Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/c4417fa3-1777-3fcb-ba27-eb31b1348c11.roa
File:                     c4417fa3-1777-3fcb-ba27-eb31b1348c11.roa (raw, json)
Hash identifier:          WWWOdmTakQA3LBQwWZ6Gz4+xG29ler3zGxOu/rCn+RA=
Subject key identifier:   E9:1E:FD:FE:27:F4:FE:6A:03:BB:10:68:CA:FE:00:1E:DF:44:02:10
Certificate issuer:       /CN=7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b
Certificate serial:       010D0C9F4328584F4F07EE1C1B4C9E8AE5266C80
Authority key identifier: 27:6C:6C:7D:E1:1C:71:B2:F3:03:07:F4:B6:06:12:B1:62:59:7A:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/c4417fa3-1777-3fcb-ba27-eb31b1348c11.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     399589
IP address blocks:        209.104.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:07:ee:1c:1b:4c:9e:8a:e5:26:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=7c9d26ef-309e-4f40-a967-b273e115af47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b5:5d:d3:f9:3c:80:4e:04:87:44:85:00:86:
                    62:78:ea:27:f5:b6:29:fe:88:ef:a9:dc:d8:09:29:
                    58:2f:2e:7d:e8:71:47:93:ae:c2:5f:d5:ce:d6:18:
                    d9:48:66:27:48:b7:dd:f5:01:8a:5a:81:db:1e:64:
                    cb:bb:db:2c:cc:91:ee:fc:1f:af:fa:2f:76:ef:84:
                    a6:92:6b:1f:f2:91:92:32:b5:8b:1c:b0:ee:9c:fc:
                    93:ca:41:d5:1b:b8:0e:b4:b0:aa:25:c3:43:36:f4:
                    6d:e2:03:18:52:6c:f5:72:7f:62:ad:5d:d0:11:f0:
                    e4:a2:30:c7:2f:48:1d:b9:43:58:d2:28:89:37:21:
                    0e:66:75:d0:32:99:89:8f:44:1c:17:be:42:db:60:
                    df:4f:38:21:50:05:a9:6c:95:17:22:d7:aa:74:ce:
                    9a:58:e4:c3:d7:53:4e:17:f3:5e:af:43:20:c7:b0:
                    7d:58:d2:cd:d4:c5:01:10:48:90:0a:6a:2b:71:ae:
                    b1:b0:aa:16:e1:d6:86:8c:0a:43:91:19:73:42:3d:
                    21:a8:a3:03:a9:29:b6:9f:56:00:4a:6f:0f:48:5a:
                    0a:03:39:93:00:20:bf:03:af:9f:85:90:77:bc:4c:
                    3e:ce:66:1c:69:48:b0:c0:eb:d6:ea:d9:94:63:7b:
                    8d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:1E:FD:FE:27:F4:FE:6A:03:BB:10:68:CA:FE:00:1E:DF:44:02:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/c4417fa3-1777-3fcb-ba27-eb31b1348c11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.crl

            X509v3 Authority Key Identifier:
                keyid:27:6C:6C:7D:E1:1C:71:B2:F3:03:07:F4:B6:06:12:B1:62:59:7A:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.104.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:b0:ba:fd:9f:1c:5d:05:64:36:e2:2e:c0:ce:99:8e:35:03:
         4f:8a:5f:ea:72:c4:12:27:d9:bf:39:4c:18:46:c5:44:0d:65:
         86:82:8d:53:85:aa:b7:d9:a2:fd:16:de:6a:f2:ab:02:19:81:
         f2:2a:ba:3e:77:e4:21:56:fc:31:08:5d:1d:a4:3a:f7:ad:73:
         38:c5:9c:2f:4e:b8:5e:0c:6b:29:ae:cc:d4:54:86:af:fe:9c:
         49:34:df:a5:13:64:7f:75:bb:3e:9b:52:45:a6:48:9b:f2:8d:
         de:6b:29:14:f9:fc:49:3c:63:4c:e6:32:09:0c:3f:f7:49:ac:
         a5:2e:a4:62:86:fa:f5:0f:d4:fb:dc:47:2a:b3:61:a6:c5:17:
         c6:60:ba:d1:15:c1:d9:71:f7:bd:8c:a4:f4:2f:40:5d:b0:1f:
         d3:d9:9b:05:21:e8:e3:c5:e9:4a:2f:6b:93:7f:0e:8a:34:86:
         72:a4:1a:dd:93:5d:14:fe:62:39:9f:b4:32:3c:8f:82:a8:d5:
         c4:42:24:c2:00:fb:c0:78:ac:c7:7f:8f:41:85:05:c0:b0:62:
         dd:1a:fc:1c:d6:e5:a1:9a:aa:f2:0e:79:66:db:c2:e3:d5:14:
         a6:96:80:9d:24:97:d9:ca:b3:6e:eb:0c:1c:83:d2:a9:ff:38:
         59:1a:07:8b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9PB+4cG0yeiuUmbIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2MzZjU3MjYtNGRiZS00OGVjLThlZDctZmI0ZjNlYzRh
MDBiMB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk
N2M5ZDI2ZWYtMzA5ZS00ZjQwLWE5NjctYjI3M2UxMTVhZjQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7Vd0/k8gE4Eh0SFAIZieOon9bYp/ojvqdzY
CSlYLy596HFHk67CX9XO1hjZSGYnSLfd9QGKWoHbHmTLu9sszJHu/B+v+i9274Sm
kmsf8pGSMrWLHLDunPyTykHVG7gOtLCqJcNDNvRt4gMYUmz1cn9irV3QEfDkojDH
L0gduUNY0iiJNyEOZnXQMpmJj0QcF75C22DfTzghUAWpbJUXIteqdM6aWOTD11NO
F/Ner0Mgx7B9WNLN1MUBEEiQCmorca6xsKoW4daGjApDkRlzQj0hqKMDqSm2n1YA
Sm8PSFoKAzmTACC/A6+fhZB3vEw+zmYcaUiwwOvW6tmUY3uNZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOke/f4n9P5qA7sQaMr+AB7fRAIQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83YzNm
NTcyNi00ZGJlLTQ4ZWMtOGVkNy1mYjRmM2VjNGEwMGIvYzQ0MTdmYTMtMTc3Ny0z
ZmNiLWJhMjctZWIzMWIxMzQ4YzExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2MzZjU3MjYtNGRiZS00OGVjLThl
ZDctZmI0ZjNlYzRhMDBiLzdjM2Y1NzI2LTRkYmUtNDhlYy04ZWQ3LWZiNGYzZWM0
YTAwYi5jcmwwHwYDVR0jBBgwFoAUJ2xsfeEccbLzAwf0tgYSsWJZepYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83YzNmNTcyNi00ZGJlLTQ4ZWMtOGVkNy1mYjRm
M2VjNGEwMGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0WjQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA+wuv2fHF0FZDbiLsDOmY41A0+KX+pyxBIn2b85TBhGxUQNZYaCjVOF
qrfZov0W3mryqwIZgfIquj535CFW/DEIXR2kOvetczjFnC9OuF4MaymuzNRUhq/+
nEk036UTZH91uz6bUkWmSJvyjd5rKRT5/Ek8Y0zmMgkMP/dJrKUupGKG+vUP1Pvc
RyqzYabFF8ZgutEVwdlx972MpPQvQF2wH9PZmwUh6OPF6Uova5N/Doo0hnKkGt2T
XRT+YjmftDI8j4Ko1cRCJMIA+8B4rMd/j0GFBcCwYt0a/BzW5aGaqvIOeWbbwuPV
FKaWgJ0kl9nKs27rDByD0qn/OFkaB4s=
-----END CERTIFICATE-----
Generated at Fri Oct 2 10:26:55 2026 by rpki-client