Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfb59d70-0c69-4135-b2f0-61bd4d1a8263/214d7ac6-a304-3f95-bf2e-60cfb42b6bd4.roa
File:                     214d7ac6-a304-3f95-bf2e-60cfb42b6bd4.roa (raw, json)
Hash identifier:          OM46EyDpWOc24NzEiUPdGzP9aCfB5NHRRmKEBNQPHVo=
Subject key identifier:   3A:C8:BE:E7:93:BD:A3:3B:C7:85:E5:91:09:89:6C:31:24:AE:5B:31
Certificate issuer:       /CN=dfb59d70-0c69-4135-b2f0-61bd4d1a8263
Certificate serial:       010D0C9F4328584EED5221B8CE27B16F743E2F04
Authority key identifier: 3E:F6:00:B6:1A:9D:FA:34:50:F0:1A:87:6B:57:D8:E0:CE:C5:87:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfb59d70-0c69-4135-b2f0-61bd4d1a8263.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfb59d70-0c69-4135-b2f0-61bd4d1a8263/214d7ac6-a304-3f95-bf2e-60cfb42b6bd4.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     11110
IP address blocks:        204.13.52.0/22 maxlen: 24
                          2604:3500::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfb59d70-0c69-4135-b2f0-61bd4d1a8263/dfb59d70-0c69-4135-b2f0-61bd4d1a8263.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfb59d70-0c69-4135-b2f0-61bd4d1a8263/dfb59d70-0c69-4135-b2f0-61bd4d1a8263.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfb59d70-0c69-4135-b2f0-61bd4d1a8263.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:21:b8:ce:27:b1:6f:74:3e:2f:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfb59d70-0c69-4135-b2f0-61bd4d1a8263
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=b4044788-8d1e-4450-96bc-a35e7c22ad10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d0:0d:db:0a:f5:6c:1f:fd:ed:4d:40:96:23:
                    60:e8:ea:00:aa:12:80:4d:15:93:da:e3:80:9c:1e:
                    3c:ce:cb:32:d5:e9:59:bd:88:30:f6:7f:5a:1c:11:
                    63:e0:54:4b:e9:8a:5f:08:8d:e1:4c:71:ab:f1:e7:
                    ff:62:74:68:54:44:ef:bc:2d:f2:b1:24:51:fc:ed:
                    cd:b0:3a:28:0f:38:19:67:50:7e:1d:85:ab:f0:b1:
                    d0:87:00:40:f4:df:c0:f6:c3:d0:1f:8b:06:3a:bd:
                    6e:37:e6:f4:27:e8:3c:11:a1:68:0b:3f:ce:8f:3e:
                    ca:b3:db:e5:f5:12:ed:ee:03:00:00:3e:55:55:f9:
                    82:92:25:5e:4d:13:9b:42:1c:85:d3:49:ad:11:85:
                    f2:fe:da:c0:af:2f:74:c8:c4:eb:c0:60:d4:c7:c9:
                    53:e0:9f:57:2e:5b:2a:36:af:a3:17:7f:16:19:36:
                    60:5b:cb:24:04:d4:40:99:8b:ad:5a:aa:a6:c9:41:
                    82:e2:d5:ee:8d:26:28:56:41:06:e9:79:b8:44:cd:
                    97:48:b4:da:d7:7f:3f:df:ec:38:31:05:ec:12:2b:
                    03:94:fa:77:2a:a3:fc:5e:f2:20:53:19:0e:fe:07:
                    c2:7e:3e:c2:f2:2e:2c:3e:70:50:8d:5a:24:09:a4:
                    dd:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:C8:BE:E7:93:BD:A3:3B:C7:85:E5:91:09:89:6C:31:24:AE:5B:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfb59d70-0c69-4135-b2f0-61bd4d1a8263/214d7ac6-a304-3f95-bf2e-60cfb42b6bd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfb59d70-0c69-4135-b2f0-61bd4d1a8263/dfb59d70-0c69-4135-b2f0-61bd4d1a8263.crl

            X509v3 Authority Key Identifier:
                keyid:3E:F6:00:B6:1A:9D:FA:34:50:F0:1A:87:6B:57:D8:E0:CE:C5:87:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfb59d70-0c69-4135-b2f0-61bd4d1a8263.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.13.52.0/22
                IPv6:
                  2604:3500::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:74:6f:dc:24:b9:80:82:2a:85:88:07:0a:bd:b4:77:f6:b8:
         da:78:19:52:d5:11:6a:13:ba:c5:bd:60:10:ca:10:01:80:f5:
         e1:0d:a5:2b:79:3c:cd:d1:a8:ad:b5:0f:c0:2e:8c:06:78:01:
         e3:f6:36:e7:d9:9d:39:39:cf:83:8c:d0:bf:61:b7:fc:dd:d3:
         68:f9:20:9a:79:93:36:53:c8:37:b6:1a:c9:d7:02:cd:fd:45:
         50:a9:07:ba:71:d2:35:ad:fb:dd:e3:98:4d:22:30:d0:ed:cd:
         2c:af:4f:04:07:fd:e0:24:dd:9e:f6:6c:e7:a2:6a:7f:76:95:
         3d:f6:8e:fc:44:98:38:aa:4e:82:38:97:c5:4d:0a:1f:c4:ad:
         e3:03:43:5d:1b:6d:a3:8f:00:3b:31:9c:5f:03:c6:0c:b9:6d:
         1a:37:3e:8c:eb:ba:de:c7:d1:80:ea:34:72:62:ec:35:f7:56:
         30:0d:9b:30:57:06:9d:e5:25:9e:2b:18:41:09:72:e3:43:b3:
         20:2e:7c:3a:1c:1b:88:6b:df:21:db:83:f1:a3:65:d0:d4:3e:
         c2:cd:ac:53:69:b5:3a:77:b7:06:77:c1:c9:6f:be:e0:0e:15:
         41:3e:18:92:9e:63:b0:2b:d4:cc:ef:4c:a1:5c:db:59:09:16:
         8e:3c:bf:cd
-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE7tUiG4ziexb3Q+LwQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGZiNTlkNzAtMGM2OS00MTM1LWIyZjAtNjFiZDRkMWE4
MjYzMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk
YjQwNDQ3ODgtOGQxZS00NDUwLTk2YmMtYTM1ZTdjMjJhZDEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNAN2wr1bB/97U1AliNg6OoAqhKATRWT2uOA
nB48zssy1elZvYgw9n9aHBFj4FRL6YpfCI3hTHGr8ef/YnRoVETvvC3ysSRR/O3N
sDooDzgZZ1B+HYWr8LHQhwBA9N/A9sPQH4sGOr1uN+b0J+g8EaFoCz/Ojz7Ks9vl
9RLt7gMAAD5VVfmCkiVeTRObQhyF00mtEYXy/trAry90yMTrwGDUx8lT4J9XLlsq
Nq+jF38WGTZgW8skBNRAmYutWqqmyUGC4tXujSYoVkEG6Xm4RM2XSLTa138/3+w4
MQXsEisDlPp3KqP8XvIgUxkO/gfCfj7C8i4sPnBQjVokCaTdsQIDAQABo4IDZDCC
A2AwHQYDVR0OBBYEFDrIvueTvaM7x4XlkQmJbDEkrlsxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kZmI1
OWQ3MC0wYzY5LTQxMzUtYjJmMC02MWJkNGQxYTgyNjMvMjE0ZDdhYzYtYTMwNC0z
Zjk1LWJmMmUtNjBjZmI0MmI2YmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZGZiNTlkNzAtMGM2OS00MTM1LWIy
ZjAtNjFiZDRkMWE4MjYzL2RmYjU5ZDcwLTBjNjktNDEzNS1iMmYwLTYxYmQ0ZDFh
ODI2My5jcmwwHwYDVR0jBBgwFoAUPvYAthqd+jRQ8BqHa1fY4M7FhycwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9kZmI1OWQ3MC0wYzY5LTQxMzUtYjJmMC02MWJk
NGQxYTgyNjMuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCzA00MA0E
AgACMAcDBQAmBDUAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF
BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0
bWwwDQYJKoZIhvcNAQELBQADggEBAFh0b9wkuYCCKoWIBwq9tHf2uNp4GVLVEWoT
usW9YBDKEAGA9eENpSt5PM3RqK21D8AujAZ4AeP2NufZnTk5z4OM0L9ht/zd02j5
IJp5kzZTyDe2GsnXAs39RVCpB7px0jWt+93jmE0iMNDtzSyvTwQH/eAk3Z72bOei
an92lT32jvxEmDiqToI4l8VNCh/EreMDQ10bbaOPADsxnF8Dxgy5bRo3Pozrut7H
0YDqNHJi7DX3VjANmzBXBp3lJZ4rGEEJcuNDsyAufDocG4hr3yHbg/GjZdDUPsLN
rFNptTp3twZ3wclvvuAOFUE+GJKeY7Ar1MzvTKFc21kJFo48v80=
-----END CERTIFICATE-----
Generated at Sun Sep 13 10:18:07 2026 by rpki-client