Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/b0471c4d-7069-3b3d-a127-9be0c0a65f5b.roa
File:                     b0471c4d-7069-3b3d-a127-9be0c0a65f5b.roa (raw, json)
Hash identifier:          ZCMTpUhmRJh2lV3iWBk6VwVzGHxRm+gNB1kYBCBvY+0=
Subject key identifier:   7D:47:B5:3C:EC:E6:88:77:AB:9C:F3:E7:93:8F:8D:FB:A7:C3:3D:AD
Certificate issuer:       /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial:       010D0C9F4328584E2AD4501D1B38928695B9CF40
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/b0471c4d-7069-3b3d-a127-9be0c0a65f5b.roa
Signing time:             Sun 14 Jun 2026 09:00:11 +0000
ROA not before:           Sun 14 Jun 2026 09:00:11 +0000
ROA not after:            Sat 12 Sep 2026 09:00:11 +0000
asID:                     42
IP address blocks:        206.108.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Jun 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2a:d4:50:1d:1b:38:92:86:95:b9:cf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
        Validity
            Not Before: Jun 14 09:00:11 2026 GMT
            Not After : Sep 12 09:00:11 2026 GMT
        Subject: CN=9b4e7dc9-4ea4-4696-a33e-5b826227f6ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e8:b9:6b:b5:50:a0:72:64:c8:9d:eb:8a:81:
                    64:82:f5:64:55:9f:a6:84:46:4d:d5:d0:0e:48:13:
                    23:07:c0:14:f2:5c:96:ae:2b:b6:47:ae:73:25:b7:
                    30:74:1c:39:63:8b:2f:66:7e:19:d0:2d:c1:88:ca:
                    51:ad:ac:6c:12:a6:be:56:55:27:59:a7:97:a5:80:
                    85:e2:67:18:ef:91:0f:0f:7f:4e:07:39:a7:ba:82:
                    59:b5:c2:00:bc:4c:a9:35:a5:2d:d4:a1:0f:32:a9:
                    d0:21:2a:f5:4d:18:72:18:76:cc:9f:65:8b:fd:b4:
                    89:8e:8b:cb:a0:e0:eb:9d:a6:cd:65:e4:27:ca:2d:
                    bf:ec:c2:d2:87:79:e6:16:b4:7b:92:f3:7d:50:53:
                    3a:51:59:0c:cb:7e:10:5c:49:c1:a3:90:5e:e7:12:
                    01:6f:39:aa:9b:48:74:ba:47:38:d8:02:bb:e0:94:
                    0b:ea:55:00:66:09:ec:71:b4:bf:70:6d:9e:c0:51:
                    ab:a2:1e:22:86:2e:45:91:81:26:5c:b1:a5:3e:d2:
                    30:e9:75:40:3e:d3:36:27:ea:cd:3d:67:2a:c1:94:
                    2a:19:0d:db:0e:49:48:ff:01:e9:d2:7c:21:ae:17:
                    cf:34:58:a5:fb:69:89:9d:71:05:86:62:db:81:81:
                    8c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:47:B5:3C:EC:E6:88:77:AB:9C:F3:E7:93:8F:8D:FB:A7:C3:3D:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/b0471c4d-7069-3b3d-a127-9be0c0a65f5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl

            X509v3 Authority Key Identifier:
                keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.108.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:54:d3:a9:5a:5f:38:1d:38:0c:ee:d8:4f:13:99:fe:4a:5d:
         1d:af:65:8a:db:5c:8d:7e:f9:60:ee:3e:2a:e2:d0:af:29:c2:
         11:bf:e5:27:a1:dc:3d:55:db:c5:eb:2e:1c:b0:84:64:18:10:
         d5:8e:d9:b8:07:e5:9f:8e:bf:8f:e5:0a:85:f7:45:da:43:e7:
         55:e4:3b:2d:7b:88:f2:40:06:b6:97:a8:10:a0:af:9c:6d:c9:
         4d:60:ac:b2:12:3b:dd:28:96:f7:ec:fb:ad:6c:ca:57:30:99:
         01:3f:b7:72:68:e5:65:a3:c6:60:4f:85:93:ba:47:fb:20:ec:
         d9:aa:be:43:57:3f:49:b8:a3:dd:05:c0:3a:b6:7e:87:94:19:
         97:8b:07:c2:7a:b8:4f:0c:e7:87:32:ae:ce:3d:ab:97:2c:e0:
         ac:d6:4f:69:44:06:ff:05:11:00:14:7b:00:f1:74:c6:22:ec:
         78:7c:ab:e3:f6:d9:85:aa:bb:68:4d:15:3d:f3:5c:f6:44:28:
         ae:7b:77:80:88:c7:a0:5a:2d:0a:76:21:b2:57:3b:77:20:bd:
         81:e9:c2:76:62:a7:22:ff:3a:a4:72:e7:92:95:2e:cd:22:eb:
         e1:58:ad:f7:2c:a7:99:d7:83:e3:9c:37:95:8f:4c:c5:da:f4:
         e9:28:63:89
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4q1FAdGziShpW5z0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzRiMjQ2NDMtZDZkNS00ZDJhLWI4ODUtODMxNjBkZWM3
MTAzMB4XDTI2MDYxNDA5MDAxMVoXDTI2MDkxMjA5MDAxMVowLzEtMCsGA1UEAxMk
OWI0ZTdkYzktNGVhNC00Njk2LWEzM2UtNWI4MjYyMjdmNmNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOi5a7VQoHJkyJ3rioFkgvVkVZ+mhEZN1dAO
SBMjB8AU8lyWriu2R65zJbcwdBw5Y4svZn4Z0C3BiMpRraxsEqa+VlUnWaeXpYCF
4mcY75EPD39OBzmnuoJZtcIAvEypNaUt1KEPMqnQISr1TRhyGHbMn2WL/bSJjovL
oODrnabNZeQnyi2/7MLSh3nmFrR7kvN9UFM6UVkMy34QXEnBo5Be5xIBbzmqm0h0
ukc42AK74JQL6lUAZgnscbS/cG2ewFGroh4ihi5FkYEmXLGlPtIw6XVAPtM2J+rN
PWcqwZQqGQ3bDklI/wHp0nwhrhfPNFil+2mJnXEFhmLbgYGMYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH1HtTzs5oh3q5zz55OPjfunwz2tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIy
NDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2MGRlYzcxMDMvYjA0NzFjNGQtNzA2OS0z
YjNkLWExMjctOWJlMGMwYTY1ZjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzRiMjQ2NDMtZDZkNS00ZDJhLWI4
ODUtODMxNjBkZWM3MTAzLzc0YjI0NjQzLWQ2ZDUtNGQyYS1iODg1LTgzMTYwZGVj
NzEwMy5jcmwwHwYDVR0jBBgwFoAUMkgsJnRbWQDk0HgSfvSqropOVxkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIyNDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2
MGRlYzcxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzmxxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGZU06laXzgdOAzu2E8Tmf5KXR2vZYrbXI1++WDuPiri0K8pwhG/5Seh
3D1V28XrLhywhGQYENWO2bgH5Z+Ov4/lCoX3RdpD51XkOy17iPJABraXqBCgr5xt
yU1grLISO90olvfs+61sylcwmQE/t3Jo5WWjxmBPhZO6R/sg7NmqvkNXP0m4o90F
wDq2foeUGZeLB8J6uE8M54cyrs49q5cs4KzWT2lEBv8FEQAUewDxdMYi7Hh8q+P2
2YWqu2hNFT3zXPZEKK57d4CIx6BaLQp2IbJXO3cgvYHpwnZipyL/OqRy55KVLs0i
6+FYrfcsp5nXg+OcN5WPTMXa9OkoY4k=
-----END CERTIFICATE-----
Generated at Fri Jun 19 04:18:09 2026 by rpki-client