Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/b7b06ee6-9f73-3125-abba-5b22f297903a.roa
File:                     b7b06ee6-9f73-3125-abba-5b22f297903a.roa (raw, json)
Hash identifier:          pq71h1AgMFCbjxOrIlyuPYb0IkL3VsItjQRYzXwrE7o=
Subject key identifier:   1E:01:F1:20:89:A8:F5:D6:51:96:F1:D5:D9:37:6E:53:E0:E9:D3:46
Certificate issuer:       /CN=9adb478e-0ae2-46fc-845e-7fe13475c90e
Certificate serial:       010D0C9F4328584F3E47D64A44EB90EB3EE4B300
Authority key identifier: 7B:B3:F9:0D:26:23:56:32:7B:A4:EE:89:03:95:03:B4:F7:D6:D2:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/b7b06ee6-9f73-3125-abba-5b22f297903a.roa
Signing time:             Mon 21 Sep 2026 01:00:11 +0000
ROA not before:           Mon 21 Sep 2026 01:00:11 +0000
ROA not after:            Sun 20 Dec 2026 02:00:11 +0000
asID:                     272838
IP address blocks:        204.199.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/9adb478e-0ae2-46fc-845e-7fe13475c90e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/9adb478e-0ae2-46fc-845e-7fe13475c90e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3e:47:d6:4a:44:eb:90:eb:3e:e4:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9adb478e-0ae2-46fc-845e-7fe13475c90e
        Validity
            Not Before: Sep 21 01:00:11 2026 GMT
            Not After : Dec 20 02:00:11 2026 GMT
        Subject: CN=d1425286-0692-4080-b228-f04402776fad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:2e:66:60:76:2e:67:45:3e:fc:fd:cf:b4:28:
                    57:b2:65:1f:c4:2c:e9:04:38:56:2f:31:d8:cb:f2:
                    71:2a:f2:bb:77:d8:4a:42:08:f1:d4:61:64:47:34:
                    6a:1a:ba:2c:a9:33:00:f2:ce:bb:ea:7c:04:5e:16:
                    02:9b:42:4e:73:5b:65:83:82:d4:66:e3:ae:92:11:
                    d7:09:16:c1:45:58:12:46:c9:4b:50:13:2c:07:e1:
                    ba:82:6f:bf:b2:d0:26:72:ef:28:f9:00:3a:8f:15:
                    42:0e:89:2f:42:cd:e5:86:2d:78:3b:b2:1d:22:6c:
                    30:fc:23:7c:94:a4:1e:69:ce:87:86:24:7e:80:bc:
                    e6:e7:7d:5b:72:d0:68:99:39:73:11:6a:da:b4:4f:
                    d4:e5:29:1c:17:57:1f:b3:a3:38:b9:ae:25:c4:3b:
                    3c:82:56:5d:82:a2:6f:31:0c:e7:55:60:b9:6b:99:
                    73:78:1d:29:f1:d6:bd:c9:4b:52:0a:37:97:82:08:
                    1a:5c:39:17:fd:a8:54:a5:bf:a5:15:7e:c9:e2:13:
                    ce:44:bf:95:d0:f0:d9:12:e5:05:3d:ac:a8:94:98:
                    b8:d9:e0:69:80:39:ca:1e:bf:86:23:12:e8:97:d8:
                    b8:3a:6f:21:82:5c:ce:33:32:79:68:2d:13:7e:fd:
                    06:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:01:F1:20:89:A8:F5:D6:51:96:F1:D5:D9:37:6E:53:E0:E9:D3:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/b7b06ee6-9f73-3125-abba-5b22f297903a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/9adb478e-0ae2-46fc-845e-7fe13475c90e.crl

            X509v3 Authority Key Identifier:
                keyid:7B:B3:F9:0D:26:23:56:32:7B:A4:EE:89:03:95:03:B4:F7:D6:D2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.199.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:79:48:ed:2c:b5:7f:50:09:77:4d:e0:e3:f2:38:7e:c5:ec:
         3a:5c:74:6b:c3:b5:f2:ae:a4:ab:cf:5e:b5:fc:de:02:6f:6b:
         aa:14:29:b7:4b:61:da:0d:86:24:0c:15:b0:59:38:d4:93:74:
         3f:7c:3d:a4:db:a8:0d:5d:6e:c7:94:7b:79:79:ae:56:2a:95:
         98:d8:f9:23:d2:e2:3e:fb:ac:7d:a1:84:3b:83:03:cc:ac:4c:
         f7:26:37:15:30:43:db:da:d6:7c:ca:47:1c:b9:b4:3e:fb:92:
         1b:5b:39:9d:0a:7f:6b:35:06:0f:8c:48:f5:61:87:9e:8e:61:
         4f:50:0f:9b:be:70:a4:08:0b:72:f6:7b:b8:fc:dd:94:27:7e:
         66:7e:fb:cf:32:65:1b:de:c8:21:ce:ea:dd:ae:00:6f:73:57:
         4e:a4:81:b5:b6:af:ea:fe:dd:1d:92:19:90:37:c3:1e:c7:de:
         b7:1d:0c:ee:ae:4f:cf:e0:d2:83:70:bf:15:f3:e3:9c:5f:be:
         0d:a4:c4:56:b1:14:59:fe:d0:7a:a1:7d:ab:87:95:f7:62:5c:
         a3:69:82:30:b9:a8:92:84:da:de:aa:ac:23:1a:f7:6c:d7:f4:
         d4:ac:f1:e5:c0:3c:b9:71:be:ce:df:c5:b8:8d:fe:ab:84:29:
         36:b5:f0:14
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R9ZKROuQ6z7kswAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWFkYjQ3OGUtMGFlMi00NmZjLTg0NWUtN2ZlMTM0NzVj
OTBlMB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk
ZDE0MjUyODYtMDY5Mi00MDgwLWIyMjgtZjA0NDAyNzc2ZmFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhS5mYHYuZ0U+/P3PtChXsmUfxCzpBDhWLzHY
y/JxKvK7d9hKQgjx1GFkRzRqGrosqTMA8s676nwEXhYCm0JOc1tlg4LUZuOukhHX
CRbBRVgSRslLUBMsB+G6gm+/stAmcu8o+QA6jxVCDokvQs3lhi14O7IdImww/CN8
lKQeac6HhiR+gLzm531bctBomTlzEWratE/U5SkcF1cfs6M4ua4lxDs8glZdgqJv
MQznVWC5a5lzeB0p8da9yUtSCjeXgggaXDkX/ahUpb+lFX7J4hPORL+V0PDZEuUF
PayolJi42eBpgDnKHr+GIxLol9i4Om8hglzOMzJ5aC0Tfv0G9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB4B8SCJqPXWUZbx1dk3blPg6dNGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85YWRi
NDc4ZS0wYWUyLTQ2ZmMtODQ1ZS03ZmUxMzQ3NWM5MGUvYjdiMDZlZTYtOWY3My0z
MTI1LWFiYmEtNWIyMmYyOTc5MDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOWFkYjQ3OGUtMGFlMi00NmZjLTg0
NWUtN2ZlMTM0NzVjOTBlLzlhZGI0NzhlLTBhZTItNDZmYy04NDVlLTdmZTEzNDc1
YzkwZS5jcmwwHwYDVR0jBBgwFoAUe7P5DSYjVjJ7pO6JA5UDtPfW0iowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85YWRiNDc4ZS0wYWUyLTQ2ZmMtODQ1ZS03ZmUx
MzQ3NWM5MGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMeuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGV5SO0stX9QCXdN4OPyOH7F7DpcdGvDtfKupKvPXrX83gJva6oUKbdL
YdoNhiQMFbBZONSTdD98PaTbqA1dbseUe3l5rlYqlZjY+SPS4j77rH2hhDuDA8ys
TPcmNxUwQ9va1nzKRxy5tD77khtbOZ0Kf2s1Bg+MSPVhh56OYU9QD5u+cKQIC3L2
e7j83ZQnfmZ++88yZRveyCHO6t2uAG9zV06kgbW2r+r+3R2SGZA3wx7H3rcdDO6u
T8/g0oNwvxXz45xfvg2kxFaxFFn+0HqhfauHlfdiXKNpgjC5qJKE2t6qrCMa92zX
9NSs8eXAPLlxvs7fxbiN/quEKTa18BQ=
-----END CERTIFICATE-----
Generated at Sat Oct 3 19:50:59 2026 by rpki-client