Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61ba8425-192b-4617-96ff-4227c427dd41/e9fb18d6-82f9-3a24-997a-454f67ae8ec5.roa
File:                     e9fb18d6-82f9-3a24-997a-454f67ae8ec5.roa (raw, json)
Hash identifier:          ukob2HkSXQn7RKhE0L0pNjRJ7VPbHvotaPemyywWITU=
Subject key identifier:   0F:90:E1:48:04:CA:FC:D7:C1:0B:B7:E2:FF:54:80:6D:62:A2:A0:F1
Certificate issuer:       /CN=61ba8425-192b-4617-96ff-4227c427dd41
Certificate serial:       010D0C9F4328584F49731366D83170E1BA8BFF00
Authority key identifier: E4:8E:36:DA:AD:8A:FD:33:5E:75:A7:4E:68:DF:02:C9:18:E7:78:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61ba8425-192b-4617-96ff-4227c427dd41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61ba8425-192b-4617-96ff-4227c427dd41/e9fb18d6-82f9-3a24-997a-454f67ae8ec5.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     401909
IP address blocks:        74.207.192.0/21 maxlen: 24
                          216.183.64.0/21 maxlen: 24
                          2604:1c20::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61ba8425-192b-4617-96ff-4227c427dd41/61ba8425-192b-4617-96ff-4227c427dd41.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61ba8425-192b-4617-96ff-4227c427dd41/61ba8425-192b-4617-96ff-4227c427dd41.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61ba8425-192b-4617-96ff-4227c427dd41.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:13:66:d8:31:70:e1:ba:8b:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61ba8425-192b-4617-96ff-4227c427dd41
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=fa3f5cc3-723f-4e20-9ff0-4753742b1eac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f4:fb:64:11:46:c9:f8:ec:3b:2b:51:69:9c:
                    a1:2e:43:10:6f:93:02:6d:64:b5:21:43:0c:7c:4f:
                    25:f6:89:2d:75:e5:64:99:a2:c6:c9:34:b3:11:70:
                    f9:48:ed:a5:5f:17:5b:da:ef:00:ea:4d:17:df:09:
                    06:df:66:eb:06:01:bf:d0:60:fc:45:c8:42:3e:b3:
                    42:c7:b7:17:f8:e6:92:bf:1f:81:a3:73:46:b1:0e:
                    32:4e:2e:52:9c:92:5f:51:ec:b7:e9:ec:c6:3e:a3:
                    38:0e:77:bf:30:eb:13:df:9a:7d:1f:bf:a3:e7:4f:
                    44:0b:59:ab:28:2a:a6:88:f7:df:78:e5:cc:a4:07:
                    f1:ec:e3:dd:d2:36:e6:37:57:a0:66:c2:d7:8f:55:
                    25:a3:63:83:f5:73:9c:98:a6:2e:d4:35:9a:ef:ef:
                    d0:55:73:3e:d8:e4:48:43:05:94:6b:3c:8a:c6:71:
                    27:27:9b:75:66:12:da:d2:12:f6:00:6d:11:ad:70:
                    78:3d:1f:e1:6d:9a:4b:fe:50:78:9a:41:45:31:07:
                    55:93:ac:f2:57:72:b7:8c:6c:31:6a:e7:88:a9:09:
                    77:c0:78:33:41:06:00:14:e4:a1:51:8c:82:8d:7c:
                    0a:40:d6:8b:2d:d8:0d:b4:3c:e7:9b:a5:97:75:f1:
                    ce:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:90:E1:48:04:CA:FC:D7:C1:0B:B7:E2:FF:54:80:6D:62:A2:A0:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61ba8425-192b-4617-96ff-4227c427dd41/e9fb18d6-82f9-3a24-997a-454f67ae8ec5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61ba8425-192b-4617-96ff-4227c427dd41/61ba8425-192b-4617-96ff-4227c427dd41.crl

            X509v3 Authority Key Identifier:
                keyid:E4:8E:36:DA:AD:8A:FD:33:5E:75:A7:4E:68:DF:02:C9:18:E7:78:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61ba8425-192b-4617-96ff-4227c427dd41.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.207.192.0/21
                  216.183.64.0/21
                IPv6:
                  2604:1c20::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:16:f5:2e:4d:18:67:da:51:0a:4e:22:82:cf:e8:f9:19:34:
         7f:6a:a0:54:c3:c4:06:34:d6:21:46:ec:b3:78:f8:69:5d:72:
         ce:74:8a:3e:7d:7e:e7:9f:ab:2e:28:d4:de:d1:5f:0a:f4:d2:
         18:b7:a0:d4:c1:06:98:0b:f2:af:f9:d9:ea:58:c6:0a:e0:bd:
         af:df:48:93:86:97:3b:47:85:f0:55:7d:65:0c:19:ad:eb:4d:
         cc:e9:1a:15:24:a1:f2:fd:f9:f2:c9:cf:e5:a7:c6:ea:5b:b8:
         a1:f8:4b:4b:20:6c:14:dc:98:52:4a:04:26:c0:ce:fd:96:39:
         4d:ca:96:ae:b7:e2:30:87:62:72:d2:ec:8f:6d:fd:30:c8:f5:
         85:b0:e5:15:68:17:ff:3c:49:89:9b:d0:93:ec:42:e1:50:17:
         d0:fd:6a:75:f1:52:03:2e:87:66:5e:c0:94:f7:6c:ca:62:6f:
         7a:d4:c7:30:63:64:ad:70:7c:aa:b4:d4:6c:ea:3a:73:ef:fd:
         7d:2b:b5:76:18:1b:5c:f3:1c:82:c2:ed:c5:93:9c:ac:c6:0e:
         36:a1:cd:8d:1f:c1:27:df:92:71:ff:fe:90:fa:2b:9a:d3:6b:
         1e:27:c0:87:0b:ab:0b:42:5b:9a:fa:d9:b7:28:54:d0:a2:94:
         2b:0a:df:a6
-----BEGIN CERTIFICATE-----
MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWE9JcxNm2DFw4bqL/wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjFiYTg0MjUtMTkyYi00NjE3LTk2ZmYtNDIyN2M0Mjdk
ZDQxMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZmEzZjVjYzMtNzIzZi00ZTIwLTlmZjAtNDc1Mzc0MmIxZWFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfT7ZBFGyfjsOytRaZyhLkMQb5MCbWS1IUMM
fE8l9oktdeVkmaLGyTSzEXD5SO2lXxdb2u8A6k0X3wkG32brBgG/0GD8RchCPrNC
x7cX+OaSvx+Bo3NGsQ4yTi5SnJJfUey36ezGPqM4Dne/MOsT35p9H7+j509EC1mr
KCqmiPffeOXMpAfx7OPd0jbmN1egZsLXj1Ulo2OD9XOcmKYu1DWa7+/QVXM+2ORI
QwWUazyKxnEnJ5t1ZhLa0hL2AG0RrXB4PR/hbZpL/lB4mkFFMQdVk6zyV3K3jGwx
aueIqQl3wHgzQQYAFOShUYyCjXwKQNaLLdgNtDznm6WXdfHOlQIDAQABo4IDajCC
A2YwHQYDVR0OBBYEFA+Q4UgEyvzXwQu34v9UgG1ioqDxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82MWJh
ODQyNS0xOTJiLTQ2MTctOTZmZi00MjI3YzQyN2RkNDEvZTlmYjE4ZDYtODJmOS0z
YTI0LTk5N2EtNDU0ZjY3YWU4ZWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjFiYTg0MjUtMTkyYi00NjE3LTk2
ZmYtNDIyN2M0MjdkZDQxLzYxYmE4NDI1LTE5MmItNDYxNy05NmZmLTQyMjdjNDI3
ZGQ0MS5jcmwwHwYDVR0jBBgwFoAU5I422q2K/TNedadOaN8CyRjneIIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82MWJhODQyNS0xOTJiLTQ2MTctOTZmZi00MjI3
YzQyN2RkNDEuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDSs/AAwQD
2LdAMA0EAgACMAcDBQAmBBwgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEwW9S5NGGfaUQpOIoLP6PkZNH9q
oFTDxAY01iFG7LN4+Gldcs50ij59fuefqy4o1N7RXwr00hi3oNTBBpgL8q/52epY
xgrgva/fSJOGlztHhfBVfWUMGa3rTczpGhUkofL9+fLJz+WnxupbuKH4S0sgbBTc
mFJKBCbAzv2WOU3Klq634jCHYnLS7I9t/TDI9YWw5RVoF/88SYmb0JPsQuFQF9D9
anXxUgMuh2ZewJT3bMpib3rUxzBjZK1wfKq01GzqOnPv/X0rtXYYG1zzHILC7cWT
nKzGDjahzY0fwSffknH//pD6K5rTax4nwIcLqwtCW5r62bcoVNCilCsK36Y=
-----END CERTIFICATE-----
Generated at Sat Sep 26 03:30:52 2026 by rpki-client