Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c/4e7c3637-3521-3ddc-8a98-75cd45b98bf5.roa
File:                     4e7c3637-3521-3ddc-8a98-75cd45b98bf5.roa (raw, json)
Hash identifier:          adNGTOsOXlZ4cnt0Fv7EPSCi+NfrGnXyMbnd2OtVpyg=
Subject key identifier:   36:A1:AB:BD:4B:FC:DF:3E:DD:83:46:44:CB:E3:7D:59:7C:EB:E4:20
Certificate issuer:       /CN=57823265-9949-4030-be09-5aebdf77ae5c
Certificate serial:       010D0C9F4328584F4973B4BAD049D9864548A4C0
Authority key identifier: 1C:6D:47:DA:B4:8D:E7:E4:D7:89:61:7B:B7:05:BD:DB:14:10:64:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c/4e7c3637-3521-3ddc-8a98-75cd45b98bf5.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        209.182.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c/57823265-9949-4030-be09-5aebdf77ae5c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c/57823265-9949-4030-be09-5aebdf77ae5c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:b4:ba:d0:49:d9:86:45:48:a4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57823265-9949-4030-be09-5aebdf77ae5c
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=444a8ba6-7424-475d-a528-00d1c083c1a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:bc:84:52:6e:ab:72:2e:44:33:5c:18:b6:42:
                    ba:63:de:2a:8e:15:64:44:fb:c1:78:62:fa:98:ef:
                    3a:2b:58:6b:b4:7c:c3:ba:65:af:09:ea:a9:37:2c:
                    26:22:45:8c:29:38:ba:c6:a5:68:58:f6:45:79:8f:
                    8d:e4:81:51:55:35:7b:5d:dd:b5:ab:65:f7:b4:95:
                    74:77:c7:d3:23:ba:e7:46:83:bd:5b:cd:cf:a3:89:
                    6d:c1:ba:0c:d6:7d:71:45:59:9d:a9:db:58:83:37:
                    12:15:c3:c1:1c:93:dd:51:69:e6:42:c6:89:c3:66:
                    bc:0e:41:4e:db:ff:27:36:23:75:c3:f7:60:6d:ef:
                    bd:30:1e:09:94:8b:bb:58:16:c9:e3:31:46:85:03:
                    63:87:6f:02:30:d1:a3:45:93:33:a5:ad:e7:23:77:
                    bf:58:74:e7:49:ab:65:72:08:75:29:33:83:37:04:
                    c3:70:26:5c:d2:1c:91:4f:82:27:e2:1a:d6:c9:51:
                    cb:61:0b:40:97:3f:76:7d:92:8b:86:83:00:05:32:
                    e6:9f:db:29:3b:97:9f:bd:d7:61:9c:17:5a:de:30:
                    6b:b2:d5:bb:77:1e:a3:c3:42:cd:91:20:f9:ee:d7:
                    4b:28:29:0c:2e:5c:f4:df:df:7c:d7:d9:02:e3:73:
                    e3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:A1:AB:BD:4B:FC:DF:3E:DD:83:46:44:CB:E3:7D:59:7C:EB:E4:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c/4e7c3637-3521-3ddc-8a98-75cd45b98bf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c/57823265-9949-4030-be09-5aebdf77ae5c.crl

            X509v3 Authority Key Identifier:
                keyid:1C:6D:47:DA:B4:8D:E7:E4:D7:89:61:7B:B7:05:BD:DB:14:10:64:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.182.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:ca:b0:a3:36:05:8a:23:22:bf:87:a6:30:ec:d2:5e:6d:61:
         0b:84:25:1b:e5:1e:a3:c8:51:1a:69:af:5a:a5:31:62:26:e6:
         62:18:78:8b:6f:97:2a:0f:79:59:36:44:eb:f8:d0:a3:ef:7a:
         de:09:c0:d5:d2:a3:1f:62:d7:14:53:f2:2a:58:7f:e3:de:93:
         64:0a:db:a0:25:76:e1:09:70:10:48:a0:b4:7e:e9:2e:56:3b:
         65:c3:7a:e6:81:88:f8:bb:08:e4:ea:40:95:8f:7b:b8:a9:42:
         2a:90:3e:93:71:22:81:f5:af:a8:77:fc:2c:eb:e8:29:1d:8f:
         75:fb:17:8f:88:e2:f0:fe:97:51:dd:85:3e:1d:9c:1b:72:51:
         e5:4a:50:f1:80:5c:eb:db:e7:dc:30:35:ef:77:6f:a2:d2:d8:
         c1:32:58:50:06:ad:60:51:d5:54:1d:89:cd:5a:3a:8c:b1:56:
         21:fc:77:6d:c4:02:95:86:eb:03:e3:4d:28:b6:ad:12:66:22:
         e4:05:0c:73:6b:47:c5:f4:5c:ba:f4:82:e4:61:1a:de:4a:44:
         19:76:33:80:a5:6b:7d:08:b0:e6:98:cf:f8:2c:c9:cb:d7:56:
         df:b7:db:92:ba:6b:f7:8c:03:88:6d:f5:7d:5a:46:8b:50:69:
         18:9c:53:c6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc7S60EnZhkVIpMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTc4MjMyNjUtOTk0OS00MDMwLWJlMDktNWFlYmRmNzdh
ZTVjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NDQ0YThiYTYtNzQyNC00NzVkLWE1MjgtMDBkMWMwODNjMWEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibyEUm6rci5EM1wYtkK6Y94qjhVkRPvBeGL6
mO86K1hrtHzDumWvCeqpNywmIkWMKTi6xqVoWPZFeY+N5IFRVTV7Xd21q2X3tJV0
d8fTI7rnRoO9W83Po4ltwboM1n1xRVmdqdtYgzcSFcPBHJPdUWnmQsaJw2a8DkFO
2/8nNiN1w/dgbe+9MB4JlIu7WBbJ4zFGhQNjh28CMNGjRZMzpa3nI3e/WHTnSatl
cgh1KTODNwTDcCZc0hyRT4In4hrWyVHLYQtAlz92fZKLhoMABTLmn9spO5efvddh
nBda3jBrstW7dx6jw0LNkSD57tdLKCkMLlz0399819kC43Pj6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDahq71L/N8+3YNGRMvjfVl86+QgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81Nzgy
MzI2NS05OTQ5LTQwMzAtYmUwOS01YWViZGY3N2FlNWMvNGU3YzM2MzctMzUyMS0z
ZGRjLThhOTgtNzVjZDQ1Yjk4YmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTc4MjMyNjUtOTk0OS00MDMwLWJl
MDktNWFlYmRmNzdhZTVjLzU3ODIzMjY1LTk5NDktNDAzMC1iZTA5LTVhZWJkZjc3
YWU1Yy5jcmwwHwYDVR0jBBgwFoAUHG1H2rSN5+TXiWF7twW92xQQZPUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81NzgyMzI2NS05OTQ5LTQwMzAtYmUwOS01YWVi
ZGY3N2FlNWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0bbfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACPKsKM2BYojIr+HpjDs0l5tYQuEJRvlHqPIURppr1qlMWIm5mIYeItv
lyoPeVk2ROv40KPvet4JwNXSox9i1xRT8ipYf+Pek2QK26AlduEJcBBIoLR+6S5W
O2XDeuaBiPi7COTqQJWPe7ipQiqQPpNxIoH1r6h3/Czr6Ckdj3X7F4+I4vD+l1Hd
hT4dnBtyUeVKUPGAXOvb59wwNe93b6LS2MEyWFAGrWBR1VQdic1aOoyxViH8d23E
ApWG6wPjTSi2rRJmIuQFDHNrR8X0XLr0guRhGt5KRBl2M4Cla30IsOaYz/gsycvX
Vt+325K6a/eMA4ht9X1aRotQaRicU8Y=
-----END CERTIFICATE-----
Generated at Thu Oct 8 12:29:05 2026 by rpki-client