Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/833eca32-c822-3a2c-bc06-5ea75c95ec32.roa
File:                     833eca32-c822-3a2c-bc06-5ea75c95ec32.roa (raw, json)
Hash identifier:          epeZaAp3zXGV6ZeMGrg/ok5BPZzJah6Kmf88xQomQZg=
Subject key identifier:   1B:35:6B:75:E3:80:13:A5:73:29:58:C6:8E:37:19:73:97:1D:A4:A3
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F94D300CE63C680929DE15D00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/833eca32-c822-3a2c-bc06-5ea75c95ec32.roa
Signing time:             Thu 22 Oct 2026 01:00:12 +0000
ROA not before:           Thu 22 Oct 2026 01:00:12 +0000
ROA not after:            Wed 20 Jan 2027 02:00:12 +0000
asID:                     401783
IP address blocks:        207.251.0.0/24 maxlen: 24
                          207.251.2.0/24 maxlen: 24
                          207.251.5.0/24 maxlen: 24
                          207.251.9.0/24 maxlen: 24
                          207.251.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 31 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:94:d3:00:ce:63:c6:80:92:9d:e1:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Oct 22 01:00:12 2026 GMT
            Not After : Jan 20 02:00:12 2027 GMT
        Subject: CN=e0a7668a-ce52-4234-856a-0d476b7aaa0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:98:08:07:17:44:0b:6d:9a:6f:56:02:bb:d4:
                    2a:0b:bd:bf:52:45:72:ae:0e:93:27:3a:1b:2b:81:
                    23:a9:e8:41:69:c3:66:4b:e7:e1:17:92:81:37:bb:
                    0a:54:60:d4:c1:af:bb:db:34:2c:47:3c:91:e7:ad:
                    55:6e:0c:2a:4c:aa:8a:99:89:5d:87:a9:b3:ee:2b:
                    c3:b7:d9:2a:01:f7:85:d4:96:8a:ca:2f:b9:d2:9e:
                    17:8b:81:23:51:f8:fe:4e:84:1f:43:09:75:5b:1c:
                    55:75:eb:ea:f3:e5:c9:ef:91:6b:99:68:74:58:f4:
                    b8:cc:c5:05:83:bc:20:e9:31:da:7d:2e:09:ec:31:
                    2c:ce:74:03:ea:b4:7a:cf:c8:76:76:d9:b0:2b:7a:
                    68:1a:21:92:2a:af:39:d4:9b:0c:56:4f:28:af:9d:
                    62:b1:99:6c:13:30:84:cd:84:db:63:90:0e:ae:53:
                    21:7d:b0:72:02:02:bc:6f:7c:d6:d2:6b:29:fc:5b:
                    46:db:26:30:01:d5:2f:3b:db:86:c2:2c:23:19:ce:
                    f1:f4:74:df:bf:ba:3b:68:4f:c0:f5:e5:40:a2:63:
                    72:8a:15:6a:d1:e5:8c:96:ec:10:21:88:cb:4d:7e:
                    ae:a8:de:f7:d0:f3:86:0c:e7:21:91:23:ee:4f:06:
                    9c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:35:6B:75:E3:80:13:A5:73:29:58:C6:8E:37:19:73:97:1D:A4:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/833eca32-c822-3a2c-bc06-5ea75c95ec32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.251.0.0/24
                  207.251.2.0/24
                  207.251.5.0/24
                  207.251.9.0/24
                  207.251.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:d4:e5:05:08:fd:6c:07:eb:f2:0c:38:23:81:77:d9:97:a1:
         28:4c:44:bb:75:ce:86:cc:5f:3a:84:c5:9c:94:d9:2f:23:03:
         9c:37:23:19:6d:b9:c7:d4:0a:f0:b1:76:eb:20:e5:40:08:12:
         5a:c1:c9:9b:13:3e:3a:7b:95:53:e0:7e:a9:fe:ab:64:b2:14:
         01:a5:68:1f:7d:a0:7d:b6:9a:eb:d0:96:7c:b4:21:ca:bf:a2:
         4a:fc:3d:0a:c8:57:29:eb:19:09:92:e3:ae:1a:ee:19:93:54:
         ab:36:b6:8a:2c:8b:41:9a:96:e2:ac:8c:2d:fe:ee:41:59:59:
         69:92:03:2e:88:78:c6:85:aa:c8:de:67:6a:b2:ac:34:c6:68:
         a4:00:1f:1c:c7:ef:d7:eb:d8:b8:53:47:12:a4:f9:af:b7:99:
         d0:42:0b:f5:ee:d1:8d:24:3b:ed:5c:b0:3e:ed:fb:d0:c0:08:
         57:2d:7f:d5:12:cd:66:c0:8d:53:79:5e:db:c7:ae:f5:ce:5a:
         5d:5d:79:5d:45:75:68:24:0f:46:f0:be:35:33:60:b7:74:48:
         a2:93:48:4c:dd:5f:84:4d:0f:a3:9a:85:84:fe:10:bf:86:03:
         b8:4f:19:ae:bf:1a:0f:63:0c:18:df:e0:28:5c:4e:27:80:7d:
         1a:44:c5:ea
-----BEGIN CERTIFICATE-----
MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWE+U0wDOY8aAkp3hXQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MTAyMjAxMDAxMloXDTI3MDEyMDAyMDAxMlowLzEtMCsGA1UEAxMk
ZTBhNzY2OGEtY2U1Mi00MjM0LTg1NmEtMGQ0NzZiN2FhYTBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pgIBxdEC22ab1YCu9QqC72/UkVyrg6TJzob
K4EjqehBacNmS+fhF5KBN7sKVGDUwa+72zQsRzyR561VbgwqTKqKmYldh6mz7ivD
t9kqAfeF1JaKyi+50p4Xi4EjUfj+ToQfQwl1WxxVdevq8+XJ75FrmWh0WPS4zMUF
g7wg6THafS4J7DEsznQD6rR6z8h2dtmwK3poGiGSKq851JsMVk8or51isZlsEzCE
zYTbY5AOrlMhfbByAgK8b3zW0msp/FtG2yYwAdUvO9uGwiwjGc7x9HTfv7o7aE/A
9eVAomNyihVq0eWMluwQIYjLTX6uqN730POGDOchkSPuTwaciwIDAQABo4IDbTCC
A2kwHQYDVR0OBBYEFBs1a3XjgBOlcylYxo43GXOXHaSjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvODMzZWNhMzItYzgyMi0z
YTJjLWJjMDYtNWVhNzVjOTVlYzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAz/sAAwQA
z/sCAwQAz/sFAwQAz/sJAwQAz/sOMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw
OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw
a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABLU5QUI/WwH6/IMOCOBd9mX
oShMRLt1zobMXzqExZyU2S8jA5w3IxltucfUCvCxdusg5UAIElrByZsTPjp7lVPg
fqn+q2SyFAGlaB99oH22muvQlny0Icq/okr8PQrIVynrGQmS464a7hmTVKs2toos
i0GaluKsjC3+7kFZWWmSAy6IeMaFqsjeZ2qyrDTGaKQAHxzH79fr2LhTRxKk+a+3
mdBCC/Xu0Y0kO+1csD7t+9DACFctf9USzWbAjVN5XtvHrvXOWl1deV1FdWgkD0bw
vjUzYLd0SKKTSEzdX4RND6OahYT+EL+GA7hPGa6/Gg9jDBjf4ChcTieAfRpExeo=
-----END CERTIFICATE-----
Generated at Fri Oct 30 02:55:57 2026 by rpki-client