Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/909c89ee-4198-3bf1-a6eb-73bbcedea230.roa
File:                     909c89ee-4198-3bf1-a6eb-73bbcedea230.roa (raw, json)
Hash identifier:          Z1T0kNYPTdKntwNihqI/0nVMxSEAKQFL4wnCL4VBlGw=
Subject key identifier:   4A:A5:35:D6:2B:2F:A4:BB:A4:37:DD:1A:BA:1B:43:1B:BD:F1:1B:40
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E9BE501EC1836DFFA6A2D33C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/909c89ee-4198-3bf1-a6eb-73bbcedea230.roa
Signing time:             Fri 24 Jul 2026 21:00:12 +0000
ROA not before:           Fri 24 Jul 2026 21:00:12 +0000
ROA not after:            Thu 22 Oct 2026 21:00:12 +0000
asID:                     0
IP address blocks:        207.18.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:e5:01:ec:18:36:df:fa:6a:2d:33:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 24 21:00:12 2026 GMT
            Not After : Oct 22 21:00:12 2026 GMT
        Subject: CN=23042e9f-9b83-49fa-88e5-dedf2890a05d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cd:67:f6:55:fc:5e:f8:41:90:3b:77:b8:69:
                    c6:61:b0:ea:32:49:94:fc:b7:de:f9:7f:01:87:ec:
                    81:dd:eb:7b:35:dc:4b:26:f6:55:aa:ac:c5:c3:a4:
                    ce:c4:36:f7:a7:c3:9e:39:80:e2:b0:ed:0a:90:68:
                    9f:8d:43:e4:8d:cc:9c:86:94:23:a8:c8:ea:23:fa:
                    e6:5c:8e:1b:02:31:a0:7e:a4:82:39:51:ee:3d:44:
                    dd:03:99:45:64:ca:61:0e:d4:d8:84:9d:f1:5c:c2:
                    51:cc:d9:88:92:94:4c:b4:92:e2:32:9f:a8:86:27:
                    8f:ba:12:e8:7e:8f:98:9d:f8:2c:ed:d8:a2:ff:a4:
                    ce:2e:a0:27:90:45:1e:37:f7:7a:9c:ce:b4:ff:c2:
                    c8:2e:81:68:05:dc:96:d9:a3:6c:c6:97:2b:36:51:
                    57:ab:59:17:35:29:b5:98:fa:df:de:b0:d3:79:3b:
                    65:9e:d6:6e:85:10:91:fe:2f:2c:d8:ed:ae:71:7e:
                    34:df:04:7f:f0:50:a1:a5:a9:f7:23:ac:ad:5b:28:
                    af:ce:98:56:50:52:6e:b0:53:e0:61:78:7e:54:b3:
                    1e:4c:5c:40:11:27:d7:90:2f:5c:21:7c:d0:76:ed:
                    9d:70:5e:f2:e6:31:03:1b:af:9c:c6:b5:15:67:1d:
                    9c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:A5:35:D6:2B:2F:A4:BB:A4:37:DD:1A:BA:1B:43:1B:BD:F1:1B:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/909c89ee-4198-3bf1-a6eb-73bbcedea230.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.18.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:44:c7:96:94:89:c8:89:c5:10:67:17:f3:80:2f:b6:5d:2f:
         2e:1a:f8:4a:09:16:05:44:bb:d0:1f:58:f4:31:e4:3a:31:a5:
         a8:20:fc:7b:29:06:e6:70:c2:76:ab:20:d1:7d:68:08:2d:16:
         a2:e0:4a:3b:c8:df:f5:ae:67:33:ab:e0:02:e4:85:15:df:2c:
         0e:59:59:bb:28:ca:4e:f6:41:6d:b3:0a:2e:05:af:c9:d1:87:
         36:36:78:23:9a:46:dd:c9:a0:c3:c0:38:65:d5:83:65:c7:47:
         40:b2:25:40:9a:cb:ce:27:b3:2a:21:c1:b8:58:27:a2:59:4b:
         fc:70:00:67:2c:86:18:9c:a4:c6:ca:ed:1f:29:95:a7:7a:96:
         88:28:41:b1:e8:51:6c:05:5c:61:c9:1f:3f:59:1b:4d:0e:fb:
         13:50:3d:62:b2:46:84:a6:8e:64:94:1b:c7:9f:cd:46:82:b1:
         7f:4e:69:e0:81:1b:07:12:64:8c:02:4c:7a:79:26:3e:4b:43:
         37:22:20:41:72:a2:2a:7a:52:f6:da:c3:45:c7:f9:7a:ef:04:
         95:ac:3f:de:28:9f:18:23:bf:41:2f:cc:f3:6a:c6:04:12:75:
         ae:00:c6:62:c4:d2:62:bf:aa:a3:de:00:4e:6e:26:37:fb:20:
         79:11:02:c6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6b5QHsGDbf+motM8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDcyNDIxMDAxMloXDTI2MTAyMjIxMDAxMlowLzEtMCsGA1UEAxMk
MjMwNDJlOWYtOWI4My00OWZhLTg4ZTUtZGVkZjI4OTBhMDVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp81n9lX8XvhBkDt3uGnGYbDqMkmU/Lfe+X8B
h+yB3et7NdxLJvZVqqzFw6TOxDb3p8OeOYDisO0KkGifjUPkjcychpQjqMjqI/rm
XI4bAjGgfqSCOVHuPUTdA5lFZMphDtTYhJ3xXMJRzNmIkpRMtJLiMp+ohiePuhLo
fo+Ynfgs7dii/6TOLqAnkEUeN/d6nM60/8LILoFoBdyW2aNsxpcrNlFXq1kXNSm1
mPrf3rDTeTtlntZuhRCR/i8s2O2ucX403wR/8FChpan3I6ytWyivzphWUFJusFPg
YXh+VLMeTFxAESfXkC9cIXzQdu2dcF7y5jEDG6+cxrUVZx2cKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEqlNdYrL6S7pDfdGrobQxu98RtAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOTA5Yzg5ZWUtNDE5OC0z
YmYxLWE2ZWItNzNiYmNlZGVhMjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzxIOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE9Ex5aUiciJxRBnF/OAL7ZdLy4a+EoJFgVEu9AfWPQx5Doxpagg/Hsp
BuZwwnarINF9aAgtFqLgSjvI3/WuZzOr4ALkhRXfLA5ZWbsoyk72QW2zCi4Fr8nR
hzY2eCOaRt3JoMPAOGXVg2XHR0CyJUCay84nsyohwbhYJ6JZS/xwAGcshhicpMbK
7R8plad6logoQbHoUWwFXGHJHz9ZG00O+xNQPWKyRoSmjmSUG8efzUaCsX9OaeCB
GwcSZIwCTHp5Jj5LQzciIEFyoip6Uvbaw0XH+XrvBJWsP94onxgjv0EvzPNqxgQS
da4AxmLE0mK/qqPeAE5uJjf7IHkRAsY=
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:50:43 2026 by rpki-client