Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1722df-da75-4049-b3bd-b515bf0447bf/506adb19-30d4-3e0a-b870-a61c046724ca.roa
File:                     506adb19-30d4-3e0a-b870-a61c046724ca.roa (raw, json)
Hash identifier:          QNJ8iy2K32VHD59u45+TwPCaBhmmkLKZavUV6wS5sEo=
Subject key identifier:   73:4F:14:87:3F:A4:85:51:F3:D5:E3:72:8D:45:4D:DB:38:1E:BE:C4
Certificate issuer:       /CN=3d1722df-da75-4049-b3bd-b515bf0447bf
Certificate serial:       010D0C9F4328584F497703F8615BE05BC98F3B80
Authority key identifier: 38:89:30:A5:55:2E:2B:42:93:25:2D:63:D8:BA:EA:0B:25:44:5F:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1722df-da75-4049-b3bd-b515bf0447bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1722df-da75-4049-b3bd-b515bf0447bf/506adb19-30d4-3e0a-b870-a61c046724ca.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     25671
IP address blocks:        208.79.104.0/21 maxlen: 24
                          2605:6c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1722df-da75-4049-b3bd-b515bf0447bf/3d1722df-da75-4049-b3bd-b515bf0447bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1722df-da75-4049-b3bd-b515bf0447bf/3d1722df-da75-4049-b3bd-b515bf0447bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1722df-da75-4049-b3bd-b515bf0447bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:77:03:f8:61:5b:e0:5b:c9:8f:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d1722df-da75-4049-b3bd-b515bf0447bf
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=074af0e5-ec07-4feb-91b9-92b9b9b05edc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f2:4f:4f:94:50:99:70:f3:47:bb:1a:95:19:
                    72:94:1e:da:ff:e1:83:6d:77:a2:62:30:e6:42:37:
                    50:a6:51:12:0a:ff:ed:25:4a:b4:16:8b:dd:a4:a1:
                    42:8e:c7:d3:51:e4:e8:99:9a:d0:e2:dd:c0:a7:91:
                    cf:25:fb:91:39:d4:97:eb:3e:9c:cf:0b:90:03:9c:
                    50:af:82:20:b7:59:2a:94:42:41:ba:5e:83:e8:14:
                    00:c5:44:c0:5d:96:7b:d5:75:db:20:1d:81:97:36:
                    7b:46:15:07:ab:8c:36:2c:88:3a:f4:a5:a0:6e:7f:
                    92:e0:e6:b5:1e:7f:18:95:82:1e:8f:f7:7a:9c:c6:
                    e4:8b:a9:ba:27:05:40:28:cf:b5:90:61:d6:c6:65:
                    a5:ff:85:a4:6b:46:2f:9d:c0:0f:ad:c1:fa:d4:37:
                    a2:15:63:4b:30:8f:87:52:c3:87:98:30:3d:1d:22:
                    3f:97:bc:58:46:5a:ce:27:77:aa:c5:67:83:99:60:
                    b7:f1:26:25:35:8b:ba:90:99:a9:06:4a:97:fc:4d:
                    59:92:f3:a9:db:99:ae:f0:df:b9:b6:ad:2a:c9:7f:
                    6a:e8:32:3b:b0:53:4c:8e:42:e8:26:f0:94:49:b6:
                    41:3d:08:8c:39:93:ed:ae:34:bd:17:05:30:f7:3b:
                    18:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:4F:14:87:3F:A4:85:51:F3:D5:E3:72:8D:45:4D:DB:38:1E:BE:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1722df-da75-4049-b3bd-b515bf0447bf/506adb19-30d4-3e0a-b870-a61c046724ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1722df-da75-4049-b3bd-b515bf0447bf/3d1722df-da75-4049-b3bd-b515bf0447bf.crl

            X509v3 Authority Key Identifier:
                keyid:38:89:30:A5:55:2E:2B:42:93:25:2D:63:D8:BA:EA:0B:25:44:5F:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1722df-da75-4049-b3bd-b515bf0447bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.79.104.0/21
                IPv6:
                  2605:6c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:6f:5e:ea:7e:e2:ba:23:ab:f6:8e:71:fc:c4:8d:5b:13:e5:
         bb:2d:3e:ee:85:e8:17:f9:b4:08:ab:b2:90:b3:84:6f:f3:9c:
         68:2e:22:9d:6b:26:13:21:28:f3:63:c9:58:ab:72:11:16:ab:
         11:c5:ae:c6:30:69:1e:0f:9e:6f:55:d8:ec:cc:19:2e:5f:d5:
         41:37:1d:4a:0a:a3:56:15:56:ac:9b:f0:3b:bd:b6:12:93:04:
         8b:f4:99:23:e1:b6:48:3d:00:3f:41:06:eb:41:76:cb:65:09:
         db:0c:c9:24:04:5d:e5:ab:ed:84:85:9c:b1:bf:da:3b:30:dd:
         0e:9b:c3:bb:a0:8a:3a:28:31:c0:2f:3f:47:5b:2d:fc:ed:b4:
         9e:71:c7:56:e9:9a:29:c9:04:cf:de:25:ce:9f:b0:8b:0f:51:
         36:3a:cb:78:97:ab:a0:04:ce:e4:23:2c:38:40:77:23:7e:52:
         17:68:88:07:ea:cb:42:2c:d4:1d:0a:05:74:c1:5b:3a:ae:a9:
         ac:67:6c:fc:11:f0:eb:16:09:64:d4:c7:fa:e2:09:81:9c:c9:
         88:97:36:e6:a2:59:f4:f9:d8:b1:01:84:dc:7c:79:aa:8c:9c:
         73:0d:67:14:7a:ef:bf:6d:4f:e7:70:31:85:67:0c:20:2d:01:
         69:9d:7e:5e
-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE9JdwP4YVvgW8mPO4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2QxNzIyZGYtZGE3NS00MDQ5LWIzYmQtYjUxNWJmMDQ0
N2JmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MDc0YWYwZTUtZWMwNy00ZmViLTkxYjktOTJiOWI5YjA1ZWRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/JPT5RQmXDzR7salRlylB7a/+GDbXeiYjDm
QjdQplESCv/tJUq0FovdpKFCjsfTUeTomZrQ4t3Ap5HPJfuROdSX6z6czwuQA5xQ
r4Igt1kqlEJBul6D6BQAxUTAXZZ71XXbIB2BlzZ7RhUHq4w2LIg69KWgbn+S4Oa1
Hn8YlYIej/d6nMbki6m6JwVAKM+1kGHWxmWl/4Wka0YvncAPrcH61DeiFWNLMI+H
UsOHmDA9HSI/l7xYRlrOJ3eqxWeDmWC38SYlNYu6kJmpBkqX/E1ZkvOp25mu8N+5
tq0qyX9q6DI7sFNMjkLoJvCUSbZBPQiMOZPtrjS9FwUw9zsYswIDAQABo4IDZDCC
A2AwHQYDVR0OBBYEFHNPFIc/pIVR89Xjco1FTds4Hr7EMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zZDE3
MjJkZi1kYTc1LTQwNDktYjNiZC1iNTE1YmYwNDQ3YmYvNTA2YWRiMTktMzBkNC0z
ZTBhLWI4NzAtYTYxYzA0NjcyNGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2QxNzIyZGYtZGE3NS00MDQ5LWIz
YmQtYjUxNWJmMDQ0N2JmLzNkMTcyMmRmLWRhNzUtNDA0OS1iM2JkLWI1MTViZjA0
NDdiZi5jcmwwHwYDVR0jBBgwFoAUOIkwpVUuK0KTJS1j2LrqCyVEXxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zZDE3MjJkZi1kYTc1LTQwNDktYjNiZC1iNTE1
YmYwNDQ3YmYuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQD0E9oMA0E
AgACMAcDBQAmBQbAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF
BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0
bWwwDQYJKoZIhvcNAQELBQADggEBADFvXup+4rojq/aOcfzEjVsT5bstPu6F6Bf5
tAirspCzhG/znGguIp1rJhMhKPNjyVirchEWqxHFrsYwaR4Pnm9V2OzMGS5f1UE3
HUoKo1YVVqyb8Du9thKTBIv0mSPhtkg9AD9BButBdstlCdsMySQEXeWr7YSFnLG/
2jsw3Q6bw7ugijooMcAvP0dbLfzttJ5xx1bpminJBM/eJc6fsIsPUTY6y3iXq6AE
zuQjLDhAdyN+UhdoiAfqy0Is1B0KBXTBWzquqaxnbPwR8OsWCWTUx/riCYGcyYiX
NuaiWfT52LEBhNx8eaqMnHMNZxR6779tT+dwMYVnDCAtAWmdfl4=
-----END CERTIFICATE-----
Generated at Sat Sep 26 17:07:10 2026 by rpki-client