Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/6f4b9c20-3128-3f1d-b3e6-05a2c64446b9.roa
File:                     6f4b9c20-3128-3f1d-b3e6-05a2c64446b9.roa (raw, json)
Hash identifier:          Z3jGzMWHGaYWUByiur3skdM8vHvLzE2YOD65febc31s=
Subject key identifier:   89:CA:FB:C3:EB:C9:DD:0C:79:DF:02:C7:B5:B6:07:91:25:28:50:36
Certificate issuer:       /CN=09fe46b0-7034-4d7b-a746-7a70f788c3f5
Certificate serial:       010D0C9F4328584EA788D18A94D5BD807FA60E80
Authority key identifier: 2A:52:1B:75:DD:A9:EE:3E:91:EC:CB:6F:A7:C2:EB:3D:EA:BC:38:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/6f4b9c20-3128-3f1d-b3e6-05a2c64446b9.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     14618
IP address blocks:        209.127.216.0/24 maxlen: 24
                          209.188.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/09fe46b0-7034-4d7b-a746-7a70f788c3f5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/09fe46b0-7034-4d7b-a746-7a70f788c3f5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:d1:8a:94:d5:bd:80:7f:a6:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09fe46b0-7034-4d7b-a746-7a70f788c3f5
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=574c9ba1-844d-4837-af15-910f6317194e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f9:88:73:e0:2e:76:08:dc:8a:40:c9:8e:f8:
                    59:4f:b7:1f:c5:84:11:f9:68:f4:7c:08:11:74:1f:
                    f3:c0:6a:fc:0a:3f:e8:c3:7c:48:a3:90:55:4e:b8:
                    51:4d:37:f7:72:20:63:7b:b5:50:fa:d1:7c:fd:a1:
                    43:49:5b:0d:f7:2e:50:38:a2:89:29:f0:46:a4:79:
                    59:0d:ac:fc:b4:0e:f5:df:71:a7:d1:d5:89:9f:c9:
                    cb:c1:8b:86:02:bb:dd:43:1d:93:a5:05:b9:fa:4c:
                    66:b6:34:dc:e6:aa:eb:5a:7f:71:55:ea:9b:eb:14:
                    09:a0:44:16:61:c8:0a:8f:49:15:2b:24:e1:8c:0c:
                    bd:08:2a:9d:15:97:c8:aa:b1:f8:ba:06:09:ef:6d:
                    9f:e4:ea:ab:d0:42:42:30:8d:f1:51:48:dc:36:83:
                    c4:10:70:28:8d:a4:3a:04:75:69:4c:a9:96:83:25:
                    05:f8:ee:9c:2e:c7:5f:43:34:b3:27:ad:e8:d6:06:
                    04:12:23:e6:45:4f:4b:70:f5:87:6e:6f:aa:ee:4c:
                    43:d9:6e:00:a8:33:8d:19:f5:75:95:4d:5c:53:24:
                    24:a2:c0:9a:48:43:05:00:d5:ff:0c:f7:65:cb:10:
                    a9:0b:c6:d0:df:30:46:94:3c:60:29:01:b1:c5:ce:
                    1d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:CA:FB:C3:EB:C9:DD:0C:79:DF:02:C7:B5:B6:07:91:25:28:50:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/6f4b9c20-3128-3f1d-b3e6-05a2c64446b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/09fe46b0-7034-4d7b-a746-7a70f788c3f5.crl

            X509v3 Authority Key Identifier:
                keyid:2A:52:1B:75:DD:A9:EE:3E:91:EC:CB:6F:A7:C2:EB:3D:EA:BC:38:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.127.216.0/24
                  209.188.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:eb:a0:7b:51:65:e2:b5:21:c8:6d:0d:87:3a:df:d4:98:d9:
         ef:51:6d:28:d6:c9:a7:5d:50:ae:64:51:40:ac:56:80:66:75:
         14:ac:58:6f:a9:4e:3d:80:a4:56:f1:17:eb:1f:7c:f1:08:62:
         fb:d7:ea:13:34:f0:3c:cc:4e:3e:29:91:47:ae:bd:20:29:31:
         8e:5d:f1:c0:86:d0:28:18:b0:c7:39:ae:4c:17:fc:89:bd:62:
         78:f4:e2:e3:cd:a3:da:33:78:01:fb:a9:50:f5:a1:2d:3c:4f:
         fd:f3:ad:a6:55:a2:ed:f9:32:f7:6d:28:34:25:f2:f8:10:aa:
         ef:7e:d8:dd:a2:6f:eb:6a:75:a1:1d:e9:83:60:fd:ec:91:6a:
         98:bc:d6:93:96:d4:fa:25:e2:a3:f6:3a:6d:e3:e5:c0:a0:dc:
         dc:e2:4d:14:44:88:a9:42:ad:58:c0:3e:dd:38:ab:48:a7:26:
         0e:03:b1:06:87:c9:88:cf:2a:fb:cd:86:bb:8a:1f:c7:bc:c6:
         a7:ef:3c:5a:76:21:82:c6:ca:ef:c8:9f:89:05:1d:cb:85:f2:
         57:53:2f:ab:f7:00:a9:b6:93:53:ff:a4:d4:fc:1c:fc:2e:87:
         b5:97:ae:6d:39:ad:6e:2f:7f:a3:ce:5e:f8:4c:8c:c1:41:25:
         53:07:79:50
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE6niNGKlNW9gH+mDoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDlmZTQ2YjAtNzAzNC00ZDdiLWE3NDYtN2E3MGY3ODhj
M2Y1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NTc0YzliYTEtODQ0ZC00ODM3LWFmMTUtOTEwZjYzMTcxOTRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifmIc+AudgjcikDJjvhZT7cfxYQR+Wj0fAgR
dB/zwGr8Cj/ow3xIo5BVTrhRTTf3ciBje7VQ+tF8/aFDSVsN9y5QOKKJKfBGpHlZ
Daz8tA7133Gn0dWJn8nLwYuGArvdQx2TpQW5+kxmtjTc5qrrWn9xVeqb6xQJoEQW
YcgKj0kVKyThjAy9CCqdFZfIqrH4ugYJ722f5Oqr0EJCMI3xUUjcNoPEEHAojaQ6
BHVpTKmWgyUF+O6cLsdfQzSzJ63o1gYEEiPmRU9LcPWHbm+q7kxD2W4AqDONGfV1
lU1cUyQkosCaSEMFANX/DPdlyxCpC8bQ3zBGlDxgKQGxxc4daQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFInK+8Pryd0Med8Cx7W2B5ElKFA2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wOWZl
NDZiMC03MDM0LTRkN2ItYTc0Ni03YTcwZjc4OGMzZjUvNmY0YjljMjAtMzEyOC0z
ZjFkLWIzZTYtMDVhMmM2NDQ0NmI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMDlmZTQ2YjAtNzAzNC00ZDdiLWE3
NDYtN2E3MGY3ODhjM2Y1LzA5ZmU0NmIwLTcwMzQtNGQ3Yi1hNzQ2LTdhNzBmNzg4
YzNmNS5jcmwwHwYDVR0jBBgwFoAUKlIbdd2p7j6R7Mtvp8LrPeq8OEswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8wOWZlNDZiMC03MDM0LTRkN2ItYTc0Ni03YTcw
Zjc4OGMzZjUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA0X/YAwQA
0bxtMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAIbroHtRZeK1IchtDYc639SY2e9RbSjWyaddUK5kUUCsVoBm
dRSsWG+pTj2ApFbxF+sffPEIYvvX6hM08DzMTj4pkUeuvSApMY5d8cCG0CgYsMc5
rkwX/Im9Ynj04uPNo9ozeAH7qVD1oS08T/3zraZVou35MvdtKDQl8vgQqu9+2N2i
b+tqdaEd6YNg/eyRapi81pOW1Pol4qP2Om3j5cCg3NziTRREiKlCrVjAPt04q0in
Jg4DsQaHyYjPKvvNhruKH8e8xqfvPFp2IYLGyu/In4kFHcuF8ldTL6v3AKm2k1P/
pNT8HPwuh7WXrm05rW4vf6POXvhMjMFBJVMHeVA=
-----END CERTIFICATE-----
Generated at Thu Aug 20 21:58:26 2026 by rpki-client