Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f4792422-8cbd-3c89-adc0-9f217282c19b.roa
File:                     f4792422-8cbd-3c89-adc0-9f217282c19b.roa (raw, json)
Hash identifier:          g4zxkSonGeiIKjVZJLrW4dtf4z45+13/TOXbPCEVHqo=
Subject key identifier:   FF:F0:40:7B:A0:C1:DC:C4:68:E8:E9:B7:A7:B3:39:6E:E1:CA:56:87
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584EE42342DA1CF61005BFA40680
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f4792422-8cbd-3c89-adc0-9f217282c19b.roa
Signing time:             Wed 19 Aug 2026 18:03:52 +0000
ROA not before:           Wed 19 Aug 2026 18:03:52 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     12204
IP address blocks:        204.203.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:23:42:da:1c:f6:10:05:bf:a4:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Aug 19 18:03:52 2026 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=bd6861f1-1f2e-4a26-bb8e-5855b3d55f95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:de:31:5c:4d:f8:bf:f3:cb:7e:b5:8f:cb:87:
                    1b:91:3a:c8:6b:1b:24:0b:4a:c4:45:cf:a6:f7:d6:
                    b9:ab:10:5d:ec:5e:37:cc:b9:02:10:a0:2c:3f:3b:
                    61:ff:f1:5a:7c:f2:cf:f7:e1:3d:c3:d9:ac:ba:5f:
                    e6:f5:e9:57:e0:7f:9f:3e:53:91:d5:fd:60:50:8b:
                    75:00:c9:f6:31:c0:95:a4:cd:07:16:c5:85:6f:97:
                    d8:c5:af:78:a3:85:f0:74:03:a9:6b:3a:43:b3:df:
                    03:ab:04:1e:6c:41:ec:20:85:08:62:af:3f:5d:90:
                    2e:0c:15:bd:fe:49:1b:99:14:ac:1d:ca:74:d2:b5:
                    20:ba:b6:21:36:d3:35:11:22:48:5f:6c:64:fc:50:
                    2d:18:b6:fd:31:d4:2c:06:d4:1f:4e:45:0f:4a:06:
                    5a:1f:52:1b:6b:7f:57:5d:9a:d5:be:46:0c:f7:1d:
                    31:c6:c3:06:e4:2d:3a:f9:a5:7d:c3:43:44:75:51:
                    f8:70:36:37:87:c5:83:9b:f6:1a:ac:2e:f4:5d:53:
                    e1:08:18:d9:4c:f7:18:f1:a5:17:9f:89:78:35:d9:
                    1f:dd:d1:f0:1e:fb:fe:6e:cc:84:a4:c7:97:8f:0c:
                    0a:80:98:fa:ab:49:4d:41:e9:ea:e5:c0:14:46:db:
                    0f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:F0:40:7B:A0:C1:DC:C4:68:E8:E9:B7:A7:B3:39:6E:E1:CA:56:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f4792422-8cbd-3c89-adc0-9f217282c19b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.203.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:62:6c:ca:5c:99:f2:37:f9:ee:ad:ee:35:e8:cb:80:3a:60:
         30:0f:98:71:af:38:b1:88:98:d3:a5:c9:0b:20:c9:93:d6:39:
         0b:99:51:66:2b:c6:ec:91:67:eb:a4:5b:2e:41:b9:8e:6d:fc:
         ed:a1:97:5c:4e:e9:71:41:34:62:6f:8a:be:44:68:eb:d9:32:
         17:4c:2d:47:0b:78:2a:59:35:53:02:8b:9b:ad:dd:51:ea:46:
         bb:50:af:cc:18:ed:07:70:3c:7b:07:b6:27:74:0c:e1:d7:56:
         e1:aa:10:3b:c6:34:30:97:15:46:56:91:ed:8c:cb:20:bf:12:
         ae:32:17:4d:09:7e:fd:6a:4c:dd:3f:40:6d:f1:f9:d2:2a:55:
         f8:27:9e:11:b7:a6:07:d7:0a:96:27:79:62:2c:e7:29:5b:32:
         25:dd:21:23:37:f3:9c:cf:e6:32:7d:dc:5c:70:f7:cd:cd:a3:
         19:a6:e6:49:ad:b4:02:71:02:71:e9:18:c1:5f:34:56:d3:e1:
         80:94:cb:53:5b:8e:93:b3:51:e9:83:04:e5:7a:59:46:3e:6e:
         bc:c7:4f:96:ac:d7:09:14:61:09:a8:6f:89:08:7d:a6:e0:96:
         fc:67:b7:84:cb:37:22:4e:93:34:6d:c7:12:d8:2f:24:ee:ff:
         cd:8c:27:6d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kI0LaHPYQBb+kBoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI2MDgxOTE4MDM1MloXDTI4MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk
YmQ2ODYxZjEtMWYyZS00YTI2LWJiOGUtNTg1NWIzZDU1Zjk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyd4xXE34v/PLfrWPy4cbkTrIaxskC0rERc+m
99a5qxBd7F43zLkCEKAsPzth//FafPLP9+E9w9msul/m9elX4H+fPlOR1f1gUIt1
AMn2McCVpM0HFsWFb5fYxa94o4XwdAOpazpDs98DqwQebEHsIIUIYq8/XZAuDBW9
/kkbmRSsHcp00rUgurYhNtM1ESJIX2xk/FAtGLb9MdQsBtQfTkUPSgZaH1Iba39X
XZrVvkYM9x0xxsMG5C06+aV9w0NEdVH4cDY3h8WDm/YarC70XVPhCBjZTPcY8aUX
n4l4Ndkf3dHwHvv+bsyEpMeXjwwKgJj6q0lNQenq5cAURtsP6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP/wQHugwdzEaOjpt6ezOW7hylaHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZjQ3OTI0MjItOGNiZC0z
Yzg5LWFkYzAtOWYyMTcyODJjMTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMtcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIdibMpcmfI3+e6t7jXoy4A6YDAPmHGvOLGImNOlyQsgyZPWOQuZUWYr
xuyRZ+ukWy5BuY5t/O2hl1xO6XFBNGJvir5EaOvZMhdMLUcLeCpZNVMCi5ut3VHq
RrtQr8wY7QdwPHsHtid0DOHXVuGqEDvGNDCXFUZWke2MyyC/Eq4yF00Jfv1qTN0/
QG3x+dIqVfgnnhG3pgfXCpYneWIs5ylbMiXdISM385zP5jJ93Fxw983Noxmm5kmt
tAJxAnHpGMFfNFbT4YCUy1NbjpOzUemDBOV6WUY+brzHT5as1wkUYQmob4kIfabg
lvxnt4TLNyJOkzRtxxLYLyTu/82MJ20=
-----END CERTIFICATE-----
Generated at Thu Sep 17 16:44:43 2026 by rpki-client