Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a21910e4-3e57-47a2-86f3-c77b7559f5ba/00e73f15-ba45-34f2-bfd9-400b07c5f1dc.roa
File:                     00e73f15-ba45-34f2-bfd9-400b07c5f1dc.roa (raw, json)
Hash identifier:          TQGxhvH6EGmLDIBP//a4m57IQZ9QGtrVUhXaB9HbSKA=
Subject key identifier:   19:71:1C:77:F7:A8:42:5D:CF:36:F7:EA:50:D9:93:7B:1D:28:6D:12
Certificate issuer:       /CN=a21910e4-3e57-47a2-86f3-c77b7559f5ba
Certificate serial:       010D0C9F4328584F70881D9DAD12ADB0A2A14280
Authority key identifier: D5:A7:F8:0A:4C:66:90:D9:69:0D:60:43:00:6D:1D:29:FB:71:85:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a21910e4-3e57-47a2-86f3-c77b7559f5ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a21910e4-3e57-47a2-86f3-c77b7559f5ba/00e73f15-ba45-34f2-bfd9-400b07c5f1dc.roa
Signing time:             Fri 09 Oct 2026 01:00:12 +0000
ROA not before:           Fri 09 Oct 2026 01:00:12 +0000
ROA not after:            Thu 07 Jan 2027 02:00:12 +0000
asID:                     16509
IP address blocks:        204.209.84.0/23 maxlen: 24
                          2602:f6eb::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a21910e4-3e57-47a2-86f3-c77b7559f5ba/a21910e4-3e57-47a2-86f3-c77b7559f5ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a21910e4-3e57-47a2-86f3-c77b7559f5ba/a21910e4-3e57-47a2-86f3-c77b7559f5ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a21910e4-3e57-47a2-86f3-c77b7559f5ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:70:88:1d:9d:ad:12:ad:b0:a2:a1:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a21910e4-3e57-47a2-86f3-c77b7559f5ba
        Validity
            Not Before: Oct  9 01:00:12 2026 GMT
            Not After : Jan  7 02:00:12 2027 GMT
        Subject: CN=f809d5e2-e450-4487-a126-061d6fadbb5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:59:27:b9:f0:48:95:7a:83:e9:61:f2:e5:77:
                    b9:9d:69:1a:9d:0d:7f:fe:a9:7b:53:db:ef:11:e7:
                    3d:9b:94:a1:83:62:16:44:fc:61:2b:16:12:0f:fa:
                    b2:7a:0b:a7:39:de:ad:32:2d:4e:12:5c:f4:0b:9d:
                    3e:df:e5:f9:4f:1c:50:cd:84:72:ae:3f:40:04:29:
                    bb:f1:be:f1:09:44:d5:bc:f5:96:6e:85:11:e0:75:
                    64:7d:2a:44:cd:db:b7:59:20:dc:44:0b:2a:13:76:
                    69:1b:6f:ea:96:fe:2f:ce:e3:63:3b:c3:30:1e:ff:
                    31:08:2b:b9:ce:2c:28:9d:7d:08:a8:ab:05:cc:9c:
                    37:3d:3b:8d:9b:1a:ef:80:9e:49:27:e8:2d:38:46:
                    16:17:2d:0c:26:4e:fa:a6:bc:e5:21:27:a5:46:db:
                    15:08:78:35:bc:7e:06:1f:d5:58:0b:1b:26:42:0a:
                    c4:4f:31:6f:a5:4f:76:05:9d:ad:6d:d7:30:e0:76:
                    bd:49:a3:98:2f:ae:c2:3d:04:d8:bb:25:89:8a:64:
                    ad:86:9a:11:c8:71:ce:1c:11:6a:48:35:d8:3d:f6:
                    5b:82:2d:19:0b:f4:7e:de:7e:20:82:08:1c:69:bc:
                    57:bf:82:bb:88:58:ea:e9:ef:3f:10:cd:5e:8f:0b:
                    8e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:71:1C:77:F7:A8:42:5D:CF:36:F7:EA:50:D9:93:7B:1D:28:6D:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a21910e4-3e57-47a2-86f3-c77b7559f5ba/00e73f15-ba45-34f2-bfd9-400b07c5f1dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a21910e4-3e57-47a2-86f3-c77b7559f5ba/a21910e4-3e57-47a2-86f3-c77b7559f5ba.crl

            X509v3 Authority Key Identifier:
                keyid:D5:A7:F8:0A:4C:66:90:D9:69:0D:60:43:00:6D:1D:29:FB:71:85:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a21910e4-3e57-47a2-86f3-c77b7559f5ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.209.84.0/23
                IPv6:
                  2602:f6eb::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:97:5a:da:39:4c:a8:ed:6c:62:96:c8:cc:9a:50:f1:98:7d:
         cc:95:a7:90:ac:89:62:33:16:20:fc:8c:4a:8b:af:55:35:7c:
         2c:2f:62:3e:66:2d:c0:58:9c:06:b0:ee:7f:b7:ac:13:7c:53:
         c5:27:91:14:76:9f:78:25:10:95:cc:2d:fa:cc:fa:bd:80:b8:
         55:5e:88:db:09:f9:b9:f3:6d:7d:41:da:d3:62:53:2f:c5:13:
         73:86:56:f2:f4:da:a6:3c:1d:62:c1:a7:b3:a7:40:d6:de:48:
         a1:9c:2f:67:96:24:25:92:7e:b6:49:07:9e:73:60:18:d2:bd:
         7b:ad:bf:ca:fd:4c:d2:6d:d0:2b:6d:83:86:33:cc:a1:c3:e5:
         72:c6:d0:d6:d9:3b:10:fa:71:b8:2c:61:b0:75:e9:92:18:39:
         d4:ef:e7:a7:37:2d:3c:90:c0:f6:f0:f4:80:a6:5c:b1:0c:59:
         5d:ae:42:70:19:2b:e2:d7:56:9a:fd:13:a8:61:01:33:8c:75:
         18:28:c6:29:70:61:9f:7f:d1:5f:d3:f5:9a:4b:c6:79:a0:b0:
         a2:9f:6f:6c:0a:4d:50:48:70:7e:4e:a2:b3:55:56:63:ab:ea:
         ae:c2:cd:b0:82:92:6c:ca:e1:e4:70:62:a7:47:55:38:ba:70:
         25:8f:52:4f
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE9wiB2drRKtsKKhQoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTIxOTEwZTQtM2U1Ny00N2EyLTg2ZjMtYzc3Yjc1NTlm
NWJhMB4XDTI2MTAwOTAxMDAxMloXDTI3MDEwNzAyMDAxMlowLzEtMCsGA1UEAxMk
ZjgwOWQ1ZTItZTQ1MC00NDg3LWExMjYtMDYxZDZmYWRiYjViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1knufBIlXqD6WHy5Xe5nWkanQ1//ql7U9vv
Eec9m5Shg2IWRPxhKxYSD/qyegunOd6tMi1OElz0C50+3+X5TxxQzYRyrj9ABCm7
8b7xCUTVvPWWboUR4HVkfSpEzdu3WSDcRAsqE3ZpG2/qlv4vzuNjO8MwHv8xCCu5
ziwonX0IqKsFzJw3PTuNmxrvgJ5JJ+gtOEYWFy0MJk76przlISelRtsVCHg1vH4G
H9VYCxsmQgrETzFvpU92BZ2tbdcw4Ha9SaOYL67CPQTYuyWJimSthpoRyHHOHBFq
SDXYPfZbgi0ZC/R+3n4ggggcabxXv4K7iFjq6e8/EM1ejwuOxQIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFBlxHHf3qEJdzzb36lDZk3sdKG0SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9hMjE5
MTBlNC0zZTU3LTQ3YTItODZmMy1jNzdiNzU1OWY1YmEvMDBlNzNmMTUtYmE0NS0z
NGYyLWJmZDktNDAwYjA3YzVmMWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k
ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvYTIxOTEwZTQtM2U1Ny00N2EyLTg2
ZjMtYzc3Yjc1NTlmNWJhL2EyMTkxMGU0LTNlNTctNDdhMi04NmYzLWM3N2I3NTU5
ZjViYS5jcmwwHwYDVR0jBBgwFoAU1af4CkxmkNlpDWBDAG0dKftxhbIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4
Ny1iMmNjLTU2ODkzODFhM2M0Mi9hMjE5MTBlNC0zZTU3LTQ3YTItODZmMy1jNzdi
NzU1OWY1YmEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBzNFUMA4E
AgACMAgDBgAmAvbrADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA+l1raOUyo7WxilsjMmlDxmH3MlaeQrIli
MxYg/IxKi69VNXwsL2I+Zi3AWJwGsO5/t6wTfFPFJ5EUdp94JRCVzC36zPq9gLhV
XojbCfm58219QdrTYlMvxRNzhlby9NqmPB1iwaezp0DW3kihnC9nliQlkn62SQee
c2AY0r17rb/K/UzSbdArbYOGM8yhw+VyxtDW2TsQ+nG4LGGwdemSGDnU7+enNy08
kMD28PSAplyxDFldrkJwGSvi11aa/ROoYQEzjHUYKMYpcGGff9Ff0/WaS8Z5oLCi
n29sCk1QSHB+TqKzVVZjq+quws2wgpJsyuHkcGKnR1U4unAlj1JP
-----END CERTIFICATE-----
Generated at Sat Oct 10 14:20:25 2026 by rpki-client