Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e/309d58ec-9dfe-3f07-b602-f7d2c3980950.roa
File:                     309d58ec-9dfe-3f07-b602-f7d2c3980950.roa (raw, json)
Hash identifier:          rSeRXtdATk96nkI5UNFCinYa9XY5haur0HEMTF51fDY=
Subject key identifier:   D1:88:2D:16:F1:85:4D:13:FD:6F:BA:27:C2:F5:8F:DD:1B:77:D6:48
Certificate issuer:       /CN=df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e
Certificate serial:       010D0C9F4328584F71ED8DB9B5293D47FD6DDB80
Authority key identifier: 6A:2F:21:21:3F:15:F9:77:C2:6B:EF:1A:58:1F:41:1C:58:6B:7E:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e/309d58ec-9dfe-3f07-b602-f7d2c3980950.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     63362
IP address blocks:        104.254.204.0/22 maxlen: 22
                          104.254.204.0/23 maxlen: 23
                          104.254.206.0/24 maxlen: 24
                          104.254.207.0/24 maxlen: 24
                          205.143.40.0/22 maxlen: 22
                          205.143.40.0/23 maxlen: 23
                          205.143.42.0/23 maxlen: 23
                          205.143.42.0/24 maxlen: 24
                          205.143.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:8d:b9:b5:29:3d:47:fd:6d:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=702d8ca8-273e-4209-95f4-108ae053e608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2b:01:48:80:ed:47:9e:5f:42:63:72:9e:59:
                    97:4a:14:d9:53:7d:65:18:1e:a1:a6:43:fd:91:a8:
                    68:3e:29:03:2c:f8:ff:fd:24:2b:55:69:2a:66:0b:
                    b0:1e:51:15:5e:a8:38:f2:3d:e7:dd:23:30:61:46:
                    c1:48:26:94:be:d1:f2:df:62:54:77:b7:66:8f:94:
                    ec:64:81:02:5f:f7:e1:ec:2f:10:d6:45:f4:c8:b5:
                    a5:09:77:d6:28:71:3f:35:9a:f4:d2:d9:63:89:32:
                    7a:0c:28:69:8a:ad:35:25:aa:27:3b:03:8f:32:65:
                    90:4b:c9:ce:91:3e:62:5c:4f:78:2e:b8:55:22:a0:
                    34:f3:fe:89:66:42:34:d0:c3:27:c2:63:38:7b:20:
                    52:20:e8:2c:5d:a4:65:82:56:1d:b8:06:36:79:dd:
                    38:b8:50:5a:e0:fb:54:0b:a7:7e:e2:78:4d:03:a7:
                    e1:e3:b9:1b:93:67:ff:79:c5:3c:3d:b4:e1:78:d0:
                    8a:f3:a8:94:c2:94:d3:2e:71:77:c1:d9:8f:22:58:
                    7c:d6:3d:a2:bb:f9:d4:38:00:16:da:42:d8:24:56:
                    af:04:58:70:29:6c:37:c6:32:85:6e:2f:f2:3a:f7:
                    42:43:e8:83:be:99:b7:88:9a:a1:76:11:82:e0:3c:
                    95:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:88:2D:16:F1:85:4D:13:FD:6F:BA:27:C2:F5:8F:DD:1B:77:D6:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e/309d58ec-9dfe-3f07-b602-f7d2c3980950.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.crl

            X509v3 Authority Key Identifier:
                keyid:6A:2F:21:21:3F:15:F9:77:C2:6B:EF:1A:58:1F:41:1C:58:6B:7E:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.254.204.0/22
                  205.143.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:dd:f1:81:56:90:5a:39:d1:7d:33:99:e6:b8:53:1c:51:55:
         91:74:51:48:83:d4:ce:ca:d9:c3:84:fd:e0:d9:23:d3:07:51:
         2c:50:67:cd:63:8e:e7:86:0b:da:b2:b3:47:f0:bb:0e:30:88:
         cc:f2:ef:dd:44:c2:bc:52:48:ec:b2:76:9b:65:6d:56:98:6c:
         fd:38:16:9d:90:74:40:f2:60:44:16:63:bc:bb:bb:a7:09:ac:
         35:24:79:0e:1a:eb:89:ae:17:b4:2c:e8:00:94:39:36:8c:7f:
         b3:db:ce:0e:81:b9:67:80:cc:33:ab:7d:bd:00:83:a5:c7:dc:
         2f:21:c0:67:f7:65:85:1b:ea:da:7c:20:86:5e:80:ba:42:e3:
         79:6c:c2:96:7d:0b:be:00:3e:bd:2a:c3:99:24:f8:7f:d9:4d:
         32:4d:c5:3f:45:bc:fc:8d:31:1e:f5:78:61:07:ce:de:f5:48:
         6c:a3:25:f1:19:35:fb:a2:60:f4:fb:69:00:b2:9d:e2:e8:40:
         11:19:c4:d0:db:ac:8c:7e:0f:d2:a1:a5:d0:e4:bf:b4:37:e6:
         0d:f1:81:0d:97:fa:ae:f7:7a:ea:5e:96:1d:93:21:b6:18:69:
         90:53:6c:7c:e8:5d:17:a4:40:0e:66:89:d6:1d:23:37:9c:e5:
         76:56:a0:66
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9x7Y25tSk9R/1t24AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGY5Njk2ZjYtN2NhNS00ZWI3LWJkMjEtZWFlZTNiMWUz
ZjhlMB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk
NzAyZDhjYTgtMjczZS00MjA5LTk1ZjQtMTA4YWUwNTNlNjA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqysBSIDtR55fQmNynlmXShTZU31lGB6hpkP9
kahoPikDLPj//SQrVWkqZguwHlEVXqg48j3n3SMwYUbBSCaUvtHy32JUd7dmj5Ts
ZIECX/fh7C8Q1kX0yLWlCXfWKHE/NZr00tljiTJ6DChpiq01JaonOwOPMmWQS8nO
kT5iXE94LrhVIqA08/6JZkI00MMnwmM4eyBSIOgsXaRlglYduAY2ed04uFBa4PtU
C6d+4nhNA6fh47kbk2f/ecU8PbTheNCK86iUwpTTLnF3wdmPIlh81j2iu/nUOAAW
2kLYJFavBFhwKWw3xjKFbi/yOvdCQ+iDvpm3iJqhdhGC4DyVVQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFNGILRbxhU0T/W+6J8L1j90bd9ZIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kZjk2
OTZmNi03Y2E1LTRlYjctYmQyMS1lYWVlM2IxZTNmOGUvMzA5ZDU4ZWMtOWRmZS0z
ZjA3LWI2MDItZjdkMmMzOTgwOTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZGY5Njk2ZjYtN2NhNS00ZWI3LWJk
MjEtZWFlZTNiMWUzZjhlL2RmOTY5NmY2LTdjYTUtNGViNy1iZDIxLWVhZWUzYjFl
M2Y4ZS5jcmwwHwYDVR0jBBgwFoAUai8hIT8V+XfCa+8aWB9BHFhrfqMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kZjk2OTZmNi03Y2E1LTRlYjctYmQyMS1lYWVl
M2IxZTNmOGUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCaP7MAwQC
zY8oMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBACnd8YFWkFo50X0zmea4UxxRVZF0UUiD1M7K2cOE/eDZI9MH
USxQZ81jjueGC9qys0fwuw4wiMzy791EwrxSSOyydptlbVaYbP04Fp2QdEDyYEQW
Y7y7u6cJrDUkeQ4a64muF7Qs6ACUOTaMf7Pbzg6BuWeAzDOrfb0Ag6XH3C8hwGf3
ZYUb6tp8IIZegLpC43lswpZ9C74APr0qw5kk+H/ZTTJNxT9FvPyNMR71eGEHzt71
SGyjJfEZNfuiYPT7aQCyneLoQBEZxNDbrIx+D9KhpdDkv7Q35g3xgQ2X+q73eupe
lh2TIbYYaZBTbHzoXRekQA5midYdIzec5XZWoGY=
-----END CERTIFICATE-----
Generated at Sat Oct 10 10:21:08 2026 by rpki-client