Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8ebd7835-8a02-3287-a229-e464d8043fb6.roa
File:                     8ebd7835-8a02-3287-a229-e464d8043fb6.roa (raw, json)
Hash identifier:          BEa4YsRyoFtGTaO5wPPEsLqtckb0NIdVmNXlorvex/c=
Subject key identifier:   39:AA:25:EC:E1:17:0D:CE:5F:88:73:D3:A9:25:21:3E:E1:75:5B:7E
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584DBFD03A790884F1C367739340
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8ebd7835-8a02-3287-a229-e464d8043fb6.roa
Signing time:             Thu 07 May 2026 01:00:23 +0000
ROA not before:           Thu 07 May 2026 01:00:23 +0000
ROA not after:            Wed 05 Aug 2026 01:00:23 +0000
asID:                     401783
IP address blocks:        209.101.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bf:d0:3a:79:08:84:f1:c3:67:73:93:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: May  7 01:00:23 2026 GMT
            Not After : Aug  5 01:00:23 2026 GMT
        Subject: CN=9aed5939-9c11-4db1-9020-bc325ab62e4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:41:e5:4d:ae:ca:c8:5d:77:92:ba:d2:82:90:
                    1d:2c:e6:dc:67:27:8c:62:bb:a8:c0:12:cf:83:ee:
                    e3:4b:bc:59:8e:52:d9:9f:08:13:e3:f5:9c:10:86:
                    ba:d1:93:cd:e0:a5:c1:a2:d7:66:8f:ee:28:2e:b0:
                    54:c8:81:bd:b3:d2:76:68:24:8c:57:7e:f0:6e:84:
                    9e:8d:3f:7c:7d:0a:20:01:0f:bb:2c:40:22:a9:51:
                    5d:d8:ba:d0:c3:4a:e3:50:ec:fc:e6:c4:6d:ee:8b:
                    33:1b:6c:12:8b:ec:36:61:af:77:44:0c:95:39:3d:
                    c9:f6:cb:a1:b5:ae:c7:ea:cf:3b:44:06:ae:61:a8:
                    fb:13:69:ec:38:20:83:18:67:9e:e3:da:4c:12:50:
                    a7:a2:9d:0f:66:5c:85:a2:4c:9c:2f:5d:8d:01:f8:
                    04:4e:fb:8a:ab:a9:7b:4f:0d:97:97:ab:6b:26:c6:
                    de:7e:6f:6f:a3:40:91:f8:82:0b:6b:cf:7d:73:9a:
                    49:99:be:12:9f:fd:39:2d:6f:dc:a5:5a:4a:e4:3b:
                    0c:74:e6:36:c3:f9:ae:01:78:4b:3e:e2:8f:67:59:
                    53:64:d5:6a:33:fd:5b:81:f1:e7:72:62:af:0f:9c:
                    45:2f:3b:d7:a4:24:ab:6d:bb:49:27:6b:5b:41:2a:
                    da:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:AA:25:EC:E1:17:0D:CE:5F:88:73:D3:A9:25:21:3E:E1:75:5B:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8ebd7835-8a02-3287-a229-e464d8043fb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.101.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:56:36:b6:84:e5:2b:20:02:06:33:c2:7d:48:3b:b3:70:05:
         c1:06:94:18:73:db:68:19:6f:c5:d8:fc:c0:45:98:cf:05:ea:
         67:9d:4d:65:20:28:03:85:37:09:8e:9e:7d:c9:fc:4b:95:af:
         c9:30:f7:89:ce:84:39:d0:24:47:7b:33:35:65:6e:70:47:c1:
         f6:e6:24:8b:dc:ee:a4:b7:32:5e:6e:71:30:8a:c7:71:01:0e:
         1b:3b:77:a9:60:90:f8:cd:14:1c:a4:01:87:58:5f:19:82:8b:
         2c:2c:3a:60:af:3c:dc:1c:19:25:72:89:7d:8b:0f:d2:1a:bf:
         40:6b:85:0d:5d:2d:62:69:2e:a1:7d:4f:65:52:6d:5e:aa:09:
         04:af:b2:a6:f9:f9:07:4e:ac:dc:a2:5b:70:7b:5b:0b:13:db:
         28:41:40:27:2d:3b:b4:57:c7:c3:4c:f1:cf:8a:cd:31:75:b1:
         7d:72:f6:5b:c5:93:8c:bf:fc:19:3c:24:a2:87:7b:9c:0f:01:
         12:52:05:ff:fb:9a:4f:e9:37:a0:1e:4c:bc:b3:42:a0:8e:84:
         3b:c5:16:34:a9:ad:c1:2d:2e:4b:15:cc:14:3b:1d:fe:d0:cc:
         5f:c0:29:e7:4e:10:2b:84:0a:0e:8b:d4:14:bf:ee:ee:9e:54:
         e3:81:25:b3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2/0Dp5CITxw2dzk0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDUwNzAxMDAyM1oXDTI2MDgwNTAxMDAyM1owLzEtMCsGA1UEAxMk
OWFlZDU5MzktOWMxMS00ZGIxLTkwMjAtYmMzMjVhYjYyZTRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUHlTa7KyF13krrSgpAdLObcZyeMYruowBLP
g+7jS7xZjlLZnwgT4/WcEIa60ZPN4KXBotdmj+4oLrBUyIG9s9J2aCSMV37wboSe
jT98fQogAQ+7LEAiqVFd2LrQw0rjUOz85sRt7oszG2wSi+w2Ya93RAyVOT3J9suh
ta7H6s87RAauYaj7E2nsOCCDGGee49pMElCnop0PZlyFokycL12NAfgETvuKq6l7
Tw2Xl6trJsbefm9vo0CR+IILa899c5pJmb4Sn/05LW/cpVpK5DsMdOY2w/muAXhL
PuKPZ1lTZNVqM/1bgfHncmKvD5xFLzvXpCSrbbtJJ2tbQSraNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDmqJezhFw3OX4hz06klIT7hdVt+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOGViZDc4MzUtOGEwMi0z
Mjg3LWEyMjktZTQ2NGQ4MDQzZmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADdWNraE5SsgAgYzwn1IO7NwBcEGlBhz22gZb8XY/MBFmM8F6medTWUg
KAOFNwmOnn3J/EuVr8kw94nOhDnQJEd7MzVlbnBHwfbmJIvc7qS3Ml5ucTCKx3EB
Dhs7d6lgkPjNFBykAYdYXxmCiywsOmCvPNwcGSVyiX2LD9Iav0BrhQ1dLWJpLqF9
T2VSbV6qCQSvsqb5+QdOrNyiW3B7WwsT2yhBQCctO7RXx8NM8c+KzTF1sX1y9lvF
k4y//Bk8JKKHe5wPARJSBf/7mk/pN6AeTLyzQqCOhDvFFjSprcEtLksVzBQ7Hf7Q
zF/AKedOECuECg6L1BS/7u6eVOOBJbM=
-----END CERTIFICATE-----
Generated at Wed May 13 07:02:30 2026 by rpki-client