Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d473e375-fb2d-4dcb-888b-209cdbcba3f2/d17697b5-d0d8-3086-b4d3-493e42afafed.roa
File:                     d17697b5-d0d8-3086-b4d3-493e42afafed.roa (raw, json)
Hash identifier:          dq/Njx5RPcIcOHGsYuElLE5kVGuoNQE+ph/P+p2YgxU=
Subject key identifier:   C9:BD:70:D2:F8:8C:F1:5C:84:16:B0:28:5E:6F:3C:5B:6B:46:1C:44
Certificate issuer:       /CN=d473e375-fb2d-4dcb-888b-209cdbcba3f2
Certificate serial:       010D0C9F4328584F498A1AFAD461F8E822778E00
Authority key identifier: 68:1D:70:D0:D7:B4:1E:AE:23:DC:3B:4A:31:E1:B8:CD:20:21:70:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d473e375-fb2d-4dcb-888b-209cdbcba3f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d473e375-fb2d-4dcb-888b-209cdbcba3f2/d17697b5-d0d8-3086-b4d3-493e42afafed.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     35850
IP address blocks:        206.108.118.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d473e375-fb2d-4dcb-888b-209cdbcba3f2/d473e375-fb2d-4dcb-888b-209cdbcba3f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d473e375-fb2d-4dcb-888b-209cdbcba3f2/d473e375-fb2d-4dcb-888b-209cdbcba3f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d473e375-fb2d-4dcb-888b-209cdbcba3f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 19 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8a:1a:fa:d4:61:f8:e8:22:77:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d473e375-fb2d-4dcb-888b-209cdbcba3f2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=31e1cc89-3241-4bbc-a078-96d94fe87fad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a5:11:24:2b:46:52:10:67:bf:1a:d7:fb:2d:
                    27:2c:d0:cc:0b:b3:15:fc:63:e3:a5:2f:de:fa:2e:
                    8f:40:44:79:7b:45:61:1a:67:f8:e8:4a:0e:20:45:
                    3e:52:95:72:59:36:8b:57:77:b2:54:b5:79:49:ab:
                    41:8f:44:17:f0:1d:51:19:fe:85:bb:b2:a4:2e:dd:
                    17:4f:96:2c:b3:11:00:ab:d2:39:c6:3b:ef:b3:c6:
                    68:aa:20:15:a3:8a:85:bd:c2:10:46:72:17:11:eb:
                    6e:f1:ce:a3:74:0f:0f:4c:5a:bf:47:1a:63:28:1f:
                    ee:ae:fa:3c:2e:0e:62:1a:2f:f2:cd:88:9f:17:71:
                    9e:f9:34:4f:90:15:8a:82:73:45:ab:3a:4f:3b:31:
                    b9:32:fa:a5:14:3d:be:83:a5:35:8e:3e:67:ea:7a:
                    52:67:3a:37:70:bb:f1:83:ac:bd:12:ae:b9:4b:95:
                    24:c1:a4:f7:a4:41:be:5a:01:c2:2d:77:fe:4b:af:
                    23:f5:d2:03:92:16:97:ca:7b:0c:71:14:b5:f6:1b:
                    8d:38:7e:39:4d:23:17:f8:ca:98:8b:ff:b8:19:2a:
                    11:3d:56:d6:dc:b9:da:40:54:c5:11:e0:1b:83:f7:
                    bd:73:12:a4:40:3e:9c:cf:b9:6e:80:72:a6:24:35:
                    d7:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:BD:70:D2:F8:8C:F1:5C:84:16:B0:28:5E:6F:3C:5B:6B:46:1C:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d473e375-fb2d-4dcb-888b-209cdbcba3f2/d17697b5-d0d8-3086-b4d3-493e42afafed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d473e375-fb2d-4dcb-888b-209cdbcba3f2/d473e375-fb2d-4dcb-888b-209cdbcba3f2.crl

            X509v3 Authority Key Identifier:
                keyid:68:1D:70:D0:D7:B4:1E:AE:23:DC:3B:4A:31:E1:B8:CD:20:21:70:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d473e375-fb2d-4dcb-888b-209cdbcba3f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.108.118.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:37:ed:f0:6f:07:28:f7:be:22:64:10:44:bb:74:7f:39:cc:
         95:e3:a5:44:33:04:e6:27:c5:76:47:65:bf:eb:03:24:9b:af:
         af:7d:93:8c:fb:e3:e0:cd:a5:5b:2d:0b:d6:02:f1:d5:c2:94:
         9a:92:0d:f0:62:e1:14:dc:a3:e7:01:0d:cd:3e:81:e1:2a:e7:
         f4:dd:dc:27:cb:18:f8:3c:70:4b:10:ab:32:41:70:55:ba:23:
         14:98:bb:6a:16:e7:cf:2b:05:b4:35:43:33:65:c6:45:b8:77:
         c1:7a:3c:aa:09:cc:d8:3c:b1:b1:00:e0:1f:90:3b:28:90:05:
         4a:dd:4b:75:de:79:5d:8e:e0:d4:b3:b3:55:c7:b8:db:38:68:
         a1:39:4c:9f:fd:11:ef:65:be:a4:3a:91:64:3a:24:cd:3c:cc:
         78:82:bb:a6:99:40:1e:ec:80:aa:d0:cc:e0:98:41:fa:cd:28:
         fe:fb:39:ce:fb:67:77:f5:63:d2:c8:0a:c7:48:39:4c:f6:4b:
         04:93:1d:a6:bd:55:fc:08:17:01:05:5e:e9:da:ac:68:07:85:
         dc:02:be:01:a3:5c:66:20:f5:38:12:9a:f7:88:8a:6a:a5:6f:
         ac:90:ab:5f:e1:00:41:20:bb:b7:cd:e5:64:36:e1:17:12:b8:
         da:66:9e:87
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jihr61GH46CJ3jgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDQ3M2UzNzUtZmIyZC00ZGNiLTg4OGItMjA5Y2RiY2Jh
M2YyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MzFlMWNjODktMzI0MS00YmJjLWEwNzgtOTZkOTRmZTg3ZmFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6URJCtGUhBnvxrX+y0nLNDMC7MV/GPjpS/e
+i6PQER5e0VhGmf46EoOIEU+UpVyWTaLV3eyVLV5SatBj0QX8B1RGf6Fu7KkLt0X
T5YssxEAq9I5xjvvs8ZoqiAVo4qFvcIQRnIXEetu8c6jdA8PTFq/RxpjKB/urvo8
Lg5iGi/yzYifF3Ge+TRPkBWKgnNFqzpPOzG5MvqlFD2+g6U1jj5n6npSZzo3cLvx
g6y9Eq65S5UkwaT3pEG+WgHCLXf+S68j9dIDkhaXynsMcRS19huNOH45TSMX+MqY
i/+4GSoRPVbW3LnaQFTFEeAbg/e9cxKkQD6cz7lugHKmJDXX2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMm9cNL4jPFchBawKF5vPFtrRhxEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kNDcz
ZTM3NS1mYjJkLTRkY2ItODg4Yi0yMDljZGJjYmEzZjIvZDE3Njk3YjUtZDBkOC0z
MDg2LWI0ZDMtNDkzZTQyYWZhZmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZDQ3M2UzNzUtZmIyZC00ZGNiLTg4
OGItMjA5Y2RiY2JhM2YyL2Q0NzNlMzc1LWZiMmQtNGRjYi04ODhiLTIwOWNkYmNi
YTNmMi5jcmwwHwYDVR0jBBgwFoAUaB1w0Ne0Hq4j3DtKMeG4zSAhcGUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS9kNDczZTM3NS1mYjJkLTRkY2ItODg4Yi0yMDlj
ZGJjYmEzZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzmx2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJk37fBvByj3viJkEES7dH85zJXjpUQzBOYnxXZHZb/rAySbr699k4z7
4+DNpVstC9YC8dXClJqSDfBi4RTco+cBDc0+geEq5/Td3CfLGPg8cEsQqzJBcFW6
IxSYu2oW588rBbQ1QzNlxkW4d8F6PKoJzNg8sbEA4B+QOyiQBUrdS3XeeV2O4NSz
s1XHuNs4aKE5TJ/9Ee9lvqQ6kWQ6JM08zHiCu6aZQB7sgKrQzOCYQfrNKP77Oc77
Z3f1Y9LICsdIOUz2SwSTHaa9VfwIFwEFXunarGgHhdwCvgGjXGYg9TgSmveIimql
b6yQq1/hAEEgu7fN5WQ24RcSuNpmnoc=
-----END CERTIFICATE-----
Generated at Sun Oct 18 07:11:31 2026 by rpki-client