Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/a656af45-6f6a-358c-97d5-ee9c0e7a9a56.roa
File:                     a656af45-6f6a-358c-97d5-ee9c0e7a9a56.roa (raw, json)
Hash identifier:          JYs/fUfZj5U1lBzLdBra/dumV09HLp+5PpU0Q7peQsc=
Subject key identifier:   EB:30:04:C2:C3:9E:20:31:62:3C:AD:4C:C9:EA:B7:D6:78:C6:C0:2B
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584E50849B0AF4B6AB6B789A9000
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/a656af45-6f6a-358c-97d5-ee9c0e7a9a56.roa
Signing time:             Sat 27 Jun 2026 21:00:12 +0000
ROA not before:           Sat 27 Jun 2026 21:00:12 +0000
ROA not after:            Fri 25 Sep 2026 21:00:12 +0000
asID:                     271
IP address blocks:        207.23.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:50:84:9b:0a:f4:b6:ab:6b:78:9a:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Jun 27 21:00:12 2026 GMT
            Not After : Sep 25 21:00:12 2026 GMT
        Subject: CN=bfda6181-b680-4b97-8078-93fc57d35cc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c2:69:13:87:7f:57:95:7b:f8:38:43:9d:eb:
                    39:0f:73:c9:c5:d4:67:29:0c:ee:74:a5:ec:92:8d:
                    e4:bf:86:08:c2:a9:77:27:2a:a6:95:cc:c3:76:f0:
                    18:1c:35:42:b6:d0:f9:db:8e:f5:8d:01:45:25:a6:
                    72:40:72:d9:98:d5:f7:52:31:3c:cb:a2:21:71:dd:
                    02:57:1e:00:69:14:27:ae:da:2d:b1:6e:96:aa:ee:
                    ea:1a:4a:3e:52:db:f3:b6:f0:13:4e:55:02:d5:b2:
                    c4:fd:42:16:b2:be:ea:cf:e2:62:cd:d9:b6:00:8a:
                    f5:60:54:04:fa:ab:14:ab:1d:0d:79:3c:0c:ff:fa:
                    2f:38:41:8d:6a:58:86:6e:22:8a:79:92:a5:62:4e:
                    a7:58:c3:79:94:98:7a:04:eb:3a:d3:9f:d4:d8:08:
                    57:0e:11:9e:66:6e:6b:30:51:c4:67:5f:6e:67:08:
                    08:67:9a:c6:7c:85:bd:93:11:1d:c9:19:51:36:06:
                    d3:4a:37:77:50:7a:c4:4f:e9:f8:bf:04:b5:33:c6:
                    db:dd:fd:d4:80:5c:1e:ff:f8:8f:43:ed:5b:92:41:
                    16:9f:13:3f:86:e6:bc:cc:e0:8d:64:7d:4e:7d:eb:
                    87:a1:41:1a:d3:ce:9d:77:bf:2e:e7:35:1b:b8:eb:
                    29:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:30:04:C2:C3:9E:20:31:62:3C:AD:4C:C9:EA:B7:D6:78:C6:C0:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/a656af45-6f6a-358c-97d5-ee9c0e7a9a56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.23.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:2c:85:69:77:db:30:27:ef:1f:cc:9b:34:a0:52:2a:50:af:
         01:90:08:6b:9d:c5:ef:ca:da:1b:19:98:43:76:fb:43:3a:6d:
         ec:21:ee:a2:f0:33:01:53:41:68:33:6b:62:f4:87:53:b2:ce:
         9e:ea:a4:63:d9:c3:33:03:ab:d3:2f:c4:b4:b9:8b:55:77:dc:
         1d:9a:17:1e:62:4f:47:79:c0:d3:7f:f6:d9:6e:7b:3f:29:fd:
         28:3b:aa:4a:ef:ed:1d:78:fd:9f:f5:9f:19:8f:83:71:f4:bf:
         12:61:1d:e9:37:d8:66:5e:f6:6f:72:68:cf:b2:93:c2:91:4b:
         12:3b:05:f4:25:05:38:c8:76:06:cc:5c:1a:69:a0:c0:40:ee:
         1b:ea:b9:c0:46:ec:ce:58:7a:92:25:3d:d0:d5:1d:7b:3f:59:
         6d:48:c2:c0:0c:b5:5d:bb:26:c9:f3:e5:3b:b9:c2:50:c3:62:
         24:e6:14:25:21:65:0c:c7:f0:01:bc:1d:24:07:ed:eb:0f:08:
         76:ce:a4:18:1e:9f:c6:a3:b7:e7:17:65:ed:09:fd:d0:8c:13:
         fd:a1:9a:64:e3:01:c2:05:22:ee:0f:2f:bd:d1:ce:0b:67:88:
         49:3b:77:8c:88:7f:6c:91:e0:b3:e7:30:97:b5:1a:0e:e9:a0:
         a7:80:88:fe
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5QhJsK9Lara3iakAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2
OTZjMB4XDTI2MDYyNzIxMDAxMloXDTI2MDkyNTIxMDAxMlowLzEtMCsGA1UEAxMk
YmZkYTYxODEtYjY4MC00Yjk3LTgwNzgtOTNmYzU3ZDM1Y2M1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsJpE4d/V5V7+DhDnes5D3PJxdRnKQzudKXs
ko3kv4YIwql3JyqmlczDdvAYHDVCttD52471jQFFJaZyQHLZmNX3UjE8y6Ihcd0C
Vx4AaRQnrtotsW6Wqu7qGko+UtvztvATTlUC1bLE/UIWsr7qz+Jizdm2AIr1YFQE
+qsUqx0NeTwM//ovOEGNaliGbiKKeZKlYk6nWMN5lJh6BOs605/U2AhXDhGeZm5r
MFHEZ19uZwgIZ5rGfIW9kxEdyRlRNgbTSjd3UHrET+n4vwS1M8bb3f3UgFwe//iP
Q+1bkkEWnxM/hua8zOCNZH1OfeuHoUEa086dd78u5zUbuOspfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOswBMLDniAxYjytTMnqt9Z4xsArMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy
ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvYTY1NmFmNDUtNmY2YS0z
NThjLTk3ZDUtZWU5YzBlN2E5YTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh
NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli
Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj
MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzxfwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGQshWl32zAn7x/MmzSgUipQrwGQCGudxe/K2hsZmEN2+0M6bewh7qLw
MwFTQWgza2L0h1Oyzp7qpGPZwzMDq9MvxLS5i1V33B2aFx5iT0d5wNN/9tluez8p
/Sg7qkrv7R14/Z/1nxmPg3H0vxJhHek32GZe9m9yaM+yk8KRSxI7BfQlBTjIdgbM
XBppoMBA7hvqucBG7M5YepIlPdDVHXs/WW1IwsAMtV27Jsnz5Tu5wlDDYiTmFCUh
ZQzH8AG8HSQH7esPCHbOpBgen8ajt+cXZe0J/dCME/2hmmTjAcIFIu4PL73Rzgtn
iEk7d4yIf2yR4LPnMJe1Gg7poKeAiP4=
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:05:34 2026 by rpki-client