Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3d1077b-9e0d-30a7-b7e6-381210a7012f.roa
File:                     d3d1077b-9e0d-30a7-b7e6-381210a7012f.roa (raw, json)
Hash identifier:          wE0cztdzy9ICLuNllBiyzAJEi2Y/OG8RQiEO94QjvFQ=
Subject key identifier:   BC:BC:09:DD:B5:E4:CC:06:07:52:9A:F8:F5:99:CB:D2:A2:9F:EE:27
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584ED00209E491CCDB8D47808580
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3d1077b-9e0d-30a7-b7e6-381210a7012f.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     14618
IP address blocks:        208.213.180.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:02:09:e4:91:cc:db:8d:47:80:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=8ef6f724-45b7-49a4-a12e-4a739c2f8178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6b:57:d7:44:28:5a:cd:91:fd:eb:f9:36:2a:
                    ed:aa:1e:64:8c:67:b7:b5:45:b9:1a:11:87:b5:d9:
                    e9:18:88:84:ee:6c:00:4d:08:ec:93:a9:67:68:25:
                    1e:6d:ed:cf:cc:6d:cd:f8:5d:f1:96:77:ac:78:f9:
                    72:49:81:62:db:ac:0f:69:58:cc:e9:c6:3b:cc:da:
                    ac:a9:c5:8f:ad:46:a6:62:1d:ab:4e:bd:ac:f6:7f:
                    73:11:c6:f0:26:08:f2:41:d7:37:bc:1f:3b:f6:4d:
                    6e:09:f4:ed:c0:16:64:f5:8d:ad:74:a4:1b:ce:d5:
                    11:4f:1b:97:1d:a1:75:01:94:45:f9:7b:4a:21:32:
                    bc:db:88:01:6e:02:66:f5:46:9f:84:76:96:1d:d2:
                    b0:9c:1c:54:67:8f:b2:8f:60:8b:db:f0:e7:57:0f:
                    5b:14:39:52:e0:43:ba:0e:41:be:56:07:78:4a:74:
                    7c:5e:64:35:6c:62:c3:bb:ab:a5:e8:d2:e6:68:46:
                    22:68:cb:d2:7c:c8:db:c7:e9:f3:f9:24:30:b5:e4:
                    e4:a1:bb:31:b8:e7:7f:e1:87:16:e7:bf:4d:a6:58:
                    1e:69:21:03:80:d2:9b:59:ab:a9:67:08:05:22:83:
                    81:94:84:59:e2:97:c7:bf:8f:0c:b4:d1:d0:6e:6f:
                    12:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:BC:09:DD:B5:E4:CC:06:07:52:9A:F8:F5:99:CB:D2:A2:9F:EE:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3d1077b-9e0d-30a7-b7e6-381210a7012f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.213.180.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:af:80:c4:1f:ab:bb:7f:a0:4e:31:e7:84:94:c5:5d:32:38:
         9b:b6:49:e0:f4:06:ba:4e:43:3c:8d:db:07:2b:70:31:08:71:
         6e:c0:89:02:a0:47:9a:8f:44:63:8a:de:14:0f:e6:3d:8a:fc:
         9a:d2:f1:37:49:f0:2e:87:ff:db:df:10:9b:23:76:65:17:15:
         0f:12:01:b2:c1:3b:73:94:cf:5b:52:ee:37:3b:a7:76:40:3c:
         25:bc:fd:b7:19:95:ea:97:fe:b9:85:d4:1e:0c:b7:ab:ab:ae:
         59:64:26:6c:e1:ad:73:1a:86:d8:5c:4c:47:01:5a:97:a4:94:
         ac:c8:3b:6e:65:0d:10:aa:6d:b6:e0:d2:34:b7:83:d5:16:9a:
         a9:00:eb:e2:47:e1:27:99:fc:a7:fa:65:d8:7d:f6:d8:3b:21:
         fc:57:0a:ab:2c:58:5e:51:bf:a6:ec:f0:5c:d0:c3:11:5e:5b:
         26:31:40:bf:56:8f:61:d4:d2:ab:8a:41:c2:ff:3c:0a:36:d0:
         08:2b:99:ac:74:a5:ee:0d:9b:ff:52:88:c1:4a:c0:ba:84:0a:
         6a:d2:cd:bf:0b:95:31:2a:21:5f:63:75:64:3d:c9:40:4a:56:
         76:8f:d4:d6:7b:2b:35:36:e3:a8:df:2d:57:79:ad:ca:4c:b9:
         99:bd:7a:93
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7QAgnkkczbjUeAhYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk
OGVmNmY3MjQtNDViNy00OWE0LWExMmUtNGE3MzljMmY4MTc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWtX10QoWs2R/ev5Nirtqh5kjGe3tUW5GhGH
tdnpGIiE7mwATQjsk6lnaCUebe3PzG3N+F3xlnesePlySYFi26wPaVjM6cY7zNqs
qcWPrUamYh2rTr2s9n9zEcbwJgjyQdc3vB879k1uCfTtwBZk9Y2tdKQbztURTxuX
HaF1AZRF+XtKITK824gBbgJm9UafhHaWHdKwnBxUZ4+yj2CL2/DnVw9bFDlS4EO6
DkG+Vgd4SnR8XmQ1bGLDu6ul6NLmaEYiaMvSfMjbx+nz+SQwteTkobsxuOd/4YcW
579NplgeaSEDgNKbWaupZwgFIoOBlIRZ4pfHv48MtNHQbm8SWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLy8Cd215MwGB1Ka+PWZy9Kin+4nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDNkMTA3N2ItOWUwZC0z
MGE3LWI3ZTYtMzgxMjEwYTcwMTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0NW0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG+vgMQfq7t/oE4x54SUxV0yOJu2SeD0BrpOQzyN2wcrcDEIcW7AiQKg
R5qPRGOK3hQP5j2K/JrS8TdJ8C6H/9vfEJsjdmUXFQ8SAbLBO3OUz1tS7jc7p3ZA
PCW8/bcZleqX/rmF1B4Mt6urrllkJmzhrXMahthcTEcBWpeklKzIO25lDRCqbbbg
0jS3g9UWmqkA6+JH4SeZ/Kf6Zdh99tg7IfxXCqssWF5Rv6bs8FzQwxFeWyYxQL9W
j2HU0quKQcL/PAo20Agrmax0pe4Nm/9SiMFKwLqECmrSzb8LlTEqIV9jdWQ9yUBK
VnaP1NZ7KzU246jfLVd5rcpMuZm9epM=
-----END CERTIFICATE-----
Generated at Tue Sep 22 17:49:12 2026 by rpki-client