Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/f7377074-79a9-3c65-893e-e173c83478cf.roa
File:                     f7377074-79a9-3c65-893e-e173c83478cf.roa (raw, json)
Hash identifier:          lKy1D+zbHXbi6aeLYy8f/XdeQFtfUBcNhUKw4oaVKMM=
Subject key identifier:   91:78:18:E9:95:7D:5E:E0:5F:8F:99:BC:0C:46:E0:61:9E:46:60:B7
Certificate issuer:       /CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae
Certificate serial:       010D0C9F4328584FBED12C4DA2231888E8BFC580
Authority key identifier: D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/f7377074-79a9-3c65-893e-e173c83478cf.roa
Signing time:             Fri 06 Nov 2026 02:00:14 +0000
ROA not before:           Fri 06 Nov 2026 02:00:14 +0000
ROA not after:            Thu 04 Feb 2027 02:00:14 +0000
asID:                     13213
IP address blocks:        209.236.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:be:d1:2c:4d:a2:23:18:88:e8:bf:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae
        Validity
            Not Before: Nov  6 02:00:14 2026 GMT
            Not After : Feb  4 02:00:14 2027 GMT
        Subject: CN=c7b38699-3156-4b0d-8f96-57e75aaebbdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:46:e1:18:4f:e7:b8:65:57:15:7c:19:2a:f7:
                    ae:ae:5e:ab:27:45:a8:c4:38:67:ad:d6:7d:06:d3:
                    19:9e:25:08:ea:04:f2:b6:0d:b0:31:48:10:50:c1:
                    53:5e:fc:ff:48:ac:70:bd:70:0c:93:5f:ec:08:d0:
                    98:69:6d:a7:8e:77:2d:73:67:57:87:8f:46:a6:bb:
                    f1:6b:36:91:2a:d5:e4:83:4f:70:5e:b5:98:79:10:
                    93:d6:19:e7:05:81:2d:91:db:e4:ee:d0:db:6d:ee:
                    e5:0d:f5:3f:e2:e7:9c:8a:bf:25:c4:65:50:e6:df:
                    47:d7:b1:7e:39:0d:bc:27:d6:1f:68:55:f6:34:13:
                    b5:e1:9a:f2:6b:c8:3b:2a:01:74:cc:e6:38:1e:e3:
                    56:4a:37:11:29:37:5d:9e:56:12:12:a8:d8:73:43:
                    6c:fd:fe:a4:1d:57:e0:92:04:d5:b4:e4:00:3d:f2:
                    ee:a9:fe:af:e6:fd:d7:85:a9:0b:42:44:68:44:b2:
                    75:85:18:09:f9:72:ba:14:b0:13:70:d0:72:43:21:
                    61:41:a8:c4:18:f1:76:7c:b5:df:85:cc:bf:9c:54:
                    21:d7:f6:b7:6c:63:68:56:74:98:7e:48:ac:5d:f9:
                    90:27:c6:aa:01:cc:c9:4a:0e:c5:9d:04:31:ef:64:
                    03:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:78:18:E9:95:7D:5E:E0:5F:8F:99:BC:0C:46:E0:61:9E:46:60:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/f7377074-79a9-3c65-893e-e173c83478cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl

            X509v3 Authority Key Identifier:
                keyid:D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.236.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:1a:d2:82:ac:31:b8:06:72:62:5e:aa:d7:51:5b:d8:1f:eb:
         3e:04:48:29:b4:18:c9:2c:f7:ff:a3:93:87:96:5b:33:b3:99:
         a4:99:2e:18:2f:9f:c6:ee:f2:8a:df:0f:8e:d8:6f:b7:ce:4b:
         5f:06:a6:10:c5:b0:18:38:77:6c:80:91:32:d6:c2:df:af:09:
         34:e2:a7:33:81:d7:79:ef:9c:a1:f9:0f:fc:bb:87:c5:38:f6:
         95:6d:32:08:73:e7:17:a6:be:6d:b1:79:ed:ee:d7:eb:03:41:
         27:ea:4d:b6:88:98:69:21:e7:fe:0a:57:bc:e4:7f:0b:d6:d7:
         57:1b:3d:2c:42:6e:eb:68:6b:58:b6:68:db:d7:61:ae:ae:2b:
         b8:8f:90:0b:f1:3c:52:9d:be:05:2b:57:0b:b1:4e:8a:23:25:
         6f:e7:a0:b7:c9:cd:8a:9a:97:01:28:33:9a:e5:42:fb:b8:99:
         9d:25:93:cc:88:29:f0:7c:f4:bb:75:14:88:a6:ee:62:8d:bb:
         e8:8e:9b:f8:e2:de:87:f1:3f:d7:cc:4c:47:9c:8e:d5:b2:fb:
         df:ea:77:d5:d3:93:3e:33:d9:6d:1f:03:05:fa:12:a7:d4:03:
         2d:09:e4:ea:33:d7:f5:17:9d:01:2a:a6:b0:bc:8e:84:c9:f5:
         88:35:fa:d6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE++0SxNoiMYiOi/xYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTY3YTk4YjAtMTAwZi00ZTY5LThhOWYtYmNlYWRiN2U5
YWFlMB4XDTI2MTEwNjAyMDAxNFoXDTI3MDIwNDAyMDAxNFowLzEtMCsGA1UEAxMk
YzdiMzg2OTktMzE1Ni00YjBkLThmOTYtNTdlNzVhYWViYmRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkbhGE/nuGVXFXwZKveurl6rJ0WoxDhnrdZ9
BtMZniUI6gTytg2wMUgQUMFTXvz/SKxwvXAMk1/sCNCYaW2njnctc2dXh49Gprvx
azaRKtXkg09wXrWYeRCT1hnnBYEtkdvk7tDbbe7lDfU/4uecir8lxGVQ5t9H17F+
OQ28J9YfaFX2NBO14Zrya8g7KgF0zOY4HuNWSjcRKTddnlYSEqjYc0Ns/f6kHVfg
kgTVtOQAPfLuqf6v5v3XhakLQkRoRLJ1hRgJ+XK6FLATcNByQyFhQajEGPF2fLXf
hcy/nFQh1/a3bGNoVnSYfkisXfmQJ8aqAczJSg7FnQQx72QDJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJF4GOmVfV7gX4+ZvAxG4GGeRmC3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Njdh
OThiMC0xMDBmLTRlNjktOGE5Zi1iY2VhZGI3ZTlhYWUvZjczNzcwNzQtNzlhOS0z
YzY1LTg5M2UtZTE3M2M4MzQ3OGNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTY3YTk4YjAtMTAwZi00ZTY5LThh
OWYtYmNlYWRiN2U5YWFlLzk2N2E5OGIwLTEwMGYtNGU2OS04YTlmLWJjZWFkYjdl
OWFhZS5jcmwwHwYDVR0jBBgwFoAU11g4vsgJB/HhoBW3h78hrABJOTswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85NjdhOThiMC0xMDBmLTRlNjktOGE5Zi1iY2Vh
ZGI3ZTlhYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0exAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGga0oKsMbgGcmJeqtdRW9gf6z4ESCm0GMks9/+jk4eWWzOzmaSZLhgv
n8bu8orfD47Yb7fOS18GphDFsBg4d2yAkTLWwt+vCTTipzOB13nvnKH5D/y7h8U4
9pVtMghz5xemvm2xee3u1+sDQSfqTbaImGkh5/4KV7zkfwvW11cbPSxCbutoa1i2
aNvXYa6uK7iPkAvxPFKdvgUrVwuxToojJW/noLfJzYqalwEoM5rlQvu4mZ0lk8yI
KfB89Lt1FIim7mKNu+iOm/ji3ofxP9fMTEecjtWy+9/qd9XTkz4z2W0fAwX6EqfU
Ay0J5Ooz1/UXnQEqprC8joTJ9Yg1+tY=
-----END CERTIFICATE-----
Generated at Sun Nov 15 13:26:29 2026 by rpki-client