Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b4fb41c2-1c3f-3f9a-a8ea-ba96962be3ae.roa
File:                     b4fb41c2-1c3f-3f9a-a8ea-ba96962be3ae.roa (raw, json)
Hash identifier:          XCdRwxzDmnEBzqfAYYQ/AYFvNYPu5n/+2M3gg1P7Kso=
Subject key identifier:   60:DB:32:F2:3B:3D:40:19:43:52:55:66:D4:A3:A3:30:39:43:46:AD
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584F4973C8EB34872A3B27547A00
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b4fb41c2-1c3f-3f9a-a8ea-ba96962be3ae.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     852
IP address blocks:        207.134.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:c8:eb:34:87:2a:3b:27:54:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=596149d9-7369-4411-b58b-f388b531d56b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3b:57:d7:5b:ff:1d:6d:3d:e4:8a:2c:d9:c9:
                    17:ff:f4:8a:c3:16:f4:e1:06:25:7c:9d:c9:a2:50:
                    63:75:91:38:2d:8f:b0:c9:10:0d:2f:a0:e8:be:6c:
                    e2:53:15:57:97:cf:d6:4c:8b:04:d1:55:e3:4c:95:
                    c8:08:06:9b:b7:4e:fc:40:9a:c5:43:9e:92:1a:46:
                    8a:de:2a:05:a9:b8:f8:49:1f:6c:5f:57:d4:40:18:
                    be:20:28:78:57:44:e3:f3:48:c6:4e:c8:4a:8a:5d:
                    51:44:02:f7:8c:a1:a3:00:51:44:43:b6:ec:bc:59:
                    5b:ce:05:81:19:6d:1a:07:d8:8d:c3:20:f3:b1:de:
                    7b:d0:fc:07:b9:8c:24:d4:28:77:ed:2a:86:b0:90:
                    7f:69:93:66:4c:96:9d:21:64:66:e4:a8:79:17:5a:
                    39:fe:c6:34:2f:c3:be:14:b2:36:19:4e:c8:7b:70:
                    fb:78:e3:2d:8a:f2:4b:3b:63:1f:b0:8b:76:2d:56:
                    85:93:60:ca:c8:97:be:d5:aa:2c:bf:46:8c:0f:ca:
                    e5:01:5b:a1:d1:cc:c5:ee:12:6f:8c:2a:0e:68:57:
                    b1:c4:17:92:43:c2:5c:39:a4:d5:d9:0c:b7:c4:3c:
                    1d:bd:3c:ec:02:e0:dd:9e:dd:42:ca:47:61:e5:12:
                    e4:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:DB:32:F2:3B:3D:40:19:43:52:55:66:D4:A3:A3:30:39:43:46:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b4fb41c2-1c3f-3f9a-a8ea-ba96962be3ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.134.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:49:b2:5b:5e:b6:15:9a:d8:ae:13:07:d1:2b:0c:c0:ea:11:
         a0:89:92:04:11:4b:39:e6:10:85:da:fb:f3:a8:ef:ec:93:e7:
         f7:cc:b2:2b:f3:6a:2e:40:b1:13:94:62:73:83:e8:64:2a:09:
         32:b4:9d:f5:ea:17:29:55:e6:e8:60:3b:04:56:ba:19:a6:a8:
         6c:f0:6e:9d:8f:89:25:d5:5c:75:c2:1e:82:b6:51:a2:bf:cb:
         c9:c8:e8:8c:1a:7d:ff:6c:09:d2:35:b7:63:99:98:d8:04:65:
         a5:cb:ac:78:5e:39:18:8b:d5:e7:ff:d2:55:f0:78:5d:b0:49:
         8c:d2:bd:47:b8:d2:0c:ff:f2:9a:76:0b:20:d4:63:d8:2d:47:
         91:42:30:11:29:1f:2f:5e:e5:a3:5b:cc:18:0d:a4:48:4a:56:
         42:f7:50:4f:14:ce:ac:1f:2d:7d:2d:73:40:19:0e:ec:d9:41:
         28:9e:8e:30:11:ac:89:18:58:37:0a:50:3b:fa:d5:46:ad:68:
         a2:71:54:78:32:2e:2a:2d:54:15:ad:6a:df:e5:75:2a:3c:af:
         31:1c:c4:de:29:9f:46:9f:26:99:4a:ac:f4:05:78:6f:24:ed:
         6c:d1:30:01:c1:ac:d2:52:42:57:c4:c8:5d:98:c6:71:d3:a8:
         53:40:1d:d6
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE9Jc8jrNIcqOydUegAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NTk2MTQ5ZDktNzM2OS00NDExLWI1OGItZjM4OGI1MzFkNTZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTtX11v/HW095Ios2ckX//SKwxb04QYlfJ3J
olBjdZE4LY+wyRANL6DovmziUxVXl8/WTIsE0VXjTJXICAabt078QJrFQ56SGkaK
3ioFqbj4SR9sX1fUQBi+ICh4V0Tj80jGTshKil1RRAL3jKGjAFFEQ7bsvFlbzgWB
GW0aB9iNwyDzsd570PwHuYwk1Ch37SqGsJB/aZNmTJadIWRm5Kh5F1o5/sY0L8O+
FLI2GU7Ie3D7eOMtivJLO2MfsIt2LVaFk2DKyJe+1aosv0aMD8rlAVuh0czF7hJv
jCoOaFexxBeSQ8JcOaTV2Qy3xDwdvTzsAuDdnt1Cykdh5RLk8QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGDbMvI7PUAZQ1JVZtSjozA5Q0atMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYjRmYjQxYzItMWMzZi0z
ZjlhLWE4ZWEtYmE5Njk2MmJlM2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAz4YwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAJEmyW162FZrYrhMH0SsMwOoRoImSBBFLOeYQhdr786jv7JPn98yyK/Nq
LkCxE5Ric4PoZCoJMrSd9eoXKVXm6GA7BFa6GaaobPBunY+JJdVcdcIegrZRor/L
ycjojBp9/2wJ0jW3Y5mY2ARlpcuseF45GIvV5//SVfB4XbBJjNK9R7jSDP/ymnYL
INRj2C1HkUIwESkfL17lo1vMGA2kSEpWQvdQTxTOrB8tfS1zQBkO7NlBKJ6OMBGs
iRhYNwpQO/rVRq1oonFUeDIuKi1UFa1q3+V1KjyvMRzE3imfRp8mmUqs9AV4byTt
bNEwAcGs0lJCV8TIXZjGcdOoU0Ad1g==
-----END CERTIFICATE-----
Generated at Sun Sep 27 19:29:56 2026 by rpki-client