Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8224a7d5-4b3b-3daa-8e24-fb36d7355ee4.roa
File:                     8224a7d5-4b3b-3daa-8e24-fb36d7355ee4.roa (raw, json)
Hash identifier:          Vyr6yNYsAvwEDffBRpKTRg6pmp2hIVvvNN4mINyhKLc=
Subject key identifier:   9C:3E:FE:FA:52:9E:BE:FA:74:9B:0C:FD:4B:19:22:36:8F:4B:2E:FA
Certificate issuer:       /CN=8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5
Certificate serial:       010D0C9F4328584F20F7B0070C17438B43FF37C0
Authority key identifier: 92:04:3A:A3:CA:F8:0F:3C:8D:45:A1:49:B5:5F:4B:AD:F5:C3:D9:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8224a7d5-4b3b-3daa-8e24-fb36d7355ee4.roa
Signing time:             Thu 10 Sep 2026 13:00:12 +0000
ROA not before:           Thu 10 Sep 2026 13:00:12 +0000
ROA not after:            Wed 09 Dec 2026 14:00:12 +0000
asID:                     6509
IP address blocks:        199.212.24.0/24 maxlen: 24
                          205.189.32.0/24 maxlen: 24
                          2001:410:101::/48 maxlen: 48
                          2001:410:10a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:20:f7:b0:07:0c:17:43:8b:43:ff:37:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5
        Validity
            Not Before: Sep 10 13:00:12 2026 GMT
            Not After : Dec  9 14:00:12 2026 GMT
        Subject: CN=28666279-b74f-4bae-b887-5d85d20a3a99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9b:57:c2:c0:5c:68:b5:21:2d:a8:03:2a:03:
                    be:04:7a:53:e5:61:2a:2d:e4:66:17:a5:39:02:19:
                    ae:a1:9d:1b:e5:fe:c5:7b:a2:b8:3a:a4:e5:06:22:
                    e2:3c:d4:69:b5:99:d5:f6:59:06:3c:ec:8c:e7:82:
                    9b:45:4d:05:70:f2:c0:fb:b7:0e:f5:85:c8:49:52:
                    2d:fa:c6:75:e1:f3:e3:6b:b6:76:7c:28:01:d9:cd:
                    ba:b2:67:b5:50:12:81:2d:b3:90:48:4d:8d:a0:a5:
                    c6:57:3f:ac:14:5b:03:30:95:c7:e6:28:66:a6:f0:
                    c8:4e:3d:3f:a1:81:ed:ee:ea:48:8f:dd:a9:4c:3f:
                    a3:4c:8f:ec:84:a5:23:bf:1e:e4:46:25:b2:86:f2:
                    fa:8a:97:bd:5b:7d:b4:58:ff:d9:31:55:02:7f:7c:
                    38:ce:7b:7e:d6:62:a6:0b:2a:9f:17:88:cd:15:b1:
                    e8:4b:0a:15:bd:55:af:ba:56:f7:e4:51:9c:cf:2b:
                    03:18:2e:39:c8:05:2b:6e:be:a7:f6:1e:68:aa:ab:
                    9b:3f:ad:a2:22:9f:e7:0f:ad:91:75:f8:ef:a2:93:
                    7a:e6:01:ce:be:cb:3c:96:0f:09:78:d3:c3:ee:e5:
                    2b:64:9e:76:d5:ab:d4:11:ec:6c:50:ce:7d:98:98:
                    88:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:3E:FE:FA:52:9E:BE:FA:74:9B:0C:FD:4B:19:22:36:8F:4B:2E:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8224a7d5-4b3b-3daa-8e24-fb36d7355ee4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.crl

            X509v3 Authority Key Identifier:
                keyid:92:04:3A:A3:CA:F8:0F:3C:8D:45:A1:49:B5:5F:4B:AD:F5:C3:D9:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.212.24.0/24
                  205.189.32.0/24
                IPv6:
                  2001:410:101::/48
                  2001:410:10a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:cb:a6:02:a2:4a:01:13:5a:c8:d1:1a:40:6a:92:4b:23:c4:
         6d:e5:77:57:cc:68:10:3c:b6:c6:05:d9:1b:4b:29:21:4e:7e:
         7b:2e:a9:97:85:d8:11:48:38:ec:a6:4f:5a:a4:83:29:90:20:
         97:40:90:ea:b6:85:58:18:75:cd:80:ed:36:d2:98:7a:4a:30:
         17:cf:bb:da:8a:02:ee:8c:70:47:78:b0:2b:bc:08:8c:ca:53:
         92:59:d1:74:f1:7a:62:a2:4c:cd:e3:3d:ae:1a:1b:41:e2:d1:
         e2:6b:8a:88:18:f7:2f:5a:c4:57:e5:00:c6:1e:d3:4a:0e:55:
         4f:09:ff:c4:d3:e6:c8:dd:d0:9f:78:7b:20:40:b0:de:33:e1:
         df:cf:ce:73:ee:53:ab:1e:b3:1a:bf:96:56:f9:52:03:47:23:
         5a:93:41:35:71:e7:18:67:ba:db:9b:46:5b:2a:93:d9:e8:05:
         f4:6d:29:31:d1:4c:f4:d6:9d:9c:57:03:cb:a4:59:11:94:49:
         79:e6:b4:46:95:07:c8:0d:a0:0d:0a:4d:cd:b2:7d:0c:97:56:
         ee:89:1a:91:27:17:35:c9:ef:e7:0c:e6:0d:a1:00:be:e9:14:
         59:a6:83:65:85:20:93:0e:61:29:b8:eb:a6:d0:cc:ac:e9:c6:
         1c:20:ed:2b
-----BEGIN CERTIFICATE-----
MIIGYzCCBUugAwIBAgIUAQ0Mn0MoWE8g97AHDBdDi0P/N8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGM5ZjUzYzctZTY0ZC00ZjE0LWE1ZTEtYzE0ZThiMWUz
OGI1MB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk
Mjg2NjYyNzktYjc0Zi00YmFlLWI4ODctNWQ4NWQyMGEzYTk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJtXwsBcaLUhLagDKgO+BHpT5WEqLeRmF6U5
AhmuoZ0b5f7Fe6K4OqTlBiLiPNRptZnV9lkGPOyM54KbRU0FcPLA+7cO9YXISVIt
+sZ14fPja7Z2fCgB2c26sme1UBKBLbOQSE2NoKXGVz+sFFsDMJXH5ihmpvDITj0/
oYHt7upIj92pTD+jTI/shKUjvx7kRiWyhvL6ipe9W320WP/ZMVUCf3w4znt+1mKm
CyqfF4jNFbHoSwoVvVWvulb35FGczysDGC45yAUrbr6n9h5oqqubP62iIp/nD62R
dfjvopN65gHOvss8lg8JeNPD7uUrZJ521avUEexsUM59mJiITQIDAQABo4IDdTCC
A3EwHQYDVR0OBBYEFJw+/vpSnr76dJsM/UsZIjaPSy76MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84Yzlm
NTNjNy1lNjRkLTRmMTQtYTVlMS1jMTRlOGIxZTM4YjUvODIyNGE3ZDUtNGIzYi0z
ZGFhLThlMjQtZmIzNmQ3MzU1ZWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGM5ZjUzYzctZTY0ZC00ZjE0LWE1
ZTEtYzE0ZThiMWUzOGI1LzhjOWY1M2M3LWU2NGQtNGYxNC1hNWUxLWMxNGU4YjFl
MzhiNS5jcmwwHwYDVR0jBBgwFoAUkgQ6o8r4DzyNRaFJtV9LrfXD2Q4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84YzlmNTNjNy1lNjRkLTRmMTQtYTVlMS1jMTRl
OGIxZTM4YjUuY2VyMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQAx9QYAwQA
zb0gMBgEAgACMBIDBwAgAQQQAQEDBwAgAQQQAQowVAYDVR0gAQH/BEowSDBGBggr
BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv
dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEACcumAqJKARNa
yNEaQGqSSyPEbeV3V8xoEDy2xgXZG0spIU5+ey6pl4XYEUg47KZPWqSDKZAgl0CQ
6raFWBh1zYDtNtKYekowF8+72ooC7oxwR3iwK7wIjMpTklnRdPF6YqJMzeM9rhob
QeLR4muKiBj3L1rEV+UAxh7TSg5VTwn/xNPmyN3Qn3h7IECw3jPh38/Oc+5Tqx6z
Gr+WVvlSA0cjWpNBNXHnGGe625tGWyqT2egF9G0pMdFM9NadnFcDy6RZEZRJeea0
RpUHyA2gDQpNzbJ9DJdW7okakScXNcnv5wzmDaEAvukUWaaDZYUgkw5hKbjrptDM
rOnGHCDtKw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 19:47:50 2026 by rpki-client