Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/27ef1240-e400-35f4-a885-bf4a8fb3d7f3.roa
File:                     27ef1240-e400-35f4-a885-bf4a8fb3d7f3.roa (raw, json)
Hash identifier:          +08sNMoPxnUnaoQ2IO+CpsWDs5KDGLx3UTXq/Z+KK7w=
Subject key identifier:   95:9D:A4:D9:BE:39:46:87:21:CC:5E:63:2B:25:CB:E1:93:9A:FF:72
Certificate issuer:       /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Certificate serial:       010D0C9F4328584EFCACBA0AA2BCF17EA1A9E780
Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/27ef1240-e400-35f4-a885-bf4a8fb3d7f3.roa
Signing time:             Fri 28 Aug 2026 13:00:12 +0000
ROA not before:           Fri 28 Aug 2026 13:00:12 +0000
ROA not after:            Thu 26 Nov 2026 14:00:12 +0000
asID:                     198949
IP address blocks:        67.20.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fc:ac:ba:0a:a2:bc:f1:7e:a1:a9:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
        Validity
            Not Before: Aug 28 13:00:12 2026 GMT
            Not After : Nov 26 14:00:12 2026 GMT
        Subject: CN=70c395b0-79c7-47d6-b9e6-37724275c170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:99:73:e3:f2:ba:eb:ee:26:02:0c:3b:71:03:
                    c3:fb:6e:28:e0:3c:33:6d:65:1e:01:19:33:a4:63:
                    0c:1c:8c:7d:c7:85:7f:2f:92:60:af:46:32:bf:97:
                    9c:a5:4a:5f:4b:4e:3e:64:cb:5b:30:bf:94:c4:ce:
                    4b:1a:9d:3a:35:9c:cf:01:a0:59:5e:52:9d:05:df:
                    c1:18:7c:20:6b:8e:a8:af:4d:c9:83:ad:03:e5:c7:
                    27:56:1d:27:04:60:d2:f2:bd:6a:31:3c:2c:31:b0:
                    c4:9e:d8:0b:30:17:d9:89:d3:71:a7:1b:b5:9e:1e:
                    80:ee:aa:72:f7:61:b6:48:01:f5:61:dd:00:26:94:
                    8d:39:75:04:0f:61:65:c1:5e:18:6d:d5:6b:ad:34:
                    85:12:77:ac:d9:f1:60:69:5e:22:63:0c:82:02:fa:
                    76:e0:63:05:3a:4f:28:21:00:b7:87:44:21:a0:0e:
                    fa:98:98:22:ea:57:20:0a:be:b8:69:58:64:41:f2:
                    a9:a2:77:85:cb:26:32:60:43:a2:bc:a8:27:4b:19:
                    7e:8a:59:04:bc:bd:61:3c:a5:64:19:fd:99:b6:e2:
                    a7:ae:f7:1e:ff:af:d6:c4:52:a9:3e:3f:7b:95:4f:
                    3e:2a:77:c2:13:e4:31:41:52:82:65:51:5a:c2:a2:
                    f2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:9D:A4:D9:BE:39:46:87:21:CC:5E:63:2B:25:CB:E1:93:9A:FF:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/27ef1240-e400-35f4-a885-bf4a8fb3d7f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl

            X509v3 Authority Key Identifier:
                keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.20.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:31:64:67:65:13:6f:4b:5f:83:76:c8:fe:fc:ff:3b:c4:78:
         29:64:97:4b:9b:73:bd:92:bf:be:3d:6f:f0:d3:78:e6:9b:b0:
         a5:a2:ab:5a:08:2b:05:93:e7:90:b6:ca:b1:cf:17:be:38:86:
         84:d5:66:54:fa:2a:fc:54:e5:30:c2:1a:ac:46:56:ff:70:d0:
         21:46:20:98:b0:2a:4e:b5:36:3b:d7:02:b8:27:64:a4:b4:9c:
         37:58:0c:99:69:b8:5d:00:d2:e9:ce:bd:46:18:19:22:bb:f8:
         fa:0f:ab:fc:0e:a7:59:32:fd:aa:c1:a4:64:86:ba:dc:ef:4d:
         e9:73:0d:9d:37:da:6a:5e:fe:20:f2:43:3e:7e:f3:fb:89:f2:
         8a:53:d9:77:7f:b7:39:90:fb:bd:e1:5f:24:29:e7:d4:e9:cd:
         c9:fa:3d:45:be:f4:e4:ce:c0:94:62:ed:6a:59:39:dc:fe:83:
         2d:ce:28:b4:5e:35:b3:54:7c:b9:e1:2e:da:50:a5:63:f9:91:
         8e:02:43:50:a3:81:8b:a6:5f:ea:a3:2e:f9:88:6e:ad:ed:58:
         c3:cf:01:4a:27:19:e9:f9:76:6c:83:90:10:a0:64:04:5d:f9:
         66:e8:df:94:d8:c7:db:7b:1f:16:9a:fc:d5:cd:94:3d:22:89:
         64:af:42:5a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE78rLoKorzxfqGp54AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWIyZTdlZDAtNzMxMC00ZWM2LWE0MzItZjlkZWQzNGFi
OTFiMB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk
NzBjMzk1YjAtNzljNy00N2Q2LWI5ZTYtMzc3MjQyNzVjMTcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJlz4/K66+4mAgw7cQPD+24o4DwzbWUeARkz
pGMMHIx9x4V/L5Jgr0Yyv5ecpUpfS04+ZMtbML+UxM5LGp06NZzPAaBZXlKdBd/B
GHwga46or03Jg60D5ccnVh0nBGDS8r1qMTwsMbDEntgLMBfZidNxpxu1nh6A7qpy
92G2SAH1Yd0AJpSNOXUED2FlwV4YbdVrrTSFEnes2fFgaV4iYwyCAvp24GMFOk8o
IQC3h0QhoA76mJgi6lcgCr64aVhkQfKponeFyyYyYEOivKgnSxl+ilkEvL1hPKVk
Gf2ZtuKnrvce/6/WxFKpPj97lU8+KnfCE+QxQVKCZVFawqLy9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJWdpNm+OUaHIcxeYysly+GTmv9yMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85YjJl
N2VkMC03MzEwLTRlYzYtYTQzMi1mOWRlZDM0YWI5MWIvMjdlZjEyNDAtZTQwMC0z
NWY0LWE4ODUtYmY0YThmYjNkN2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWIyZTdlZDAtNzMxMC00ZWM2LWE0
MzItZjlkZWQzNGFiOTFiLzliMmU3ZWQwLTczMTAtNGVjNi1hNDMyLWY5ZGVkMzRh
YjkxYi5jcmwwHwYDVR0jBBgwFoAUM0oT3qhiRI5j8VyZHha75VAqtPIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85YjJlN2VkMC03MzEwLTRlYzYtYTQzMi1mOWRl
ZDM0YWI5MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQxRAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEwxZGdlE29LX4N2yP78/zvEeClkl0ubc72Sv749b/DTeOabsKWiq1oI
KwWT55C2yrHPF744hoTVZlT6KvxU5TDCGqxGVv9w0CFGIJiwKk61NjvXArgnZKS0
nDdYDJlpuF0A0unOvUYYGSK7+PoPq/wOp1ky/arBpGSGutzvTelzDZ032mpe/iDy
Qz5+8/uJ8opT2Xd/tzmQ+73hXyQp59Tpzcn6PUW+9OTOwJRi7WpZOdz+gy3OKLRe
NbNUfLnhLtpQpWP5kY4CQ1CjgYumX+qjLvmIbq3tWMPPAUonGen5dmyDkBCgZARd
+Wbo35TYx9t7Hxaa/NXNlD0iiWSvQlo=
-----END CERTIFICATE-----
Generated at Fri Sep 4 21:10:22 2026 by rpki-client