Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/399a8b3d-ac26-3e60-90e4-0572fd3229ab.roa
File:                     399a8b3d-ac26-3e60-90e4-0572fd3229ab.roa (raw, json)
Hash identifier:          6uDe1nlbKm4DV9LdTmzYeQYDkIoC+gUavgwvo3ml1Ec=
Subject key identifier:   A6:26:F5:9A:F4:66:09:CC:92:8A:B4:4B:71:D6:01:EA:07:43:FC:F9
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584E86F501605FD591735B8EC2A8
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/399a8b3d-ac26-3e60-90e4-0572fd3229ab.roa
Signing time:             Fri 17 Jul 2026 09:00:14 +0000
ROA not before:           Fri 17 Jul 2026 09:00:14 +0000
ROA not after:            Thu 15 Oct 2026 09:00:14 +0000
asID:                     64267
IP address blocks:        208.89.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:86:f5:01:60:5f:d5:91:73:5b:8e:c2:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jul 17 09:00:14 2026 GMT
            Not After : Oct 15 09:00:14 2026 GMT
        Subject: CN=c1db63b4-c892-4edd-bfb7-db3878cbcd8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:73:5c:4d:79:5c:df:7e:19:d0:9e:ee:d4:98:
                    f3:86:12:8a:8a:5a:17:35:d5:ee:78:24:4f:e2:04:
                    44:84:62:29:5c:12:c3:f5:62:3f:fb:1d:bc:1e:03:
                    31:a8:e6:50:ea:ab:2f:dc:21:7e:ad:7c:c8:23:f9:
                    83:ae:c9:58:14:83:59:f4:98:7a:40:fc:1c:8e:b2:
                    5d:33:dd:b7:2b:98:51:ce:5f:d5:d9:f3:55:d1:da:
                    65:6a:b3:91:bf:94:27:54:52:2f:3e:5f:6d:35:d3:
                    5e:d7:7e:28:26:f2:7f:70:35:86:52:c1:ca:52:a0:
                    dd:16:7c:42:fe:b1:66:67:56:6c:e4:a9:d8:eb:bc:
                    45:62:4a:b8:76:c3:f4:0c:52:01:84:6a:22:37:8a:
                    00:f9:cc:4d:47:1c:df:09:e6:ec:64:af:b1:d0:9d:
                    6e:31:f3:38:9f:58:87:1a:e9:1b:b1:1e:ad:81:57:
                    9d:63:07:ac:4f:ec:8f:be:2c:b0:5e:65:cb:9a:eb:
                    b1:e5:04:fe:0d:2b:33:f4:d0:98:9b:e7:78:87:27:
                    67:bc:e4:3e:7e:4f:97:15:00:dd:96:44:96:16:56:
                    61:dd:de:a8:5f:f3:36:28:f8:9e:63:53:c6:f8:2e:
                    2b:82:5f:fc:df:9a:e5:ad:69:d1:7f:5a:66:2c:81:
                    e3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:26:F5:9A:F4:66:09:CC:92:8A:B4:4B:71:D6:01:EA:07:43:FC:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/399a8b3d-ac26-3e60-90e4-0572fd3229ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.89.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:82:0f:4c:09:42:66:b4:b4:44:0b:b2:6e:05:6e:45:fe:61:
         a6:a8:fb:22:29:88:d2:c8:06:cd:3b:f4:3f:61:00:f2:96:7d:
         3b:36:38:44:87:fe:bd:e6:c3:f9:b0:7b:d1:51:27:47:9c:50:
         43:63:8a:bf:ad:9d:36:1a:01:ef:f6:c1:38:8b:57:9d:6e:be:
         a1:2a:d6:e3:c1:ba:1d:4f:b3:c7:04:67:05:e1:1f:4b:91:8c:
         dd:13:d2:1a:7d:67:d9:5f:e7:07:03:d7:92:03:43:ef:33:2f:
         10:6a:10:2a:54:68:4a:14:cc:35:66:62:8b:4c:40:fb:b4:5f:
         72:ef:64:e4:16:8f:14:39:e4:8c:88:97:f5:8c:ad:c7:ff:b1:
         64:56:13:16:6f:d0:9c:1d:e8:61:2e:9a:21:79:28:f2:c1:c6:
         4c:8d:e4:96:b2:79:41:18:d8:3d:1c:19:f1:19:b6:52:16:de:
         f5:85:cf:8f:75:ce:92:b1:e0:03:36:82:7c:36:b3:b5:bf:fe:
         30:b5:0a:0c:29:f1:c3:44:89:6d:28:b5:f1:f9:51:be:9d:1f:
         5a:5d:a7:1c:2f:34:26:59:93:3c:02:9b:6d:41:ef:50:05:bb:
         8c:ea:a2:10:ed:40:36:14:a9:7b:8a:5b:04:be:e7:e8:5d:d2:
         33:6f:a9:ba
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6G9QFgX9WRc1uOwqgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI2MDcxNzA5MDAxNFoXDTI2MTAxNTA5MDAxNFowLzEtMCsGA1UEAxMk
YzFkYjYzYjQtYzg5Mi00ZWRkLWJmYjctZGIzODc4Y2JjZDhlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXNcTXlc334Z0J7u1JjzhhKKiloXNdXueCRP
4gREhGIpXBLD9WI/+x28HgMxqOZQ6qsv3CF+rXzII/mDrslYFINZ9Jh6QPwcjrJd
M923K5hRzl/V2fNV0dplarORv5QnVFIvPl9tNdNe134oJvJ/cDWGUsHKUqDdFnxC
/rFmZ1Zs5KnY67xFYkq4dsP0DFIBhGoiN4oA+cxNRxzfCebsZK+x0J1uMfM4n1iH
GukbsR6tgVedYwesT+yPviywXmXLmuux5QT+DSsz9NCYm+d4hydnvOQ+fk+XFQDd
lkSWFlZh3d6oX/M2KPieY1PG+C4rgl/835rlrWnRf1pmLIHjEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKYm9Zr0ZgnMkoq0S3HWAeoHQ/z5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvMzk5YThiM2QtYWMyNi0z
ZTYwLTkwZTQtMDU3MmZkMzIyOWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FnyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAyCD0wJQma0tEQLsm4FbkX+Yaao+yIpiNLIBs079D9hAPKWfTs2OESH
/r3mw/mwe9FRJ0ecUENjir+tnTYaAe/2wTiLV51uvqEq1uPBuh1Ps8cEZwXhH0uR
jN0T0hp9Z9lf5wcD15IDQ+8zLxBqECpUaEoUzDVmYotMQPu0X3LvZOQWjxQ55IyI
l/WMrcf/sWRWExZv0Jwd6GEumiF5KPLBxkyN5JayeUEY2D0cGfEZtlIW3vWFz491
zpKx4AM2gnw2s7W//jC1Cgwp8cNEiW0otfH5Ub6dH1pdpxwvNCZZkzwCm21B71AF
u4zqohDtQDYUqXuKWwS+5+hd0jNvqbo=
-----END CERTIFICATE-----
Generated at Mon Jul 20 16:12:15 2026 by rpki-client