Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/e0c36319-b634-372f-9da0-aa28685ea81d.roa
File:                     e0c36319-b634-372f-9da0-aa28685ea81d.roa (raw, json)
Hash identifier:          +HsK6Yrn+1kR9WLbiYdnZHl5WK4IvPoeCqGJpwdQbXg=
Subject key identifier:   8D:D0:15:A7:22:B0:B9:BC:34:68:4A:AE:15:5E:63:18:49:9A:04:5D
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584F49754A9F2209C7555DF80200
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/e0c36319-b634-372f-9da0-aa28685ea81d.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     16462
IP address blocks:        206.12.96.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:4a:9f:22:09:c7:55:5d:f8:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=88acb690-f87d-4bfc-9695-43f3858c0da6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:bc:b6:0c:52:eb:bf:8a:66:5c:bc:cc:08:b1:
                    c6:7c:ac:d4:1d:a2:42:fe:ca:7c:90:de:8d:4c:a4:
                    93:72:04:95:5c:e7:55:fd:35:01:8c:0e:d3:7a:5e:
                    2d:d9:86:54:d8:b7:a5:fd:0b:cf:da:40:a1:fb:62:
                    df:2e:7a:e8:d1:83:2a:04:f6:ec:4c:23:a3:c2:e2:
                    03:d5:5b:49:5f:eb:ac:6c:3a:bd:8e:62:7b:00:c3:
                    9f:13:48:58:71:eb:c0:13:fe:94:b2:11:16:20:9a:
                    97:2f:d2:76:be:4b:9a:b5:02:c7:79:aa:60:2c:07:
                    2e:db:ba:fb:bf:d3:e5:89:1f:8f:60:70:28:6c:60:
                    34:5c:57:89:f4:cc:31:d6:c4:df:26:68:ae:7b:db:
                    04:01:fe:d3:9a:43:73:03:56:0f:10:7d:da:f0:c7:
                    80:ac:b2:63:b2:e3:5a:f6:27:cb:e1:d6:1d:be:b3:
                    09:9d:3e:a7:ce:a7:de:b6:23:fa:73:a4:d6:91:61:
                    af:a3:ce:9f:33:f5:29:3a:eb:d7:89:e5:b8:c9:60:
                    76:c4:68:b5:81:61:f9:ea:a9:fb:1e:90:89:df:16:
                    a5:1b:48:71:8c:1c:ed:97:22:e2:48:4a:de:56:6c:
                    26:6e:fc:88:a5:de:57:82:cd:d3:38:48:65:0b:03:
                    0a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:D0:15:A7:22:B0:B9:BC:34:68:4A:AE:15:5E:63:18:49:9A:04:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/e0c36319-b634-372f-9da0-aa28685ea81d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.12.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:62:dc:0b:ef:dc:ab:fc:bc:d8:8c:89:d7:71:85:43:37:88:
         94:4b:dd:79:73:c2:c2:a2:9b:85:dd:45:e3:41:9c:61:c4:04:
         cc:87:f4:0e:92:a1:2d:6a:3c:a0:c1:29:51:92:82:f4:a5:f6:
         7d:4f:f1:ff:8f:7f:d0:5e:1b:71:08:89:33:e9:9f:c9:6b:d5:
         e6:c0:8d:64:6d:c8:bc:18:18:fe:6a:c4:e7:f2:e7:b7:7e:69:
         5c:1b:bb:9e:60:8f:0d:9d:0d:ef:e2:0b:9f:fe:07:e9:7a:01:
         eb:1c:02:5c:98:ab:af:6f:2d:04:87:4d:c4:f1:ff:d9:54:19:
         9d:29:c2:40:d1:e4:f1:a3:7b:62:65:fd:b2:79:bb:95:7f:70:
         71:86:c9:f9:bc:8d:4a:ac:31:97:45:ac:6f:49:a6:a7:d6:43:
         b2:5f:8b:6a:c2:e5:ae:ba:63:18:39:bf:5b:d3:cf:ef:ba:da:
         60:62:0f:a7:5a:3d:0a:97:ff:60:5c:f5:34:2f:0e:78:17:5c:
         89:25:a6:81:a8:a3:ae:2e:5f:56:e3:e6:f3:49:58:5d:dc:ab:
         f5:74:2e:d0:25:ff:d1:32:03:b5:be:8b:f2:4f:68:fc:8d:d9:
         03:a4:60:82:c3:7a:7d:a9:b3:e7:57:f7:1b:be:2d:f4:2d:25:
         fa:28:c2:c2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdUqfIgnHVV34AgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2
OTZjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ODhhY2I2OTAtZjg3ZC00YmZjLTk2OTUtNDNmMzg1OGMwZGE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7y2DFLrv4pmXLzMCLHGfKzUHaJC/sp8kN6N
TKSTcgSVXOdV/TUBjA7Tel4t2YZU2Lel/QvP2kCh+2LfLnro0YMqBPbsTCOjwuID
1VtJX+usbDq9jmJ7AMOfE0hYcevAE/6UshEWIJqXL9J2vkuatQLHeapgLAcu27r7
v9PliR+PYHAobGA0XFeJ9Mwx1sTfJmiue9sEAf7TmkNzA1YPEH3a8MeArLJjsuNa
9ifL4dYdvrMJnT6nzqfetiP6c6TWkWGvo86fM/UpOuvXieW4yWB2xGi1gWH56qn7
HpCJ3xalG0hxjBztlyLiSEreVmwmbvyIpd5Xgs3TOEhlCwMKBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI3QFacisLm8NGhKrhVeYxhJmgRdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy
ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvZTBjMzYzMTktYjYzNC0z
NzJmLTlkYTAtYWEyODY4NWVhODFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh
NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli
Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj
MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzgxgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH5i3Avv3Kv8vNiMiddxhUM3iJRL3XlzwsKim4XdReNBnGHEBMyH9A6S
oS1qPKDBKVGSgvSl9n1P8f+Pf9BeG3EIiTPpn8lr1ebAjWRtyLwYGP5qxOfy57d+
aVwbu55gjw2dDe/iC5/+B+l6AescAlyYq69vLQSHTcTx/9lUGZ0pwkDR5PGje2Jl
/bJ5u5V/cHGGyfm8jUqsMZdFrG9JpqfWQ7Jfi2rC5a66Yxg5v1vTz++62mBiD6da
PQqX/2Bc9TQvDngXXIklpoGoo64uX1bj5vNJWF3cq/V0LtAl/9EyA7W+i/JPaPyN
2QOkYILDen2ps+dX9xu+LfQtJfoowsI=
-----END CERTIFICATE-----
Generated at Sun Oct 4 23:18:51 2026 by rpki-client