Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/9c0ab96e-07f3-340f-b026-49a7e297e98f.roa
File:                     9c0ab96e-07f3-340f-b026-49a7e297e98f.roa (raw, json)
Hash identifier:          U1S1+N5zPfRbhaRufMp1p6Hd+VFQ9imH5mD0abqAj2A=
Subject key identifier:   CB:56:DD:20:14:8E:E0:E4:07:2E:2C:99:55:50:35:DB:5E:E2:8B:D0
Certificate issuer:       /CN=969446db-6a2e-47bc-a33b-2dd883bfb899
Certificate serial:       010D0C9F4328584D4A8F93DAFA8C4B79F6D5A7C0
Authority key identifier: 8C:4C:51:45:1B:97:18:EC:29:F6:65:EB:83:73:27:E3:84:C2:00:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/9c0ab96e-07f3-340f-b026-49a7e297e98f.roa
Signing time:             Thu 26 Mar 2026 01:00:32 +0000
ROA not before:           Thu 26 Mar 2026 01:00:32 +0000
ROA not after:            Wed 24 Jun 2026 01:00:32 +0000
asID:                     33309
IP address blocks:        199.189.204.0/22 maxlen: 22
                          199.189.204.0/24 maxlen: 24
                          199.189.205.0/24 maxlen: 24
                          199.189.206.0/24 maxlen: 24
                          199.189.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/969446db-6a2e-47bc-a33b-2dd883bfb899.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/969446db-6a2e-47bc-a33b-2dd883bfb899.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4a:8f:93:da:fa:8c:4b:79:f6:d5:a7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=969446db-6a2e-47bc-a33b-2dd883bfb899
        Validity
            Not Before: Mar 26 01:00:32 2026 GMT
            Not After : Jun 24 01:00:32 2026 GMT
        Subject: CN=e7747d5d-48b6-4ae3-bb3d-98608497d419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ff:ae:62:51:df:43:4e:d9:b6:d4:07:99:7e:
                    44:95:2f:4c:f5:59:d9:d4:b3:36:64:a2:37:7a:be:
                    c3:86:78:48:a7:06:67:56:18:3a:95:4d:8d:2e:08:
                    99:5d:bf:2f:35:83:26:58:02:22:20:1c:a3:f3:09:
                    04:c3:e4:b4:1b:49:0b:78:ae:5c:c4:1b:ff:2b:ec:
                    a1:94:ea:67:28:f3:f9:b8:e8:5a:67:1a:5f:8f:f7:
                    3a:dc:99:9b:33:9a:8a:1c:c6:b9:d3:b3:e3:d8:f9:
                    38:0d:b6:16:88:59:36:58:75:6a:b4:46:56:b2:a1:
                    86:c5:64:c4:e8:c7:1c:10:b2:4c:3e:af:20:4b:8c:
                    de:ea:14:53:76:0e:08:a2:b9:cc:79:05:3e:dd:b9:
                    cf:ce:c5:cf:4c:12:f2:2e:8b:f3:3c:4d:60:64:61:
                    6b:6e:4c:5f:e1:75:bd:eb:da:2e:ab:c4:fc:13:b9:
                    9b:0a:5d:d3:c8:27:32:ac:14:3d:b4:05:31:9d:b5:
                    29:43:aa:bb:7a:f7:b0:1a:ac:5f:9f:61:13:b8:ca:
                    f4:1a:c8:30:5e:fc:b2:ea:16:ab:0f:9f:d2:1e:7d:
                    fc:40:62:f2:42:e3:35:55:87:86:1a:30:61:73:9c:
                    0d:1d:85:6c:41:2d:85:d7:82:e1:4a:a0:b2:d6:a5:
                    ca:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:56:DD:20:14:8E:E0:E4:07:2E:2C:99:55:50:35:DB:5E:E2:8B:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/9c0ab96e-07f3-340f-b026-49a7e297e98f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/969446db-6a2e-47bc-a33b-2dd883bfb899.crl

            X509v3 Authority Key Identifier:
                keyid:8C:4C:51:45:1B:97:18:EC:29:F6:65:EB:83:73:27:E3:84:C2:00:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.189.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:03:b8:00:50:b4:ff:21:33:c6:0f:6e:83:96:38:0c:15:88:
         4d:35:a3:c8:51:5b:2d:61:f8:63:93:88:3a:97:21:25:bf:98:
         a7:e8:e3:25:79:12:8a:e8:df:c7:d5:f2:e6:d9:d9:f2:3f:38:
         8d:b4:18:31:d7:ec:6b:0c:51:19:7d:b8:e6:87:cd:15:b2:a4:
         6a:3e:86:82:bf:c0:a8:14:2b:66:e0:e2:8a:ea:8b:dd:78:05:
         50:43:3b:27:65:40:1b:a3:47:3e:6f:8f:eb:b4:70:01:0b:05:
         78:db:25:95:d1:85:47:26:3b:81:c5:8b:e3:9f:1d:07:ed:86:
         b1:2a:28:94:57:61:18:09:c1:55:83:d9:59:02:18:fe:34:b3:
         2e:37:4c:08:8c:61:50:af:cc:8a:2a:26:50:0a:47:60:6d:33:
         78:54:9c:37:e3:8b:8b:0e:42:b8:2a:b3:f2:dd:f8:30:26:15:
         93:5d:16:0d:b7:48:37:2a:c6:12:0f:7d:ec:8d:d7:c2:a3:34:
         4a:23:bf:c7:7f:1b:f9:c3:e1:17:c4:07:6f:12:41:68:43:bc:
         f8:bd:d4:df:7d:3b:d0:1c:e6:64:52:81:78:e3:57:aa:20:3a:
         42:e5:b6:21:b9:8b:b5:82:ab:5c:20:72:c9:cc:46:a3:ef:c1:
         6e:f3:f0:26
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj5Pa+oxLefbVp8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTY5NDQ2ZGItNmEyZS00N2JjLWEzM2ItMmRkODgzYmZi
ODk5MB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk
ZTc3NDdkNWQtNDhiNi00YWUzLWJiM2QtOTg2MDg0OTdkNDE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgf+uYlHfQ07ZttQHmX5ElS9M9VnZ1LM2ZKI3
er7DhnhIpwZnVhg6lU2NLgiZXb8vNYMmWAIiIByj8wkEw+S0G0kLeK5cxBv/K+yh
lOpnKPP5uOhaZxpfj/c63JmbM5qKHMa507Pj2Pk4DbYWiFk2WHVqtEZWsqGGxWTE
6MccELJMPq8gS4ze6hRTdg4IornMeQU+3bnPzsXPTBLyLovzPE1gZGFrbkxf4XW9
69ouq8T8E7mbCl3TyCcyrBQ9tAUxnbUpQ6q7evewGqxfn2ETuMr0GsgwXvyy6har
D5/SHn38QGLyQuM1VYeGGjBhc5wNHYVsQS2F14LhSqCy1qXK+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMtW3SAUjuDkBy4smVVQNdte4ovQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85Njk0
NDZkYi02YTJlLTQ3YmMtYTMzYi0yZGQ4ODNiZmI4OTkvOWMwYWI5NmUtMDdmMy0z
NDBmLWIwMjYtNDlhN2UyOTdlOThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTY5NDQ2ZGItNmEyZS00N2JjLWEz
M2ItMmRkODgzYmZiODk5Lzk2OTQ0NmRiLTZhMmUtNDdiYy1hMzNiLTJkZDg4M2Jm
Yjg5OS5jcmwwHwYDVR0jBBgwFoAUjExRRRuXGOwp9mXrg3Mn44TCANcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85Njk0NDZkYi02YTJlLTQ3YmMtYTMzYi0yZGQ4
ODNiZmI4OTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx73MMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ4DuABQtP8hM8YPboOWOAwViE01o8hRWy1h+GOTiDqXISW/mKfo4yV5
Eoro38fV8ubZ2fI/OI20GDHX7GsMURl9uOaHzRWypGo+hoK/wKgUK2bg4orqi914
BVBDOydlQBujRz5vj+u0cAELBXjbJZXRhUcmO4HFi+OfHQfthrEqKJRXYRgJwVWD
2VkCGP40sy43TAiMYVCvzIoqJlAKR2BtM3hUnDfji4sOQrgqs/Ld+DAmFZNdFg23
SDcqxhIPfeyN18KjNEojv8d/G/nD4RfEB28SQWhDvPi91N99O9Ac5mRSgXjjV6og
OkLltiG5i7WCq1wgcsnMRqPvwW7z8CY=
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:22:28 2026 by rpki-client