Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/efa0f564-18a2-3880-88ae-f975a53f1965.roa
File:                     efa0f564-18a2-3880-88ae-f975a53f1965.roa (raw, json)
Hash identifier:          efX0NkhXHWD5HnY6KNGC0ln3WqFrb1XADZ8C9qO13M4=
Subject key identifier:   0C:30:08:7D:F6:F2:BE:E4:36:77:AB:5B:36:6E:84:B6:B4:46:90:63
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584F4973746AA381ABFAEC7D7380
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/efa0f564-18a2-3880-88ae-f975a53f1965.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     47007
IP address blocks:        67.207.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:74:6a:a3:81:ab:fa:ec:7d:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=0bcb997c-793f-4166-bcd1-6ee9cece9b59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:3d:a0:d1:17:1f:3b:b2:7a:76:37:81:91:f4:
                    73:4d:e0:19:e1:af:c0:67:b7:25:a4:32:b2:b6:40:
                    03:f6:fc:99:a9:c0:5a:8b:f4:f3:60:46:7a:ba:55:
                    54:e2:a4:67:a3:2e:80:00:34:e4:a0:ab:f5:2a:14:
                    da:9f:4a:3f:72:09:1d:11:bf:be:d2:5a:22:87:9b:
                    06:bc:34:3e:63:14:90:cf:cc:83:ef:70:9a:af:e9:
                    ae:34:1c:66:5f:ff:81:3f:d4:0f:15:43:a8:17:27:
                    52:51:83:af:cf:9c:a5:28:75:e4:77:35:d1:3d:38:
                    ff:50:54:1c:3b:57:e0:ee:7b:31:62:a9:4e:de:72:
                    66:86:83:e6:d5:3b:0a:c1:1a:60:a2:16:fd:03:26:
                    02:f5:39:c1:72:e5:e0:05:ce:56:aa:f1:00:2c:ba:
                    a0:79:14:f7:c3:c6:21:24:c6:16:b5:f0:73:ad:7a:
                    fd:c0:fa:e5:b7:1a:d4:42:f4:3a:7d:d0:d3:40:fc:
                    f9:d0:2b:5f:fe:4e:04:e7:d7:5e:b6:d4:7e:df:46:
                    36:17:bd:7b:c3:8a:87:98:01:12:97:35:64:fe:47:
                    30:ea:8b:b2:30:78:6d:d6:1f:0e:e9:fd:7b:42:4d:
                    92:74:5f:98:92:90:66:46:b6:5f:b4:1d:e6:d5:59:
                    13:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:30:08:7D:F6:F2:BE:E4:36:77:AB:5B:36:6E:84:B6:B4:46:90:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/efa0f564-18a2-3880-88ae-f975a53f1965.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.207.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:b0:c1:66:33:07:54:e8:6d:40:5c:29:12:a5:5e:56:db:10:
         53:76:04:ea:e7:99:d7:72:f1:f1:47:61:ca:44:ea:d8:9d:65:
         6d:d5:18:a0:65:5b:e9:ed:b7:75:69:0c:1e:0c:3a:49:aa:ba:
         f3:4c:c6:10:a6:a0:22:2d:61:70:f6:c2:e7:0e:3c:3d:01:e4:
         9f:9f:a3:bc:b8:d7:eb:b9:d6:8a:91:9b:73:8e:cd:96:d1:b0:
         11:a2:a1:28:62:ed:82:62:2f:e8:a7:21:2b:6d:ab:c5:84:ff:
         7e:8a:ac:a2:07:cf:97:d8:7f:79:56:29:3e:cb:84:12:6c:c1:
         b8:01:20:42:07:fb:fa:11:4d:89:62:f6:b6:71:e5:17:e1:c0:
         db:05:e7:d7:e8:81:89:ae:fd:c0:01:fc:00:cb:ad:3f:0c:41:
         09:f8:07:c5:d1:78:3a:02:49:be:ab:7e:01:c4:f7:0a:56:46:
         35:97:a5:43:a1:70:fa:2a:70:a0:f0:f9:a0:c1:d8:94:cb:03:
         93:64:f8:4a:d1:d5:d4:4e:cf:37:5d:eb:1c:77:3a:cf:c5:5f:
         a7:ef:26:37:de:5a:60:aa:4a:9d:f9:0f:b8:8b:04:c5:37:31:
         bc:2d:ab:11:65:41:ed:64:21:15:81:da:97:2b:35:3e:ee:f7:
         7e:31:bb:84
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc3Rqo4Gr+ux9c4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MGJjYjk5N2MtNzkzZi00MTY2LWJjZDEtNmVlOWNlY2U5YjU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+D2g0RcfO7J6djeBkfRzTeAZ4a/AZ7clpDKy
tkAD9vyZqcBai/TzYEZ6ulVU4qRnoy6AADTkoKv1KhTan0o/cgkdEb++0loih5sG
vDQ+YxSQz8yD73Car+muNBxmX/+BP9QPFUOoFydSUYOvz5ylKHXkdzXRPTj/UFQc
O1fg7nsxYqlO3nJmhoPm1TsKwRpgohb9AyYC9TnBcuXgBc5WqvEALLqgeRT3w8Yh
JMYWtfBzrXr9wPrltxrUQvQ6fdDTQPz50Ctf/k4E59dettR+30Y2F717w4qHmAES
lzVk/kcw6ouyMHht1h8O6f17Qk2SdF+YkpBmRrZftB3m1VkTqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAwwCH328r7kNnerWzZuhLa0RpBjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvZWZhMGY1NjQtMThhMi0z
ODgwLTg4YWUtZjk3NWE1M2YxOTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ8+4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG+wwWYzB1TobUBcKRKlXlbbEFN2BOrnmddy8fFHYcpE6tidZW3VGKBl
W+ntt3VpDB4MOkmquvNMxhCmoCItYXD2wucOPD0B5J+fo7y41+u51oqRm3OOzZbR
sBGioShi7YJiL+inISttq8WE/36KrKIHz5fYf3lWKT7LhBJswbgBIEIH+/oRTYli
9rZx5RfhwNsF59fogYmu/cAB/ADLrT8MQQn4B8XReDoCSb6rfgHE9wpWRjWXpUOh
cPoqcKDw+aDB2JTLA5Nk+ErR1dROzzdd6xx3Os/FX6fvJjfeWmCqSp35D7iLBMU3
MbwtqxFlQe1kIRWB2pcrNT7u934xu4Q=
-----END CERTIFICATE-----
Generated at Tue Oct 13 05:50:17 2026 by rpki-client