Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/629b83c0-7cd9-47f5-b48c-a59884f9661d/3443c3dd-98ce-33e2-b7ca-9c4ee007097b.roa
File:                     3443c3dd-98ce-33e2-b7ca-9c4ee007097b.roa (raw, json)
Hash identifier:          SE0ZP/CKiwd6lPlVAomJgsWpK7vBULPfcqkAc++mzvw=
Subject key identifier:   6A:D6:A9:6B:62:99:4A:E2:A0:87:59:68:80:B1:42:2E:B8:4F:7F:08
Certificate issuer:       /CN=629b83c0-7cd9-47f5-b48c-a59884f9661d
Certificate serial:       010D0C9F4328584ED62EF2A5E5E829289474E3C0
Authority key identifier: 07:86:0A:48:9E:B5:D0:C6:7C:0C:70:26:75:12:81:4C:8B:1E:11:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/629b83c0-7cd9-47f5-b48c-a59884f9661d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/629b83c0-7cd9-47f5-b48c-a59884f9661d/3443c3dd-98ce-33e2-b7ca-9c4ee007097b.roa
Signing time:             Fri 14 Aug 2026 18:06:06 +0000
ROA not before:           Fri 14 Aug 2026 18:06:06 +0000
ROA not after:            Thu 12 Nov 2026 19:06:06 +0000
asID:                     14984
IP address blocks:        207.229.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/629b83c0-7cd9-47f5-b48c-a59884f9661d/629b83c0-7cd9-47f5-b48c-a59884f9661d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/629b83c0-7cd9-47f5-b48c-a59884f9661d/629b83c0-7cd9-47f5-b48c-a59884f9661d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/629b83c0-7cd9-47f5-b48c-a59884f9661d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d6:2e:f2:a5:e5:e8:29:28:94:74:e3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=629b83c0-7cd9-47f5-b48c-a59884f9661d
        Validity
            Not Before: Aug 14 18:06:06 2026 GMT
            Not After : Nov 12 19:06:06 2026 GMT
        Subject: CN=c8a1ea69-e69b-4da8-9efe-547015618d84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:19:1c:01:3f:39:37:b1:14:2b:b7:e0:30:75:
                    86:fe:21:75:c2:95:11:67:45:09:11:b5:43:48:55:
                    62:2e:fd:12:9f:f0:a1:5f:f2:3c:1e:7e:34:f3:b2:
                    67:b3:b2:cd:27:30:35:83:8f:8c:d6:eb:86:b7:c3:
                    a2:bc:b9:da:e5:e1:52:09:dd:86:4c:ef:71:a2:24:
                    84:07:56:92:f0:26:68:d3:05:37:70:a4:11:f3:d9:
                    85:3f:f5:53:20:ff:33:27:28:03:57:3e:50:ad:a8:
                    59:f9:1c:ce:99:5b:06:c5:67:77:46:7e:9a:d5:f4:
                    b3:c0:45:4d:7b:10:71:15:86:b2:52:ef:b1:35:7a:
                    af:d6:ec:e1:df:94:5f:c3:d6:fb:70:6d:17:15:7e:
                    08:7a:36:91:14:08:ab:5e:dd:7a:d4:c9:b7:5c:1f:
                    bd:3d:c1:a0:ce:ff:85:50:4f:9d:5e:59:27:d9:da:
                    9f:2a:a5:8f:f2:43:2a:a3:e5:8d:6d:87:43:d5:60:
                    52:7a:dc:ac:62:8a:d7:b8:52:89:9a:a4:f1:67:8b:
                    a6:f5:8f:8d:a2:70:f6:9f:73:ac:38:a8:22:8b:b0:
                    06:1a:ad:68:32:89:da:0e:e5:e9:16:7e:68:7a:b3:
                    33:94:93:e5:16:fe:05:84:0c:41:50:76:0e:a8:e2:
                    a4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:D6:A9:6B:62:99:4A:E2:A0:87:59:68:80:B1:42:2E:B8:4F:7F:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/629b83c0-7cd9-47f5-b48c-a59884f9661d/3443c3dd-98ce-33e2-b7ca-9c4ee007097b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/629b83c0-7cd9-47f5-b48c-a59884f9661d/629b83c0-7cd9-47f5-b48c-a59884f9661d.crl

            X509v3 Authority Key Identifier:
                keyid:07:86:0A:48:9E:B5:D0:C6:7C:0C:70:26:75:12:81:4C:8B:1E:11:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/629b83c0-7cd9-47f5-b48c-a59884f9661d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.229.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:52:e5:e7:87:92:5e:99:7d:d9:6b:79:79:1b:42:1e:81:a5:
         42:93:6d:ff:32:f2:49:f8:05:40:d6:1e:a4:0f:72:aa:d3:6d:
         ef:dc:92:27:d3:d1:84:5a:3b:f8:20:57:8a:ae:61:d3:9c:e0:
         47:55:80:73:3f:aa:0b:46:0f:2a:92:2c:15:6a:9f:ad:88:9c:
         b5:2d:34:be:b9:cc:d0:f0:d4:49:ab:4f:ce:53:c0:96:4b:10:
         19:b7:27:12:e5:0e:84:ce:4a:a1:df:b1:d9:59:4f:d6:93:16:
         ee:cf:57:3d:6b:80:de:1f:8b:c9:9f:43:52:9f:f2:25:ac:a6:
         d6:6a:30:11:d7:24:79:49:b7:89:fc:27:4d:1f:53:b8:24:c2:
         57:6d:76:ef:27:62:5e:04:71:07:f8:6f:1c:79:77:d1:69:dd:
         f2:df:50:8d:f2:24:a0:31:09:89:ab:78:e9:01:4b:76:01:40:
         f9:80:e9:31:a7:e5:ce:23:6a:5f:83:6b:90:56:ad:96:a8:e0:
         38:de:bb:b6:48:72:69:01:ea:43:72:1a:33:c0:35:06:38:92:
         1d:c1:e9:59:7d:42:d6:ed:a1:db:8d:24:c8:6c:bf:88:83:b2:
         e7:6e:b7:18:3f:c4:cf:1c:04:64:0d:b9:63:41:f1:46:c6:a8:
         17:86:ea:37
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7WLvKl5egpKJR048AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjI5YjgzYzAtN2NkOS00N2Y1LWI0OGMtYTU5ODg0Zjk2
NjFkMB4XDTI2MDgxNDE4MDYwNloXDTI2MTExMjE5MDYwNlowLzEtMCsGA1UEAxMk
YzhhMWVhNjktZTY5Yi00ZGE4LTllZmUtNTQ3MDE1NjE4ZDg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthkcAT85N7EUK7fgMHWG/iF1wpURZ0UJEbVD
SFViLv0Sn/ChX/I8Hn4087Jns7LNJzA1g4+M1uuGt8OivLna5eFSCd2GTO9xoiSE
B1aS8CZo0wU3cKQR89mFP/VTIP8zJygDVz5QrahZ+RzOmVsGxWd3Rn6a1fSzwEVN
exBxFYayUu+xNXqv1uzh35Rfw9b7cG0XFX4IejaRFAirXt161Mm3XB+9PcGgzv+F
UE+dXlkn2dqfKqWP8kMqo+WNbYdD1WBSetysYorXuFKJmqTxZ4um9Y+NonD2n3Os
OKgii7AGGq1oMonaDuXpFn5oerMzlJPlFv4FhAxBUHYOqOKkywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGrWqWtimUrioIdZaICxQi64T38IMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi82Mjli
ODNjMC03Y2Q5LTQ3ZjUtYjQ4Yy1hNTk4ODRmOTY2MWQvMzQ0M2MzZGQtOThjZS0z
M2UyLWI3Y2EtOWM0ZWUwMDcwOTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k
ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvNjI5YjgzYzAtN2NkOS00N2Y1LWI0
OGMtYTU5ODg0Zjk2NjFkLzYyOWI4M2MwLTdjZDktNDdmNS1iNDhjLWE1OTg4NGY5
NjYxZC5jcmwwHwYDVR0jBBgwFoAUB4YKSJ610MZ8DHAmdRKBTIseEaswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4
Ny1iMmNjLTU2ODkzODFhM2M0Mi82MjliODNjMC03Y2Q5LTQ3ZjUtYjQ4Yy1hNTk4
ODRmOTY2MWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz+VmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALJS5eeHkl6ZfdlreXkbQh6BpUKTbf8y8kn4BUDWHqQPcqrTbe/ckifT
0YRaO/ggV4quYdOc4EdVgHM/qgtGDyqSLBVqn62InLUtNL65zNDw1EmrT85TwJZL
EBm3JxLlDoTOSqHfsdlZT9aTFu7PVz1rgN4fi8mfQ1Kf8iWsptZqMBHXJHlJt4n8
J00fU7gkwldtdu8nYl4EcQf4bxx5d9Fp3fLfUI3yJKAxCYmreOkBS3YBQPmA6TGn
5c4jal+Da5BWrZao4Djeu7ZIcmkB6kNyGjPANQY4kh3B6Vl9QtbtoduNJMhsv4iD
sudutxg/xM8cBGQNuWNB8UbGqBeG6jc=
-----END CERTIFICATE-----
Generated at Wed Aug 26 03:03:40 2026 by rpki-client