Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7dc57bd2-7481-40bc-917b-dbf3aa49d0fb/18c56845-4baf-32b3-81b7-b88373c77647.roa
File:                     18c56845-4baf-32b3-81b7-b88373c77647.roa (raw, json)
Hash identifier:          9UFGf2ROgUiiFUEH7ikBKSJnEDQtKcZctRLIHB4gXuA=
Subject key identifier:   05:6B:53:B4:EB:18:AC:73:B7:20:43:A3:3B:F8:00:D1:C2:EB:67:78
Certificate issuer:       /CN=7dc57bd2-7481-40bc-917b-dbf3aa49d0fb
Certificate serial:       010D0C9F4328584F3301633DAA0A72C89D907F00
Authority key identifier: FC:36:F1:64:1D:12:EA:D6:4B:0B:C9:56:98:B7:EC:53:4B:A7:43:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7dc57bd2-7481-40bc-917b-dbf3aa49d0fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7dc57bd2-7481-40bc-917b-dbf3aa49d0fb/18c56845-4baf-32b3-81b7-b88373c77647.roa
Signing time:             Thu 17 Sep 2026 00:04:28 +0000
ROA not before:           Thu 17 Sep 2026 00:04:28 +0000
ROA not after:            Wed 16 Dec 2026 01:04:28 +0000
asID:                     23026
IP address blocks:        206.197.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7dc57bd2-7481-40bc-917b-dbf3aa49d0fb/7dc57bd2-7481-40bc-917b-dbf3aa49d0fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7dc57bd2-7481-40bc-917b-dbf3aa49d0fb/7dc57bd2-7481-40bc-917b-dbf3aa49d0fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7dc57bd2-7481-40bc-917b-dbf3aa49d0fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:33:01:63:3d:aa:0a:72:c8:9d:90:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dc57bd2-7481-40bc-917b-dbf3aa49d0fb
        Validity
            Not Before: Sep 17 00:04:28 2026 GMT
            Not After : Dec 16 01:04:28 2026 GMT
        Subject: CN=c9ae8cd1-d934-4b7b-ac53-05680110c32e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:64:1b:55:91:15:48:11:6f:1e:2c:b5:0b:f5:
                    fd:a6:2a:23:6b:a3:dc:63:3a:50:75:b7:21:96:2e:
                    1a:57:ac:cc:8e:99:48:6b:7c:08:6b:0b:16:1a:91:
                    ff:f9:67:c7:05:00:89:0c:ca:d9:50:f4:13:64:56:
                    bf:db:28:9c:5d:bd:23:38:96:54:bb:79:36:d8:82:
                    61:8b:4b:d9:b2:76:9c:7c:7f:6d:71:02:08:09:9b:
                    c1:bf:ee:61:42:3e:74:13:85:c4:90:43:60:60:c4:
                    bc:1a:98:dc:8c:db:93:fb:75:5e:0c:d7:63:70:f9:
                    5a:72:05:e7:58:23:8a:6b:56:17:ba:57:b9:ac:49:
                    06:dd:43:40:33:ed:c3:cb:01:f3:33:b2:b5:d4:62:
                    d0:81:1c:a4:cc:0e:a2:ab:c9:ef:af:92:73:e0:f3:
                    59:91:48:a4:b4:02:9d:9f:61:48:f3:6f:1c:87:14:
                    24:ee:51:8c:7d:eb:7b:ae:1f:da:69:43:91:09:67:
                    78:f0:a6:5f:1b:dd:64:45:cf:c5:5a:42:d1:fa:71:
                    0e:35:ad:5b:37:9e:a8:dc:a8:ea:11:b0:12:6f:6d:
                    c0:7e:83:ab:e4:e9:f9:f5:31:63:9b:b0:d9:9d:d1:
                    a1:55:3d:fd:ea:1d:c6:1c:a5:63:bf:d6:7a:82:e2:
                    cf:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:6B:53:B4:EB:18:AC:73:B7:20:43:A3:3B:F8:00:D1:C2:EB:67:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7dc57bd2-7481-40bc-917b-dbf3aa49d0fb/18c56845-4baf-32b3-81b7-b88373c77647.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7dc57bd2-7481-40bc-917b-dbf3aa49d0fb/7dc57bd2-7481-40bc-917b-dbf3aa49d0fb.crl

            X509v3 Authority Key Identifier:
                keyid:FC:36:F1:64:1D:12:EA:D6:4B:0B:C9:56:98:B7:EC:53:4B:A7:43:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7dc57bd2-7481-40bc-917b-dbf3aa49d0fb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.197.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:a7:c4:79:12:54:98:b4:e9:05:ef:8a:0c:d0:50:c7:d2:ad:
         a4:ab:92:5a:f8:7d:ad:9e:fa:cd:c8:62:d3:57:a1:40:10:d1:
         58:dd:67:e1:b5:bb:2c:31:88:8c:de:19:7f:c3:42:00:5a:39:
         8d:37:f7:48:9b:cd:01:ad:35:16:f4:f0:9a:3a:00:6c:a9:c5:
         29:5d:7e:86:1f:e4:e8:06:4e:99:69:21:aa:72:e0:23:5e:34:
         2e:d1:82:58:0f:c8:22:84:f3:7f:27:71:cb:c0:01:13:0b:3b:
         31:d4:c6:b7:ba:33:74:e2:ec:4d:7c:99:fe:01:90:20:ab:1f:
         51:bd:0c:dd:59:0d:07:fb:62:a3:7a:9e:c0:4e:fc:1e:7b:ba:
         d0:24:9b:fb:a3:ce:76:8b:34:7c:ac:a8:e6:2d:93:66:95:1e:
         c5:78:2c:b0:17:a8:d6:14:3f:71:c3:ea:bd:76:2f:ac:83:9c:
         fd:c1:8f:ee:ff:57:36:c9:7d:a1:da:0a:70:54:66:55:19:ed:
         fd:78:2c:eb:6d:66:9b:a4:72:5b:15:da:bc:14:07:7d:91:69:
         c5:0f:6a:09:e9:d1:b9:7a:75:95:46:ed:0f:6b:ea:44:f4:0c:
         fe:39:59:3b:28:57:ec:44:75:80:35:ec:79:93:57:8c:37:6b:
         66:c2:62:6a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8zAWM9qgpyyJ2QfwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2RjNTdiZDItNzQ4MS00MGJjLTkxN2ItZGJmM2FhNDlk
MGZiMB4XDTI2MDkxNzAwMDQyOFoXDTI2MTIxNjAxMDQyOFowLzEtMCsGA1UEAxMk
YzlhZThjZDEtZDkzNC00YjdiLWFjNTMtMDU2ODAxMTBjMzJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2QbVZEVSBFvHiy1C/X9pioja6PcYzpQdbch
li4aV6zMjplIa3wIawsWGpH/+WfHBQCJDMrZUPQTZFa/2yicXb0jOJZUu3k22IJh
i0vZsnacfH9tcQIICZvBv+5hQj50E4XEkENgYMS8GpjcjNuT+3VeDNdjcPlacgXn
WCOKa1YXule5rEkG3UNAM+3DywHzM7K11GLQgRykzA6iq8nvr5Jz4PNZkUiktAKd
n2FI828chxQk7lGMfet7rh/aaUORCWd48KZfG91kRc/FWkLR+nEONa1bN56o3Kjq
EbASb23AfoOr5On59TFjm7DZndGhVT396h3GHKVjv9Z6guLPnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAVrU7TrGKxztyBDozv4ANHC62d4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC83ZGM1
N2JkMi03NDgxLTQwYmMtOTE3Yi1kYmYzYWE0OWQwZmIvMThjNTY4NDUtNGJhZi0z
MmIzLTgxYjctYjg4MzczYzc3NjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvN2RjNTdiZDItNzQ4MS00MGJjLTkx
N2ItZGJmM2FhNDlkMGZiLzdkYzU3YmQyLTc0ODEtNDBiYy05MTdiLWRiZjNhYTQ5
ZDBmYi5jcmwwHwYDVR0jBBgwFoAU/DbxZB0S6tZLC8lWmLfsU0unQ5AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC83ZGM1N2JkMi03NDgxLTQwYmMtOTE3Yi1kYmYz
YWE0OWQwZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzsVuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHenxHkSVJi06QXvigzQUMfSraSrklr4fa2e+s3IYtNXoUAQ0VjdZ+G1
uywxiIzeGX/DQgBaOY0390ibzQGtNRb08Jo6AGypxSldfoYf5OgGTplpIapy4CNe
NC7RglgPyCKE838nccvAARMLOzHUxre6M3Ti7E18mf4BkCCrH1G9DN1ZDQf7YqN6
nsBO/B57utAkm/ujznaLNHysqOYtk2aVHsV4LLAXqNYUP3HD6r12L6yDnP3Bj+7/
VzbJfaHaCnBUZlUZ7f14LOttZpukclsV2rwUB32RacUPagnp0bl6dZVG7Q9r6kT0
DP45WTsoV+xEdYA17HmTV4w3a2bCYmo=
-----END CERTIFICATE-----
Generated at Tue Sep 22 15:12:50 2026 by rpki-client