Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4821840e-861b-3983-b68e-37784e6a473a.roa
File:                     4821840e-861b-3983-b68e-37784e6a473a.roa (raw, json)
Hash identifier:          OPkPjLKRdz+L2Te40NIXm0imtuBq3XEEbO/bCBgCdMU=
Subject key identifier:   EC:FD:9C:DD:AE:21:C4:9A:3E:67:1B:19:C1:91:35:4C:3A:1A:A5:B3
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584F1F1F26A3EBCFD8F8C13C7300
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4821840e-861b-3983-b68e-37784e6a473a.roa
Signing time:             Wed 09 Sep 2026 21:08:16 +0000
ROA not before:           Wed 09 Sep 2026 21:08:16 +0000
ROA not after:            Tue 08 Dec 2026 22:05:22 +0000
asID:                     3949
IP address blocks:        206.50.0.0/22 maxlen: 24
                          206.166.136.0/22 maxlen: 24
                          206.184.20.0/22 maxlen: 24
                          206.239.0.0/22 maxlen: 24
                          207.55.140.0/22 maxlen: 24
                          207.67.144.0/22 maxlen: 24
                          207.67.148.0/22 maxlen: 24
                          207.71.80.0/22 maxlen: 24
                          207.91.100.0/22 maxlen: 24
                          207.111.72.0/22 maxlen: 24
                          207.137.84.0/22 maxlen: 24
                          207.152.104.0/22 maxlen: 24
                          207.198.132.0/22 maxlen: 24
                          207.241.24.0/22 maxlen: 24
                          207.241.84.0/22 maxlen: 24
                          207.241.88.0/22 maxlen: 24
                          209.70.244.0/22 maxlen: 24
                          209.107.72.0/22 maxlen: 24
                          209.168.120.0/22 maxlen: 24
                          209.189.36.0/22 maxlen: 24
                          209.212.224.0/22 maxlen: 24
                          209.227.88.0/22 maxlen: 24
                          216.42.140.0/22 maxlen: 24
                          216.44.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1f:1f:26:a3:eb:cf:d8:f8:c1:3c:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Sep  9 21:08:16 2026 GMT
            Not After : Dec  8 22:05:22 2026 GMT
        Subject: CN=dc94c848-355f-4d82-ad30-491af2943de3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8e:e1:9c:58:34:dd:e7:3d:64:f9:02:a7:4f:
                    96:9d:9f:bb:08:43:12:27:9d:c9:bf:05:7b:eb:30:
                    b3:a4:eb:af:30:4d:37:7a:8a:fd:94:96:9b:42:70:
                    b6:d2:56:a1:03:4d:9d:54:1c:9e:1c:81:ca:36:0c:
                    cd:cb:ff:2f:58:fe:c8:9e:5d:14:ce:b4:2b:89:b4:
                    d5:6d:f1:28:76:b0:bc:a5:b3:b3:3b:eb:06:43:a2:
                    ce:d6:42:e3:5d:cd:f5:64:38:3a:43:6c:04:9a:5a:
                    39:4b:2f:dc:a9:49:e7:00:2f:63:ae:3d:34:16:47:
                    57:1d:c0:5d:e0:ff:b2:9b:82:8c:87:fc:6c:f9:b6:
                    d4:b6:8b:93:77:be:48:b8:62:0e:fd:e4:d1:f1:84:
                    91:76:66:3b:02:3d:49:33:51:3a:0d:db:7e:37:24:
                    92:00:dc:a1:12:9b:db:16:6e:39:09:2f:f3:17:16:
                    78:a2:91:18:f3:a8:13:e7:47:13:74:eb:3d:aa:bc:
                    e1:05:43:3b:f3:f0:64:ce:ae:11:b3:90:1f:0f:81:
                    e1:6b:bb:8f:52:26:47:58:21:38:d3:d5:eb:b8:5e:
                    52:0e:f2:ea:d7:ef:fb:07:e4:32:08:b7:c2:0b:33:
                    2b:93:3e:0c:b0:14:b9:24:ec:52:57:3e:d8:2d:33:
                    d9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:FD:9C:DD:AE:21:C4:9A:3E:67:1B:19:C1:91:35:4C:3A:1A:A5:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4821840e-861b-3983-b68e-37784e6a473a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.50.0.0/22
                  206.166.136.0/22
                  206.184.20.0/22
                  206.239.0.0/22
                  207.55.140.0/22
                  207.67.144.0/21
                  207.71.80.0/22
                  207.91.100.0/22
                  207.111.72.0/22
                  207.137.84.0/22
                  207.152.104.0/22
                  207.198.132.0/22
                  207.241.24.0/22
                  207.241.84.0-207.241.91.255
                  209.70.244.0/22
                  209.107.72.0/22
                  209.168.120.0/22
                  209.189.36.0/22
                  209.212.224.0/22
                  209.227.88.0/22
                  216.42.140.0/22
                  216.44.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:e7:0d:3d:b7:56:4c:96:b9:e5:90:4a:5b:5e:53:3d:72:df:
         d9:d0:52:df:bb:e8:d9:9a:1b:7f:55:83:ce:2d:3c:be:d7:c2:
         9c:8d:ea:8c:21:4f:c0:3a:59:f9:c2:79:9a:0d:b8:b9:5f:11:
         b3:22:06:99:19:ad:b9:95:99:f0:95:0b:f8:d7:92:95:04:6d:
         8a:34:ae:0e:9d:e2:f5:dd:01:14:39:18:d2:e9:bd:5b:1e:e0:
         98:3b:31:31:ec:9f:04:b7:bf:b2:b4:7c:db:30:b6:c3:71:e8:
         9f:d0:5f:c0:66:58:42:a0:60:40:f0:12:b9:19:dc:85:3c:5d:
         45:d4:23:43:43:2c:03:ad:f9:67:55:d3:9d:ed:b8:d4:20:15:
         61:9e:31:6a:10:2b:f7:7b:e6:a0:23:da:35:79:7d:9d:01:0f:
         48:19:5a:8f:15:25:a1:20:04:4a:3f:b2:e3:d5:85:61:90:8e:
         8d:64:26:54:52:b1:ba:3e:d8:4d:f6:10:bc:1f:b0:ff:fb:45:
         e4:53:ad:88:22:4f:6d:6a:b4:0e:ab:9f:00:a5:91:82:77:46:
         1a:d7:31:0b:ae:51:2e:b7:aa:c9:a8:ae:a4:a1:10:af:af:aa:
         59:33:5a:6a:b5:17:d4:4f:4c:a5:fb:61:af:4e:5d:d0:24:c0:
         3d:84:9e:9b
-----BEGIN CERTIFICATE-----
MIIGzjCCBbagAwIBAgIUAQ0Mn0MoWE8fHyaj68/Y+ME8cwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI2MDkwOTIxMDgxNloXDTI2MTIwODIyMDUyMlowLzEtMCsGA1UEAxMk
ZGM5NGM4NDgtMzU1Zi00ZDgyLWFkMzAtNDkxYWYyOTQzZGUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAro7hnFg03ec9ZPkCp0+WnZ+7CEMSJ53JvwV7
6zCzpOuvME03eor9lJabQnC20lahA02dVByeHIHKNgzNy/8vWP7Inl0UzrQribTV
bfEodrC8pbOzO+sGQ6LO1kLjXc31ZDg6Q2wEmlo5Sy/cqUnnAC9jrj00FkdXHcBd
4P+ym4KMh/xs+bbUtouTd75IuGIO/eTR8YSRdmY7Aj1JM1E6Ddt+NySSANyhEpvb
Fm45CS/zFxZ4opEY86gT50cTdOs9qrzhBUM78/Bkzq4Rs5AfD4Hha7uPUiZHWCE4
09XruF5SDvLq1+/7B+QyCLfCCzMrkz4MsBS5JOxSVz7YLTPZ9QIDAQABo4ID4DCC
A9wwHQYDVR0OBBYEFOz9nN2uIcSaPmcbGcGRNUw6GqWzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNDgyMTg0MGUtODYxYi0z
OTgzLWI2OGUtMzc3ODRlNmE0NzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMIGpBggrBgEFBQcBBwEB/wSBmTCBljCBkwQCAAEwgYwDBALO
MgADBALOpogDBALOuBQDBALO7wADBALPN4wDBAPPQ5ADBALPR1ADBALPW2QDBALP
b0gDBALPiVQDBALPmGgDBALPxoQDBALP8RgwDAMEAs/xVAMEAs/xWAMEAtFG9AME
AtFrSAMEAtGoeAMEAtG9JAMEAtHU4AMEAtHjWAMEAtgqjAMEAtgsMDBUBgNVHSAB
Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy
aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB
AQAG5w09t1ZMlrnlkEpbXlM9ct/Z0FLfu+jZmht/VYPOLTy+18KcjeqMIU/AOln5
wnmaDbi5XxGzIgaZGa25lZnwlQv415KVBG2KNK4OneL13QEUORjS6b1bHuCYOzEx
7J8Et7+ytHzbMLbDceif0F/AZlhCoGBA8BK5GdyFPF1F1CNDQywDrflnVdOd7bjU
IBVhnjFqECv3e+agI9o1eX2dAQ9IGVqPFSWhIARKP7Lj1YVhkI6NZCZUUrG6PthN
9hC8H7D/+0XkU62IIk9tarQOq58ApZGCd0Ya1zELrlEut6rJqK6koRCvr6pZM1pq
tRfUT0yl+2GvTl3QJMA9hJ6b
-----END CERTIFICATE-----
Generated at Thu Sep 10 11:59:32 2026 by rpki-client