Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/25b4a9d1-c107-33ab-b108-789fa7d2c23a.roa
File:                     25b4a9d1-c107-33ab-b108-789fa7d2c23a.roa (raw, json)
Hash identifier:          Fyomv3yP8lQFX9cT1HDTnvnLoC9YhM5aEhfDo6Ouzc0=
Subject key identifier:   E2:FC:8F:2D:AF:2C:C4:95:A8:A4:75:6D:35:FF:99:A2:86:FA:E5:F3
Certificate issuer:       /CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca
Certificate serial:       010D0C9F4328584EA7942965909D776708A772D8
Authority key identifier: BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/25b4a9d1-c107-33ab-b108-789fa7d2c23a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     399575
IP address blocks:        206.204.238.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:29:65:90:9d:77:67:08:a7:72:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e57c4489-1db6-4018-967d-1bd9144a32a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:75:19:0c:53:df:1a:48:ce:c1:07:86:35:78:
                    d2:14:d8:38:74:6a:7f:36:30:d1:eb:34:1c:56:e5:
                    48:dc:71:e8:5a:40:ce:c7:d3:fe:80:28:65:29:2e:
                    cb:53:53:c2:aa:ad:d3:8e:6a:a8:d3:94:1f:e4:98:
                    4a:5c:a5:e5:a4:43:fd:93:7c:fe:fa:04:e6:3b:76:
                    aa:66:f4:4d:a9:ce:a9:3f:11:23:f7:b7:85:28:08:
                    e8:6d:23:76:4f:aa:bf:14:6e:4d:9e:a2:31:a6:0c:
                    8a:50:fa:ea:45:e2:a5:43:42:e8:6c:73:dc:ab:d1:
                    5c:f6:30:3d:cb:eb:ef:bb:f6:d2:13:b6:a2:91:9d:
                    29:77:ac:1d:f5:4a:30:9b:23:29:e6:2a:ca:de:d2:
                    41:65:d3:a3:dc:37:24:20:82:5a:10:4a:a1:84:b5:
                    5b:b4:b3:09:08:26:cd:65:df:a0:22:d5:e0:cf:e8:
                    20:7a:1a:7a:d4:83:db:3a:cf:3d:ea:17:40:48:99:
                    99:3c:73:ab:6f:4f:97:b8:ac:d2:43:f0:ec:26:80:
                    30:d1:be:db:04:68:9e:ae:59:b6:81:08:fd:aa:af:
                    a6:0d:73:12:08:1f:46:13:53:1a:10:4b:48:13:55:
                    cf:a1:dd:9c:5e:a1:0e:6e:5a:48:fe:90:8b:56:9a:
                    9f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:FC:8F:2D:AF:2C:C4:95:A8:A4:75:6D:35:FF:99:A2:86:FA:E5:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/25b4a9d1-c107-33ab-b108-789fa7d2c23a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl

            X509v3 Authority Key Identifier:
                keyid:BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.204.238.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:45:91:00:f4:18:5b:94:b7:f0:fb:4c:2d:20:e3:f8:ff:46:
         06:dc:f9:5e:39:b5:c7:5e:17:ce:60:3d:ff:5b:10:24:74:3b:
         90:53:a6:64:79:5e:70:82:9f:65:03:8b:29:7e:2d:a2:dc:42:
         5d:81:19:e7:55:bf:3f:92:fd:68:3d:f9:dd:67:62:c8:ff:32:
         b0:ac:0a:fa:2d:da:f2:c9:ae:40:ec:74:3d:2b:8f:39:28:51:
         ff:ca:7c:b9:5d:46:f3:8e:14:c7:27:68:5a:c8:70:76:92:0c:
         f5:1a:9e:b2:ed:f9:b5:f3:0e:26:30:e3:c8:1f:85:db:4c:7f:
         ad:7c:49:45:69:1a:97:b2:92:53:50:d1:33:ef:36:74:ac:01:
         eb:09:cb:20:b3:3d:fc:cf:c2:03:07:f9:02:7a:56:42:13:32:
         fb:f5:0e:72:0a:68:41:d1:38:18:b9:32:13:f1:8d:52:ea:22:
         ba:ca:b7:35:82:19:09:40:04:69:b7:50:8a:0f:aa:4a:c5:9f:
         69:95:82:d0:76:56:6d:09:a9:b4:4a:d6:5f:88:b0:ce:3f:20:
         e1:94:59:2e:27:2f:a8:af:92:41:6f:91:13:1d:fe:be:f8:c1:
         ed:73:69:24:b4:86:ed:af:9b:62:79:c7:8e:0f:02:e7:cb:03:
         47:15:10:13
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlCllkJ13ZwinctgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjVmODdmYzMtZmM3OS00ZGI5LTk1YmMtYjJkODRjNGNm
OGNhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZTU3YzQ0ODktMWRiNi00MDE4LTk2N2QtMWJkOTE0NGEzMmE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHUZDFPfGkjOwQeGNXjSFNg4dGp/NjDR6zQc
VuVI3HHoWkDOx9P+gChlKS7LU1PCqq3Tjmqo05Qf5JhKXKXlpEP9k3z++gTmO3aq
ZvRNqc6pPxEj97eFKAjobSN2T6q/FG5NnqIxpgyKUPrqReKlQ0LobHPcq9Fc9jA9
y+vvu/bSE7aikZ0pd6wd9UowmyMp5irK3tJBZdOj3DckIIJaEEqhhLVbtLMJCCbN
Zd+gItXgz+ggehp61IPbOs896hdASJmZPHOrb0+XuKzSQ/DsJoAw0b7bBGierlm2
gQj9qq+mDXMSCB9GE1MaEEtIE1XPod2cXqEOblpI/pCLVpqfGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOL8jy2vLMSVqKR1bTX/maKG+uXzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82NWY4
N2ZjMy1mYzc5LTRkYjktOTViYy1iMmQ4NGM0Y2Y4Y2EvMjViNGE5ZDEtYzEwNy0z
M2FiLWIxMDgtNzg5ZmE3ZDJjMjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNjVmODdmYzMtZmM3OS00ZGI5LTk1
YmMtYjJkODRjNGNmOGNhLzY1Zjg3ZmMzLWZjNzktNGRiOS05NWJjLWIyZDg0YzRj
ZjhjYS5jcmwwHwYDVR0jBBgwFoAUu9W7tLEyrQwY0eYBEwMMwU00uMIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS82NWY4N2ZjMy1mYzc5LTRkYjktOTViYy1iMmQ4
NGM0Y2Y4Y2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzszuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAtFkQD0GFuUt/D7TC0g4/j/Rgbc+V45tcdeF85gPf9bECR0O5BTpmR5
XnCCn2UDiyl+LaLcQl2BGedVvz+S/Wg9+d1nYsj/MrCsCvot2vLJrkDsdD0rjzko
Uf/KfLldRvOOFMcnaFrIcHaSDPUanrLt+bXzDiYw48gfhdtMf618SUVpGpeyklNQ
0TPvNnSsAesJyyCzPfzPwgMH+QJ6VkITMvv1DnIKaEHROBi5MhPxjVLqIrrKtzWC
GQlABGm3UIoPqkrFn2mVgtB2Vm0JqbRK1l+IsM4/IOGUWS4nL6ivkkFvkRMd/r74
we1zaSS0hu2vm2J5x44PAufLA0cVEBM=
-----END CERTIFICATE-----
Generated at Wed Jul 29 20:39:39 2026 by rpki-client