Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6094ff48-2cdc-4ee0-879b-8cc25ddb855b/958d5329-4a53-3291-82c3-9333e0a732f1.roa
File:                     958d5329-4a53-3291-82c3-9333e0a732f1.roa (raw, json)
Hash identifier:          ADUSehZLUBNB4JbCpkUhQszeWq8xRSd4sENuQOulfC8=
Subject key identifier:   41:55:6F:79:78:1A:D6:2C:01:90:EE:0C:61:23:45:DB:FC:15:E7:45
Certificate issuer:       /CN=6094ff48-2cdc-4ee0-879b-8cc25ddb855b
Certificate serial:       010D0C9F4328584F497444C376CC0E7459621F80
Authority key identifier: B6:06:67:28:64:96:0A:3D:B3:F7:18:26:4B:BE:3B:9F:5F:79:2B:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6094ff48-2cdc-4ee0-879b-8cc25ddb855b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6094ff48-2cdc-4ee0-879b-8cc25ddb855b/958d5329-4a53-3291-82c3-9333e0a732f1.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     6079
IP address blocks:        209.20.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6094ff48-2cdc-4ee0-879b-8cc25ddb855b/6094ff48-2cdc-4ee0-879b-8cc25ddb855b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6094ff48-2cdc-4ee0-879b-8cc25ddb855b/6094ff48-2cdc-4ee0-879b-8cc25ddb855b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6094ff48-2cdc-4ee0-879b-8cc25ddb855b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:44:c3:76:cc:0e:74:59:62:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6094ff48-2cdc-4ee0-879b-8cc25ddb855b
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ab960c93-a752-4c78-b050-1fa299f018ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7d:35:90:6d:1f:63:94:3a:3d:32:9b:31:67:
                    5d:d6:94:5e:a1:c2:65:e6:49:95:4a:ab:5f:9f:d8:
                    a8:de:3d:9d:61:31:1c:62:a0:0d:66:45:3d:83:8f:
                    5a:06:9a:47:ac:d8:fc:c6:ab:3e:1e:fb:69:f5:bc:
                    a2:43:7b:24:e0:d0:16:1c:33:df:f7:d7:16:ed:3b:
                    0d:7d:64:f5:78:8a:8f:ac:91:94:2d:f8:bf:6a:bb:
                    68:ba:ed:fa:55:04:fc:f9:a7:d6:de:36:71:b4:e1:
                    36:a5:ec:42:92:50:1d:fd:f0:12:e3:21:16:85:37:
                    f0:53:56:c5:b3:54:6c:a3:a1:25:b9:5a:af:b9:ce:
                    09:7b:34:ff:e3:5f:c2:5c:a3:76:db:14:0c:ac:b3:
                    0e:33:8e:31:5e:52:ca:77:5b:83:51:10:9e:2a:4a:
                    5d:dc:b1:4d:f3:f8:44:c6:b2:04:dc:3c:6b:7e:44:
                    8a:9f:09:44:fd:80:5c:f6:ea:b1:b3:3e:56:57:25:
                    4f:a8:b1:49:8e:93:a4:36:76:54:80:dc:80:5b:2f:
                    c9:5f:f9:1a:d3:b9:f1:90:88:af:e4:85:8c:92:01:
                    16:b4:8f:7c:3b:15:ca:42:e7:af:ad:b9:2e:bb:94:
                    e9:5f:cd:a3:36:e4:45:e3:58:87:58:4b:d0:5e:33:
                    ae:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:55:6F:79:78:1A:D6:2C:01:90:EE:0C:61:23:45:DB:FC:15:E7:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6094ff48-2cdc-4ee0-879b-8cc25ddb855b/958d5329-4a53-3291-82c3-9333e0a732f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6094ff48-2cdc-4ee0-879b-8cc25ddb855b/6094ff48-2cdc-4ee0-879b-8cc25ddb855b.crl

            X509v3 Authority Key Identifier:
                keyid:B6:06:67:28:64:96:0A:3D:B3:F7:18:26:4B:BE:3B:9F:5F:79:2B:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6094ff48-2cdc-4ee0-879b-8cc25ddb855b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.20.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:fd:48:5a:e0:17:32:eb:9b:49:19:83:30:eb:1d:6d:bb:65:
         0d:91:96:29:f5:28:e9:ee:5f:3c:35:e6:4d:7e:c5:e1:a3:ba:
         a9:b9:ea:56:8b:e1:6c:58:58:3d:8c:70:8c:44:29:b2:d5:26:
         9f:b8:e4:c4:54:9f:0f:e5:aa:4a:3c:2b:36:7a:5b:7b:81:59:
         14:84:e7:83:50:32:8d:c6:42:44:b0:d4:dc:89:d7:4c:ff:4e:
         be:dc:63:dd:c8:61:36:4c:b3:68:ab:ac:2f:ae:96:f6:da:6f:
         b7:ce:39:40:9f:96:b3:14:50:43:c6:77:0d:a4:72:8d:2b:0b:
         56:87:17:c4:cf:7f:e6:db:d8:45:d1:3d:df:ed:9a:35:ee:4c:
         22:b8:40:48:ce:8c:4a:26:b9:10:05:b9:c2:8f:06:23:2b:dc:
         e2:26:5a:c1:25:03:8f:c7:9b:4b:c8:3d:8f:01:94:ea:db:07:
         ae:1d:e0:42:4f:a0:11:6d:34:d3:57:38:d9:19:ef:5b:5a:20:
         ac:a8:86:a3:a3:83:c0:58:6b:91:75:45:a0:16:8b:cc:72:b6:
         b2:53:22:43:a6:a9:ac:1d:87:16:94:49:55:e6:8d:c4:34:dd:
         5b:b7:d5:ed:cc:7a:46:9f:46:67:2d:fd:0d:5c:2c:54:77:52:
         29:2a:67:9b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdETDdswOdFliH4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjA5NGZmNDgtMmNkYy00ZWUwLTg3OWItOGNjMjVkZGI4
NTViMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
YWI5NjBjOTMtYTc1Mi00Yzc4LWIwNTAtMWZhMjk5ZjAxOGVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvX01kG0fY5Q6PTKbMWdd1pReocJl5kmVSqtf
n9io3j2dYTEcYqANZkU9g49aBppHrNj8xqs+Hvtp9byiQ3sk4NAWHDPf99cW7TsN
fWT1eIqPrJGULfi/artouu36VQT8+afW3jZxtOE2pexCklAd/fAS4yEWhTfwU1bF
s1Rso6EluVqvuc4JezT/41/CXKN22xQMrLMOM44xXlLKd1uDURCeKkpd3LFN8/hE
xrIE3DxrfkSKnwlE/YBc9uqxsz5WVyVPqLFJjpOkNnZUgNyAWy/JX/ka07nxkIiv
5IWMkgEWtI98OxXKQuevrbkuu5TpX82jNuRF41iHWEvQXjOusQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEFVb3l4GtYsAZDuDGEjRdv8FedFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82MDk0
ZmY0OC0yY2RjLTRlZTAtODc5Yi04Y2MyNWRkYjg1NWIvOTU4ZDUzMjktNGE1My0z
MjkxLTgyYzMtOTMzM2UwYTczMmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNjA5NGZmNDgtMmNkYy00ZWUwLTg3
OWItOGNjMjVkZGI4NTViLzYwOTRmZjQ4LTJjZGMtNGVlMC04NzliLThjYzI1ZGRi
ODU1Yi5jcmwwHwYDVR0jBBgwFoAUtgZnKGSWCj2z9xgmS747n195KzkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi82MDk0ZmY0OC0yY2RjLTRlZTAtODc5Yi04Y2My
NWRkYjg1NWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0RSQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADH9SFrgFzLrm0kZgzDrHW27ZQ2Rlin1KOnuXzw15k1+xeGjuqm56laL
4WxYWD2McIxEKbLVJp+45MRUnw/lqko8KzZ6W3uBWRSE54NQMo3GQkSw1NyJ10z/
Tr7cY93IYTZMs2irrC+ulvbab7fOOUCflrMUUEPGdw2kco0rC1aHF8TPf+bb2EXR
Pd/tmjXuTCK4QEjOjEomuRAFucKPBiMr3OImWsElA4/Hm0vIPY8BlOrbB64d4EJP
oBFtNNNXONkZ71taIKyohqOjg8BYa5F1RaAWi8xytrJTIkOmqawdhxaUSVXmjcQ0
3Vu31e3MekafRmct/Q1cLFR3UikqZ5s=
-----END CERTIFICATE-----
Generated at Fri Sep 25 05:53:23 2026 by rpki-client