Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/50961b5b-8f85-31b7-9c4b-1a2eb3c31f99.roa
File:                     50961b5b-8f85-31b7-9c4b-1a2eb3c31f99.roa (raw, json)
Hash identifier:          4Z0uqkzlsYA3t89WYGvOSE1PndLnydFZeDQBd+ap5Rs=
Subject key identifier:   0C:5E:CE:F1:CB:86:E4:10:25:94:C3:86:17:2B:76:AD:B7:30:59:48
Certificate issuer:       /CN=7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b
Certificate serial:       010D0C9F4328584B1867E039FED873B0DADAAB80
Authority key identifier: 27:6C:6C:7D:E1:1C:71:B2:F3:03:07:F4:B6:06:12:B1:62:59:7A:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/50961b5b-8f85-31b7-9c4b-1a2eb3c31f99.roa
Signing time:             Fri 05 Sep 2025 16:16:24 +0000
ROA not before:           Fri 05 Sep 2025 16:16:24 +0000
ROA not after:            Thu 04 Dec 2025 17:16:24 +0000
asID:                     395743
IP address blocks:        209.104.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Sep 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:67:e0:39:fe:d8:73:b0:da:da:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b
        Validity
            Not Before: Sep  5 16:16:24 2025 GMT
            Not After : Dec  4 17:16:24 2025 GMT
        Subject: CN=836a158f-37c7-4547-9559-405f12a333b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:27:5d:dc:7f:44:44:ca:90:62:f1:30:1d:c9:
                    04:43:8b:99:af:d5:7a:41:c1:99:82:0a:c4:a0:1e:
                    b5:c7:2e:e6:c5:06:20:bc:3c:43:59:12:a9:f2:e2:
                    c0:23:55:c7:24:f1:b0:5a:1a:ee:01:1c:db:f0:8e:
                    b9:f1:03:ae:49:98:63:8e:76:fe:cd:bb:28:cc:84:
                    04:22:94:57:2f:ef:20:fa:d4:03:10:ea:90:c7:9d:
                    aa:52:9e:7a:9f:31:bf:50:0f:de:03:cc:08:a5:5c:
                    3a:97:41:15:dd:fc:71:83:72:70:ee:d3:5d:8c:77:
                    29:c5:06:5d:d7:6f:31:3e:5a:91:3b:c7:ca:43:76:
                    77:5a:03:e8:8f:37:cd:7a:64:7a:96:80:b5:62:ce:
                    00:e9:e8:e7:a1:6b:89:00:58:93:15:f7:14:e9:e7:
                    44:ba:21:63:12:bf:89:e7:52:b2:2a:60:13:42:54:
                    25:e2:bf:0c:d1:37:cb:a2:8f:e6:ce:16:6e:ee:7e:
                    de:44:37:83:02:4e:c5:20:bb:34:21:97:ce:6b:df:
                    48:12:ad:6a:77:54:31:ed:fe:d7:4c:ac:fa:50:ac:
                    ea:e6:5f:b7:53:f4:8b:37:dc:65:27:5d:2b:1c:48:
                    8f:b4:f6:f6:73:22:af:27:7c:6d:12:20:ab:37:71:
                    f5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:5E:CE:F1:CB:86:E4:10:25:94:C3:86:17:2B:76:AD:B7:30:59:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/50961b5b-8f85-31b7-9c4b-1a2eb3c31f99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.crl

            X509v3 Authority Key Identifier:
                keyid:27:6C:6C:7D:E1:1C:71:B2:F3:03:07:F4:B6:06:12:B1:62:59:7A:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.104.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:21:bb:3f:07:14:ba:4b:11:a9:37:9e:17:87:22:f8:c1:1d:
         0b:dc:ad:bb:d7:82:45:c4:1f:34:73:7b:55:1b:67:a6:a9:ed:
         79:1d:93:f5:cd:d0:92:0f:fa:f4:fb:b4:3d:17:1f:24:99:b4:
         3c:0c:6e:b6:b2:d8:6e:50:9b:9b:03:99:e1:60:c8:b5:80:aa:
         59:c4:ce:64:22:6a:c9:f7:9a:5d:e8:d1:d0:6c:48:ed:f9:b4:
         ab:fc:cc:2a:61:4c:51:f3:01:cc:90:e0:38:01:03:2f:7d:5d:
         a7:29:d9:8a:ad:8b:2b:48:c8:a7:eb:d3:3d:fa:fe:0d:91:04:
         6f:a5:0a:96:e1:17:78:a8:3d:3f:d5:12:3f:57:18:83:e3:8c:
         f0:36:f7:1c:cd:70:e4:cd:f9:65:3b:58:da:02:f4:31:5c:c9:
         69:1d:1b:a1:9c:43:d1:37:08:33:c5:76:4a:91:d2:b1:2b:0b:
         52:91:9c:54:e3:9e:4b:9f:6d:9c:e5:21:9c:d5:4f:b6:bc:46:
         e7:94:57:e9:4c:67:cf:a0:f9:dc:ac:de:c4:09:59:86:f4:42:
         12:4f:30:0e:c7:b4:28:ae:ff:64:eb:ec:e1:04:fb:f1:98:a7:
         9a:e3:2a:8a:8e:0a:9b:f7:ab:7a:92:45:b1:eb:f9:2f:2c:67:
         7c:41:ac:d0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYZ+A5/thzsNraq4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2MzZjU3MjYtNGRiZS00OGVjLThlZDctZmI0ZjNlYzRh
MDBiMB4XDTI1MDkwNTE2MTYyNFoXDTI1MTIwNDE3MTYyNFowLzEtMCsGA1UEAxMk
ODM2YTE1OGYtMzdjNy00NTQ3LTk1NTktNDA1ZjEyYTMzM2I1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCdd3H9ERMqQYvEwHckEQ4uZr9V6QcGZggrE
oB61xy7mxQYgvDxDWRKp8uLAI1XHJPGwWhruARzb8I658QOuSZhjjnb+zbsozIQE
IpRXL+8g+tQDEOqQx52qUp56nzG/UA/eA8wIpVw6l0EV3fxxg3Jw7tNdjHcpxQZd
128xPlqRO8fKQ3Z3WgPojzfNemR6loC1Ys4A6ejnoWuJAFiTFfcU6edEuiFjEr+J
51KyKmATQlQl4r8M0TfLoo/mzhZu7n7eRDeDAk7FILs0IZfOa99IEq1qd1Qx7f7X
TKz6UKzq5l+3U/SLN9xlJ10rHEiPtPb2cyKvJ3xtEiCrN3H1SwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAxezvHLhuQQJZTDhhcrdq23MFlIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83YzNm
NTcyNi00ZGJlLTQ4ZWMtOGVkNy1mYjRmM2VjNGEwMGIvNTA5NjFiNWItOGY4NS0z
MWI3LTljNGItMWEyZWIzYzMxZjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2MzZjU3MjYtNGRiZS00OGVjLThl
ZDctZmI0ZjNlYzRhMDBiLzdjM2Y1NzI2LTRkYmUtNDhlYy04ZWQ3LWZiNGYzZWM0
YTAwYi5jcmwwHwYDVR0jBBgwFoAUJ2xsfeEccbLzAwf0tgYSsWJZepYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83YzNmNTcyNi00ZGJlLTQ4ZWMtOGVkNy1mYjRm
M2VjNGEwMGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0WjQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFIhuz8HFLpLEak3nheHIvjBHQvcrbvXgkXEHzRze1UbZ6ap7Xkdk/XN
0JIP+vT7tD0XHySZtDwMbray2G5Qm5sDmeFgyLWAqlnEzmQiasn3ml3o0dBsSO35
tKv8zCphTFHzAcyQ4DgBAy99Xacp2YqtiytIyKfr0z36/g2RBG+lCpbhF3ioPT/V
Ej9XGIPjjPA29xzNcOTN+WU7WNoC9DFcyWkdG6GcQ9E3CDPFdkqR0rErC1KRnFTj
nkufbZzlIZzVT7a8RueUV+lMZ8+g+dys3sQJWYb0QhJPMA7HtCiu/2Tr7OEE+/GY
p5rjKoqOCpv3q3qSRbHr+S8sZ3xBrNA=
-----END CERTIFICATE-----
Generated at Sun Sep 14 17:29:43 2025 by rpki-client