Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d4bb8d8c-5bed-3bf5-902b-7c2884ada497.roa
File:                     d4bb8d8c-5bed-3bf5-902b-7c2884ada497.roa (raw, json)
Hash identifier:          kjM8Kh8+FGPVlA1ie3OBndmR6mXf4CoLBJ4b1psy+4s=
Subject key identifier:   7B:6B:3D:A5:99:59:D3:8C:F6:96:EF:9C:6C:68:BC:B4:67:1C:C2:E9
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F427852842AD61CAAE67FB480
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d4bb8d8c-5bed-3bf5-902b-7c2884ada497.roa
Signing time:             Tue 22 Sep 2026 13:00:12 +0000
ROA not before:           Tue 22 Sep 2026 13:00:12 +0000
ROA not after:            Mon 21 Dec 2026 14:00:12 +0000
asID:                     401783
IP address blocks:        209.101.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:42:78:52:84:2a:d6:1c:aa:e6:7f:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 22 13:00:12 2026 GMT
            Not After : Dec 21 14:00:12 2026 GMT
        Subject: CN=d27121c0-7858-487d-b3d4-812562b1c615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:1a:8c:dc:db:15:4a:d2:14:cd:68:a9:21:40:
                    2c:52:0c:c0:b4:07:ce:23:93:93:46:a0:f5:f6:68:
                    d8:a6:ef:ef:12:b0:8a:33:85:5b:38:07:c2:e0:5e:
                    74:9f:5a:ba:10:47:77:ef:56:96:a7:70:86:2f:2e:
                    89:01:ad:49:92:a7:d8:d5:d6:6c:81:72:84:03:8e:
                    51:3d:ee:f2:e7:44:55:b2:79:f7:28:98:9d:32:65:
                    36:40:ce:48:42:02:59:67:cb:73:02:30:6f:96:b9:
                    9c:bd:8d:05:96:cd:5a:46:cc:0d:63:c6:70:0c:b3:
                    0a:82:77:a7:79:77:e4:46:e4:22:61:81:c6:01:9a:
                    ab:7e:38:e1:a4:01:a6:f8:a8:4d:8b:3f:45:37:e1:
                    f2:93:99:6a:37:ac:58:32:56:b0:a8:cd:78:cf:fc:
                    0c:f3:d0:4c:91:20:87:a9:aa:6e:37:42:bc:f0:a0:
                    c6:88:5d:c2:fe:02:1f:f0:49:4d:61:ea:26:1c:4a:
                    c3:02:0b:d1:19:e3:a1:d8:8e:c0:3c:7b:1a:e2:a9:
                    2f:38:ce:40:f8:ae:a1:e0:b5:de:9f:cd:9c:4e:4e:
                    c5:4b:eb:46:79:d9:68:69:98:0a:28:37:75:b3:24:
                    9b:70:58:71:45:45:3b:1e:c4:ce:7a:11:63:46:0a:
                    dc:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:6B:3D:A5:99:59:D3:8C:F6:96:EF:9C:6C:68:BC:B4:67:1C:C2:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d4bb8d8c-5bed-3bf5-902b-7c2884ada497.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.101.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:e4:ae:10:45:51:9e:69:ae:ec:1b:31:bd:98:0b:8f:66:eb:
         0f:c5:bf:99:27:18:6e:f8:e2:14:5b:bb:b5:92:2f:a0:8e:69:
         c6:a7:f2:2d:88:58:b0:42:30:c2:de:ba:be:b3:6d:16:93:1b:
         6a:35:aa:0d:85:fa:f9:6e:6e:f0:c7:d2:8b:a9:b6:ce:e3:3e:
         06:23:ab:7b:9f:63:13:74:9d:5a:2b:1a:75:cf:7c:0b:ae:6e:
         4f:53:ec:b4:8c:39:90:1d:3c:54:18:06:27:b1:6e:94:d9:4e:
         a2:e9:fd:c9:2d:13:c8:ee:d7:42:fb:d6:9b:28:1f:c1:ea:76:
         c1:9d:28:ed:a4:a7:20:f1:99:18:05:db:af:37:e2:23:58:96:
         64:ff:34:39:9d:6c:ab:b5:3d:be:32:7c:a5:ea:b4:5c:b2:b8:
         3e:d6:cb:fc:2f:fa:14:06:39:17:9d:2a:5c:21:27:54:44:e0:
         ca:00:66:dc:9a:fe:95:5d:ab:53:36:6e:a7:26:56:5d:14:4d:
         fc:26:4c:93:7d:8b:5a:fb:ba:ef:14:b4:55:b3:ed:82:10:73:
         d8:e3:97:a2:95:2e:80:53:2c:48:e4:96:44:95:dc:1f:f9:6b:
         df:c1:1c:d9:c6:5a:43:00:b9:4b:ab:48:57:43:ad:b3:0d:23:
         98:cd:70:16
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9CeFKEKtYcquZ/tIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk
ZDI3MTIxYzAtNzg1OC00ODdkLWIzZDQtODEyNTYyYjFjNjE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRqM3NsVStIUzWipIUAsUgzAtAfOI5OTRqD1
9mjYpu/vErCKM4VbOAfC4F50n1q6EEd371aWp3CGLy6JAa1JkqfY1dZsgXKEA45R
Pe7y50RVsnn3KJidMmU2QM5IQgJZZ8tzAjBvlrmcvY0Fls1aRswNY8ZwDLMKgnen
eXfkRuQiYYHGAZqrfjjhpAGm+KhNiz9FN+Hyk5lqN6xYMlawqM14z/wM89BMkSCH
qapuN0K88KDGiF3C/gIf8ElNYeomHErDAgvRGeOh2I7APHsa4qkvOM5A+K6h4LXe
n82cTk7FS+tGedloaZgKKDd1sySbcFhxRUU7HsTOehFjRgrcFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHtrPaWZWdOM9pbvnGxovLRnHMLpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZDRiYjhkOGMtNWJlZC0z
YmY1LTkwMmItN2MyODg0YWRhNDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI7krhBFUZ5pruwbMb2YC49m6w/Fv5knGG744hRbu7WSL6COacan8i2I
WLBCMMLeur6zbRaTG2o1qg2F+vlubvDH0oupts7jPgYjq3ufYxN0nVorGnXPfAuu
bk9T7LSMOZAdPFQYBiexbpTZTqLp/cktE8ju10L71psoH8HqdsGdKO2kpyDxmRgF
26834iNYlmT/NDmdbKu1Pb4yfKXqtFyyuD7Wy/wv+hQGORedKlwhJ1RE4MoAZtya
/pVdq1M2bqcmVl0UTfwmTJN9i1r7uu8UtFWz7YIQc9jjl6KVLoBTLEjklkSV3B/5
a9/BHNnGWkMAuUurSFdDrbMNI5jNcBY=
-----END CERTIFICATE-----
Generated at Sun Sep 27 05:08:09 2026 by rpki-client