Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/b11f0458-b61c-3e5a-9df7-55e9dc385389.roa
File:                     b11f0458-b61c-3e5a-9df7-55e9dc385389.roa (raw, json)
Hash identifier:          V+fv9SLHTHmXNjrzglgr5vStD1dsdSPr41GmnI8lPE4=
Subject key identifier:   0D:B0:C8:34:85:C5:D4:E0:3D:61:47:01:C1:42:05:DD:45:9C:A7:0D
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F4328584DE84B570C43D85E1A748BA700
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/b11f0458-b61c-3e5a-9df7-55e9dc385389.roa
Signing time:             Thu 21 May 2026 13:00:32 +0000
ROA not before:           Thu 21 May 2026 13:00:32 +0000
ROA not after:            Wed 19 Aug 2026 13:00:32 +0000
asID:                     10753
IP address blocks:        209.211.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 02 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:4b:57:0c:43:d8:5e:1a:74:8b:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: May 21 13:00:32 2026 GMT
            Not After : Aug 19 13:00:32 2026 GMT
        Subject: CN=4aed2af9-18f6-44b8-9370-04a6142ae1a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:dd:25:4f:3d:22:31:e6:71:08:d4:2e:91:d4:
                    12:8f:ee:b2:36:57:ad:ce:36:bb:c7:36:12:c1:a5:
                    79:e9:a8:3d:1b:e3:99:33:68:9f:c7:9a:69:40:f9:
                    cc:68:3e:05:af:42:55:25:fa:d5:8b:7a:3c:8e:17:
                    1b:e1:cd:b1:d9:1c:f8:e1:1b:7e:68:1b:aa:cd:e5:
                    cc:3a:41:01:68:fe:a5:ef:37:ce:bc:1c:86:32:15:
                    cb:8b:77:18:e3:47:bc:4f:25:29:c7:c9:49:f1:2e:
                    5b:f6:a3:ef:c9:66:2e:b3:30:f3:11:e3:93:49:9f:
                    84:21:b3:2e:e3:37:ce:f6:ca:4e:29:94:7e:90:bb:
                    34:01:50:01:03:35:e0:5b:3b:d7:ce:9c:9f:05:c3:
                    78:5e:2d:14:f6:da:3b:1d:b3:7d:4b:1e:a9:01:56:
                    06:d9:e9:f8:a3:c0:7e:24:36:28:4f:bb:5a:34:5f:
                    b1:c3:72:8d:39:89:d2:40:2f:09:03:6c:6c:d5:11:
                    67:b3:f1:03:b5:38:48:50:b6:78:66:b6:9b:12:0a:
                    ef:0f:d5:76:20:61:c7:6c:4f:12:61:d6:d9:2b:6e:
                    7f:0c:23:c5:b8:db:c7:61:4b:e6:cd:7a:4c:72:d8:
                    24:1d:6e:d7:6c:ad:f2:da:7d:63:83:4a:e5:46:03:
                    47:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B0:C8:34:85:C5:D4:E0:3D:61:47:01:C1:42:05:DD:45:9C:A7:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/b11f0458-b61c-3e5a-9df7-55e9dc385389.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.211.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:aa:e9:bf:06:3e:79:a4:46:17:96:4f:50:6e:e4:4a:ac:1b:
         c7:74:ce:9a:89:93:2c:b6:7c:fa:92:8e:83:ee:4c:7d:f6:a0:
         bc:f9:73:6a:7e:06:d1:12:48:73:05:ba:b1:e4:de:94:4c:4a:
         ef:51:b6:ad:50:97:51:71:65:d8:d1:4d:87:b6:2a:c6:3c:6c:
         51:69:1e:e5:8b:c4:74:50:29:60:51:38:cf:34:56:68:5c:86:
         78:46:48:fb:c3:ed:62:35:11:af:8c:f8:9a:46:ac:df:fd:53:
         8d:ee:ce:81:c1:98:60:ec:df:56:3c:49:55:a9:80:84:49:b6:
         d8:c2:d5:00:ee:af:ea:e4:0e:fc:89:6b:a0:67:92:4f:ac:35:
         a3:3f:40:fa:0e:ea:74:8b:ea:7d:54:a6:dc:c9:6e:0f:78:d7:
         84:86:98:d0:b2:74:0a:0d:a5:64:dc:a5:b5:13:81:3d:3c:16:
         82:9c:00:9d:1a:b8:2e:14:fe:3e:5a:68:09:ef:e2:16:f7:bd:
         92:7b:ec:10:05:df:27:79:68:d4:72:22:b1:87:1d:11:f5:c9:
         63:be:57:dd:a6:c5:77:30:c0:98:22:75:8e:c2:8d:2c:b2:84:
         ab:ca:b3:f4:fb:55:f4:e7:58:9a:93:28:3d:49:20:b3:0f:6e:
         12:9c:53:a2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3oS1cMQ9heGnSLpwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm
M2VjMB4XDTI2MDUyMTEzMDAzMloXDTI2MDgxOTEzMDAzMlowLzEtMCsGA1UEAxMk
NGFlZDJhZjktMThmNi00NGI4LTkzNzAtMDRhNjE0MmFlMWE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqN0lTz0iMeZxCNQukdQSj+6yNletzja7xzYS
waV56ag9G+OZM2ifx5ppQPnMaD4Fr0JVJfrVi3o8jhcb4c2x2Rz44Rt+aBuqzeXM
OkEBaP6l7zfOvByGMhXLi3cY40e8TyUpx8lJ8S5b9qPvyWYuszDzEeOTSZ+EIbMu
4zfO9spOKZR+kLs0AVABAzXgWzvXzpyfBcN4Xi0U9to7HbN9Sx6pAVYG2en4o8B+
JDYoT7taNF+xw3KNOYnSQC8JA2xs1RFns/EDtThIULZ4ZrabEgrvD9V2IGHHbE8S
YdbZK25/DCPFuNvHYUvmzXpMctgkHW7XbK3y2n1jg0rlRgNHOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA2wyDSFxdTgPWFHAcFCBd1FnKcNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3
YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvYjExZjA0NTgtYjYxYy0z
ZTVhLTlkZjctNTVlOWRjMzg1Mzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5
MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0
ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm
ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dPOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB+q6b8GPnmkRheWT1Bu5EqsG8d0zpqJkyy2fPqSjoPuTH32oLz5c2p+
BtESSHMFurHk3pRMSu9Rtq1Ql1FxZdjRTYe2KsY8bFFpHuWLxHRQKWBROM80Vmhc
hnhGSPvD7WI1Ea+M+JpGrN/9U43uzoHBmGDs31Y8SVWpgIRJttjC1QDur+rkDvyJ
a6Bnkk+sNaM/QPoO6nSL6n1UptzJbg9414SGmNCydAoNpWTcpbUTgT08FoKcAJ0a
uC4U/j5aaAnv4hb3vZJ77BAF3yd5aNRyIrGHHRH1yWO+V92mxXcwwJgidY7CjSyy
hKvKs/T7VfTnWJqTKD1JILMPbhKcU6I=
-----END CERTIFICATE-----
Generated at Sun May 31 07:31:41 2026 by rpki-client