Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/6b20c6c8-b544-3233-9c89-ea3eead2913d.roa
File:                     6b20c6c8-b544-3233-9c89-ea3eead2913d.roa (raw, json)
Hash identifier:          YhkN4sA2iQ+QXJ/XkEJ5D0iyucShvKERpEuwBzpT9Oo=
Subject key identifier:   FF:AC:A0:CE:E4:89:65:B1:F2:3B:78:62:DE:F3:AE:C3:C7:B0:06:5C
Certificate issuer:       /CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
Certificate serial:       010D0C9F4328584ED861E924954D2957EBDB3460
Authority key identifier: C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/6b20c6c8-b544-3233-9c89-ea3eead2913d.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     18914
IP address blocks:        204.8.108.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:61:e9:24:95:4d:29:57:eb:db:34:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=0dd1c1e3-96d4-4bd2-9b9a-1b67b67b007a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fa:3c:a7:ea:0d:9b:09:d7:c8:e6:b2:5c:bb:
                    5f:c5:0e:92:78:d9:04:2d:c5:a5:8f:68:03:b4:d9:
                    2d:fd:c9:17:08:ef:2c:5f:bf:2b:61:de:1b:2d:07:
                    ed:7a:7e:40:4f:8e:ed:24:cb:39:73:54:7b:5b:b2:
                    4b:04:af:d5:20:91:ee:d7:df:c8:f6:23:0b:b2:12:
                    1f:91:df:72:83:fc:66:f6:12:55:47:df:49:2c:1c:
                    ff:31:0f:a4:d1:ac:f6:8c:08:e8:e5:27:58:f8:71:
                    96:96:dc:d2:8b:d4:16:46:ca:e8:a9:8a:05:84:e7:
                    8f:1d:a1:20:0f:a7:7a:78:87:8c:5b:89:44:e1:7e:
                    a6:6c:51:f4:61:d5:de:ee:db:45:0a:04:88:50:76:
                    bf:b4:9a:1a:76:4f:10:2f:f2:45:e4:d9:66:6e:94:
                    cf:e7:7b:e6:c7:03:3a:84:51:19:36:73:46:11:e1:
                    f2:c2:6c:8c:9f:6e:70:da:20:30:cb:93:b1:4a:f8:
                    65:f8:14:7e:c3:a0:37:68:bf:9c:75:ee:3b:35:97:
                    99:ed:2b:df:47:9b:b9:39:64:ee:c2:92:6f:cc:25:
                    63:58:9b:cd:af:35:45:05:5d:ee:71:30:6b:a8:96:
                    77:98:8d:9f:36:9e:d7:4b:e2:88:a3:9c:e0:f0:eb:
                    84:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:AC:A0:CE:E4:89:65:B1:F2:3B:78:62:DE:F3:AE:C3:C7:B0:06:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/6b20c6c8-b544-3233-9c89-ea3eead2913d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl

            X509v3 Authority Key Identifier:
                keyid:C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.8.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:ef:92:99:2e:e1:02:12:d1:26:e5:b3:ec:be:af:af:32:4d:
         0c:1c:f2:a8:75:91:67:9e:4b:41:05:c9:43:e1:e5:02:43:b0:
         f4:5d:08:96:2e:86:14:1e:dd:1d:93:e1:98:c3:8e:2d:4c:18:
         25:3b:a1:fe:1c:d2:d7:c0:c4:05:4f:9d:56:74:66:50:d4:a9:
         b7:0e:eb:5f:59:00:cf:04:1f:2e:e8:77:fd:6c:c0:e0:08:ef:
         38:b1:8c:b6:cf:6d:b4:57:0e:51:36:29:f8:41:e1:7d:cf:54:
         e1:0f:d8:2b:b2:8f:2c:61:6e:58:cd:2d:c2:dc:e0:98:32:24:
         9b:ff:56:a0:f8:54:96:9f:fd:77:13:d5:7e:a9:45:68:6b:fe:
         66:26:3c:a8:a0:03:be:67:d8:77:18:ee:85:ea:6e:aa:0d:23:
         43:51:66:e4:4c:ba:6c:b5:8a:53:e7:85:26:85:71:cf:2b:31:
         8a:89:8e:c5:e2:63:d1:78:c1:0f:74:f3:0d:65:19:a1:f1:b8:
         fc:af:a0:66:e0:87:36:6c:2c:86:31:99:47:89:ba:c3:ab:48:
         c7:7b:a7:45:28:78:37:1f:a4:e2:90:c7:de:52:6b:82:d6:b2:
         46:08:79:39:85:d0:ae:5c:94:74:04:f3:ad:88:ed:cf:f3:c3:
         d3:1b:68:d1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYekklU0pV+vbNGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTM5Y2I5NjAtMjM5NC00YjIyLWI5ZjEtM2FjNTU2NmJj
NzJhMB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk
MGRkMWMxZTMtOTZkNC00YmQyLTliOWEtMWI2N2I2N2IwMDdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/o8p+oNmwnXyOayXLtfxQ6SeNkELcWlj2gD
tNkt/ckXCO8sX78rYd4bLQften5AT47tJMs5c1R7W7JLBK/VIJHu19/I9iMLshIf
kd9yg/xm9hJVR99JLBz/MQ+k0az2jAjo5SdY+HGWltzSi9QWRsroqYoFhOePHaEg
D6d6eIeMW4lE4X6mbFH0YdXe7ttFCgSIUHa/tJoadk8QL/JF5NlmbpTP53vmxwM6
hFEZNnNGEeHywmyMn25w2iAwy5OxSvhl+BR+w6A3aL+cde47NZeZ7SvfR5u5OWTu
wpJvzCVjWJvNrzVFBV3ucTBrqJZ3mI2fNp7XS+KIo5zg8OuEkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP+soM7kiWWx8jt4Yt7zrsPHsAZcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMzlj
Yjk2MC0yMzk0LTRiMjItYjlmMS0zYWM1NTY2YmM3MmEvNmIyMGM2YzgtYjU0NC0z
MjMzLTljODktZWEzZWVhZDI5MTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTM5Y2I5NjAtMjM5NC00YjIyLWI5
ZjEtM2FjNTU2NmJjNzJhL2UzOWNiOTYwLTIzOTQtNGIyMi1iOWYxLTNhYzU1NjZi
YzcyYS5jcmwwHwYDVR0jBBgwFoAUx5iuk+5ta+2iXZtwBvHdRTnXH4kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lMzljYjk2MC0yMzk0LTRiMjItYjlmMS0zYWM1
NTY2YmM3MmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzAhsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABLvkpku4QIS0Sbls+y+r68yTQwc8qh1kWeeS0EFyUPh5QJDsPRdCJYu
hhQe3R2T4ZjDji1MGCU7of4c0tfAxAVPnVZ0ZlDUqbcO619ZAM8EHy7od/1swOAI
7zixjLbPbbRXDlE2KfhB4X3PVOEP2CuyjyxhbljNLcLc4JgyJJv/VqD4VJaf/XcT
1X6pRWhr/mYmPKigA75n2HcY7oXqbqoNI0NRZuRMumy1ilPnhSaFcc8rMYqJjsXi
Y9F4wQ908w1lGaHxuPyvoGbghzZsLIYxmUeJusOrSMd7p0UoeDcfpOKQx95Sa4LW
skYIeTmF0K5clHQE862I7c/zw9MbaNE=
-----END CERTIFICATE-----
Generated at Sat Sep 26 19:45:31 2026 by rpki-client