Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/0a102b06-d729-3ab3-9296-0b26d2e0f786.roa
File:                     0a102b06-d729-3ab3-9296-0b26d2e0f786.roa (raw, json)
Hash identifier:          Bj1fn8YRzu2eag/lwPIB6yxcYT9Op6gLLbevQJUfzXE=
Subject key identifier:   DC:16:57:B8:C9:12:E3:8A:F5:E5:F9:68:CC:6D:33:E1:09:89:CF:19
Certificate issuer:       /CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9
Certificate serial:       010D0C9F4328584EA795D81C6A3708F1A1297000
Authority key identifier: CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/0a102b06-d729-3ab3-9296-0b26d2e0f786.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     47007
IP address blocks:        204.14.104.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:95:d8:1c:6a:37:08:f1:a1:29:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=5d0e5196-9a36-456d-8102-73c9e710cb1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:08:34:2f:00:34:43:f4:dc:6f:e7:c1:7c:52:
                    98:76:16:46:93:cc:81:df:36:5a:61:ad:ba:8f:ac:
                    ad:86:b5:33:21:70:05:91:95:61:1b:59:28:34:3a:
                    18:26:4c:e8:a3:64:e3:c2:23:90:d9:3e:57:ea:d7:
                    3f:60:75:9e:8c:1e:8b:cb:df:52:28:8e:73:ff:19:
                    57:29:26:d7:24:1b:ae:eb:6c:a1:8f:5d:6a:a8:85:
                    f9:7e:5d:67:67:d4:b2:d8:14:3c:2e:5d:a7:ae:65:
                    07:96:ea:69:65:2d:18:60:a4:89:42:95:77:3c:7c:
                    15:19:5e:0e:dc:7b:2b:6a:de:89:27:67:64:83:79:
                    9c:59:7c:05:d8:91:f4:f5:3f:a7:20:b1:ce:ac:37:
                    c3:14:e2:ea:c0:53:af:ee:90:5c:42:07:2f:44:f1:
                    27:8d:66:74:5b:50:6f:24:93:07:6f:98:0d:d3:2d:
                    b4:51:33:4c:cd:45:84:4b:e4:7c:b0:cf:bf:4f:5a:
                    63:e2:3e:82:9f:15:eb:a2:e8:72:43:7d:e0:84:b2:
                    c5:c3:63:27:be:a3:16:2c:24:1c:52:2d:b3:dd:5a:
                    31:be:b3:39:72:2e:cd:b9:20:6e:b1:89:dc:4d:d1:
                    67:1c:fb:94:31:1f:02:2e:40:6c:39:9e:3c:0c:1b:
                    f7:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:16:57:B8:C9:12:E3:8A:F5:E5:F9:68:CC:6D:33:E1:09:89:CF:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/0a102b06-d729-3ab3-9296-0b26d2e0f786.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl

            X509v3 Authority Key Identifier:
                keyid:CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.14.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:2b:32:6d:d3:88:a6:aa:9c:c9:25:32:60:84:6e:c9:4c:16:
         41:2d:9f:17:9c:38:1a:46:3b:a8:61:7a:79:50:9d:ad:f2:41:
         fa:a7:11:c5:ac:24:e6:70:bf:75:c9:d9:34:37:14:2c:24:31:
         99:eb:95:8a:68:30:4e:f3:eb:84:5d:f8:01:34:be:91:ab:59:
         67:fd:d8:a8:e0:31:c3:90:fe:fe:f1:9d:03:2f:95:90:4f:a2:
         ca:01:33:c7:a7:c3:2a:5d:de:c1:42:25:55:97:49:65:3b:73:
         6e:03:15:5f:e8:1e:a8:c9:30:ee:0a:d0:5e:c3:31:b8:81:2d:
         3d:23:67:d3:f9:3d:d5:b6:7b:93:0c:cb:92:45:4a:8b:7f:38:
         4b:26:a3:f9:a1:d4:6b:11:ce:27:20:2a:7b:81:5a:b8:d6:4a:
         e5:ec:a9:0c:96:18:6d:b0:7f:b8:f8:33:7f:29:90:fa:cc:3b:
         63:ce:3a:f4:18:51:03:cf:b9:d0:53:cb:45:d8:af:35:48:2a:
         ff:d7:48:0e:45:2e:21:ea:09:8a:c1:95:90:fb:43:a7:88:4b:
         25:ac:71:0f:26:1b:43:85:5c:9f:4a:59:7d:f3:5a:58:2b:f9:
         7e:0e:42:56:d5:b2:f0:0e:7d:10:2d:f3:4b:86:00:12:71:54:
         28:e3:75:cc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nldgcajcI8aEpcAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjAyZGM2ZTctZmExYS00YWNmLWEwMzYtNWI0NDg3MTAw
ZGU5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NWQwZTUxOTYtOWEzNi00NTZkLTgxMDItNzNjOWU3MTBjYjFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgg0LwA0Q/Tcb+fBfFKYdhZGk8yB3zZaYa26
j6ythrUzIXAFkZVhG1koNDoYJkzoo2TjwiOQ2T5X6tc/YHWejB6Ly99SKI5z/xlX
KSbXJBuu62yhj11qqIX5fl1nZ9Sy2BQ8Ll2nrmUHluppZS0YYKSJQpV3PHwVGV4O
3Hsrat6JJ2dkg3mcWXwF2JH09T+nILHOrDfDFOLqwFOv7pBcQgcvRPEnjWZ0W1Bv
JJMHb5gN0y20UTNMzUWES+R8sM+/T1pj4j6CnxXrouhyQ33ghLLFw2MnvqMWLCQc
Ui2z3VoxvrM5ci7NuSBusYncTdFnHPuUMR8CLkBsOZ48DBv3hQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNwWV7jJEuOK9eX5aMxtM+EJic8ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iMDJk
YzZlNy1mYTFhLTRhY2YtYTAzNi01YjQ0ODcxMDBkZTkvMGExMDJiMDYtZDcyOS0z
YWIzLTkyOTYtMGIyNmQyZTBmNzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjAyZGM2ZTctZmExYS00YWNmLWEw
MzYtNWI0NDg3MTAwZGU5L2IwMmRjNmU3LWZhMWEtNGFjZi1hMDM2LTViNDQ4NzEw
MGRlOS5jcmwwHwYDVR0jBBgwFoAUzajON082SuE49vB+z212scrE6D4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9iMDJkYzZlNy1mYTFhLTRhY2YtYTAzNi01YjQ0
ODcxMDBkZTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzA5oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAIrMm3TiKaqnMklMmCEbslMFkEtnxecOBpGO6hhenlQna3yQfqnEcWs
JOZwv3XJ2TQ3FCwkMZnrlYpoME7z64Rd+AE0vpGrWWf92KjgMcOQ/v7xnQMvlZBP
osoBM8enwypd3sFCJVWXSWU7c24DFV/oHqjJMO4K0F7DMbiBLT0jZ9P5PdW2e5MM
y5JFSot/OEsmo/mh1GsRzicgKnuBWrjWSuXsqQyWGG2wf7j4M38pkPrMO2POOvQY
UQPPudBTy0XYrzVIKv/XSA5FLiHqCYrBlZD7Q6eISyWscQ8mG0OFXJ9KWX3zWlgr
+X4OQlbVsvAOfRAt80uGABJxVCjjdcw=
-----END CERTIFICATE-----
Generated at Tue Sep 8 05:12:15 2026 by rpki-client