Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/b06692f4-a6dc-3f17-bbdf-9b3e0ef76706.roa
File:                     b06692f4-a6dc-3f17-bbdf-9b3e0ef76706.roa (raw, json)
Hash identifier:          TGreEuMCZIZZ5bLOJvmcNM1AM1CGvAKN5k65xoO2SXE=
Subject key identifier:   3D:09:51:45:14:D9:86:00:8B:82:07:44:72:95:81:DA:C4:E7:4D:DA
Certificate issuer:       /CN=2dbf604f-24b0-426e-809d-e65b08be5d50
Certificate serial:       010D0C9F4328584D2644B924D6CAE8E5C10523D0
Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/b06692f4-a6dc-3f17-bbdf-9b3e0ef76706.roa
Signing time:             Fri 13 Mar 2026 01:00:31 +0000
ROA not before:           Fri 13 Mar 2026 01:00:31 +0000
ROA not after:            Thu 11 Jun 2026 01:00:31 +0000
asID:                     16433
IP address blocks:        204.9.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:26:44:b9:24:d6:ca:e8:e5:c1:05:23:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50
        Validity
            Not Before: Mar 13 01:00:31 2026 GMT
            Not After : Jun 11 01:00:31 2026 GMT
        Subject: CN=70f8aabc-f218-4640-8d46-371dc5965e7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4a:17:61:0d:0d:e7:4d:70:27:cf:e6:73:8d:
                    a9:30:4b:b1:7a:25:43:01:05:2b:bd:bc:de:5d:f5:
                    e9:27:30:99:be:c7:05:3e:7b:c2:a9:ce:2f:c0:0b:
                    d3:8a:c4:4b:24:f4:12:c6:1a:38:16:60:89:ac:d1:
                    ee:cd:8f:f9:0e:6d:cf:86:a0:58:8d:6b:b0:65:37:
                    fe:29:a0:5b:ec:b0:5c:d5:8c:56:21:c0:c0:df:9d:
                    07:8a:5f:ea:34:33:4e:22:ea:26:32:b1:10:68:ff:
                    70:75:a6:49:ee:42:e2:b3:d0:a0:39:7e:20:77:06:
                    64:cd:1f:6d:1b:3f:25:e6:f5:a4:c0:47:0a:83:53:
                    9f:f4:b1:3a:62:34:90:29:d1:8c:da:58:24:9b:37:
                    7a:f9:6c:ae:a4:df:fc:5a:e7:76:cd:58:3a:fb:7f:
                    60:2b:30:24:18:49:ca:b0:90:38:82:6a:fb:5e:bd:
                    fb:e9:5e:c3:cd:2f:85:e0:51:46:ae:22:d8:bd:11:
                    a7:aa:9e:9a:47:39:26:dc:cd:60:cd:81:9f:3c:e0:
                    1d:1e:90:ce:02:fd:d5:93:14:fd:51:15:93:1b:9b:
                    9c:6f:a5:f5:8c:87:e7:99:00:5a:e8:11:90:7d:81:
                    88:75:49:c4:1f:41:bc:a8:5c:23:fa:06:af:74:ec:
                    3f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:09:51:45:14:D9:86:00:8B:82:07:44:72:95:81:DA:C4:E7:4D:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/b06692f4-a6dc-3f17-bbdf-9b3e0ef76706.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl

            X509v3 Authority Key Identifier:
                keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.9.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:bd:c5:5a:43:c8:64:86:24:45:6c:c6:a2:35:16:92:18:c8:
         4c:1e:52:10:99:4d:e6:ec:61:37:cf:27:d9:3a:de:b0:d8:ac:
         d2:eb:5b:6c:ea:5b:97:fa:65:84:80:6e:18:d3:43:87:e9:33:
         4b:3a:05:cc:98:d3:85:5a:9c:69:7d:5b:aa:e2:e7:15:39:ac:
         3b:f1:a9:e2:ef:20:38:59:6a:47:c1:d4:6d:7a:03:02:f3:07:
         64:94:8f:24:bd:81:f5:9c:b4:42:1f:45:af:28:48:47:81:ec:
         1c:2f:64:1d:68:4a:ab:97:10:f2:58:3b:a2:77:71:c9:4a:9f:
         fb:d8:15:33:28:79:26:e1:f2:88:dd:fd:e0:b5:e9:17:16:cc:
         2e:09:1f:16:64:6b:9a:bb:75:7f:e6:93:9d:59:f3:59:8b:14:
         cf:7b:0f:7a:d7:05:2b:fe:13:80:84:2c:f5:57:88:04:e4:b3:
         13:45:e5:5b:cd:64:2a:ed:8b:51:e6:e6:5f:bf:68:c9:d3:90:
         72:9f:c7:0d:b5:66:a9:11:ff:4c:7b:d5:f9:25:2a:60:08:1a:
         8b:fe:9b:1e:c8:82:34:a8:f7:c1:07:cd:76:fa:69:f7:a7:aa:
         8f:00:ec:f9:7c:1e:6a:58:28:b4:1e:c0:43:14:61:77:37:bc:
         08:61:dd:b3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0mRLkk1sro5cEFI9AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1
ZDUwMB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk
NzBmOGFhYmMtZjIxOC00NjQwLThkNDYtMzcxZGM1OTY1ZTdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0oXYQ0N501wJ8/mc42pMEuxeiVDAQUrvbze
XfXpJzCZvscFPnvCqc4vwAvTisRLJPQSxho4FmCJrNHuzY/5Dm3PhqBYjWuwZTf+
KaBb7LBc1YxWIcDA350Hil/qNDNOIuomMrEQaP9wdaZJ7kLis9CgOX4gdwZkzR9t
Gz8l5vWkwEcKg1Of9LE6YjSQKdGM2lgkmzd6+WyupN/8Wud2zVg6+39gKzAkGEnK
sJA4gmr7Xr376V7DzS+F4FFGriLYvRGnqp6aRzkm3M1gzYGfPOAdHpDOAv3VkxT9
URWTG5ucb6X1jIfnmQBa6BGQfYGIdUnEH0G8qFwj+gavdOw/jQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD0JUUUU2YYAi4IHRHKVgdrE503aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm
NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvYjA2NjkyZjQtYTZkYy0z
ZjE3LWJiZGYtOWIzZTBlZjc2NzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw
OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl
NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi
MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzAkEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAm9xVpDyGSGJEVsxqI1FpIYyEweUhCZTebsYTfPJ9k63rDYrNLrW2zq
W5f6ZYSAbhjTQ4fpM0s6BcyY04VanGl9W6ri5xU5rDvxqeLvIDhZakfB1G16AwLz
B2SUjyS9gfWctEIfRa8oSEeB7BwvZB1oSquXEPJYO6J3cclKn/vYFTMoeSbh8ojd
/eC16RcWzC4JHxZka5q7dX/mk51Z81mLFM97D3rXBSv+E4CELPVXiATksxNF5VvN
ZCrti1Hm5l+/aMnTkHKfxw21ZqkR/0x71fklKmAIGov+mx7IgjSo98EHzXb6afen
qo8A7Pl8HmpYKLQewEMUYXc3vAhh3bM=
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:33:37 2026 by rpki-client