Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9d710f75-201f-327c-bfcc-2d4a1aad66a0.roa
File:                     9d710f75-201f-327c-bfcc-2d4a1aad66a0.roa (raw, json)
Hash identifier:          h4XyRtni2joboCRkDPIXvRi1yGlse5V/pPhX6AXHoNY=
Subject key identifier:   A7:E4:F9:C8:9D:ED:09:95:7C:93:75:F9:53:25:F1:74:78:78:8E:75
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584DDBBB1ED08D2B0E37C8BBF580
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9d710f75-201f-327c-bfcc-2d4a1aad66a0.roa
Signing time:             Sun 17 May 2026 01:00:24 +0000
ROA not before:           Sun 17 May 2026 01:00:24 +0000
ROA not after:            Sat 15 Aug 2026 01:00:24 +0000
asID:                     20001
IP address blocks:        206.217.82.0/23 maxlen: 24
                          206.217.88.0/23 maxlen: 24
                          206.217.98.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:db:bb:1e:d0:8d:2b:0e:37:c8:bb:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: May 17 01:00:24 2026 GMT
            Not After : Aug 15 01:00:24 2026 GMT
        Subject: CN=a2ed2887-0dca-4f84-8fc8-28b6b87bccf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:18:de:fe:ad:1f:45:bd:04:0d:37:97:c7:ce:
                    5a:c1:ee:4f:77:7c:8e:23:73:06:fa:2a:8c:91:fe:
                    66:b4:12:21:3f:c8:e7:84:76:9b:af:2f:b1:e7:c3:
                    71:74:90:99:db:e3:af:97:34:2a:98:87:f7:d3:f6:
                    cb:a9:7c:dd:37:c3:60:e6:80:69:78:3d:42:09:d4:
                    39:04:a8:33:ed:b5:e0:2e:d9:90:eb:1e:f4:ed:7f:
                    66:95:46:78:f2:81:ea:73:77:ad:c6:10:2c:26:c6:
                    72:f3:4f:da:08:dd:6f:fa:4c:de:08:28:e8:a4:8d:
                    6c:53:59:67:cd:31:45:4a:96:dd:7d:58:45:fa:2d:
                    b5:a9:4f:27:f2:c4:81:a9:ef:34:b0:43:98:12:60:
                    02:6e:db:7b:1c:4f:bd:0b:41:3f:18:7a:6a:43:d5:
                    7a:30:89:b7:d8:7f:88:d8:a8:4c:a2:f4:ef:47:19:
                    86:87:b7:0a:dc:43:6d:d1:d9:cf:1b:f6:91:2e:5e:
                    d6:b0:68:db:ae:65:7c:9d:8a:e4:7a:16:9a:67:0c:
                    76:8b:7d:b9:74:d2:92:58:da:0f:6f:77:75:da:17:
                    05:35:85:3e:c7:83:81:db:b1:5a:87:ca:e0:bf:8b:
                    26:bb:82:c2:25:a4:0a:c3:d9:9d:90:85:79:dd:60:
                    1d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:E4:F9:C8:9D:ED:09:95:7C:93:75:F9:53:25:F1:74:78:78:8E:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9d710f75-201f-327c-bfcc-2d4a1aad66a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.217.82.0/23
                  206.217.88.0/23
                  206.217.98.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:89:d6:83:53:73:1d:6e:7c:43:c6:e5:7a:b1:47:97:0a:b1:
         4c:ab:f6:52:30:1a:c8:0e:aa:9d:5f:ba:81:4b:df:6a:f9:a9:
         61:25:fe:d6:ce:94:74:45:6b:05:04:86:c3:fb:d5:f4:8b:e8:
         98:4a:bb:83:e1:4e:10:2c:11:bc:dd:24:d2:a1:a9:eb:d3:ed:
         10:ce:00:b6:de:63:48:76:f0:01:67:f5:bf:a5:be:db:2d:96:
         bc:f0:ef:0b:b4:41:58:88:4f:84:71:cd:f3:df:78:d3:5c:1d:
         8d:73:cb:a0:d5:3f:bd:78:f7:1e:25:3a:a0:bb:b2:a0:66:08:
         b9:18:0a:52:57:cc:6b:61:08:a8:18:13:ef:75:41:b2:69:fb:
         89:94:14:d8:ed:dd:93:51:13:38:8f:b4:26:3e:96:9d:35:a5:
         60:6e:db:bc:87:5f:de:bb:9b:0a:c1:54:4d:0a:c4:8e:17:4d:
         a8:da:4f:c5:18:51:a2:8f:26:6c:90:4f:22:af:b3:91:52:37:
         88:ad:95:32:90:51:ae:87:de:b5:1c:d9:08:2d:b2:1b:e3:06:
         12:32:48:fb:03:b1:f9:0b:ce:92:9a:3c:40:5e:75:b5:32:6c:
         21:2b:0e:d3:66:22:bd:10:da:30:1a:47:37:fc:c9:77:58:9d:
         0e:15:d6:1c
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE3bux7QjSsON8i79YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDUxNzAxMDAyNFoXDTI2MDgxNTAxMDAyNFowLzEtMCsGA1UEAxMk
YTJlZDI4ODctMGRjYS00Zjg0LThmYzgtMjhiNmI4N2JjY2Y3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRje/q0fRb0EDTeXx85awe5Pd3yOI3MG+iqM
kf5mtBIhP8jnhHabry+x58NxdJCZ2+OvlzQqmIf30/bLqXzdN8Ng5oBpeD1CCdQ5
BKgz7bXgLtmQ6x707X9mlUZ48oHqc3etxhAsJsZy80/aCN1v+kzeCCjopI1sU1ln
zTFFSpbdfVhF+i21qU8n8sSBqe80sEOYEmACbtt7HE+9C0E/GHpqQ9V6MIm32H+I
2KhMovTvRxmGh7cK3ENt0dnPG/aRLl7WsGjbrmV8nYrkehaaZwx2i325dNKSWNoP
b3d12hcFNYU+x4OB27Fah8rgv4smu4LCJaQKw9mdkIV53WAd7wIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFKfk+cid7QmVfJN1+VMl8XR4eI51MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOWQ3MTBmNzUtMjAxZi0z
MjdjLWJmY2MtMmQ0YTFhYWQ2NmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBztlSAwQB
ztlYAwQBztliMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAA+J1oNTcx1ufEPG5XqxR5cKsUyr9lIwGsgOqp1f
uoFL32r5qWEl/tbOlHRFawUEhsP71fSL6JhKu4PhThAsEbzdJNKhqevT7RDOALbe
Y0h28AFn9b+lvtstlrzw7wu0QViIT4RxzfPfeNNcHY1zy6DVP7149x4lOqC7sqBm
CLkYClJXzGthCKgYE+91QbJp+4mUFNjt3ZNREziPtCY+lp01pWBu27yHX967mwrB
VE0KxI4XTajaT8UYUaKPJmyQTyKvs5FSN4itlTKQUa6H3rUc2QgtshvjBhIySPsD
sfkLzpKaPEBedbUybCErDtNmIr0Q2jAaRzf8yXdYnQ4V1hw=
-----END CERTIFICATE-----
Generated at Thu Jun 4 11:11:25 2026 by rpki-client