Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/92c7257a-d6b8-46be-80c6-13466d7c5e4b/6abcd309-6f14-3262-aa9d-462b1d34ca8d.roa
File:                     6abcd309-6f14-3262-aa9d-462b1d34ca8d.roa (raw, json)
Hash identifier:          QqbnfRXIfcjAXps/+NvdVMbPGNuUmJwJrz9RZHEylCA=
Subject key identifier:   21:20:2D:C2:9D:3A:B2:7C:37:5D:D1:B5:01:44:65:2A:A1:6C:AF:D3
Certificate issuer:       /CN=92c7257a-d6b8-46be-80c6-13466d7c5e4b
Certificate serial:       010D0C9F4328584EDC924DD620511F7831DDD0C0
Authority key identifier: D7:B0:DC:B8:FC:CF:8A:19:88:DE:5C:70:58:DC:40:AD:38:4E:F1:EF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/92c7257a-d6b8-46be-80c6-13466d7c5e4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/92c7257a-d6b8-46be-80c6-13466d7c5e4b/6abcd309-6f14-3262-aa9d-462b1d34ca8d.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     6914
IP address blocks:        207.156.0.0/22 maxlen: 24
                          207.156.8.0/21 maxlen: 24
                          2605:e700:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/92c7257a-d6b8-46be-80c6-13466d7c5e4b/92c7257a-d6b8-46be-80c6-13466d7c5e4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/92c7257a-d6b8-46be-80c6-13466d7c5e4b/92c7257a-d6b8-46be-80c6-13466d7c5e4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/92c7257a-d6b8-46be-80c6-13466d7c5e4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 25 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:4d:d6:20:51:1f:78:31:dd:d0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92c7257a-d6b8-46be-80c6-13466d7c5e4b
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=2299209f-deac-4221-b0e6-9ddaf740f02c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:6a:4e:1e:a5:92:d1:07:4c:aa:7b:c8:ab:e5:
                    62:ae:04:60:c7:56:a2:13:bf:44:3d:80:47:eb:25:
                    3a:4b:d0:e2:43:e8:e2:17:a4:3b:3c:f8:6f:e8:ef:
                    1b:de:2d:bc:87:25:38:ec:f6:83:2f:7a:63:b1:35:
                    e6:e7:55:53:50:d6:ab:f9:d3:9b:57:e2:72:29:20:
                    24:f4:e3:a6:d8:e4:66:8c:e5:ce:fa:cc:ed:23:e1:
                    9b:f1:15:f8:d5:83:60:ab:6b:43:4a:f6:de:f2:b8:
                    8f:30:40:47:28:90:f3:4a:1b:2e:d0:bd:b6:ca:fa:
                    9a:51:79:02:a3:9d:2e:32:68:7c:e6:aa:c9:2d:5d:
                    d5:cd:29:16:b3:29:7c:08:eb:de:c0:d2:d0:16:65:
                    8c:94:73:53:eb:6c:cc:fd:49:43:4d:41:82:39:31:
                    6b:56:41:15:1a:3d:ff:1f:2c:4d:0d:9a:2e:87:7b:
                    15:61:d7:00:62:fc:7b:c0:ef:26:90:e4:12:96:1c:
                    16:84:06:86:d3:2a:d2:8a:12:ea:9a:fe:96:6e:b2:
                    54:a4:85:e0:f5:91:87:94:a5:64:ac:f8:ec:ab:df:
                    c4:0f:87:e8:d5:31:ca:64:6c:c2:5c:aa:68:c1:fe:
                    8c:4b:5d:86:26:b9:59:38:b1:c6:8c:a6:0c:27:2e:
                    f2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:20:2D:C2:9D:3A:B2:7C:37:5D:D1:B5:01:44:65:2A:A1:6C:AF:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/92c7257a-d6b8-46be-80c6-13466d7c5e4b/6abcd309-6f14-3262-aa9d-462b1d34ca8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/92c7257a-d6b8-46be-80c6-13466d7c5e4b/92c7257a-d6b8-46be-80c6-13466d7c5e4b.crl

            X509v3 Authority Key Identifier:
                keyid:D7:B0:DC:B8:FC:CF:8A:19:88:DE:5C:70:58:DC:40:AD:38:4E:F1:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/92c7257a-d6b8-46be-80c6-13466d7c5e4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.156.0.0/22
                  207.156.8.0/21
                IPv6:
                  2605:e700:3000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:9b:f5:33:e0:13:a5:72:d5:c3:da:e4:ca:9b:6c:22:bb:29:
         3d:d0:9f:2f:14:d9:7f:78:65:fe:13:e1:3d:f3:d0:33:98:12:
         00:37:39:78:04:20:40:e0:27:19:d7:d6:d9:18:06:89:35:4c:
         5c:48:ab:14:63:80:92:b6:dd:46:d9:94:b1:48:4e:25:fb:13:
         c7:cb:31:4e:98:a4:21:b0:fe:81:88:5d:3f:e3:f2:1a:e8:04:
         26:85:41:f7:5a:ed:e4:0c:e3:60:ad:19:37:ad:09:05:67:cd:
         f8:49:50:e4:06:e0:97:16:3b:c2:4e:9f:e8:d1:f9:8a:96:d7:
         5e:57:38:5e:c1:9a:ad:f3:a0:05:72:a0:f7:fc:80:d4:3d:6a:
         21:06:22:79:49:c5:4f:04:fa:09:f9:ca:01:f1:6c:22:f4:20:
         49:ab:70:b3:87:64:12:8b:9f:1e:58:82:4a:ff:70:92:0e:cc:
         94:b6:99:f7:af:1e:60:63:58:36:5d:bf:52:08:7a:2d:80:73:
         9d:28:bc:d2:79:ad:c7:3a:d6:40:2a:5d:5f:70:a7:4c:0b:d6:
         0b:c9:bc:b7:3a:1d:74:c2:39:8b:d6:d9:21:6d:b1:2f:b8:65:
         ad:e9:e8:da:01:fc:83:6e:2b:6b:34:af:26:24:33:c4:c7:ff:
         a9:2c:d5:0c
-----BEGIN CERTIFICATE-----
MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWE7ckk3WIFEfeDHd0MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTJjNzI1N2EtZDZiOC00NmJlLTgwYzYtMTM0NjZkN2M1
ZTRiMB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk
MjI5OTIwOWYtZGVhYy00MjIxLWIwZTYtOWRkYWY3NDBmMDJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6GpOHqWS0QdMqnvIq+VirgRgx1aiE79EPYBH
6yU6S9DiQ+jiF6Q7PPhv6O8b3i28hyU47PaDL3pjsTXm51VTUNar+dObV+JyKSAk
9OOm2ORmjOXO+sztI+Gb8RX41YNgq2tDSvbe8riPMEBHKJDzShsu0L22yvqaUXkC
o50uMmh85qrJLV3VzSkWsyl8COvewNLQFmWMlHNT62zM/UlDTUGCOTFrVkEVGj3/
HyxNDZouh3sVYdcAYvx7wO8mkOQSlhwWhAaG0yrSihLqmv6WbrJUpIXg9ZGHlKVk
rPjsq9/ED4fo1THKZGzCXKpowf6MS12GJrlZOLHGjKYMJy7yNQIDAQABo4IDazCC
A2cwHQYDVR0OBBYEFCEgLcKdOrJ8N13RtQFEZSqhbK/TMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MmM3
MjU3YS1kNmI4LTQ2YmUtODBjNi0xMzQ2NmQ3YzVlNGIvNmFiY2QzMDktNmYxNC0z
MjYyLWFhOWQtNDYyYjFkMzRjYThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTJjNzI1N2EtZDZiOC00NmJlLTgw
YzYtMTM0NjZkN2M1ZTRiLzkyYzcyNTdhLWQ2YjgtNDZiZS04MGM2LTEzNDY2ZDdj
NWU0Yi5jcmwwHwYDVR0jBBgwFoAU17DcuPzPihmI3lxwWNxArThO8e8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MmM3MjU3YS1kNmI4LTQ2YmUtODBjNi0xMzQ2
NmQ3YzVlNGIuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQCz5wAAwQD
z5wIMA4EAgACMAgDBgQmBecAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQClm/Uz4BOlctXD2uTKm2wiuyk9
0J8vFNl/eGX+E+E989AzmBIANzl4BCBA4CcZ19bZGAaJNUxcSKsUY4CStt1G2ZSx
SE4l+xPHyzFOmKQhsP6BiF0/4/Ia6AQmhUH3Wu3kDONgrRk3rQkFZ834SVDkBuCX
FjvCTp/o0fmKltdeVzhewZqt86AFcqD3/IDUPWohBiJ5ScVPBPoJ+coB8Wwi9CBJ
q3Czh2QSi58eWIJK/3CSDsyUtpn3rx5gY1g2Xb9SCHotgHOdKLzSea3HOtZAKl1f
cKdMC9YLyby3Oh10wjmL1tkhbbEvuGWt6ejaAfyDbitrNK8mJDPEx/+pLNUM
-----END CERTIFICATE-----
Generated at Mon Aug 24 09:09:20 2026 by rpki-client