Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/9ca52f4c-c003-3bfb-b996-868e3106071f.roa
File:                     9ca52f4c-c003-3bfb-b996-868e3106071f.roa (raw, json)
Hash identifier:          pd4NaS8paGb9EiWmNjYAFGvkLg2+b8c18iIKGMZI3f8=
Subject key identifier:   7E:59:05:3F:9C:46:5A:FB:9B:EA:F3:5F:AB:79:08:A7:48:91:04:D5
Certificate issuer:       /CN=e286fd28-0939-48b9-86ba-cbe791497d15
Certificate serial:       010D0C9F4328584E7E94E704B3ABA12F9D9E4AE0
Authority key identifier: 1A:A4:9C:18:83:7A:8A:F6:9B:C9:28:DF:33:44:30:F2:DD:71:0E:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/9ca52f4c-c003-3bfb-b996-868e3106071f.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     16509
IP address blocks:        207.2.117.0/24 maxlen: 24
                          207.2.118.0/24 maxlen: 24
                          207.2.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/e286fd28-0939-48b9-86ba-cbe791497d15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/e286fd28-0939-48b9-86ba-cbe791497d15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:94:e7:04:b3:ab:a1:2f:9d:9e:4a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e286fd28-0939-48b9-86ba-cbe791497d15
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=786a59e6-38ed-4be6-bf12-b81bc3059cab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:a4:80:df:78:f1:70:e2:91:9d:30:e2:ae:b8:
                    5e:41:92:52:7d:b9:12:88:d0:ff:ed:a8:fe:5a:35:
                    a5:b8:ff:ca:4b:c2:0d:c7:42:02:9b:ba:27:85:07:
                    d7:f4:7f:f6:b7:b6:eb:f7:d4:31:ec:ae:6e:98:54:
                    01:ec:79:97:6b:2d:1a:b7:bc:dd:3d:d0:3e:99:f3:
                    34:35:df:64:82:73:b3:90:75:ef:c6:58:ed:b6:6b:
                    55:8f:0f:82:09:27:b1:82:44:1f:46:64:c6:2a:91:
                    21:da:86:4b:01:c5:1b:29:4e:ae:70:39:be:c1:6c:
                    a5:58:d2:49:ee:75:2f:2c:75:94:aa:48:a7:5c:4f:
                    35:50:f1:5a:e8:5c:21:02:45:7d:36:ad:f0:04:19:
                    33:70:6d:3a:cd:7c:e6:5c:aa:97:d0:24:e7:42:67:
                    63:67:96:e7:b8:e3:52:7d:fe:88:d0:58:07:b0:2a:
                    b0:0e:da:e7:0b:a2:c5:d0:ee:9b:d6:43:98:5c:f9:
                    6b:01:01:e9:aa:ff:ac:91:f9:51:b3:84:c3:a6:cd:
                    fa:22:00:61:1a:3b:e2:1b:ef:a6:ae:7b:5c:fb:d9:
                    cd:0b:84:23:10:22:71:23:14:30:03:d7:0f:ca:e8:
                    98:5b:54:a9:56:fe:91:28:5c:62:a0:ac:c7:ad:8b:
                    95:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:59:05:3F:9C:46:5A:FB:9B:EA:F3:5F:AB:79:08:A7:48:91:04:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/9ca52f4c-c003-3bfb-b996-868e3106071f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/e286fd28-0939-48b9-86ba-cbe791497d15.crl

            X509v3 Authority Key Identifier:
                keyid:1A:A4:9C:18:83:7A:8A:F6:9B:C9:28:DF:33:44:30:F2:DD:71:0E:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.2.117.0-207.2.119.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:c6:ab:ab:60:7a:45:44:f0:95:e2:3b:91:42:a8:34:46:71:
         3f:02:00:70:d2:e6:b4:2d:50:89:6d:7e:92:70:40:4f:4c:dd:
         89:3e:8e:59:fd:67:fe:b5:20:77:fb:05:72:1d:76:5b:47:77:
         2f:49:71:8e:fb:b3:b5:df:8c:84:41:f9:82:8b:1f:a9:0b:78:
         2e:16:f9:14:3a:eb:3c:4c:b0:0c:94:51:7d:8f:42:fd:d7:2e:
         2e:48:2f:37:55:b5:2c:4e:65:fe:fd:9c:80:49:ee:f3:d8:92:
         83:f4:c3:60:5a:f7:f1:13:ee:09:c9:16:9d:dc:a4:10:93:20:
         60:1d:05:e2:3f:45:e5:80:8b:83:61:a4:e6:b9:ae:11:66:c6:
         58:9d:8b:fa:55:89:2d:bb:78:b2:22:ce:2a:3d:80:2b:ef:c6:
         3b:b0:35:6b:fe:10:f6:a0:87:e3:2f:f8:c7:28:1c:ed:28:24:
         97:98:5a:2e:55:1a:a6:ca:04:fa:6a:d3:7e:19:d6:f6:51:a2:
         28:fc:08:96:eb:e7:49:8c:25:28:29:03:4c:15:9c:ca:27:6d:
         0f:54:69:05:b0:8e:fb:db:d8:ba:30:9e:7a:8f:e3:82:7f:05:
         20:b6:75:48:82:56:93:7e:d4:12:36:42:79:6b:6b:07:6c:4c:
         01:f8:fe:36
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE5+lOcEs6uhL52eSuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTI4NmZkMjgtMDkzOS00OGI5LTg2YmEtY2JlNzkxNDk3
ZDE1MB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk
Nzg2YTU5ZTYtMzhlZC00YmU2LWJmMTItYjgxYmMzMDU5Y2FiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgaSA33jxcOKRnTDirrheQZJSfbkSiND/7aj+
WjWluP/KS8INx0ICm7onhQfX9H/2t7br99Qx7K5umFQB7HmXay0at7zdPdA+mfM0
Nd9kgnOzkHXvxljttmtVjw+CCSexgkQfRmTGKpEh2oZLAcUbKU6ucDm+wWylWNJJ
7nUvLHWUqkinXE81UPFa6FwhAkV9Nq3wBBkzcG06zXzmXKqX0CTnQmdjZ5bnuONS
ff6I0FgHsCqwDtrnC6LF0O6b1kOYXPlrAQHpqv+skflRs4TDps36IgBhGjviG++m
rntc+9nNC4QjECJxIxQwA9cPyuiYW1SpVv6RKFxioKzHrYuVMwIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFH5ZBT+cRlr7m+rzX6t5CKdIkQTVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lMjg2
ZmQyOC0wOTM5LTQ4YjktODZiYS1jYmU3OTE0OTdkMTUvOWNhNTJmNGMtYzAwMy0z
YmZiLWI5OTYtODY4ZTMxMDYwNzFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTI4NmZkMjgtMDkzOS00OGI5LTg2
YmEtY2JlNzkxNDk3ZDE1L2UyODZmZDI4LTA5MzktNDhiOS04NmJhLWNiZTc5MTQ5
N2QxNS5jcmwwHwYDVR0jBBgwFoAUGqScGIN6ivabySjfM0Qw8t1xDpwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lMjg2ZmQyOC0wOTM5LTQ4YjktODZiYS1jYmU3
OTE0OTdkMTUuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADPAnUD
BAPPAnAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAj8arq2B6RUTwleI7kUKoNEZxPwIAcNLmtC1QiW1+knBA
T0zdiT6OWf1n/rUgd/sFch12W0d3L0lxjvuztd+MhEH5gosfqQt4Lhb5FDrrPEyw
DJRRfY9C/dcuLkgvN1W1LE5l/v2cgEnu89iSg/TDYFr38RPuCckWndykEJMgYB0F
4j9F5YCLg2Gk5rmuEWbGWJ2L+lWJLbt4siLOKj2AK+/GO7A1a/4Q9qCH4y/4xygc
7Sgkl5haLlUapsoE+mrTfhnW9lGiKPwIluvnSYwlKCkDTBWcyidtD1RpBbCO+9vY
ujCeeo/jgn8FILZ1SIJWk37UEjZCeWtrB2xMAfj+Ng==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:23:20 2026 by rpki-client