Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/377e4354-e598-4193-9abf-39ee1b89fc13/2b353968-5efa-351e-8488-659bf2f14591.roa
File:                     2b353968-5efa-351e-8488-659bf2f14591.roa (raw, json)
Hash identifier:          2x1MnlMKWhdevaVSEqK7S6exuNuOb69mPX8eMU1+fP0=
Subject key identifier:   20:55:A4:98:21:B3:47:5E:04:02:86:E0:30:DE:10:89:11:D8:54:F3
Certificate issuer:       /CN=377e4354-e598-4193-9abf-39ee1b89fc13
Certificate serial:       010D0C9F4328584F4F08032C65B6C9F18B1D1080
Authority key identifier: 2C:9A:B7:B9:A7:A5:D4:D5:20:EF:04:E9:EE:27:3E:1C:38:EC:DC:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/377e4354-e598-4193-9abf-39ee1b89fc13.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/377e4354-e598-4193-9abf-39ee1b89fc13/2b353968-5efa-351e-8488-659bf2f14591.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     400758
IP address blocks:        209.205.226.0/24 maxlen: 24
                          209.205.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/377e4354-e598-4193-9abf-39ee1b89fc13/377e4354-e598-4193-9abf-39ee1b89fc13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/377e4354-e598-4193-9abf-39ee1b89fc13/377e4354-e598-4193-9abf-39ee1b89fc13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/377e4354-e598-4193-9abf-39ee1b89fc13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:08:03:2c:65:b6:c9:f1:8b:1d:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=377e4354-e598-4193-9abf-39ee1b89fc13
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=e1cb44e3-c402-4565-b826-1dd4ee42420b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5b:86:27:9e:73:5a:e2:d5:b5:5f:80:99:3f:
                    f0:19:57:ce:af:40:d9:65:e9:5d:ef:f2:fd:51:ea:
                    33:2d:08:41:1a:9f:e6:3f:ac:97:86:64:6d:0e:ff:
                    e5:7d:43:d9:68:43:7f:23:45:7f:9b:94:05:7f:5c:
                    f5:21:7d:8f:11:df:2b:2b:42:83:1f:2f:3f:2b:1d:
                    d8:49:88:8f:9b:93:98:90:0a:c5:90:a0:ee:41:6a:
                    25:06:a9:dd:41:9c:ea:1d:47:49:91:81:cd:f4:de:
                    80:b1:e5:22:9d:0d:c3:31:5e:fc:34:a6:db:c7:d1:
                    db:e9:68:83:67:c3:09:d3:0a:16:75:3b:30:0e:64:
                    fe:00:2b:fd:52:8c:37:78:a4:fd:62:3c:28:07:e2:
                    1d:d1:2d:fc:31:ff:4c:3a:79:05:92:08:da:09:2e:
                    38:74:46:c0:7b:90:8d:5c:24:77:c9:73:37:46:2f:
                    cb:c1:ab:05:97:46:46:43:49:77:c7:4d:0f:da:5b:
                    f9:be:ae:84:e2:45:6d:d6:52:d4:6a:4a:9a:ce:71:
                    93:46:16:6d:bd:b2:31:e9:1d:02:64:ca:ec:12:51:
                    3f:22:39:f3:06:7c:60:94:71:96:c7:55:cc:66:19:
                    70:71:3b:00:5f:cd:bf:61:d6:65:28:30:8f:f6:5e:
                    1a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:55:A4:98:21:B3:47:5E:04:02:86:E0:30:DE:10:89:11:D8:54:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/377e4354-e598-4193-9abf-39ee1b89fc13/2b353968-5efa-351e-8488-659bf2f14591.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/377e4354-e598-4193-9abf-39ee1b89fc13/377e4354-e598-4193-9abf-39ee1b89fc13.crl

            X509v3 Authority Key Identifier:
                keyid:2C:9A:B7:B9:A7:A5:D4:D5:20:EF:04:E9:EE:27:3E:1C:38:EC:DC:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/377e4354-e598-4193-9abf-39ee1b89fc13.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.205.226.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:99:d3:62:e4:4b:b7:41:fb:ad:33:2e:dc:3b:7a:60:2e:a7:
         dc:9a:5e:9a:b3:18:07:f5:b3:d3:fe:bf:8c:73:f4:de:cc:7b:
         bf:44:11:12:b5:30:dc:ec:fd:f1:b1:16:54:71:9d:20:46:ce:
         e4:61:93:32:67:95:6d:48:c6:3a:ff:3c:02:78:98:d1:2a:e2:
         0a:78:f8:da:5b:4b:2b:a7:93:a1:c0:9c:05:c8:b8:3c:6c:ef:
         d6:aa:18:78:fb:3c:40:88:3a:14:88:f0:91:ae:c3:56:d7:b5:
         d5:13:db:52:18:08:90:e1:7c:72:99:41:00:a8:71:be:aa:40:
         d6:46:d1:27:f1:02:c0:2d:98:f8:fe:73:b9:42:db:f6:40:4a:
         d4:3e:0c:00:e6:2f:ed:0e:5e:89:72:02:fb:94:d2:1a:13:25:
         3f:cc:75:6e:87:51:c3:1f:7a:f4:ac:88:76:08:99:5a:ef:6d:
         1e:b3:ab:b4:f5:5f:d9:27:ab:aa:3e:48:e7:d9:97:c7:58:6c:
         f2:54:0b:44:56:06:c7:a4:5d:23:f6:5d:1d:af:ee:f8:10:41:
         19:27:4a:99:bf:6b:86:cd:3d:8c:b4:97:61:7f:6f:fe:81:62:
         fe:99:94:47:0e:85:24:81:6a:97:e6:6d:f9:52:b3:42:52:e8:
         ac:a4:16:86
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9PCAMsZbbJ8YsdEIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzc3ZTQzNTQtZTU5OC00MTkzLTlhYmYtMzllZTFiODlm
YzEzMB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk
ZTFjYjQ0ZTMtYzQwMi00NTY1LWI4MjYtMWRkNGVlNDI0MjBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFuGJ55zWuLVtV+AmT/wGVfOr0DZZeld7/L9
UeozLQhBGp/mP6yXhmRtDv/lfUPZaEN/I0V/m5QFf1z1IX2PEd8rK0KDHy8/Kx3Y
SYiPm5OYkArFkKDuQWolBqndQZzqHUdJkYHN9N6AseUinQ3DMV78NKbbx9Hb6WiD
Z8MJ0woWdTswDmT+ACv9Uow3eKT9YjwoB+Id0S38Mf9MOnkFkgjaCS44dEbAe5CN
XCR3yXM3Ri/LwasFl0ZGQ0l3x00P2lv5vq6E4kVt1lLUakqaznGTRhZtvbIx6R0C
ZMrsElE/IjnzBnxglHGWx1XMZhlwcTsAX82/YdZlKDCP9l4a/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCBVpJghs0deBAKG4DDeEIkR2FTzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zNzdl
NDM1NC1lNTk4LTQxOTMtOWFiZi0zOWVlMWI4OWZjMTMvMmIzNTM5NjgtNWVmYS0z
NTFlLTg0ODgtNjU5YmYyZjE0NTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMzc3ZTQzNTQtZTU5OC00MTkzLTlh
YmYtMzllZTFiODlmYzEzLzM3N2U0MzU0LWU1OTgtNDE5My05YWJmLTM5ZWUxYjg5
ZmMxMy5jcmwwHwYDVR0jBBgwFoAULJq3uael1NUg7wTp7ic+HDjs3O4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8zNzdlNDM1NC1lNTk4LTQxOTMtOWFiZi0zOWVl
MWI4OWZjMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0c3iMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACyZ02LkS7dB+60zLtw7emAup9yaXpqzGAf1s9P+v4xz9N7Me79EERK1
MNzs/fGxFlRxnSBGzuRhkzJnlW1Ixjr/PAJ4mNEq4gp4+NpbSyunk6HAnAXIuDxs
79aqGHj7PECIOhSI8JGuw1bXtdUT21IYCJDhfHKZQQCocb6qQNZG0SfxAsAtmPj+
c7lC2/ZAStQ+DADmL+0OXolyAvuU0hoTJT/MdW6HUcMfevSsiHYImVrvbR6zq7T1
X9knq6o+SOfZl8dYbPJUC0RWBsekXSP2XR2v7vgQQRknSpm/a4bNPYy0l2F/b/6B
Yv6ZlEcOhSSBapfmbflSs0JS6KykFoY=
-----END CERTIFICATE-----
Generated at Wed Oct 14 08:56:32 2026 by rpki-client