Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c9b983e4-53fd-35ce-9154-f48c3ac0944c.roa
File:                     c9b983e4-53fd-35ce-9154-f48c3ac0944c.roa (raw, json)
Hash identifier:          CsNSs1ePy2K/2fbi8i4HYn8mi2lQZHIq2Xq62bsKmlE=
Subject key identifier:   28:72:F1:E5:89:2A:A2:CC:87:1E:14:F1:8F:EC:AF:E1:4A:C3:80:A8
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584F1F2129378E2B775A9E8D4280
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c9b983e4-53fd-35ce-9154-f48c3ac0944c.roa
Signing time:             Wed 09 Sep 2026 21:12:19 +0000
ROA not before:           Wed 09 Sep 2026 21:12:19 +0000
ROA not after:            Tue 08 Dec 2026 22:12:19 +0000
asID:                     214432
IP address blocks:        206.50.0.0/22 maxlen: 24
                          206.166.136.0/22 maxlen: 24
                          206.184.20.0/22 maxlen: 24
                          206.239.0.0/22 maxlen: 24
                          207.55.140.0/22 maxlen: 24
                          207.67.144.0/22 maxlen: 24
                          207.67.148.0/22 maxlen: 24
                          207.71.80.0/22 maxlen: 24
                          207.91.100.0/22 maxlen: 24
                          207.111.72.0/22 maxlen: 24
                          207.137.84.0/22 maxlen: 24
                          207.152.104.0/22 maxlen: 24
                          207.198.132.0/22 maxlen: 24
                          207.241.24.0/22 maxlen: 24
                          207.241.84.0/22 maxlen: 24
                          207.241.88.0/22 maxlen: 24
                          209.70.244.0/22 maxlen: 24
                          209.107.72.0/22 maxlen: 24
                          209.168.120.0/22 maxlen: 24
                          209.189.36.0/22 maxlen: 24
                          209.212.224.0/22 maxlen: 24
                          209.227.88.0/22 maxlen: 24
                          216.42.140.0/22 maxlen: 24
                          216.44.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1f:21:29:37:8e:2b:77:5a:9e:8d:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Sep  9 21:12:19 2026 GMT
            Not After : Dec  8 22:12:19 2026 GMT
        Subject: CN=84942fd7-de29-4044-9f74-156138cf5ac8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:dc:e4:cf:b6:42:bc:23:05:f3:dc:bf:b2:0a:
                    90:f8:68:ff:99:77:82:b2:4e:c1:6c:a4:0b:b9:19:
                    20:0d:05:1e:20:3b:ed:9c:89:72:1d:0a:af:c0:22:
                    3b:86:66:7f:ec:72:45:64:c3:b0:23:31:ec:80:58:
                    ff:ff:34:01:2e:aa:61:5d:10:93:c5:fc:1d:f6:da:
                    06:8d:c9:65:1d:ff:fd:d5:32:58:8f:c9:67:0c:f0:
                    34:17:f4:37:5c:ef:36:38:74:02:38:7f:65:b6:e2:
                    0e:5c:ae:16:04:e1:c0:53:be:ca:68:53:76:89:d8:
                    94:12:d7:fd:76:3b:55:03:dd:e6:0a:65:3b:7d:8e:
                    f4:1b:bf:87:e2:9e:36:ec:ca:df:39:b5:1e:8c:4a:
                    fc:f2:83:4e:89:97:1c:8d:99:fe:b3:0f:38:2e:25:
                    52:eb:ef:9c:fd:0f:68:ca:53:43:50:62:27:33:4d:
                    b5:15:69:1b:a2:75:78:76:7c:5b:0e:d4:36:7f:e7:
                    bc:9f:c8:62:c8:76:ef:f4:26:2e:4d:77:97:0f:19:
                    0d:f0:0a:f2:a5:c6:d7:f0:c8:7c:a0:9c:11:c0:4e:
                    73:3f:b5:3c:e6:47:cf:4a:b0:65:bc:ad:ac:3c:b7:
                    29:06:a5:57:10:38:f2:62:ab:c2:36:57:42:ca:10:
                    7a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:72:F1:E5:89:2A:A2:CC:87:1E:14:F1:8F:EC:AF:E1:4A:C3:80:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c9b983e4-53fd-35ce-9154-f48c3ac0944c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.50.0.0/22
                  206.166.136.0/22
                  206.184.20.0/22
                  206.239.0.0/22
                  207.55.140.0/22
                  207.67.144.0/21
                  207.71.80.0/22
                  207.91.100.0/22
                  207.111.72.0/22
                  207.137.84.0/22
                  207.152.104.0/22
                  207.198.132.0/22
                  207.241.24.0/22
                  207.241.84.0-207.241.91.255
                  209.70.244.0/22
                  209.107.72.0/22
                  209.168.120.0/22
                  209.189.36.0/22
                  209.212.224.0/22
                  209.227.88.0/22
                  216.42.140.0/22
                  216.44.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:93:1e:f9:12:90:99:8b:a8:b5:90:cb:42:39:d1:ea:6e:30:
         86:07:50:0b:ba:83:6f:bb:f5:f4:c9:07:5b:b0:9a:ac:ee:22:
         42:d8:e2:ea:38:3e:93:08:ba:ae:5a:17:0b:14:d4:1a:f3:3e:
         e8:64:b3:38:78:73:62:61:6b:37:7f:d9:d4:b9:61:a0:7d:67:
         ba:79:84:20:4a:64:52:15:79:56:42:38:1b:1b:f2:57:e4:25:
         d5:7d:fb:0e:2f:0d:be:4e:19:10:7f:3d:ca:76:b3:c9:a1:c9:
         7e:5a:ff:bb:50:06:96:be:17:62:c4:29:65:53:c7:88:69:66:
         67:72:a7:29:12:20:1f:f9:c8:2b:01:97:54:78:e4:2e:8e:23:
         7c:ad:6f:71:7b:56:a9:23:e7:f8:30:7b:21:85:f9:4b:7e:1a:
         3a:80:0f:61:26:07:44:5b:2e:5b:ac:d5:c9:3e:3d:a4:ce:b2:
         3a:fd:32:22:fd:84:5d:c5:0c:d0:b3:8c:90:0a:02:2b:38:49:
         e4:a0:ab:ec:c6:ce:10:f7:8f:bd:3f:6f:76:3b:7b:b0:04:d6:
         ff:8e:6c:31:ef:1e:a0:e8:dc:90:34:8a:6a:5c:6d:9c:8f:00:
         1f:2f:4e:c3:ad:09:83:48:51:ac:65:3f:61:a7:f7:89:8e:97:
         ce:e5:e7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:34:05 2026 by rpki-client