Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/47cd7a63-8241-3aab-a4ba-90280d91cede.roa
File:                     47cd7a63-8241-3aab-a4ba-90280d91cede.roa (raw, json)
Hash identifier:          Gdm+KMTyQ2yYF7i8ZyoI/yNZJtm+/Z+hA7G2PdzUnrc=
Subject key identifier:   3A:95:18:20:36:41:16:45:DA:3C:E3:78:EC:C9:9B:17:BC:A9:4D:08
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584E82C4DFE49A90A80AC5DD92E0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/47cd7a63-8241-3aab-a4ba-90280d91cede.roa
Signing time:             Wed 15 Jul 2026 21:00:12 +0000
ROA not before:           Wed 15 Jul 2026 21:00:12 +0000
ROA not after:            Tue 13 Oct 2026 21:00:12 +0000
asID:                     834
IP address blocks:        209.92.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:82:c4:df:e4:9a:90:a8:0a:c5:dd:92:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul 15 21:00:12 2026 GMT
            Not After : Oct 13 21:00:12 2026 GMT
        Subject: CN=0d085d0e-7f07-4a44-99d1-e3bbefb34111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:82:1f:d7:57:18:d6:4b:cc:a8:2d:d5:3f:b1:
                    dc:f4:36:8b:11:d7:39:2f:de:4f:97:26:c9:af:77:
                    99:2c:88:80:dc:13:d6:d8:ea:8d:46:ac:a3:29:d5:
                    6b:f9:d4:4d:fd:ca:21:0b:96:0f:eb:f8:74:ac:93:
                    54:a2:ea:15:cc:28:ab:9f:73:e2:26:2b:3d:e0:55:
                    ea:8e:14:3a:4c:f7:33:5a:9b:cb:50:9d:68:68:c2:
                    00:d4:09:05:22:c4:ad:1f:d9:88:68:3e:31:02:1e:
                    5a:ee:b6:70:4d:af:ea:20:1e:d1:b9:12:35:22:19:
                    75:a1:49:26:07:53:d0:f4:28:00:6f:70:bb:e8:12:
                    3a:b0:5a:6c:a4:a6:0d:f4:2d:03:a1:ff:97:3c:f5:
                    98:57:2e:7f:26:d9:8a:22:18:f9:fc:7d:79:48:33:
                    3b:5d:f1:ca:6e:1d:58:2d:9c:e8:b7:7c:d5:0c:b2:
                    38:b2:e2:3c:c1:dc:8e:6e:22:bf:21:15:f1:27:ad:
                    c8:41:2a:7f:59:c0:1e:10:76:92:bd:22:17:7b:05:
                    cb:0c:6a:f5:4a:ab:83:77:08:84:6a:7a:8c:36:2b:
                    79:80:c5:c3:c1:de:d0:ef:bb:e3:ae:bf:75:03:51:
                    94:13:31:c8:9a:29:81:3c:ef:3e:ea:96:0f:c5:a5:
                    7a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:95:18:20:36:41:16:45:DA:3C:E3:78:EC:C9:9B:17:BC:A9:4D:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/47cd7a63-8241-3aab-a4ba-90280d91cede.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.92.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:91:4f:39:6a:e8:4b:b7:93:a9:91:9a:e6:f5:5f:93:9b:79:
         54:7e:9b:04:9f:66:84:33:04:44:4d:48:a9:85:7d:3b:24:f9:
         3a:65:c5:95:c8:14:5d:97:df:6f:0f:9d:88:e8:6d:a4:d3:6f:
         62:f1:23:56:4e:60:c5:9f:cc:00:eb:a6:ab:25:6c:70:db:dc:
         cb:1d:bd:99:46:46:d6:9c:18:de:ed:ce:70:04:73:bd:ee:10:
         31:d2:e8:49:f0:f8:4e:7b:ef:7c:b7:e3:9e:06:3f:24:fd:5b:
         08:14:9d:54:86:34:a4:8c:25:7a:3d:ff:3f:77:19:16:9e:3f:
         60:29:30:ba:5b:be:5d:cd:a5:41:2c:1c:c7:b7:d2:24:ae:b9:
         7c:eb:3f:7a:9d:48:ac:2a:bf:f1:9b:ce:4c:bf:0d:36:ed:76:
         53:10:92:76:4d:54:d7:41:24:7d:e1:f7:fa:e5:00:c9:e5:c6:
         cd:6c:f7:5b:ad:1a:08:7b:e8:04:ab:7b:84:03:32:c8:b1:c0:
         dc:f8:53:e4:48:52:a0:2f:d3:fb:7c:ba:37:35:bc:31:d6:bf:
         4b:c0:16:de:41:84:b1:25:41:19:26:10:12:a5:0d:63:17:68:
         15:31:ca:c6:ca:bb:da:00:79:2c:2a:93:58:7a:85:24:76:71:
         01:21:20:98
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6CxN/kmpCoCsXdkuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI2MDcxNTIxMDAxMloXDTI2MTAxMzIxMDAxMlowLzEtMCsGA1UEAxMk
MGQwODVkMGUtN2YwNy00YTQ0LTk5ZDEtZTNiYmVmYjM0MTExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIIf11cY1kvMqC3VP7Hc9DaLEdc5L95PlybJ
r3eZLIiA3BPW2OqNRqyjKdVr+dRN/cohC5YP6/h0rJNUouoVzCirn3PiJis94FXq
jhQ6TPczWpvLUJ1oaMIA1AkFIsStH9mIaD4xAh5a7rZwTa/qIB7RuRI1Ihl1oUkm
B1PQ9CgAb3C76BI6sFpspKYN9C0Dof+XPPWYVy5/JtmKIhj5/H15SDM7XfHKbh1Y
LZzot3zVDLI4suI8wdyObiK/IRXxJ63IQSp/WcAeEHaSvSIXewXLDGr1SquDdwiE
anqMNit5gMXDwd7Q77vjrr91A1GUEzHImimBPO8+6pYPxaV6aQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDqVGCA2QRZF2jzjeOzJmxe8qU0IMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvNDdjZDdhNjMtODI0MS0z
YWFiLWE0YmEtOTAyODBkOTFjZWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VywMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK2RTzlq6Eu3k6mRmub1X5ObeVR+mwSfZoQzBERNSKmFfTsk+TplxZXI
FF2X328PnYjobaTTb2LxI1ZOYMWfzADrpqslbHDb3MsdvZlGRtacGN7tznAEc73u
EDHS6Enw+E5773y3454GPyT9WwgUnVSGNKSMJXo9/z93GRaeP2ApMLpbvl3NpUEs
HMe30iSuuXzrP3qdSKwqv/Gbzky/DTbtdlMQknZNVNdBJH3h9/rlAMnlxs1s91ut
Ggh76ASre4QDMsixwNz4U+RIUqAv0/t8ujc1vDHWv0vAFt5BhLElQRkmEBKlDWMX
aBUxysbKu9oAeSwqk1h6hSR2cQEhIJg=
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:07:39 2026 by rpki-client