Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/ebc24dac-d08e-3367-a6d1-6ba22970e1b7.roa
File:                     ebc24dac-d08e-3367-a6d1-6ba22970e1b7.roa (raw, json)
Hash identifier:          wISFKRN141tBYKLyYN5e1ZcGMIiC5XsDbtHBl+sUJf4=
Subject key identifier:   D7:59:FB:8E:58:ED:3C:7C:87:D2:16:4E:48:49:7D:81:56:B2:97:B7
Certificate issuer:       /CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4
Certificate serial:       010D0C9F4328584E7634D90D701BB5B282221980
Authority key identifier: 0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/ebc24dac-d08e-3367-a6d1-6ba22970e1b7.roa
Signing time:             Sat 11 Jul 2026 09:00:12 +0000
ROA not before:           Sat 11 Jul 2026 09:00:12 +0000
ROA not after:            Fri 09 Oct 2026 09:00:12 +0000
asID:                     30383
IP address blocks:        198.208.9.0/24 maxlen: 24
                          198.208.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:76:34:d9:0d:70:1b:b5:b2:82:22:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4
        Validity
            Not Before: Jul 11 09:00:12 2026 GMT
            Not After : Oct  9 09:00:12 2026 GMT
        Subject: CN=c1a267fc-73c9-4e4b-ba75-8a04c34f9702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7a:c4:e0:96:ab:04:28:dc:7b:61:2f:05:98:
                    92:c0:57:ab:76:82:2d:df:7c:87:79:e5:ec:4f:ed:
                    67:f2:e6:a3:db:51:0b:91:83:29:43:73:2e:cc:d4:
                    c4:16:d1:b8:56:e9:fe:19:23:d1:54:99:da:e9:4b:
                    34:c5:86:55:72:3e:f5:da:23:4c:e7:83:34:df:12:
                    d9:a0:a7:e7:76:2f:9d:3e:cb:89:6f:73:5f:0d:7e:
                    64:21:09:c4:50:64:cc:a6:0e:8d:d4:3c:94:24:ae:
                    8c:7a:9e:0c:63:58:ec:4d:41:b6:c7:f5:19:a4:3e:
                    31:c9:1e:a6:91:1b:7a:7f:20:09:36:4d:d9:cc:c8:
                    2a:85:6b:d4:80:f1:0a:9a:a2:7e:55:a6:96:eb:8b:
                    6f:b0:53:1d:83:2e:85:e7:be:0f:cc:ac:d6:3c:04:
                    e2:2a:be:2c:85:26:42:e2:ff:f8:05:b9:17:a2:fe:
                    4a:56:0b:dd:bc:73:9d:51:d6:89:91:49:90:67:ca:
                    3d:64:3f:5b:55:c0:2f:04:23:c6:7c:88:83:f0:40:
                    b5:7f:e8:45:b0:2a:ee:dc:04:f5:c0:b7:f6:4c:23:
                    a1:52:e2:cf:7d:72:51:1f:95:33:3f:a2:cc:0e:00:
                    fc:e8:02:8e:a7:6c:58:58:31:65:3e:65:e8:d4:e3:
                    1b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:59:FB:8E:58:ED:3C:7C:87:D2:16:4E:48:49:7D:81:56:B2:97:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/ebc24dac-d08e-3367-a6d1-6ba22970e1b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl

            X509v3 Authority Key Identifier:
                keyid:0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.208.9.0/24
                  198.208.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:23:af:a4:34:eb:65:0a:ea:08:3e:46:8e:2a:e3:88:cb:bd:
         46:03:7d:3f:5b:2b:da:f5:67:ec:20:b5:6f:af:87:cf:b1:f8:
         95:35:c3:4f:7c:05:e0:a2:88:9b:12:5f:c7:70:f0:40:6d:33:
         e6:0e:7e:3d:b4:44:5d:31:5a:54:be:1b:b4:5e:ff:b9:e7:c3:
         70:5d:08:9d:d6:68:a0:6a:7d:3e:a2:dd:ef:2f:86:43:56:2d:
         4b:27:9f:18:bf:4f:2f:3b:38:66:79:71:cf:24:3a:b0:6d:67:
         cb:3a:d8:de:20:b3:7f:05:7e:73:fb:3e:93:9f:20:96:cd:8f:
         f7:63:47:81:5d:b7:2d:da:e0:32:79:47:b8:62:78:c7:ec:fb:
         7e:d2:4a:36:be:7d:d5:88:75:a3:6a:22:9f:1e:cd:30:57:41:
         64:1c:0f:48:cd:18:f9:75:b9:ee:93:2a:fe:bb:e0:9d:ca:c1:
         51:03:7f:fe:e9:e0:b2:ee:23:ae:40:81:fa:51:7f:5a:2e:b3:
         f2:2c:80:df:00:19:42:dd:b7:8a:ac:e4:41:a0:00:0d:de:b3:
         77:46:8d:52:db:a8:90:7c:0b:7e:d9:68:3d:00:83:85:4b:ad:
         b6:56:3b:af:87:be:94:6e:c1:23:a2:dd:53:b9:f8:d6:0e:be:
         96:b5:0e:1f
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE52NNkNcBu1soIiGYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdkNjdlNTQtN2RkNy00MGJhLWFmYTMtNWU4YzQ5NTRl
M2U0MB4XDTI2MDcxMTA5MDAxMloXDTI2MTAwOTA5MDAxMlowLzEtMCsGA1UEAxMk
YzFhMjY3ZmMtNzNjOS00ZTRiLWJhNzUtOGEwNGMzNGY5NzAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nrE4JarBCjce2EvBZiSwFerdoIt33yHeeXs
T+1n8uaj21ELkYMpQ3MuzNTEFtG4Vun+GSPRVJna6Us0xYZVcj712iNM54M03xLZ
oKfndi+dPsuJb3NfDX5kIQnEUGTMpg6N1DyUJK6Mep4MY1jsTUG2x/UZpD4xyR6m
kRt6fyAJNk3ZzMgqhWvUgPEKmqJ+VaaW64tvsFMdgy6F574PzKzWPATiKr4shSZC
4v/4BbkXov5KVgvdvHOdUdaJkUmQZ8o9ZD9bVcAvBCPGfIiD8EC1f+hFsCru3AT1
wLf2TCOhUuLPfXJRH5UzP6LMDgD86AKOp2xYWDFlPmXo1OMbiwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFNdZ+45Y7Tx8h9IWTkhJfYFWspe3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2
N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThjNDk1NGUzZTQvZWJjMjRkYWMtZDA4ZS0z
MzY3LWE2ZDEtNmJhMjI5NzBlMWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDdkNjdlNTQtN2RkNy00MGJhLWFm
YTMtNWU4YzQ5NTRlM2U0L2Q3ZDY3ZTU0LTdkZDctNDBiYS1hZmEzLTVlOGM0OTU0
ZTNlNC5jcmwwHwYDVR0jBBgwFoAUDncEDXJF/Vqw2VztD25SNx11Lh4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThj
NDk1NGUzZTQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAxtAJAwQA
xtDQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBADkjr6Q062UK6gg+Ro4q44jLvUYDfT9bK9r1Z+wgtW+vh8+x
+JU1w098BeCiiJsSX8dw8EBtM+YOfj20RF0xWlS+G7Re/7nnw3BdCJ3WaKBqfT6i
3e8vhkNWLUsnnxi/Ty87OGZ5cc8kOrBtZ8s62N4gs38FfnP7PpOfIJbNj/djR4Fd
ty3a4DJ5R7hieMfs+37SSja+fdWIdaNqIp8ezTBXQWQcD0jNGPl1ue6TKv674J3K
wVEDf/7p4LLuI65AgfpRf1ous/IsgN8AGULdt4qs5EGgAA3es3dGjVLbqJB8C37Z
aD0Ag4VLrbZWO6+HvpRuwSOi3VO5+NYOvpa1Dh8=
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:19:56 2026 by rpki-client