Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/36b69b3a-cb8e-410d-ac55-97551de9b9e1/a6c5721d-99a0-3b45-9a22-dd67f52fa253.roa
File:                     a6c5721d-99a0-3b45-9a22-dd67f52fa253.roa (raw, json)
Hash identifier:          IltVI4/o/4AXq8qxpRJVTKoK98GDs6K2YCT9VTUaR6w=
Subject key identifier:   5A:1B:AD:58:CC:2E:B3:98:7A:58:A5:C3:32:4A:BE:C7:A6:78:B0:E9
Certificate issuer:       /CN=36b69b3a-cb8e-410d-ac55-97551de9b9e1
Certificate serial:       010D0C9F4328584F75FEA40481E14D31F4E56F00
Authority key identifier: 30:C9:1B:7E:BB:55:21:76:89:F7:2D:80:33:57:D6:8F:88:1A:B2:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/36b69b3a-cb8e-410d-ac55-97551de9b9e1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/36b69b3a-cb8e-410d-ac55-97551de9b9e1/a6c5721d-99a0-3b45-9a22-dd67f52fa253.roa
Signing time:             Sat 10 Oct 2026 23:58:06 +0000
ROA not before:           Sat 10 Oct 2026 23:58:06 +0000
ROA not after:            Sat 09 Jan 2027 00:58:06 +0000
asID:                     25720
IP address blocks:        207.195.212.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/36b69b3a-cb8e-410d-ac55-97551de9b9e1/36b69b3a-cb8e-410d-ac55-97551de9b9e1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/36b69b3a-cb8e-410d-ac55-97551de9b9e1/36b69b3a-cb8e-410d-ac55-97551de9b9e1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/36b69b3a-cb8e-410d-ac55-97551de9b9e1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:75:fe:a4:04:81:e1:4d:31:f4:e5:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36b69b3a-cb8e-410d-ac55-97551de9b9e1
        Validity
            Not Before: Oct 10 23:58:06 2026 GMT
            Not After : Jan  9 00:58:06 2027 GMT
        Subject: CN=d425ad42-8485-42c1-a802-97886bdcd404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:76:e8:a6:36:2f:cb:57:74:b6:d7:a3:34:3f:
                    b9:6b:5a:47:53:ad:f0:bc:8a:8f:b5:e4:03:af:86:
                    e7:43:03:33:61:9e:55:4c:bf:c6:5e:86:38:17:42:
                    90:6e:cb:a8:e2:94:8e:c9:11:8e:df:1f:61:bb:0b:
                    28:1f:60:3e:c7:ce:c0:11:b1:15:67:a2:70:d0:f7:
                    3b:13:49:eb:aa:02:21:f9:50:29:89:e3:b1:cc:ac:
                    c0:7b:03:93:c5:a1:85:2c:5a:bf:d7:ae:34:7a:3b:
                    de:c3:98:6a:59:f6:8c:4e:11:9b:22:af:65:19:95:
                    cb:4d:4c:a0:7d:bd:36:19:6b:45:60:5b:6d:0e:61:
                    75:df:07:1f:7e:99:09:95:48:62:7b:3f:9b:a2:f6:
                    6a:8c:a7:84:fd:c0:b6:8e:0c:81:07:86:da:18:48:
                    6e:10:69:3e:8b:49:5a:66:72:f4:dd:cb:05:61:2d:
                    86:a1:14:0c:02:e7:59:ea:21:00:f4:7c:01:62:24:
                    08:4a:56:5e:71:48:6e:c5:09:e4:32:68:16:19:8d:
                    c3:ca:05:33:fc:a1:8a:fd:98:ac:13:c3:9f:5d:9b:
                    b8:19:81:48:09:14:41:cb:4a:9b:90:d9:21:9d:3f:
                    91:74:e9:89:3d:2f:52:83:f8:40:d1:fd:9b:db:fa:
                    3f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:1B:AD:58:CC:2E:B3:98:7A:58:A5:C3:32:4A:BE:C7:A6:78:B0:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/36b69b3a-cb8e-410d-ac55-97551de9b9e1/a6c5721d-99a0-3b45-9a22-dd67f52fa253.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/36b69b3a-cb8e-410d-ac55-97551de9b9e1/36b69b3a-cb8e-410d-ac55-97551de9b9e1.crl

            X509v3 Authority Key Identifier:
                keyid:30:C9:1B:7E:BB:55:21:76:89:F7:2D:80:33:57:D6:8F:88:1A:B2:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/36b69b3a-cb8e-410d-ac55-97551de9b9e1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.195.212.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:77:3d:d3:58:c7:b0:e5:4a:38:fc:bf:5d:d8:89:d9:38:9c:
         7e:f8:23:03:d5:ef:4d:3f:3e:50:5a:62:38:b4:01:f9:84:8d:
         e7:42:2e:db:52:3d:5e:83:b1:8b:77:da:6a:e5:be:38:12:34:
         dd:ef:c1:8c:51:06:85:9b:fc:c4:b3:c7:82:35:33:bf:6d:51:
         b2:26:33:b5:24:4c:1c:41:84:c9:5e:9e:85:28:be:f7:09:8f:
         4e:d8:be:5a:ee:5a:60:e7:4f:70:04:2f:c2:c8:b8:53:47:a7:
         4b:ab:de:13:dc:8b:24:31:f5:22:6b:be:e2:5e:1a:44:72:e9:
         39:68:97:ac:ae:ba:bb:66:ff:c5:ae:c1:d6:e3:4c:6b:6c:f4:
         4a:8e:b7:99:6e:db:c5:e2:ad:b8:23:33:a7:0d:d3:e2:b8:be:
         1a:56:3a:71:1c:b8:b3:8d:8a:ad:c7:ae:f0:a2:6e:73:0e:f4:
         fc:d7:e1:27:fe:6c:47:5c:e6:9a:c2:af:c4:1d:4d:d8:e3:a2:
         4a:80:25:c8:03:a7:87:72:14:7b:bd:22:c2:13:4e:c0:62:0a:
         c3:6a:5d:91:17:d6:c0:b0:65:fc:eb:99:7b:5c:76:f9:ab:41:
         76:9b:1d:06:fb:65:24:6f:78:4f:96:59:c3:80:ca:b9:49:f5:
         29:55:95:0b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE91/qQEgeFNMfTlbwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzZiNjliM2EtY2I4ZS00MTBkLWFjNTUtOTc1NTFkZTli
OWUxMB4XDTI2MTAxMDIzNTgwNloXDTI3MDEwOTAwNTgwNlowLzEtMCsGA1UEAxMk
ZDQyNWFkNDItODQ4NS00MmMxLWE4MDItOTc4ODZiZGNkNDA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHbopjYvy1d0ttejND+5a1pHU63wvIqPteQD
r4bnQwMzYZ5VTL/GXoY4F0KQbsuo4pSOyRGO3x9huwsoH2A+x87AEbEVZ6Jw0Pc7
E0nrqgIh+VApieOxzKzAewOTxaGFLFq/1640ejvew5hqWfaMThGbIq9lGZXLTUyg
fb02GWtFYFttDmF13wcffpkJlUhiez+bovZqjKeE/cC2jgyBB4baGEhuEGk+i0la
ZnL03csFYS2GoRQMAudZ6iEA9HwBYiQISlZecUhuxQnkMmgWGY3DygUz/KGK/Zis
E8OfXZu4GYFICRRBy0qbkNkhnT+RdOmJPS9Sg/hA0f2b2/o/2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFobrVjMLrOYelilwzJKvsemeLDpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8zNmI2
OWIzYS1jYjhlLTQxMGQtYWM1NS05NzU1MWRlOWI5ZTEvYTZjNTcyMWQtOTlhMC0z
YjQ1LTlhMjItZGQ2N2Y1MmZhMjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l
ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvMzZiNjliM2EtY2I4ZS00MTBkLWFj
NTUtOTc1NTFkZTliOWUxLzM2YjY5YjNhLWNiOGUtNDEwZC1hYzU1LTk3NTUxZGU5
YjllMS5jcmwwHwYDVR0jBBgwFoAUMMkbfrtVIXaJ9y2AM1fWj4gashYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx
OS04NmJkLWRlZjJjYTNhZDkxOS8zNmI2OWIzYS1jYjhlLTQxMGQtYWM1NS05NzU1
MWRlOWI5ZTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz8PUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIR3PdNYx7DlSjj8v13Yidk4nH74IwPV700/PlBaYji0AfmEjedCLttS
PV6DsYt32mrlvjgSNN3vwYxRBoWb/MSzx4I1M79tUbImM7UkTBxBhMlenoUovvcJ
j07YvlruWmDnT3AEL8LIuFNHp0ur3hPciyQx9SJrvuJeGkRy6Tlol6yuurtm/8Wu
wdbjTGts9EqOt5lu28XirbgjM6cN0+K4vhpWOnEcuLONiq3HrvCibnMO9PzX4Sf+
bEdc5prCr8QdTdjjokqAJcgDp4dyFHu9IsITTsBiCsNqXZEX1sCwZfzrmXtcdvmr
QXabHQb7ZSRveE+WWcOAyrlJ9SlVlQs=
-----END CERTIFICATE-----
Generated at Wed Nov 4 05:36:47 2026 by rpki-client