Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281/c686907a-77de-3399-8cd8-9e2614560e01.roa
File:                     c686907a-77de-3399-8cd8-9e2614560e01.roa (raw, json)
Hash identifier:          UBP71wS/FwA6b6U/ttfxJRnQ4lFnYOY87+Hb9fK/RMs=
Subject key identifier:   F9:BD:08:81:62:7D:AA:07:CC:97:04:64:4E:81:A7:F0:21:54:D7:AA
Certificate issuer:       /CN=f0dba087-0567-4455-9983-ac2ca8102281
Certificate serial:       010D0C9F4328584E577F43DB9908B930782A6800
Authority key identifier: 72:DC:68:AE:CA:BE:D0:04:AF:54:CF:CC:3E:73:0D:49:FB:BD:61:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281/c686907a-77de-3399-8cd8-9e2614560e01.roa
Signing time:             Tue 30 Jun 2026 09:00:12 +0000
ROA not before:           Tue 30 Jun 2026 09:00:12 +0000
ROA not after:            Mon 28 Sep 2026 09:00:12 +0000
asID:                     399820
IP address blocks:        204.137.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281/f0dba087-0567-4455-9983-ac2ca8102281.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281/f0dba087-0567-4455-9983-ac2ca8102281.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:57:7f:43:db:99:08:b9:30:78:2a:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0dba087-0567-4455-9983-ac2ca8102281
        Validity
            Not Before: Jun 30 09:00:12 2026 GMT
            Not After : Sep 28 09:00:12 2026 GMT
        Subject: CN=46875088-6d3b-4312-a05e-5b2a5b91afb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:7a:de:aa:b8:c1:32:aa:36:77:79:de:2e:6d:
                    1c:da:cc:30:c1:d4:bd:1a:d4:cb:99:38:c7:52:36:
                    8e:7d:e5:72:91:d5:19:6d:80:d6:a1:79:15:f9:53:
                    dd:2c:e0:98:5f:bb:8e:61:db:69:9d:f8:3d:2b:6c:
                    d5:b7:0a:f2:85:7a:e1:95:b0:27:d9:0a:3c:cb:3a:
                    5b:71:fb:ba:68:83:bf:06:30:03:30:fc:59:93:2f:
                    cb:99:2d:05:1a:6b:09:2a:a7:3f:41:ec:fa:b6:bf:
                    26:43:f3:ca:25:01:88:41:a5:5e:b8:e0:98:75:fc:
                    75:a6:d6:5b:3c:69:2e:be:49:15:de:94:ce:ce:9e:
                    3c:69:5b:64:87:82:b4:e2:f9:7d:02:58:cd:8e:43:
                    cd:d8:d4:fc:b8:bd:75:0f:cb:27:d5:30:d4:fe:26:
                    75:79:36:70:40:fa:4a:53:76:b9:44:69:38:e4:5a:
                    d1:2a:2d:d9:6f:ec:dc:76:2e:d4:6b:a8:ab:66:dc:
                    24:ae:34:de:b3:06:ab:bd:f1:d7:89:b7:51:f0:ff:
                    2a:3c:3f:34:ea:1b:d9:a3:a4:63:60:43:31:62:5b:
                    0c:51:b3:72:8d:4d:53:aa:20:1b:2d:65:7a:4f:b1:
                    0f:18:f1:be:f8:ad:74:fe:6f:72:4b:64:3f:61:b1:
                    a6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:BD:08:81:62:7D:AA:07:CC:97:04:64:4E:81:A7:F0:21:54:D7:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281/c686907a-77de-3399-8cd8-9e2614560e01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281/f0dba087-0567-4455-9983-ac2ca8102281.crl

            X509v3 Authority Key Identifier:
                keyid:72:DC:68:AE:CA:BE:D0:04:AF:54:CF:CC:3E:73:0D:49:FB:BD:61:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.137.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:97:c6:74:2e:1c:18:4d:26:a9:13:a2:88:25:87:c8:a5:0f:
         da:3a:c9:e2:26:31:ae:c0:9f:8c:ce:ff:bc:45:79:ac:8c:95:
         5f:8a:09:23:33:17:33:91:6c:b2:bc:18:b5:d0:4d:62:af:b0:
         03:e2:6a:5d:cf:90:16:16:30:44:6f:ac:8b:3e:db:cf:6f:d9:
         af:64:f1:c8:14:83:4c:4c:4b:5b:37:fc:72:b8:78:57:74:32:
         72:7e:26:ef:d0:cc:c7:d9:4c:64:c9:c9:67:aa:39:5c:5f:e1:
         77:ea:97:7a:60:07:72:cb:b1:2f:bd:5b:24:a8:be:fc:6d:7c:
         23:30:8d:93:ef:a7:73:eb:5c:a7:3b:2c:ae:f7:5d:cd:8b:46:
         aa:2b:af:f8:7b:b4:49:82:fe:9d:cb:85:3d:23:b9:67:3f:5b:
         1a:5a:20:a6:13:6a:77:cd:c7:f3:d9:84:9b:d2:aa:1a:13:be:
         38:ad:5d:83:da:35:d7:60:24:42:4f:3c:4e:6b:df:66:5d:ad:
         fd:2e:e3:63:0b:d3:96:9a:73:83:8a:46:eb:e7:9b:f6:c4:79:
         e5:f8:e6:a5:00:13:d6:03:c7:be:8e:09:2a:3d:70:10:94:1d:
         d3:0f:4a:e1:ca:05:e5:b5:1e:a4:a8:d3:37:dd:68:52:b4:d9:
         ae:34:6a:de
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5Xf0PbmQi5MHgqaAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjBkYmEwODctMDU2Ny00NDU1LTk5ODMtYWMyY2E4MTAy
MjgxMB4XDTI2MDYzMDA5MDAxMloXDTI2MDkyODA5MDAxMlowLzEtMCsGA1UEAxMk
NDY4NzUwODgtNmQzYi00MzEyLWEwNWUtNWIyYTViOTFhZmIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHreqrjBMqo2d3neLm0c2swwwdS9GtTLmTjH
UjaOfeVykdUZbYDWoXkV+VPdLOCYX7uOYdtpnfg9K2zVtwryhXrhlbAn2Qo8yzpb
cfu6aIO/BjADMPxZky/LmS0FGmsJKqc/Qez6tr8mQ/PKJQGIQaVeuOCYdfx1ptZb
PGkuvkkV3pTOzp48aVtkh4K04vl9AljNjkPN2NT8uL11D8sn1TDU/iZ1eTZwQPpK
U3a5RGk45FrRKi3Zb+zcdi7Ua6irZtwkrjTeswarvfHXibdR8P8qPD806hvZo6Rj
YEMxYlsMUbNyjU1TqiAbLWV6T7EPGPG++K10/m9yS2Q/YbGmXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPm9CIFifaoHzJcEZE6Bp/AhVNeqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mMGRi
YTA4Ny0wNTY3LTQ0NTUtOTk4My1hYzJjYTgxMDIyODEvYzY4NjkwN2EtNzdkZS0z
Mzk5LThjZDgtOWUyNjE0NTYwZTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjBkYmEwODctMDU2Ny00NDU1LTk5
ODMtYWMyY2E4MTAyMjgxL2YwZGJhMDg3LTA1NjctNDQ1NS05OTgzLWFjMmNhODEw
MjI4MS5jcmwwHwYDVR0jBBgwFoAUctxorsq+0ASvVM/MPnMNSfu9YakwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9mMGRiYTA4Ny0wNTY3LTQ0NTUtOTk4My1hYzJj
YTgxMDIyODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzIkOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEaXxnQuHBhNJqkTooglh8ilD9o6yeImMa7An4zO/7xFeayMlV+KCSMz
FzORbLK8GLXQTWKvsAPial3PkBYWMERvrIs+289v2a9k8cgUg0xMS1s3/HK4eFd0
MnJ+Ju/QzMfZTGTJyWeqOVxf4Xfql3pgB3LLsS+9WySovvxtfCMwjZPvp3PrXKc7
LK73Xc2LRqorr/h7tEmC/p3LhT0juWc/WxpaIKYTanfNx/PZhJvSqhoTvjitXYPa
NddgJEJPPE5r32Zdrf0u42ML05aac4OKRuvnm/bEeeX45qUAE9YDx76OCSo9cBCU
HdMPSuHKBeW1HqSo0zfdaFK02a40at4=
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:11:21 2026 by rpki-client