Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/debf15ce-d5dd-37c4-9aa6-a5fd30d2ae2b.roa
File:                     debf15ce-d5dd-37c4-9aa6-a5fd30d2ae2b.roa (raw, json)
Hash identifier:          n5okIoQjck6yoMrPuNOXckO2Z/ASZJkx6TwHXQqvmtw=
Subject key identifier:   34:EA:F8:2A:F7:93:7C:58:F5:52:88:15:00:20:E5:22:40:FC:E9:0B
Certificate issuer:       /CN=109733f6-670d-4e02-a6e2-403ebf727263
Certificate serial:       010D0C9F4328584E54B4A06E1D0822247BF05800
Authority key identifier: E9:5C:E4:04:D3:8F:E8:AD:35:EE:F9:60:53:56:92:9D:0E:C1:79:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/debf15ce-d5dd-37c4-9aa6-a5fd30d2ae2b.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     13494
IP address blocks:        206.220.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/109733f6-670d-4e02-a6e2-403ebf727263.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/109733f6-670d-4e02-a6e2-403ebf727263.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:a0:6e:1d:08:22:24:7b:f0:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=109733f6-670d-4e02-a6e2-403ebf727263
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=c2325d80-0d66-4d32-8fdf-e6c3ccbc695c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f9:5e:70:0b:d0:ce:3b:1a:0a:74:f6:0a:47:
                    75:4e:f4:66:09:f5:bc:2d:73:05:66:0a:e6:c7:e7:
                    21:f1:0f:44:83:fe:14:07:1f:ab:3d:3f:a6:90:60:
                    19:9d:bc:62:24:7e:08:0c:46:9e:d8:d9:40:55:d6:
                    88:ca:43:81:e3:08:41:30:82:2b:2e:d0:79:d0:1c:
                    2f:a8:77:1a:6a:50:01:84:7a:2a:41:4e:98:68:38:
                    08:83:34:6a:37:66:6e:b5:93:19:fe:34:d5:57:6c:
                    16:68:0b:6e:43:df:b8:19:2b:b6:9f:3d:9c:1d:00:
                    8e:1c:d9:63:5f:44:93:ee:6d:f4:ac:d6:82:d0:f0:
                    19:6d:ed:13:6d:a4:f4:2c:aa:35:fd:44:5e:57:73:
                    35:6a:34:9f:01:99:49:db:65:78:80:49:d7:b0:3e:
                    1a:44:05:f6:2d:f1:79:ab:20:71:7c:01:d0:1b:31:
                    b9:5c:f7:48:ce:4d:55:ca:a2:af:6d:ab:3d:e3:33:
                    d6:ed:44:03:b7:c9:4a:87:a0:c7:7d:b1:41:15:6d:
                    83:b0:ac:21:39:2d:f6:76:55:cb:13:f6:dc:d8:d8:
                    6c:9c:9f:b4:e4:e9:aa:8a:4e:47:d2:50:c4:5d:63:
                    84:be:4b:fb:cb:55:ce:4c:3e:d4:8e:38:c9:1d:00:
                    fe:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:EA:F8:2A:F7:93:7C:58:F5:52:88:15:00:20:E5:22:40:FC:E9:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/debf15ce-d5dd-37c4-9aa6-a5fd30d2ae2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/109733f6-670d-4e02-a6e2-403ebf727263.crl

            X509v3 Authority Key Identifier:
                keyid:E9:5C:E4:04:D3:8F:E8:AD:35:EE:F9:60:53:56:92:9D:0E:C1:79:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.220.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:d4:5b:60:33:26:d2:10:fa:2c:b2:fb:bb:a1:ba:05:0f:9c:
         eb:e4:80:dd:8c:ea:40:07:8a:d3:ef:66:10:4e:3e:fb:97:6f:
         e2:97:5d:b9:6a:65:e5:d8:94:e9:12:fe:5c:23:eb:ac:80:57:
         77:96:3e:f3:81:41:6b:89:cf:73:32:7c:6a:14:69:62:a0:35:
         c9:f2:0f:7b:e6:6d:bf:ea:85:5e:48:8e:71:7f:db:74:15:21:
         24:c0:f1:07:cf:fd:1f:1b:c7:38:8e:73:ce:a7:cd:1f:46:a2:
         74:12:83:89:37:98:2a:37:fd:fb:5f:e0:da:ff:6a:53:28:e0:
         69:dc:90:c3:67:7b:e8:bd:00:ba:88:32:52:40:24:19:20:2a:
         b1:39:1d:c0:20:af:b6:0e:3b:ce:5b:8f:1a:0a:9b:31:22:4c:
         f1:4e:5c:54:f1:e6:e3:71:93:36:f9:c6:cd:17:2a:04:d7:b3:
         00:20:11:b8:d5:9e:03:cc:cc:8d:37:0c:39:34:7d:df:7d:91:
         31:b9:b6:f2:23:90:91:92:36:a3:7e:3f:89:4f:68:fe:2c:7b:
         82:12:12:5e:18:f6:95:a4:61:eb:ab:a2:c8:fd:91:de:03:0f:
         f9:2a:3c:6d:fe:1d:db:3b:50:be:c5:bf:08:3d:62:ba:a2:a2:
         ef:f1:e5:f9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5UtKBuHQgiJHvwWAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTA5NzMzZjYtNjcwZC00ZTAyLWE2ZTItNDAzZWJmNzI3
MjYzMB4XDTI2MDYyOTA5MDAxMloXDTI2MDkyNzA5MDAxMlowLzEtMCsGA1UEAxMk
YzIzMjVkODAtMGQ2Ni00ZDMyLThmZGYtZTZjM2NjYmM2OTVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPlecAvQzjsaCnT2Ckd1TvRmCfW8LXMFZgrm
x+ch8Q9Eg/4UBx+rPT+mkGAZnbxiJH4IDEae2NlAVdaIykOB4whBMIIrLtB50Bwv
qHcaalABhHoqQU6YaDgIgzRqN2ZutZMZ/jTVV2wWaAtuQ9+4GSu2nz2cHQCOHNlj
X0ST7m30rNaC0PAZbe0TbaT0LKo1/UReV3M1ajSfAZlJ22V4gEnXsD4aRAX2LfF5
qyBxfAHQGzG5XPdIzk1VyqKvbas94zPW7UQDt8lKh6DHfbFBFW2DsKwhOS32dlXL
E/bc2NhsnJ+05Omqik5H0lDEXWOEvkv7y1XOTD7UjjjJHQD+dQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDTq+Cr3k3xY9VKIFQAg5SJA/OkLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xMDk3
MzNmNi02NzBkLTRlMDItYTZlMi00MDNlYmY3MjcyNjMvZGViZjE1Y2UtZDVkZC0z
N2M0LTlhYTYtYTVmZDMwZDJhZTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTA5NzMzZjYtNjcwZC00ZTAyLWE2
ZTItNDAzZWJmNzI3MjYzLzEwOTczM2Y2LTY3MGQtNGUwMi1hNmUyLTQwM2ViZjcy
NzI2My5jcmwwHwYDVR0jBBgwFoAU6VzkBNOP6K017vlgU1aSnQ7BeSswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8xMDk3MzNmNi02NzBkLTRlMDItYTZlMi00MDNl
YmY3MjcyNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAztwRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFjUW2AzJtIQ+iyy+7uhugUPnOvkgN2M6kAHitPvZhBOPvuXb+KXXblq
ZeXYlOkS/lwj66yAV3eWPvOBQWuJz3MyfGoUaWKgNcnyD3vmbb/qhV5IjnF/23QV
ISTA8QfP/R8bxziOc86nzR9GonQSg4k3mCo3/ftf4Nr/alMo4GnckMNne+i9ALqI
MlJAJBkgKrE5HcAgr7YOO85bjxoKmzEiTPFOXFTx5uNxkzb5xs0XKgTXswAgEbjV
ngPMzI03DDk0fd99kTG5tvIjkJGSNqN+P4lPaP4se4ISEl4Y9pWkYeurosj9kd4D
D/kqPG3+Hds7UL7Fvwg9Yrqiou/x5fk=
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:44:45 2026 by rpki-client