Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/671b1b1d-765b-3c0c-b60a-2368faebf391.roa
File:                     671b1b1d-765b-3c0c-b60a-2368faebf391.roa (raw, json)
Hash identifier:          KyouLVCFzK8/2CvhJBwsdRwtjFlDPyZdftmH3or9E8Y=
Subject key identifier:   FE:BD:91:7D:28:E4:2C:DA:C4:35:5C:E0:DC:26:0B:5B:79:D5:02:7F
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584EE423438ADAF57504F4CA2E80
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/671b1b1d-765b-3c0c-b60a-2368faebf391.roa
Signing time:             Wed 19 Aug 2026 18:03:52 +0000
ROA not before:           Wed 19 Aug 2026 18:03:52 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     2914
IP address blocks:        207.206.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:23:43:8a:da:f5:75:04:f4:ca:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Aug 19 18:03:52 2026 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=63f597fd-7a0b-41ef-a023-a43482c7a874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f2:e2:0e:57:0f:0d:19:04:a7:09:29:be:64:
                    cc:8d:3f:e6:33:66:85:36:04:17:4e:07:7f:9a:f3:
                    8f:12:24:b6:fb:b6:cb:73:c5:0d:a5:68:c7:f8:dd:
                    94:c3:c0:b8:05:32:36:f0:87:06:05:16:70:0a:5e:
                    01:03:25:e9:25:1f:9a:34:14:3d:ec:7b:c3:f2:a6:
                    3a:2d:40:f2:4c:a6:91:8c:09:6a:fe:17:26:c7:58:
                    bf:de:44:65:60:d1:e8:23:d2:6f:1b:d5:d1:1d:cf:
                    ab:72:5c:44:5c:53:8c:b5:fc:5e:c6:54:cb:3a:42:
                    3d:68:4e:90:72:3e:65:08:b8:42:fa:77:35:c2:02:
                    e1:db:4f:c4:07:fa:6d:f8:16:78:34:d8:67:05:32:
                    6c:b5:81:91:04:88:a7:37:43:11:e7:db:26:47:0b:
                    d6:a8:43:58:99:7d:cf:42:05:93:23:da:27:32:28:
                    df:7f:a9:89:4f:ba:6c:fa:20:6a:f3:a0:55:9c:7a:
                    49:fe:b3:ec:98:7e:74:03:88:52:1a:be:0f:72:3d:
                    e5:36:22:35:33:3c:1c:16:ca:69:bb:67:ea:0c:8a:
                    cc:6f:9b:c5:01:b3:97:45:d5:73:a2:a8:2c:de:47:
                    62:14:ca:fe:80:53:1f:4e:fb:29:d0:13:24:d6:89:
                    1a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:BD:91:7D:28:E4:2C:DA:C4:35:5C:E0:DC:26:0B:5B:79:D5:02:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/671b1b1d-765b-3c0c-b60a-2368faebf391.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.206.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:34:b5:87:56:e2:81:d4:70:2b:23:d6:7f:e6:5d:df:3e:51:
         79:29:cc:be:5e:61:97:d6:f1:99:1c:db:d4:d5:63:82:34:59:
         93:5b:ff:ee:84:c5:d7:bd:28:a2:e5:2a:74:8c:b4:9c:89:37:
         5d:41:17:8f:e3:1b:7e:23:4c:58:c6:2a:d0:c0:f8:a1:53:b2:
         83:bb:f6:12:9e:3f:77:87:60:d0:63:69:3b:43:da:7b:44:cb:
         9e:c0:b2:4c:5b:7a:64:5b:e1:14:85:8a:e1:9d:a8:93:f7:71:
         18:b8:a4:b0:3b:13:e7:d9:fe:37:d4:f4:c3:72:86:34:c0:08:
         90:4b:92:2a:10:71:5d:5e:cb:29:24:53:4a:71:ff:ec:33:e5:
         96:95:b2:4e:15:79:fa:52:c0:74:50:05:06:aa:46:e0:55:d5:
         35:a3:00:df:8d:db:84:f5:a0:6d:c3:d0:56:17:0c:1f:11:9b:
         a2:06:1a:5c:b6:08:69:50:d9:5e:c6:f8:3e:61:1a:d1:c1:99:
         28:1b:27:4b:bf:89:dc:e6:f5:67:78:97:4a:c3:9d:43:44:c2:
         3d:a7:21:d7:e6:97:7c:c7:ad:f4:d8:12:eb:3a:5b:aa:5e:67:
         cb:b0:d3:b2:fd:44:d4:43:6c:35:66:37:69:3e:21:f5:5e:2a:
         d9:02:9b:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kI0OK2vV1BPTKLoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI2MDgxOTE4MDM1MloXDTI4MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk
NjNmNTk3ZmQtN2EwYi00MWVmLWEwMjMtYTQzNDgyYzdhODc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfLiDlcPDRkEpwkpvmTMjT/mM2aFNgQXTgd/
mvOPEiS2+7bLc8UNpWjH+N2Uw8C4BTI28IcGBRZwCl4BAyXpJR+aNBQ97HvD8qY6
LUDyTKaRjAlq/hcmx1i/3kRlYNHoI9JvG9XRHc+rclxEXFOMtfxexlTLOkI9aE6Q
cj5lCLhC+nc1wgLh20/EB/pt+BZ4NNhnBTJstYGRBIinN0MR59smRwvWqENYmX3P
QgWTI9onMijff6mJT7ps+iBq86BVnHpJ/rPsmH50A4hSGr4Pcj3lNiI1MzwcFspp
u2fqDIrMb5vFAbOXRdVzoqgs3kdiFMr+gFMfTvsp0BMk1okalwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP69kX0o5CzaxDVc4NwmC1t51QJ/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNjcxYjFiMWQtNzY1Yi0z
YzBjLWI2MGEtMjM2OGZhZWJmMzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHz84AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFg0tYdW4oHUcCsj1n/mXd8+UXkpzL5eYZfW8Zkc29TVY4I0WZNb/+6E
xde9KKLlKnSMtJyJN11BF4/jG34jTFjGKtDA+KFTsoO79hKeP3eHYNBjaTtD2ntE
y57AskxbemRb4RSFiuGdqJP3cRi4pLA7E+fZ/jfU9MNyhjTACJBLkioQcV1eyykk
U0px/+wz5ZaVsk4VefpSwHRQBQaqRuBV1TWjAN+N24T1oG3D0FYXDB8Rm6IGGly2
CGlQ2V7G+D5hGtHBmSgbJ0u/idzm9Wd4l0rDnUNEwj2nIdfml3zHrfTYEus6W6pe
Z8uw07L9RNRDbDVmN2k+IfVeKtkCm+k=
-----END CERTIFICATE-----
Generated at Thu Sep 17 16:50:38 2026 by rpki-client