Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/714cea24-cc07-46e3-abc3-b9e783b4180b/f00f9702-64da-301c-b2bf-95c79284f35e.roa
File:                     f00f9702-64da-301c-b2bf-95c79284f35e.roa (raw, json)
Hash identifier:          O/JRuVlzmF7ifKdb9A6ch/JAMJXoSE8VOSblj/ChvIA=
Subject key identifier:   8C:7A:39:47:4C:1A:99:CC:7C:30:5E:08:46:11:5B:47:D6:BE:FA:34
Certificate issuer:       /CN=714cea24-cc07-46e3-abc3-b9e783b4180b
Certificate serial:       010D0C9F4328584ED431ED4B0F74F9BC85768580
Authority key identifier: EA:B7:9F:8E:3A:45:D3:DA:27:49:DD:B3:D0:4C:09:2C:3B:EB:6C:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/714cea24-cc07-46e3-abc3-b9e783b4180b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/714cea24-cc07-46e3-abc3-b9e783b4180b/f00f9702-64da-301c-b2bf-95c79284f35e.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     198394
IP address blocks:        216.104.192.0/24 maxlen: 24
                          216.104.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/714cea24-cc07-46e3-abc3-b9e783b4180b/714cea24-cc07-46e3-abc3-b9e783b4180b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/714cea24-cc07-46e3-abc3-b9e783b4180b/714cea24-cc07-46e3-abc3-b9e783b4180b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/714cea24-cc07-46e3-abc3-b9e783b4180b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:31:ed:4b:0f:74:f9:bc:85:76:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=714cea24-cc07-46e3-abc3-b9e783b4180b
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=24f546d1-7cd4-4361-afaa-e0fad2118df6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:0a:8b:43:9b:0e:53:18:68:ae:31:c4:55:6b:
                    f3:ff:fa:e5:4b:91:a8:82:05:d9:fd:62:f6:c4:cb:
                    38:08:6d:67:76:1c:fa:21:8f:11:39:5f:da:26:2a:
                    4e:3d:ba:4d:c9:d9:18:a3:07:44:62:36:d4:bf:ce:
                    fe:0c:79:c8:e5:05:d7:43:7c:3e:00:5b:ac:ae:e4:
                    17:33:e6:94:97:63:0f:15:f6:d3:16:2b:5a:d1:13:
                    56:98:50:18:ea:99:2c:4b:2a:a9:4d:5c:0c:ce:81:
                    ac:4f:28:21:38:ae:a1:3a:f7:38:7b:9c:dd:ff:a3:
                    97:50:a8:85:fe:24:bd:33:6d:ed:3b:86:5e:9f:f8:
                    51:47:a8:54:42:4a:00:21:9e:b7:87:2f:2c:00:62:
                    91:09:e1:fb:47:61:cb:0e:3c:9f:1f:5e:fa:55:32:
                    a8:77:71:8a:5a:71:13:50:04:32:6e:09:d6:df:f2:
                    24:a8:87:11:91:94:9c:10:2d:d8:77:5f:4d:d1:37:
                    c9:a9:5e:73:37:e9:62:22:38:94:b0:66:e7:76:d0:
                    86:32:07:d9:00:d4:00:59:73:59:77:aa:a8:b7:49:
                    c0:49:15:c3:6b:6f:72:1f:17:23:8b:89:c1:85:7f:
                    bc:98:fa:4c:b1:0c:23:d2:a0:cb:5d:ce:f4:55:d2:
                    9a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:7A:39:47:4C:1A:99:CC:7C:30:5E:08:46:11:5B:47:D6:BE:FA:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/714cea24-cc07-46e3-abc3-b9e783b4180b/f00f9702-64da-301c-b2bf-95c79284f35e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/714cea24-cc07-46e3-abc3-b9e783b4180b/714cea24-cc07-46e3-abc3-b9e783b4180b.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B7:9F:8E:3A:45:D3:DA:27:49:DD:B3:D0:4C:09:2C:3B:EB:6C:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/714cea24-cc07-46e3-abc3-b9e783b4180b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.104.192.0/24
                  216.104.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:c0:e8:1a:fd:e7:fd:31:ea:c2:74:05:f1:e6:c7:62:c2:88:
         5d:c5:5a:de:0b:fd:69:1f:d8:71:9c:5c:90:6c:02:e4:6e:e9:
         83:df:a3:e0:6e:da:75:0d:6a:1b:5f:b0:61:9e:0a:0e:63:6d:
         f1:24:23:50:cb:6d:ce:f0:9e:cb:4a:d3:ab:d0:03:a9:ec:9e:
         d6:ef:2d:c6:b2:c9:7e:2c:e0:aa:a4:cf:43:12:50:25:43:b3:
         9d:9c:7f:34:2f:de:56:7e:ad:f3:4b:1e:77:2a:c7:46:10:b8:
         c7:c9:c8:72:d7:68:12:9b:42:41:f5:b8:72:04:52:c8:70:ff:
         77:6c:16:47:05:ca:29:6f:b2:f4:4d:af:b6:69:91:2e:a1:e8:
         e3:2b:cb:b5:4a:b6:b7:42:58:cd:04:d8:52:79:b6:f5:14:6a:
         40:aa:57:ae:ef:56:1e:33:bd:f1:4c:90:7c:17:e1:1d:3b:a6:
         8e:68:9e:22:05:56:4a:52:ec:89:96:f7:ba:fe:52:6f:90:4e:
         9e:d3:8e:f1:14:ab:9b:18:08:bc:42:6d:8d:ff:18:82:43:ef:
         0d:52:94:59:a4:ec:b3:e6:f5:3e:ee:f6:92:43:56:b6:de:34:
         9e:25:ee:90:0a:96:c1:f0:ab:3c:4f:a5:94:d6:2b:8f:2b:b6:
         db:78:15:3c
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE7UMe1LD3T5vIV2hYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzE0Y2VhMjQtY2MwNy00NmUzLWFiYzMtYjllNzgzYjQx
ODBiMB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk
MjRmNTQ2ZDEtN2NkNC00MzYxLWFmYWEtZTBmYWQyMTE4ZGY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigqLQ5sOUxhorjHEVWvz//rlS5GoggXZ/WL2
xMs4CG1ndhz6IY8ROV/aJipOPbpNydkYowdEYjbUv87+DHnI5QXXQ3w+AFusruQX
M+aUl2MPFfbTFita0RNWmFAY6pksSyqpTVwMzoGsTyghOK6hOvc4e5zd/6OXUKiF
/iS9M23tO4Zen/hRR6hUQkoAIZ63hy8sAGKRCeH7R2HLDjyfH176VTKod3GKWnET
UAQybgnW3/IkqIcRkZScEC3Yd19N0TfJqV5zN+liIjiUsGbndtCGMgfZANQAWXNZ
d6qot0nASRXDa29yHxcji4nBhX+8mPpMsQwj0qDLXc70VdKaowIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFIx6OUdMGpnMfDBeCEYRW0fWvvo0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83MTRj
ZWEyNC1jYzA3LTQ2ZTMtYWJjMy1iOWU3ODNiNDE4MGIvZjAwZjk3MDItNjRkYS0z
MDFjLWIyYmYtOTVjNzkyODRmMzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNzE0Y2VhMjQtY2MwNy00NmUzLWFi
YzMtYjllNzgzYjQxODBiLzcxNGNlYTI0LWNjMDctNDZlMy1hYmMzLWI5ZTc4M2I0
MTgwYi5jcmwwHwYDVR0jBBgwFoAU6refjjpF09onSd2z0EwJLDvrbB4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS83MTRjZWEyNC1jYzA3LTQ2ZTMtYWJjMy1iOWU3
ODNiNDE4MGIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA2GjAAwQA
2GjLMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAHPA6Br95/0x6sJ0BfHmx2LCiF3FWt4L/Wkf2HGcXJBsAuRu
6YPfo+Bu2nUNahtfsGGeCg5jbfEkI1DLbc7wnstK06vQA6nsntbvLcayyX4s4Kqk
z0MSUCVDs52cfzQv3lZ+rfNLHncqx0YQuMfJyHLXaBKbQkH1uHIEUshw/3dsFkcF
yilvsvRNr7ZpkS6h6OMry7VKtrdCWM0E2FJ5tvUUakCqV67vVh4zvfFMkHwX4R07
po5oniIFVkpS7ImW97r+Um+QTp7TjvEUq5sYCLxCbY3/GIJD7w1SlFmk7LPm9T7u
9pJDVrbeNJ4l7pAKlsHwqzxPpZTWK48rttt4FTw=
-----END CERTIFICATE-----
Generated at Fri Sep 11 03:56:32 2026 by rpki-client