Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3d8c9201-48d1-3c40-a910-0be86d3cfbb9.roa
File:                     3d8c9201-48d1-3c40-a910-0be86d3cfbb9.roa (raw, json)
Hash identifier:          kx82ZL/JXLM2G0VeGlULRjg+z4TPGDM9nlTTAxjA9UA=
Subject key identifier:   E7:F6:AA:7F:5C:0D:F6:22:C1:A9:99:F6:64:E4:82:0F:08:60:E2:2C
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584E6574ACFD129719778BCC42C0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3d8c9201-48d1-3c40-a910-0be86d3cfbb9.roa
Signing time:             Sun 05 Jul 2026 09:00:13 +0000
ROA not before:           Sun 05 Jul 2026 09:00:13 +0000
ROA not after:            Sat 03 Oct 2026 09:00:13 +0000
asID:                     134578
IP address blocks:        206.54.11.128/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:65:74:ac:fd:12:97:19:77:8b:cc:42:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Jul  5 09:00:13 2026 GMT
            Not After : Oct  3 09:00:13 2026 GMT
        Subject: CN=c78df78d-25a0-4bb0-8a5c-55cb62f5a91e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:3d:56:4b:19:f7:88:15:0a:a7:80:84:39:58:
                    ed:dd:bf:d7:0a:39:09:f9:e2:1e:cf:34:98:20:33:
                    eb:45:bb:b2:9e:c9:51:f6:12:46:0f:09:ca:a7:07:
                    49:15:c3:e2:0f:4b:e0:a2:23:aa:bd:b4:18:4b:e3:
                    df:75:4e:8b:c4:82:88:a3:43:db:d0:1b:c8:9a:d0:
                    31:4a:46:90:fc:47:9f:ad:f2:64:53:a5:62:81:2e:
                    0a:66:c4:7f:56:a7:db:dc:f6:ba:89:7a:3e:66:6a:
                    e5:48:a7:c4:c1:d4:73:ed:cf:bb:1c:91:78:fe:af:
                    22:ac:7a:b2:ad:8e:89:27:f9:22:68:91:0d:29:61:
                    3f:a4:8d:00:53:40:ee:16:8f:5b:7a:bb:f2:ee:18:
                    cb:1b:28:bb:ce:2a:c3:1a:0d:3d:0d:a1:dc:aa:ee:
                    c4:b9:f4:06:48:e3:f4:0d:5c:62:d2:12:ca:ef:b4:
                    e4:fc:ad:df:0a:d4:35:ef:1d:73:a8:58:04:81:aa:
                    ca:cb:90:63:7c:94:f2:ff:dc:6d:da:40:52:c0:ea:
                    0a:97:46:ca:b1:3e:cc:21:dc:86:18:89:0f:0d:e0:
                    4b:67:ba:d6:d8:41:f2:2b:9f:43:43:5a:31:13:d2:
                    e6:a1:01:85:7e:9e:46:2d:b3:85:70:dc:3a:ca:27:
                    e4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:F6:AA:7F:5C:0D:F6:22:C1:A9:99:F6:64:E4:82:0F:08:60:E2:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3d8c9201-48d1-3c40-a910-0be86d3cfbb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.54.11.128/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:86:53:51:57:78:06:e6:ad:47:01:48:9a:c8:86:2e:a8:bd:
         24:44:39:ae:52:5b:53:0b:0c:ed:f5:88:e2:03:93:50:1f:23:
         d0:6a:ec:d2:9f:64:06:82:af:8d:52:92:83:40:ed:69:e3:71:
         d7:8c:3d:d0:fc:74:f2:ce:e9:44:f9:74:a3:bf:f5:74:fc:d7:
         3b:64:c9:fd:5c:10:6a:a4:25:15:67:d7:c4:35:27:24:db:87:
         c6:b2:f6:2a:3e:8f:10:b4:14:65:0f:c2:81:71:42:f2:ed:f2:
         97:04:2d:5f:dc:b2:7f:dd:ff:25:f7:77:59:de:9b:da:16:ab:
         3f:06:8d:92:45:cb:07:9d:20:d6:6c:a0:a6:70:23:7c:72:30:
         3a:c8:90:c0:8d:a7:50:1c:32:86:53:19:dc:6a:51:17:17:7e:
         11:8f:d8:f7:2a:e9:21:9c:8b:d8:36:cf:c5:c1:74:40:91:08:
         2a:79:66:6e:19:17:3e:d2:d3:59:c0:f3:55:4e:ea:a3:64:52:
         e7:2e:c0:02:3e:b8:df:d9:d3:e4:5a:f3:1e:26:0f:0a:7b:bd:
         5f:73:46:c8:ec:a3:c4:70:9e:1a:a0:8c:24:bf:ae:e8:3d:d9:
         9c:ac:3d:bd:8f:5d:b2:90:2a:13:bc:4b:1c:7a:2e:e8:fd:9c:
         94:e9:d4:cc
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE5ldKz9EpcZd4vMQsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI2MDcwNTA5MDAxM1oXDTI2MTAwMzA5MDAxM1owLzEtMCsGA1UEAxMk
Yzc4ZGY3OGQtMjVhMC00YmIwLThhNWMtNTVjYjYyZjVhOTFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhj1WSxn3iBUKp4CEOVjt3b/XCjkJ+eIezzSY
IDPrRbuynslR9hJGDwnKpwdJFcPiD0vgoiOqvbQYS+PfdU6LxIKIo0Pb0BvImtAx
SkaQ/EefrfJkU6VigS4KZsR/Vqfb3Pa6iXo+ZmrlSKfEwdRz7c+7HJF4/q8irHqy
rY6JJ/kiaJENKWE/pI0AU0DuFo9bervy7hjLGyi7zirDGg09DaHcqu7EufQGSOP0
DVxi0hLK77Tk/K3fCtQ17x1zqFgEgarKy5BjfJTy/9xt2kBSwOoKl0bKsT7MIdyG
GIkPDeBLZ7rW2EHyK59DQ1oxE9LmoQGFfp5GLbOFcNw6yifkVwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFOf2qn9cDfYiwamZ9mTkgg8IYOIsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvM2Q4YzkyMDEtNDhkMS0z
YzQwLWE5MTAtMGJlODZkM2NmYmI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHzjYLgDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAghlNRV3gG5q1HAUiayIYuqL0kRDmuUltTCwzt9YjiA5NQHyPQauzS
n2QGgq+NUpKDQO1p43HXjD3Q/HTyzulE+XSjv/V0/Nc7ZMn9XBBqpCUVZ9fENSck
24fGsvYqPo8QtBRlD8KBcULy7fKXBC1f3LJ/3f8l93dZ3pvaFqs/Bo2SRcsHnSDW
bKCmcCN8cjA6yJDAjadQHDKGUxncalEXF34Rj9j3KukhnIvYNs/FwXRAkQgqeWZu
GRc+0tNZwPNVTuqjZFLnLsACPrjf2dPkWvMeJg8Ke71fc0bI7KPEcJ4aoIwkv67o
PdmcrD29j12ykCoTvEscei7o/ZyU6dTM
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:47:42 2026 by rpki-client