Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/67341ef1-8ea7-36fa-ab6d-e79ce20af536.roa
File:                     67341ef1-8ea7-36fa-ab6d-e79ce20af536.roa (raw, json)
Hash identifier:          /gJpTLUs8pozObhuU84/5ymHBs7yzlLvgD4o0UNSUBc=
Subject key identifier:   2D:C3:47:7B:65:A2:73:42:F6:9D:61:E4:39:5E:0D:06:1B:2B:8E:9B
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F427840B3F83E94EABF72FA20
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/67341ef1-8ea7-36fa-ab6d-e79ce20af536.roa
Signing time:             Tue 22 Sep 2026 13:00:12 +0000
ROA not before:           Tue 22 Sep 2026 13:00:12 +0000
ROA not after:            Mon 21 Dec 2026 14:00:12 +0000
asID:                     401783
IP address blocks:        209.101.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:42:78:40:b3:f8:3e:94:ea:bf:72:fa:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 22 13:00:12 2026 GMT
            Not After : Dec 21 14:00:12 2026 GMT
        Subject: CN=adb201e2-19e5-420e-90ad-cc5f99894156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:dd:f3:36:cb:82:c0:7a:0e:91:3c:e0:6f:3e:
                    55:71:b7:79:e8:59:45:5b:a3:9b:c5:2a:59:94:18:
                    ad:fd:0c:36:91:1e:3f:66:36:00:08:58:7e:a9:18:
                    33:34:f8:da:25:19:1f:8c:b8:02:4b:b9:e5:25:76:
                    d9:01:eb:fe:29:bb:bf:d5:dc:a7:0a:3c:4f:99:2d:
                    14:44:8f:49:5f:0d:8d:00:6f:f1:be:03:92:78:97:
                    1e:5c:88:58:62:34:b3:40:c6:41:9f:7c:04:c0:1f:
                    c1:e4:8c:5a:51:45:69:9c:41:77:2f:7d:be:44:cb:
                    75:29:de:2f:79:28:19:20:15:03:5f:25:4f:a3:0b:
                    29:93:b3:ba:a3:53:ad:22:98:81:ca:75:2f:40:36:
                    f4:77:09:81:ed:98:c4:d4:16:77:b5:5d:8d:ff:68:
                    c5:55:b8:73:42:51:35:92:ae:61:12:df:ce:fe:09:
                    8c:3b:61:22:f7:7a:8a:42:5c:af:53:d8:93:5f:14:
                    18:ed:d2:15:5c:56:46:7f:02:8b:1b:99:62:04:ba:
                    ab:69:8f:eb:67:42:2b:92:76:02:f5:4e:98:a9:95:
                    3e:14:64:7f:55:46:24:01:e1:2e:ca:d6:88:6c:e8:
                    08:02:32:c8:38:f6:a7:dd:28:99:1e:55:1b:ec:43:
                    ef:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:C3:47:7B:65:A2:73:42:F6:9D:61:E4:39:5E:0D:06:1B:2B:8E:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/67341ef1-8ea7-36fa-ab6d-e79ce20af536.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.101.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:d2:df:59:5f:16:e5:f5:72:81:e1:e2:be:1f:bc:f1:bb:6f:
         fb:30:38:57:a2:57:74:2d:ca:fd:de:50:d3:6c:e2:0a:18:2a:
         04:64:35:e6:a1:1f:03:29:d0:6a:77:df:55:06:1e:20:4f:97:
         fc:85:57:24:72:7f:28:a3:58:1a:83:22:4a:a9:67:98:3b:7a:
         48:5f:bc:0c:a8:9c:9f:72:cd:4f:b5:2e:21:5f:a2:df:d2:48:
         0c:61:44:c1:28:d0:82:52:fb:35:f1:c5:72:6e:a3:4d:96:3d:
         15:da:67:43:eb:00:b4:71:df:78:5a:50:a1:3f:1e:b1:41:ba:
         fa:9e:6b:a9:86:71:58:61:eb:a5:97:9c:36:73:e1:c8:19:a9:
         ec:bc:23:ee:65:fe:f2:2f:db:a4:9a:b8:51:d9:d4:9e:08:53:
         ae:63:c2:e7:04:b3:5a:b0:64:ad:8e:23:7c:09:29:1f:be:cb:
         74:8a:3a:9a:bc:65:6b:6d:31:00:82:e8:77:dd:b0:3b:54:53:
         72:ae:25:c6:e3:f8:52:9e:90:33:e6:26:49:31:9c:11:1e:c8:
         91:ae:e3:95:38:d2:1d:03:b6:01:d0:d3:a5:a7:58:91:f3:40:
         99:09:8d:f0:d4:2e:b9:07:dc:89:27:d6:0a:47:c6:0a:11:30:
         08:e6:a9:3e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9CeECz+D6U6r9y+iAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk
YWRiMjAxZTItMTllNS00MjBlLTkwYWQtY2M1Zjk5ODk0MTU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAit3zNsuCwHoOkTzgbz5Vcbd56FlFW6ObxSpZ
lBit/Qw2kR4/ZjYACFh+qRgzNPjaJRkfjLgCS7nlJXbZAev+Kbu/1dynCjxPmS0U
RI9JXw2NAG/xvgOSeJceXIhYYjSzQMZBn3wEwB/B5IxaUUVpnEF3L32+RMt1Kd4v
eSgZIBUDXyVPowspk7O6o1OtIpiBynUvQDb0dwmB7ZjE1BZ3tV2N/2jFVbhzQlE1
kq5hEt/O/gmMO2Ei93qKQlyvU9iTXxQY7dIVXFZGfwKLG5liBLqraY/rZ0IrknYC
9U6YqZU+FGR/VUYkAeEuytaIbOgIAjLIOPan3SiZHlUb7EPvFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC3DR3tlonNC9p1h5DleDQYbK46bMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNjczNDFlZjEtOGVhNy0z
NmZhLWFiNmQtZTc5Y2UyMGFmNTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABbS31lfFuX1coHh4r4fvPG7b/swOFeiV3Qtyv3eUNNs4goYKgRkNeah
HwMp0Gp331UGHiBPl/yFVyRyfyijWBqDIkqpZ5g7ekhfvAyonJ9yzU+1LiFfot/S
SAxhRMEo0IJS+zXxxXJuo02WPRXaZ0PrALRx33haUKE/HrFBuvqea6mGcVhh66WX
nDZz4cgZqey8I+5l/vIv26SauFHZ1J4IU65jwucEs1qwZK2OI3wJKR++y3SKOpq8
ZWttMQCC6HfdsDtUU3KuJcbj+FKekDPmJkkxnBEeyJGu45U40h0DtgHQ06WnWJHz
QJkJjfDULrkH3Ikn1gpHxgoRMAjmqT4=
-----END CERTIFICATE-----
Generated at Thu Sep 24 09:38:11 2026 by rpki-client