Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/922ae5f9-b830-4b75-87f1-538d9db7f754/1d68b156-2907-3ca3-9aa8-81f55effb8ae.roa
File:                     1d68b156-2907-3ca3-9aa8-81f55effb8ae.roa (raw, json)
Hash identifier:          S6NqKytjIfzmKH4QhxHkUMRm84xokAnZSEydWKmraxA=
Subject key identifier:   D0:25:EB:7E:BE:53:39:CA:5A:CF:A7:7A:35:93:5A:25:54:C8:DF:FC
Certificate issuer:       /CN=922ae5f9-b830-4b75-87f1-538d9db7f754
Certificate serial:       010D0C9F4328584DFF4FB07AD874BD428A003A00
Authority key identifier: D4:96:A9:4A:48:78:6F:B8:FB:99:31:CC:C3:4B:C5:71:4D:4C:72:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/922ae5f9-b830-4b75-87f1-538d9db7f754.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/922ae5f9-b830-4b75-87f1-538d9db7f754/1d68b156-2907-3ca3-9aa8-81f55effb8ae.roa
Signing time:             Fri 29 May 2026 18:53:16 +0000
ROA not before:           Fri 29 May 2026 18:53:16 +0000
ROA not after:            Thu 27 Aug 2026 18:53:16 +0000
asID:                     812
IP address blocks:        209.162.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/922ae5f9-b830-4b75-87f1-538d9db7f754/922ae5f9-b830-4b75-87f1-538d9db7f754.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/922ae5f9-b830-4b75-87f1-538d9db7f754/922ae5f9-b830-4b75-87f1-538d9db7f754.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/922ae5f9-b830-4b75-87f1-538d9db7f754.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ff:4f:b0:7a:d8:74:bd:42:8a:00:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=922ae5f9-b830-4b75-87f1-538d9db7f754
        Validity
            Not Before: May 29 18:53:16 2026 GMT
            Not After : Aug 27 18:53:16 2026 GMT
        Subject: CN=3c43bd9f-d8b1-4539-9538-9f09bb6ab6c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:80:9e:11:88:38:cd:3a:b6:ff:bf:20:c1:fd:
                    de:30:03:0c:56:95:b0:b5:2d:70:9b:b8:fb:e8:62:
                    b5:75:f1:04:8a:25:4e:90:87:09:4d:05:3d:2f:04:
                    d9:6e:b0:62:c9:d2:8f:78:f0:7d:f1:1a:fe:aa:3f:
                    a6:a7:de:b4:2a:32:72:c5:47:ce:b7:52:60:f5:a6:
                    96:90:d9:28:62:92:45:98:41:03:f2:bf:9c:70:9d:
                    60:4e:68:7e:91:09:cc:1e:9a:67:c3:53:0c:a3:24:
                    12:cf:33:85:55:ee:0d:2a:e0:34:47:fe:67:55:67:
                    f8:59:b0:f6:aa:28:ec:c1:d9:0e:03:5c:36:f0:37:
                    49:4d:38:36:d6:a9:ff:1b:fa:3d:0a:0a:1d:1f:cf:
                    6d:09:58:24:ad:4f:5e:39:55:f7:0e:eb:61:6e:33:
                    80:6b:8a:2f:8a:87:25:44:21:d5:23:fa:d0:dc:90:
                    ca:ff:43:c4:14:1d:14:42:91:85:1d:5d:c6:52:12:
                    6c:08:73:16:60:89:85:12:9d:00:6a:08:c1:a5:09:
                    aa:4b:8e:30:25:66:98:86:15:4d:af:b1:1d:07:92:
                    7c:a0:eb:9b:9c:5c:45:3a:75:73:9b:0b:8b:da:a3:
                    2b:b0:fb:fa:df:af:5b:48:17:83:94:c9:4f:6d:ad:
                    cc:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:25:EB:7E:BE:53:39:CA:5A:CF:A7:7A:35:93:5A:25:54:C8:DF:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/922ae5f9-b830-4b75-87f1-538d9db7f754/1d68b156-2907-3ca3-9aa8-81f55effb8ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/922ae5f9-b830-4b75-87f1-538d9db7f754/922ae5f9-b830-4b75-87f1-538d9db7f754.crl

            X509v3 Authority Key Identifier:
                keyid:D4:96:A9:4A:48:78:6F:B8:FB:99:31:CC:C3:4B:C5:71:4D:4C:72:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/922ae5f9-b830-4b75-87f1-538d9db7f754.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.162.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:56:19:eb:c5:fd:ab:db:e4:09:62:41:5b:79:ac:1e:d9:24:
         86:37:49:ba:0c:35:91:fe:be:d6:7e:93:e7:9c:a8:90:1c:5b:
         d3:26:6c:64:8d:3a:92:ae:70:67:f3:84:ec:5c:76:19:f8:3b:
         0f:82:0f:4e:4c:7e:48:52:86:d7:72:ae:34:5f:67:9b:a3:ef:
         f1:c4:80:be:b1:f6:8b:32:b5:2a:10:3e:1f:1f:f5:a9:36:4b:
         25:e3:ad:70:67:5a:e0:86:69:55:48:59:07:c5:b1:34:8a:ac:
         72:ad:02:45:bc:02:dc:d3:14:4a:5f:14:6d:b0:c1:42:23:b9:
         5a:f1:e9:1d:95:9a:bb:bd:02:f5:22:54:ec:d6:4b:1d:ba:7e:
         2e:7c:97:5b:de:be:12:ad:5c:2d:71:ae:39:ea:4a:bc:28:03:
         06:ad:50:71:d6:45:e5:d2:8d:c9:f7:7b:ed:47:2a:6c:69:16:
         42:35:23:37:5b:0b:38:b6:6f:d3:bb:ed:c9:6b:a9:30:5f:86:
         46:48:fd:a2:23:a2:6a:a1:48:f7:39:62:c2:90:95:82:b6:7f:
         c5:a2:0b:0e:04:60:68:db:b4:5a:3f:45:e5:8d:d8:c7:10:cd:
         b6:96:cc:b7:75:f9:2c:ae:cc:81:3f:ec:1a:ff:fa:de:81:c2:
         8f:47:e1:4b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3/T7B62HS9QooAOgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTIyYWU1ZjktYjgzMC00Yjc1LTg3ZjEtNTM4ZDlkYjdm
NzU0MB4XDTI2MDUyOTE4NTMxNloXDTI2MDgyNzE4NTMxNlowLzEtMCsGA1UEAxMk
M2M0M2JkOWYtZDhiMS00NTM5LTk1MzgtOWYwOWJiNmFiNmMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoCeEYg4zTq2/78gwf3eMAMMVpWwtS1wm7j7
6GK1dfEEiiVOkIcJTQU9LwTZbrBiydKPePB98Rr+qj+mp960KjJyxUfOt1Jg9aaW
kNkoYpJFmEED8r+ccJ1gTmh+kQnMHppnw1MMoyQSzzOFVe4NKuA0R/5nVWf4WbD2
qijswdkOA1w28DdJTTg21qn/G/o9CgodH89tCVgkrU9eOVX3DuthbjOAa4oviocl
RCHVI/rQ3JDK/0PEFB0UQpGFHV3GUhJsCHMWYImFEp0AagjBpQmqS44wJWaYhhVN
r7EdB5J8oOubnFxFOnVzmwuL2qMrsPv6369bSBeDlMlPba3MTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNAl636+UznKWs+nejWTWiVUyN/8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS85MjJh
ZTVmOS1iODMwLTRiNzUtODdmMS01MzhkOWRiN2Y3NTQvMWQ2OGIxNTYtMjkwNy0z
Y2EzLTlhYTgtODFmNTVlZmZiOGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvOTIyYWU1ZjktYjgzMC00Yjc1LTg3
ZjEtNTM4ZDlkYjdmNzU0LzkyMmFlNWY5LWI4MzAtNGI3NS04N2YxLTUzOGQ5ZGI3
Zjc1NC5jcmwwHwYDVR0jBBgwFoAU1JapSkh4b7j7mTHMw0vFcU1Mcn8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS85MjJhZTVmOS1iODMwLTRiNzUtODdmMS01Mzhk
OWRiN2Y3NTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0aLOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACtWGevF/avb5AliQVt5rB7ZJIY3SboMNZH+vtZ+k+ecqJAcW9MmbGSN
OpKucGfzhOxcdhn4Ow+CD05MfkhShtdyrjRfZ5uj7/HEgL6x9osytSoQPh8f9ak2
SyXjrXBnWuCGaVVIWQfFsTSKrHKtAkW8AtzTFEpfFG2wwUIjuVrx6R2Vmru9AvUi
VOzWSx26fi58l1vevhKtXC1xrjnqSrwoAwatUHHWReXSjcn3e+1HKmxpFkI1Izdb
Czi2b9O77clrqTBfhkZI/aIjomqhSPc5YsKQlYK2f8WiCw4EYGjbtFo/ReWN2McQ
zbaWzLd1+SyuzIE/7Br/+t6Bwo9H4Us=
-----END CERTIFICATE-----
Generated at Mon Jun 1 21:59:54 2026 by rpki-client