Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2d0c7e5e-bcb0-34f9-b813-58731fa8765b.roa
File:                     2d0c7e5e-bcb0-34f9-b813-58731fa8765b.roa (raw, json)
Hash identifier:          poLYZefCInTj+6ZB5coLxfLOD+E9hQcScnAs+OoX/3w=
Subject key identifier:   B3:A8:85:92:0E:08:7E:D3:4B:6B:53:71:EF:C3:09:E8:58:1A:E9:6A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E4559FAB103EA4454EB6D0500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2d0c7e5e-bcb0-34f9-b813-58731fa8765b.roa
Signing time:             Tue 23 Jun 2026 21:00:12 +0000
ROA not before:           Tue 23 Jun 2026 21:00:12 +0000
ROA not after:            Mon 21 Sep 2026 21:00:12 +0000
asID:                     701
IP address blocks:        209.118.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:45:59:fa:b1:03:ea:44:54:eb:6d:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 23 21:00:12 2026 GMT
            Not After : Sep 21 21:00:12 2026 GMT
        Subject: CN=d7f2ae15-d73b-40ee-be5d-d97d8bd6496f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:54:70:75:b0:eb:74:c1:1c:70:2b:97:90:7f:
                    f0:48:68:b5:42:a3:f7:67:9a:67:44:0d:a6:b5:43:
                    ec:de:5a:c8:ee:ad:ab:f5:24:96:2b:86:6c:88:be:
                    94:56:e3:f1:d3:42:f8:0c:19:a9:5d:82:67:31:62:
                    65:fb:cc:b2:43:61:19:5b:0e:ed:27:dc:3d:e9:23:
                    06:36:1a:e6:d8:dd:56:ae:d3:af:61:27:ff:7f:ff:
                    55:ec:88:90:cd:b2:37:d9:57:02:68:9e:c7:d5:b8:
                    5a:bf:54:7c:0a:2a:53:fd:cf:99:e1:de:6e:96:9b:
                    04:28:15:d8:80:b3:bc:8b:33:9e:2b:ae:a4:b2:91:
                    6e:a4:be:63:65:a0:6d:71:df:6c:9c:36:77:49:95:
                    03:3b:4f:df:de:12:8e:4e:6e:b5:65:c4:ae:55:85:
                    29:b9:a2:f0:e2:ce:61:57:76:fa:4b:9f:8e:62:66:
                    28:6d:32:6f:3c:d2:7a:22:01:e9:8a:2b:87:3c:fd:
                    88:8b:05:3d:91:70:f9:47:97:49:7a:6e:d5:e0:b9:
                    5c:a8:f5:49:38:25:4b:07:cc:67:9d:79:0f:02:af:
                    c7:c0:3e:f4:36:dc:04:97:f8:ec:4d:5a:60:db:f9:
                    67:bf:7e:19:86:04:ba:8f:56:2e:e5:f9:dd:cc:73:
                    af:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:A8:85:92:0E:08:7E:D3:4B:6B:53:71:EF:C3:09:E8:58:1A:E9:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2d0c7e5e-bcb0-34f9-b813-58731fa8765b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.118.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:ae:3e:59:a6:8d:bf:2b:66:44:f6:11:f2:54:3b:60:97:79:
         5c:ce:37:96:06:34:cd:75:72:00:f1:52:89:7f:ec:7c:6a:29:
         7f:f1:ad:e9:fd:ad:f8:bc:a6:88:27:25:b1:1c:71:5a:be:cd:
         c3:63:70:02:42:1e:d1:bb:88:10:51:b0:59:c6:d1:6a:88:e4:
         cc:4a:dc:a8:d6:04:ff:f2:dd:15:b0:17:64:e1:fb:50:e1:7d:
         d9:7f:04:b6:a8:c0:f3:99:6d:56:95:06:d6:03:f1:bf:73:2b:
         20:88:46:a9:14:16:f0:42:0f:ae:2c:f6:d0:b5:60:b4:29:c3:
         19:21:53:ed:a6:a0:4d:6a:25:ac:73:08:29:a0:71:9b:80:01:
         89:d3:13:2b:82:37:71:5b:ba:51:93:d4:fd:a9:45:1f:d3:40:
         5d:56:3c:48:b2:b3:19:3f:50:0b:36:04:e0:79:b0:ee:9e:a3:
         ff:38:73:b3:32:b7:a0:4e:8d:68:f1:e0:08:92:11:95:dd:e2:
         39:d5:35:0d:8d:a1:81:05:fe:11:8b:b1:c9:bf:e8:80:70:57:
         20:90:b5:a8:65:1f:ef:ca:1d:75:d4:f1:fd:a2:8f:30:00:3c:
         af:0b:ab:1c:35:ad:ff:13:b6:c1:d7:24:75:45:91:d3:64:7b:
         30:e8:d0:89
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5FWfqxA+pEVOttBQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDYyMzIxMDAxMloXDTI2MDkyMTIxMDAxMlowLzEtMCsGA1UEAxMk
ZDdmMmFlMTUtZDczYi00MGVlLWJlNWQtZDk3ZDhiZDY0OTZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFRwdbDrdMEccCuXkH/wSGi1QqP3Z5pnRA2m
tUPs3lrI7q2r9SSWK4ZsiL6UVuPx00L4DBmpXYJnMWJl+8yyQ2EZWw7tJ9w96SMG
Nhrm2N1WrtOvYSf/f/9V7IiQzbI32VcCaJ7H1bhav1R8CipT/c+Z4d5ulpsEKBXY
gLO8izOeK66kspFupL5jZaBtcd9snDZ3SZUDO0/f3hKOTm61ZcSuVYUpuaLw4s5h
V3b6S5+OYmYobTJvPNJ6IgHpiiuHPP2IiwU9kXD5R5dJem7V4LlcqPVJOCVLB8xn
nXkPAq/HwD70NtwEl/jsTVpg2/lnv34ZhgS6j1Yu5fndzHOv9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLOohZIOCH7TS2tTce/DCehYGulqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMmQwYzdlNWUtYmNiMC0z
NGY5LWI4MTMtNTg3MzFmYTg3NjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XYOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIKuPlmmjb8rZkT2EfJUO2CXeVzON5YGNM11cgDxUol/7HxqKX/xren9
rfi8pognJbEccVq+zcNjcAJCHtG7iBBRsFnG0WqI5MxK3KjWBP/y3RWwF2Th+1Dh
fdl/BLaowPOZbVaVBtYD8b9zKyCIRqkUFvBCD64s9tC1YLQpwxkhU+2moE1qJaxz
CCmgcZuAAYnTEyuCN3FbulGT1P2pRR/TQF1WPEiysxk/UAs2BOB5sO6eo/84c7My
t6BOjWjx4AiSEZXd4jnVNQ2NoYEF/hGLscm/6IBwVyCQtahlH+/KHXXU8f2ijzAA
PK8Lqxw1rf8TtsHXJHVFkdNkezDo0Ik=
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:06:35 2026 by rpki-client