Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/b9d42abc-2171-3691-94bc-daa4312c4aa6.roa
File:                     b9d42abc-2171-3691-94bc-daa4312c4aa6.roa (raw, json)
Hash identifier:          0Kdl2VdZ6hBtD/RqWUb2MinNLK8p1iJvxOB1DwK1Af4=
Subject key identifier:   A3:62:F8:D5:D6:41:7B:61:93:5D:56:95:BC:5A:F8:4E:E6:A8:12:0B
Certificate issuer:       /CN=7daddf1f-a775-44aa-b3ca-3520f73993ed
Certificate serial:       010D0C9F4328584FA85DF90A27A099F6483A5D38
Authority key identifier: 32:50:48:99:D0:D8:21:79:01:23:50:DE:2F:A2:3C:5A:5B:1A:D9:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/b9d42abc-2171-3691-94bc-daa4312c4aa6.roa
Signing time:             Thu 29 Oct 2026 01:00:12 +0000
ROA not before:           Thu 29 Oct 2026 01:00:12 +0000
ROA not after:            Wed 27 Jan 2027 02:00:12 +0000
asID:                     26380
IP address blocks:        205.233.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/7daddf1f-a775-44aa-b3ca-3520f73993ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/7daddf1f-a775-44aa-b3ca-3520f73993ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a8:5d:f9:0a:27:a0:99:f6:48:3a:5d:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7daddf1f-a775-44aa-b3ca-3520f73993ed
        Validity
            Not Before: Oct 29 01:00:12 2026 GMT
            Not After : Jan 27 02:00:12 2027 GMT
        Subject: CN=0f84e7a9-96cb-4c72-b202-226b6be3add9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4f:24:96:0f:30:aa:2b:e3:7c:89:6c:5e:76:
                    5e:79:28:cd:0a:5f:9d:5d:a2:3a:6b:1b:e2:ee:a4:
                    90:0e:03:5f:b6:5f:8b:b8:ed:4f:20:d7:69:10:61:
                    c4:d9:03:00:f6:59:99:14:c4:40:f4:67:55:0f:ac:
                    3f:04:b2:a0:19:ad:65:21:60:c8:a9:21:3e:dd:1e:
                    0c:3f:43:c2:4b:a2:24:8c:7b:b9:32:a7:d4:18:3d:
                    dc:bb:06:57:1e:15:27:c3:8d:60:84:f1:63:94:a0:
                    9f:08:ae:74:5a:1f:ca:cd:6b:b6:f1:6d:67:64:7b:
                    3d:18:86:77:58:66:99:e2:3c:cc:82:42:49:1d:c1:
                    1e:99:9f:94:27:c3:53:13:f4:24:e2:21:5a:c8:83:
                    e1:04:10:7f:8c:54:69:db:59:83:9e:f1:ac:de:9a:
                    44:ab:4f:44:f9:a6:59:ce:f6:8a:2f:da:a4:07:6c:
                    7d:df:93:b3:d4:f6:a0:5d:ea:4b:d9:29:45:e1:ff:
                    5b:91:4a:07:67:02:bc:19:0b:93:4f:09:0d:3f:f3:
                    8e:c1:0f:dc:f9:43:de:9b:b2:89:aa:2d:af:9d:d0:
                    07:66:4b:4f:4e:b3:16:1e:fb:5c:ae:11:97:78:d9:
                    08:2c:76:1b:06:4b:ce:91:b2:89:7a:54:ae:e3:df:
                    9b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:62:F8:D5:D6:41:7B:61:93:5D:56:95:BC:5A:F8:4E:E6:A8:12:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/b9d42abc-2171-3691-94bc-daa4312c4aa6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/7daddf1f-a775-44aa-b3ca-3520f73993ed.crl

            X509v3 Authority Key Identifier:
                keyid:32:50:48:99:D0:D8:21:79:01:23:50:DE:2F:A2:3C:5A:5B:1A:D9:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.233.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:e7:0a:23:9a:e1:02:4c:4c:d1:f2:79:da:be:1b:73:8c:cb:
         7b:20:87:c5:05:23:ef:22:77:de:25:40:63:3d:ac:b9:ec:d0:
         d0:dd:3a:dd:67:c7:2f:17:97:04:56:2b:20:2a:f5:bc:64:22:
         b4:e9:c2:28:a3:2f:cf:d6:2b:da:3b:6b:cb:bb:d1:2c:31:42:
         57:dd:90:f2:15:2d:7d:ed:7e:c8:c5:11:b0:81:97:73:af:85:
         41:91:07:fb:e8:d7:20:ed:49:bd:e1:16:c1:12:f0:ab:9a:c1:
         dc:7f:07:d7:a1:b9:7d:d5:89:0d:53:74:45:2e:2c:c9:e7:88:
         07:04:dc:f9:1a:53:65:16:2e:0e:fb:f4:ae:23:66:34:6f:37:
         fb:86:03:2f:e4:c1:5c:28:f8:60:9b:69:08:ec:a2:20:7d:06:
         ed:c8:97:39:54:0a:d0:28:96:4b:ad:4a:b4:11:61:eb:2c:d4:
         04:84:10:bd:a1:fc:5a:b2:18:50:e5:c1:a5:19:c8:26:16:d0:
         9b:d2:22:cd:af:30:07:11:ee:14:e5:f8:59:6d:4d:0b:c8:e5:
         0b:f0:5b:b9:9a:30:80:e1:b6:ec:d4:5b:a2:e7:f4:83:e2:e4:
         f9:7f:82:c9:c1:71:7f:04:58:c5:28:42:15:0c:7c:e0:8b:79:
         6e:e0:f3:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+oXfkKJ6CZ9kg6XTgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2RhZGRmMWYtYTc3NS00NGFhLWIzY2EtMzUyMGY3Mzk5
M2VkMB4XDTI2MTAyOTAxMDAxMloXDTI3MDEyNzAyMDAxMlowLzEtMCsGA1UEAxMk
MGY4NGU3YTktOTZjYi00YzcyLWIyMDItMjI2YjZiZTNhZGQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq08klg8wqivjfIlsXnZeeSjNCl+dXaI6axvi
7qSQDgNftl+LuO1PINdpEGHE2QMA9lmZFMRA9GdVD6w/BLKgGa1lIWDIqSE+3R4M
P0PCS6IkjHu5MqfUGD3cuwZXHhUnw41ghPFjlKCfCK50Wh/KzWu28W1nZHs9GIZ3
WGaZ4jzMgkJJHcEemZ+UJ8NTE/Qk4iFayIPhBBB/jFRp21mDnvGs3ppEq09E+aZZ
zvaKL9qkB2x935Oz1PagXepL2SlF4f9bkUoHZwK8GQuTTwkNP/OOwQ/c+UPem7KJ
qi2vndAHZktPTrMWHvtcrhGXeNkILHYbBkvOkbKJelSu49+bmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKNi+NXWQXthk11Wlbxa+E7mqBILMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83ZGFk
ZGYxZi1hNzc1LTQ0YWEtYjNjYS0zNTIwZjczOTkzZWQvYjlkNDJhYmMtMjE3MS0z
NjkxLTk0YmMtZGFhNDMxMmM0YWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvN2RhZGRmMWYtYTc3NS00NGFhLWIz
Y2EtMzUyMGY3Mzk5M2VkLzdkYWRkZjFmLWE3NzUtNDRhYS1iM2NhLTM1MjBmNzM5
OTNlZC5jcmwwHwYDVR0jBBgwFoAUMlBImdDYIXkBI1DeL6I8Wlsa2ZYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi83ZGFkZGYxZi1hNzc1LTQ0YWEtYjNjYS0zNTIw
ZjczOTkzZWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzelHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI/nCiOa4QJMTNHyedq+G3OMy3sgh8UFI+8id94lQGM9rLns0NDdOt1n
xy8XlwRWKyAq9bxkIrTpwiijL8/WK9o7a8u70SwxQlfdkPIVLX3tfsjFEbCBl3Ov
hUGRB/vo1yDtSb3hFsES8Kuawdx/B9ehuX3ViQ1TdEUuLMnniAcE3PkaU2UWLg77
9K4jZjRvN/uGAy/kwVwo+GCbaQjsoiB9Bu3IlzlUCtAolkutSrQRYess1ASEEL2h
/FqyGFDlwaUZyCYW0JvSIs2vMAcR7hTl+FltTQvI5QvwW7maMIDhtuzUW6Ln9IPi
5Pl/gsnBcX8EWMUoQhUMfOCLeW7g89I=
-----END CERTIFICATE-----
Generated at Sat Oct 31 15:23:11 2026 by rpki-client