Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0e9976d8-9799-3f1a-becf-28082d954585.roa
File:                     0e9976d8-9799-3f1a-becf-28082d954585.roa (raw, json)
Hash identifier:          lET6X7qRIURmGol+P5eRzDJno300CERaq/sWtqFzgcI=
Subject key identifier:   C3:81:59:E9:8D:2C:0F:D6:6A:6D:4D:79:75:9C:B6:1F:48:A0:4E:8C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EA7942BE063D69D033C96DBC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0e9976d8-9799-3f1a-becf-28082d954585.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     32787
IP address blocks:        209.200.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:2b:e0:63:d6:9d:03:3c:96:db:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=92b3e3c4-12aa-46fe-ac79-6a7cee8dd5aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:79:74:8f:7c:ae:95:8d:00:4d:34:46:0a:d3:
                    23:82:c9:cf:b9:11:19:62:d3:ef:3d:52:35:2c:10:
                    97:13:ad:7b:f2:e2:78:74:79:87:a0:a3:1d:80:34:
                    41:72:22:c9:27:94:f8:67:01:81:4f:a0:f6:6a:4c:
                    cb:55:ec:e7:e5:df:f0:74:e1:0b:09:28:51:6c:e2:
                    02:3a:9f:c7:06:b5:4c:1b:91:c0:f0:e2:24:49:e0:
                    78:95:da:ef:f7:58:56:81:52:f6:18:71:40:f5:7a:
                    ab:ea:0d:5e:99:a2:c5:2f:18:81:4b:2a:6f:c8:c1:
                    96:ff:bb:3a:5a:10:53:53:b1:69:96:bd:e1:65:f0:
                    a4:27:a9:6b:7c:5f:1e:25:95:96:ec:c5:4e:00:c8:
                    0b:ff:99:09:93:16:bf:6c:a4:db:eb:33:fa:b7:56:
                    87:17:4c:69:07:da:50:cb:d1:2a:23:4e:1c:17:63:
                    24:c8:87:23:15:bb:7e:0e:d6:61:ba:a6:4e:fe:d8:
                    b3:3e:a0:ee:1a:ac:85:22:07:05:e5:7d:5e:9c:2c:
                    15:f1:6f:30:f4:86:a2:e4:2e:ee:e0:59:3a:d8:59:
                    1e:9b:d3:58:10:11:72:12:7e:58:8d:4c:4d:09:c4:
                    51:68:a5:af:0d:62:d9:f3:93:ff:35:67:e8:47:8b:
                    88:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:81:59:E9:8D:2C:0F:D6:6A:6D:4D:79:75:9C:B6:1F:48:A0:4E:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0e9976d8-9799-3f1a-becf-28082d954585.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:1b:4d:45:0b:9e:61:c0:33:fe:10:cc:22:75:a8:ce:45:7b:
         56:63:e1:04:ad:5d:c4:3a:4f:f5:7d:66:a6:b2:5d:a4:5c:c1:
         0a:cb:a0:c6:21:c5:e5:ec:43:af:8b:ac:1d:f7:8b:b6:0f:75:
         d0:e0:fd:6e:5e:64:15:c2:fa:83:76:6e:99:3f:79:5b:cc:fd:
         62:30:8b:46:66:c2:06:0c:89:66:67:61:6c:e9:a8:55:a9:50:
         51:df:ec:b0:58:49:c4:30:70:d7:7e:02:8b:30:38:51:1c:03:
         59:18:9a:ad:47:75:cf:05:cb:f6:fd:33:00:4d:e6:29:94:91:
         28:35:d9:0a:16:48:48:b5:b3:ca:24:3a:ff:f2:46:b0:d4:7c:
         70:06:b6:b0:c9:65:d3:06:02:75:c2:38:76:68:e2:89:68:b8:
         b9:64:0b:a8:94:e5:9e:43:86:95:30:77:51:04:71:af:00:d2:
         81:be:f2:7d:aa:c4:15:99:61:0c:3b:f3:d0:69:9e:5f:15:07:
         d3:46:33:48:55:97:cf:f3:09:55:6d:67:f0:b1:29:3c:42:f7:
         9a:8c:3e:a9:c5:d3:ea:54:9f:ca:6f:4b:f1:ba:e2:cb:e4:48:
         7f:de:45:60:1c:22:96:36:97:23:0c:7c:63:8c:1b:dd:f6:f7:
         03:0f:99:3f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlCvgY9adAzyW28AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
OTJiM2UzYzQtMTJhYS00NmZlLWFjNzktNmE3Y2VlOGRkNWFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3l0j3yulY0ATTRGCtMjgsnPuREZYtPvPVI1
LBCXE6178uJ4dHmHoKMdgDRBciLJJ5T4ZwGBT6D2akzLVezn5d/wdOELCShRbOIC
Op/HBrVMG5HA8OIkSeB4ldrv91hWgVL2GHFA9Xqr6g1emaLFLxiBSypvyMGW/7s6
WhBTU7Fplr3hZfCkJ6lrfF8eJZWW7MVOAMgL/5kJkxa/bKTb6zP6t1aHF0xpB9pQ
y9EqI04cF2MkyIcjFbt+DtZhuqZO/tizPqDuGqyFIgcF5X1enCwV8W8w9Iai5C7u
4Fk62Fkem9NYEBFyEn5YjUxNCcRRaKWvDWLZ85P/NWfoR4uIVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMOBWemNLA/Wam1NeXWcth9IoE6MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGU5OTc2ZDgtOTc5OS0z
ZjFhLWJlY2YtMjgwODJkOTU0NTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cioMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEAbTUULnmHAM/4QzCJ1qM5Fe1Zj4QStXcQ6T/V9ZqayXaRcwQrLoMYh
xeXsQ6+LrB33i7YPddDg/W5eZBXC+oN2bpk/eVvM/WIwi0ZmwgYMiWZnYWzpqFWp
UFHf7LBYScQwcNd+AoswOFEcA1kYmq1Hdc8Fy/b9MwBN5imUkSg12QoWSEi1s8ok
Ov/yRrDUfHAGtrDJZdMGAnXCOHZo4olouLlkC6iU5Z5DhpUwd1EEca8A0oG+8n2q
xBWZYQw789Bpnl8VB9NGM0hVl8/zCVVtZ/CxKTxC95qMPqnF0+pUn8pvS/G64svk
SH/eRWAcIpY2lyMMfGOMG9329wMPmT8=
-----END CERTIFICATE-----
Generated at Wed Sep 23 00:15:54 2026 by rpki-client