Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/b5c109e7-454c-332c-b549-084f0e118b1e.roa
File:                     b5c109e7-454c-332c-b549-084f0e118b1e.roa (raw, json)
Hash identifier:          8j8cpRcRbJ4S6kD3k2fGWDF6HU+UR2Fz31fU7divXcw=
Subject key identifier:   FC:13:5C:AA:4F:54:D7:ED:86:BB:2B:00:AD:47:8F:7E:16:F3:86:F2
Certificate issuer:       /CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca
Certificate serial:       010D0C9F4328584EE65744FE056C0A8BBB185D26
Authority key identifier: BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/b5c109e7-454c-332c-b549-084f0e118b1e.roa
Signing time:             Thu 20 Aug 2026 13:00:12 +0000
ROA not before:           Thu 20 Aug 2026 13:00:12 +0000
ROA not after:            Wed 18 Nov 2026 14:00:12 +0000
asID:                     399575
IP address blocks:        206.204.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e6:57:44:fe:05:6c:0a:8b:bb:18:5d:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca
        Validity
            Not Before: Aug 20 13:00:12 2026 GMT
            Not After : Nov 18 14:00:12 2026 GMT
        Subject: CN=572f6f82-5ea5-41cc-8c3f-2e848be10bde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:14:8e:4f:34:fc:74:e7:df:98:d3:5c:62:8f:
                    41:a7:aa:24:cf:2e:be:42:e8:81:0a:f6:ee:38:02:
                    03:57:03:0b:bc:18:9e:9a:7e:85:e1:c3:e3:d1:63:
                    19:db:93:a7:92:d6:c3:a0:de:43:de:53:ff:bd:a3:
                    9d:98:89:b3:1a:41:e7:44:16:50:a3:f4:09:3f:cc:
                    fb:b1:fc:00:4a:26:86:16:84:68:c3:d2:a2:aa:f3:
                    05:70:b0:3d:76:26:48:36:49:0b:96:1f:78:d5:af:
                    e8:fe:18:7f:c2:61:4b:17:fb:3d:af:91:c3:b6:b0:
                    14:f9:e9:82:1c:3f:7c:1d:7d:1f:f6:d5:68:df:5d:
                    d7:80:78:58:86:c8:99:5c:b7:04:ca:09:cc:f2:da:
                    ef:da:0c:d6:db:cb:17:ec:c2:33:88:e5:f2:b7:89:
                    4d:cf:00:54:bb:58:cd:30:1c:8a:bb:33:0c:e5:55:
                    83:17:1a:8b:fa:68:17:ba:36:7f:98:9a:12:38:6d:
                    6d:89:1e:d0:08:62:5a:e7:2a:d8:75:fe:94:ba:16:
                    41:4c:f6:8a:ac:f3:0d:d7:d8:d4:33:c8:4a:8d:a2:
                    3b:3d:8b:66:c2:0c:cc:84:81:d1:a0:f9:05:0b:8b:
                    5e:38:d3:74:ff:0d:c8:d5:77:fb:04:50:d2:60:9e:
                    56:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:13:5C:AA:4F:54:D7:ED:86:BB:2B:00:AD:47:8F:7E:16:F3:86:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/b5c109e7-454c-332c-b549-084f0e118b1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl

            X509v3 Authority Key Identifier:
                keyid:BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.204.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:8d:dc:84:d8:f2:74:6c:fa:40:bd:33:19:cf:d8:2e:6e:23:
         b1:42:24:6d:21:09:ee:a0:f2:f0:4f:a7:3c:d8:aa:25:5a:0e:
         cc:40:92:99:b2:33:a9:50:31:3e:1b:27:2a:ed:bc:6f:18:5b:
         e1:7f:f6:13:ce:fa:44:ed:cc:5d:79:d8:a6:7f:8b:5f:28:a4:
         75:40:45:74:fa:8a:23:00:f9:e4:0b:ec:ee:c4:7c:c9:44:f1:
         c7:29:00:09:74:52:8e:89:8a:eb:d4:4b:89:95:62:da:bd:3d:
         c6:81:9d:19:71:c9:e2:d5:de:ff:0b:a1:fc:7d:62:d0:e8:6b:
         c7:2c:ba:6b:03:b0:c0:31:71:69:9b:61:d6:c0:bf:5e:17:0a:
         73:a9:29:f3:22:58:90:18:a6:cb:9a:54:fb:19:42:51:36:0c:
         89:a6:10:06:15:bf:5e:03:1f:cf:73:00:98:16:46:db:26:6f:
         98:b6:11:8b:c5:1a:b1:23:f5:b1:58:f7:a0:a5:8c:cb:24:13:
         91:1d:00:0d:5f:0e:37:66:85:33:af:39:19:79:08:99:4d:00:
         33:40:55:38:e5:1f:a3:c5:a0:fd:30:a4:da:c0:5f:b5:b6:95:
         a0:df:83:3e:24:e8:4c:23:5b:68:73:f8:cd:79:04:73:dc:a0:
         52:92:a0:e7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7mV0T+BWwKi7sYXSYwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjVmODdmYzMtZmM3OS00ZGI5LTk1YmMtYjJkODRjNGNm
OGNhMB4XDTI2MDgyMDEzMDAxMloXDTI2MTExODE0MDAxMlowLzEtMCsGA1UEAxMk
NTcyZjZmODItNWVhNS00MWNjLThjM2YtMmU4NDhiZTEwYmRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxSOTzT8dOffmNNcYo9Bp6okzy6+QuiBCvbu
OAIDVwMLvBiemn6F4cPj0WMZ25OnktbDoN5D3lP/vaOdmImzGkHnRBZQo/QJP8z7
sfwASiaGFoRow9KiqvMFcLA9diZINkkLlh941a/o/hh/wmFLF/s9r5HDtrAU+emC
HD98HX0f9tVo313XgHhYhsiZXLcEygnM8trv2gzW28sX7MIziOXyt4lNzwBUu1jN
MByKuzMM5VWDFxqL+mgXujZ/mJoSOG1tiR7QCGJa5yrYdf6UuhZBTPaKrPMN19jU
M8hKjaI7PYtmwgzMhIHRoPkFC4teONN0/w3I1Xf7BFDSYJ5W5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPwTXKpPVNfthrsrAK1Hj34W84byMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82NWY4
N2ZjMy1mYzc5LTRkYjktOTViYy1iMmQ4NGM0Y2Y4Y2EvYjVjMTA5ZTctNDU0Yy0z
MzJjLWI1NDktMDg0ZjBlMTE4YjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNjVmODdmYzMtZmM3OS00ZGI5LTk1
YmMtYjJkODRjNGNmOGNhLzY1Zjg3ZmMzLWZjNzktNGRiOS05NWJjLWIyZDg0YzRj
ZjhjYS5jcmwwHwYDVR0jBBgwFoAUu9W7tLEyrQwY0eYBEwMMwU00uMIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS82NWY4N2ZjMy1mYzc5LTRkYjktOTViYy1iMmQ4
NGM0Y2Y4Y2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzszsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMeN3ITY8nRs+kC9MxnP2C5uI7FCJG0hCe6g8vBPpzzYqiVaDsxAkpmy
M6lQMT4bJyrtvG8YW+F/9hPO+kTtzF152KZ/i18opHVARXT6iiMA+eQL7O7EfMlE
8ccpAAl0Uo6JiuvUS4mVYtq9PcaBnRlxyeLV3v8Lofx9YtDoa8csumsDsMAxcWmb
YdbAv14XCnOpKfMiWJAYpsuaVPsZQlE2DImmEAYVv14DH89zAJgWRtsmb5i2EYvF
GrEj9bFY96CljMskE5EdAA1fDjdmhTOvORl5CJlNADNAVTjlH6PFoP0wpNrAX7W2
laDfgz4k6EwjW2hz+M15BHPcoFKSoOc=
-----END CERTIFICATE-----
Generated at Sun Sep 13 13:37:48 2026 by rpki-client