7:2e:94:67:da:
         fd:6f:fd:33:60:8f:30:49:de:ca:83:65:68:c3:84:c8:f1:a9:
         6b:4c:e1:01:d5:47:f5:a1:3c:3e:12:42:85:ab:7d:5f:93:34:
         d7:f5:72:85:bf:44:bb:f3:51:d0:79:e1:05:bf:aa:aa:3e:0c:
         95:d9:55:18:f4:ef:99:f5:64:50:26:38:ba:73:cf:bb:c4:00:
         79:49:42:09:99:17:9f:a8:cd:51:66:d4:b9:78:2c:3a:4b:4a:
         56:57:71:1b:c2:e5:b4:24:f9:e2:19:b5:bc:66:61:9a:4c:dc:
         14:57:cc:b8:49:51:ac:47:7c:25:16:16:15:b8:d5:80:d9:90:
         70:62:1c:27:e8:57:9b:48:61:fb:03:1e:d6:5f:32:db:76:75:
         0d:fb:f5:7a:3d:76:2d:70:16:2c:a8:db:a6:b6:13:e0:1c:5f:
         18:e6:73:60
-----BEGIN CERTIFICATE-----
MIIGYDCCBUigAwIBAgIUAQ0Mn0MoWE86F9wo51vpeysw5wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDYyMmNlZTYtZGI0NS00NjU4LTllZWEtMmEwMzQ0ZmNm
ZjhjMB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk
OGQ3YmNlMTYtZGFiOS00OGUyLTk5NmItNzhmZTJjNWUzMDRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCNiY6sb5wqtGyj4Z7J/A2lQk+SP+Ggo0tS/
mtLGHHMjt5d9d0Hw2jBPFJe/0KbDBlw6Z28nxhYbYjljh8xiFsOpo6SdUzzb7xSY
KMuprMvLTIlIU0YTrQrWUJEU4dmAxqfscMWnSbmQnh+z5qwY9X8ruEtA4uJwOIAf
ON55id/iFhwP5WgUIN3a9WBlAOytiiVafjxDMMDUaYcNzG3SAP6ptXDjVgSQOrHl
577p3jMlNR/li2ncg2CjW1nqdUODuWSEnT4sg1+2qrmCT2NOJf/q+ryiUPCc2tGG
tDeJ0etnORYFbWk483Ab8mw1+4QWPEMXIOh5HgmzQxqd4EierwIDAQABo4IDcjCC
A24wHQYDVR0OBBYEFJfyG8GZkMAzcpgWYAxRfTiP+cHEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8wNjIy
Y2VlNi1kYjQ1LTQ2NTgtOWVlYS0yYTAzNDRmY2ZmOGMvOTgzZjZmMGMtYzRiZC0z
ZWI1LTgzYWItY2E1ZGZhMmEzZmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMDYyMmNlZTYtZGI0NS00NjU4LTll
ZWEtMmEwMzQ0ZmNmZjhjLzA2MjJjZWU2LWRiNDUtNDY1OC05ZWVhLTJhMDM0NGZj
ZmY4Yy5jcmwwHwYDVR0jBBgwFoAU1XF0VFpIryQ5YKTIeLfesS+BIrgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS8wNjIyY2VlNi1kYjQ1LTQ2NTgtOWVlYS0yYTAz
NDRmY2ZmOGMuY2VyMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQFSs8gAwQA
wMvEAwQAxoVNMA8EAgACMAkDBwAmIADdQAAwVAYDVR0gAQH/BEowSDBGBggrBgEF
BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj
ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAc/9XxNg7DhUgXohr
H03tpDSiIZfE4pitFoVsWFwK5frHjHR112q7Qtw6E9xrD9C1DCvrWmDZNBXn0Jkv
EH/g+tlHf6qrNH2yropfnkHxeyOxSdHFKLculGfa/W/9M2CPMEneyoNlaMOEyPGp
a0zhAdVH9aE8PhJChat9X5M01/Vyhb9Eu/NR0HnhBb+qqj4MldlVGPTvmfVkUCY4
unPPu8QAeUlCCZkXn6jNUWbUuXgsOktKVldxG8LltCT54hm1vGZhmkzcFFfMuElR
rEd8JRYWFbjVgNmQcGIcJ+hXm0hh+wMe1l8y23Z1Dfv1ej12LXAWLKjbprYT4Bxf
GOZzYA==
-----END CERTIFICATE-----
Generated at Sun Sep 20 14:43:10 2026 by rpki-client