Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d4df721f-f1d3-488f-a11f-24012ecf96ce/77d29984-d97a-3f9d-acb2-836eab647e71.roa
File:                     77d29984-d97a-3f9d-acb2-836eab647e71.roa (raw, json)
Hash identifier:          UJM2OjcnHvqNge+iazoQgbkuAe++cWggu89Z/YzrfpE=
Subject key identifier:   EB:45:47:95:E0:35:09:93:FC:FA:CC:5D:12:DD:48:2C:23:12:5A:94
Certificate issuer:       /CN=d4df721f-f1d3-488f-a11f-24012ecf96ce
Certificate serial:       010D0C9F4328584F74AA5CF381DBAF032A683DC0
Authority key identifier: 25:6F:77:DA:DD:0B:B5:8B:D9:56:94:F4:EE:F4:EF:F3:6C:F3:19:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d4df721f-f1d3-488f-a11f-24012ecf96ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d4df721f-f1d3-488f-a11f-24012ecf96ce/77d29984-d97a-3f9d-acb2-836eab647e71.roa
Signing time:             Sat 10 Oct 2026 12:32:29 +0000
ROA not before:           Sat 10 Oct 2026 12:32:29 +0000
ROA not after:            Fri 08 Jan 2027 13:32:29 +0000
asID:                     402233
IP address blocks:        206.208.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d4df721f-f1d3-488f-a11f-24012ecf96ce/d4df721f-f1d3-488f-a11f-24012ecf96ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d4df721f-f1d3-488f-a11f-24012ecf96ce/d4df721f-f1d3-488f-a11f-24012ecf96ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d4df721f-f1d3-488f-a11f-24012ecf96ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:74:aa:5c:f3:81:db:af:03:2a:68:3d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4df721f-f1d3-488f-a11f-24012ecf96ce
        Validity
            Not Before: Oct 10 12:32:29 2026 GMT
            Not After : Jan  8 13:32:29 2027 GMT
        Subject: CN=27cedb33-8527-4f3d-a131-f0493d2d96d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:64:0c:af:c2:76:c0:a9:3d:5f:9c:26:a2:42:
                    72:03:20:15:3d:b8:2f:95:19:6f:2a:0a:b2:3a:82:
                    bd:bd:a1:0e:84:75:a2:27:18:35:51:9e:0e:29:7d:
                    37:0c:f3:25:ee:04:41:ee:ef:b9:3c:b0:af:bb:b0:
                    bf:4b:8f:06:aa:bf:cd:1b:8c:08:6c:0e:47:1b:8a:
                    cb:a2:67:b8:3e:73:39:18:fe:4c:3e:72:58:4c:c7:
                    cf:f5:63:97:fb:dd:cc:d4:89:82:80:dd:3a:71:a7:
                    85:fe:58:c7:a8:c3:e1:27:86:8b:71:a9:2d:c4:b6:
                    3e:8d:da:7b:fc:a2:f7:0b:67:b1:b6:98:05:4e:62:
                    57:76:db:22:58:da:cf:01:60:d6:ab:70:c5:28:45:
                    27:16:ad:64:78:3f:0f:5b:44:3c:ce:43:24:84:8b:
                    19:e4:3c:36:ce:08:ef:81:4f:93:b3:0a:c3:6b:6e:
                    d1:80:65:db:ec:f0:88:28:30:d1:0c:e9:c1:ce:8e:
                    14:69:86:cf:5e:bf:ee:28:62:8d:3b:2e:0b:f3:7a:
                    3e:c3:93:0e:27:35:37:01:1f:a0:06:ec:8a:69:74:
                    93:15:2f:ef:bb:74:bf:bc:c3:35:7c:09:0e:42:75:
                    8c:82:de:ad:9d:de:de:d0:a9:35:59:97:89:d7:66:
                    37:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:45:47:95:E0:35:09:93:FC:FA:CC:5D:12:DD:48:2C:23:12:5A:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d4df721f-f1d3-488f-a11f-24012ecf96ce/77d29984-d97a-3f9d-acb2-836eab647e71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d4df721f-f1d3-488f-a11f-24012ecf96ce/d4df721f-f1d3-488f-a11f-24012ecf96ce.crl

            X509v3 Authority Key Identifier:
                keyid:25:6F:77:DA:DD:0B:B5:8B:D9:56:94:F4:EE:F4:EF:F3:6C:F3:19:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d4df721f-f1d3-488f-a11f-24012ecf96ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.208.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:f9:c0:3d:33:02:03:ca:5d:ef:de:10:a9:ff:4c:d8:80:f0:
         05:82:fd:5e:22:0a:80:5e:7e:81:a2:ec:4b:0c:d4:28:fe:c4:
         b2:f6:09:fe:e5:05:be:8c:c5:84:ca:fb:2a:77:b1:59:2a:a9:
         d1:45:5c:bf:a5:90:15:9e:ce:0d:8c:91:99:7d:b8:9f:74:f6:
         e5:c1:f6:c7:72:cb:cd:1b:c9:92:07:73:f2:5c:22:3b:c4:1f:
         55:86:17:7f:74:c0:f4:29:35:f6:bf:81:ed:99:05:53:dd:2c:
         4a:f5:a2:10:c4:f9:1e:67:f7:3a:c9:cd:8b:0f:5f:6a:9e:5c:
         97:8d:1d:cc:cc:85:6a:cf:17:3c:56:ba:36:e7:ab:6d:80:2b:
         f7:56:b2:f0:91:3a:ff:df:ec:e9:d3:db:cf:a6:d3:4b:bb:d5:
         f6:49:2a:b7:a0:f1:2a:8f:b3:03:61:07:7a:0c:e3:0b:75:28:
         33:ce:0b:5e:1c:7a:ee:64:dd:d8:41:43:8e:b3:0f:e1:b7:9e:
         12:b1:ef:1a:b2:50:1e:2d:81:f1:2d:59:4e:0e:ec:d3:d7:3a:
         e8:54:3f:cf:ab:38:d4:67:65:42:de:99:43:6f:74:9a:fd:f9:
         12:0f:d7:3a:0d:61:ec:d3:d8:9c:40:43:9f:ce:8e:d0:87:b6:
         b9:ad:ce:e0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE90qlzzgduvAypoPcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDRkZjcyMWYtZjFkMy00ODhmLWExMWYtMjQwMTJlY2Y5
NmNlMB4XDTI2MTAxMDEyMzIyOVoXDTI3MDEwODEzMzIyOVowLzEtMCsGA1UEAxMk
MjdjZWRiMzMtODUyNy00ZjNkLWExMzEtZjA0OTNkMmQ5NmQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2QMr8J2wKk9X5wmokJyAyAVPbgvlRlvKgqy
OoK9vaEOhHWiJxg1UZ4OKX03DPMl7gRB7u+5PLCvu7C/S48Gqr/NG4wIbA5HG4rL
ome4PnM5GP5MPnJYTMfP9WOX+93M1ImCgN06caeF/ljHqMPhJ4aLcaktxLY+jdp7
/KL3C2extpgFTmJXdtsiWNrPAWDWq3DFKEUnFq1keD8PW0Q8zkMkhIsZ5Dw2zgjv
gU+TswrDa27RgGXb7PCIKDDRDOnBzo4UaYbPXr/uKGKNOy4L83o+w5MOJzU3AR+g
BuyKaXSTFS/vu3S/vMM1fAkOQnWMgt6tnd7e0Kk1WZeJ12Y3zQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOtFR5XgNQmT/PrMXRLdSCwjElqUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9kNGRm
NzIxZi1mMWQzLTQ4OGYtYTExZi0yNDAxMmVjZjk2Y2UvNzdkMjk5ODQtZDk3YS0z
ZjlkLWFjYjItODM2ZWFiNjQ3ZTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l
ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvZDRkZjcyMWYtZjFkMy00ODhmLWEx
MWYtMjQwMTJlY2Y5NmNlL2Q0ZGY3MjFmLWYxZDMtNDg4Zi1hMTFmLTI0MDEyZWNm
OTZjZS5jcmwwHwYDVR0jBBgwFoAUJW932t0LtYvZVpT07vTv82zzGf0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx
OS04NmJkLWRlZjJjYTNhZDkxOS9kNGRmNzIxZi1mMWQzLTQ4OGYtYTExZi0yNDAx
MmVjZjk2Y2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCztB4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGf5wD0zAgPKXe/eEKn/TNiA8AWC/V4iCoBefoGi7EsM1Cj+xLL2Cf7l
Bb6MxYTK+yp3sVkqqdFFXL+lkBWezg2MkZl9uJ909uXB9sdyy80byZIHc/JcIjvE
H1WGF390wPQpNfa/ge2ZBVPdLEr1ohDE+R5n9zrJzYsPX2qeXJeNHczMhWrPFzxW
ujbnq22AK/dWsvCROv/f7OnT28+m00u71fZJKreg8SqPswNhB3oM4wt1KDPOC14c
eu5k3dhBQ46zD+G3nhKx7xqyUB4tgfEtWU4O7NPXOuhUP8+rONRnZULemUNvdJr9
+RIP1zoNYezT2JxAQ5/OjtCHtrmtzuA=
-----END CERTIFICATE-----
Generated at Thu Nov 5 05:28:43 2026 by rpki-client