Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0f9a93b5-1896-3553-add4-16df12179fd0.roa
File:                     0f9a93b5-1896-3553-add4-16df12179fd0.roa (raw, json)
Hash identifier:          Dg0GLmlSTJ51pil/hGe6sxT2MHU3LjWvHeUQPFBL8M0=
Subject key identifier:   62:FF:1D:69:EF:36:6C:C5:8D:2E:4C:9F:B9:76:37:FC:D2:E0:CD:E8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E2D9F41C1119DE6AD2A011A80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0f9a93b5-1896-3553-add4-16df12179fd0.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     16509
IP address blocks:        208.214.238.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:41:c1:11:9d:e6:ad:2a:01:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=4a366f8d-52ab-4a37-b763-c6d6faed4ece
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b4:9e:a1:87:50:b6:ec:44:ee:33:cb:be:a2:
                    3b:65:d3:07:99:88:50:7f:19:27:a3:ab:d3:90:3c:
                    24:ff:8c:1c:01:55:74:82:41:66:ab:08:5b:e6:2f:
                    2c:e5:e0:07:87:61:26:57:78:e6:9b:d4:7d:e2:2d:
                    f3:47:1f:17:f5:5d:43:97:5c:de:91:63:4f:ef:16:
                    d4:75:59:8d:4d:01:eb:35:48:21:68:64:2f:9e:c5:
                    ef:fd:a9:d9:ae:ed:c1:96:37:0c:e9:b7:3d:57:c9:
                    02:ba:0c:37:3a:ac:bc:6b:5c:7c:1c:02:79:4d:0d:
                    30:3f:71:76:31:98:2c:db:8e:85:5b:15:7d:a9:f9:
                    9a:61:fc:ac:73:29:e8:dc:b6:e0:cd:b1:2b:ed:3e:
                    56:af:0e:f2:2e:00:e1:9f:2f:b7:00:c8:83:3b:dd:
                    5a:d1:98:78:be:71:70:e6:07:60:78:82:c4:1a:ae:
                    76:82:31:dc:a5:f6:00:aa:b4:ce:1d:72:c6:04:21:
                    e8:9a:13:89:b3:ed:fb:37:9c:c1:42:2c:67:79:96:
                    50:33:f5:e4:f9:99:7c:b2:ef:62:10:c7:06:14:41:
                    89:5e:1a:56:00:57:6d:a9:ad:97:90:46:d0:4e:36:
                    84:19:ac:1d:34:97:ca:6f:98:96:90:58:29:19:bb:
                    be:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:FF:1D:69:EF:36:6C:C5:8D:2E:4C:9F:B9:76:37:FC:D2:E0:CD:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0f9a93b5-1896-3553-add4-16df12179fd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.214.238.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:b3:6e:22:de:95:1f:2d:3f:d4:9d:61:42:78:a7:6e:f5:3f:
         ea:9f:1d:31:ee:9f:ef:ba:7a:22:f6:6d:02:34:a5:2b:db:ce:
         83:5f:21:6a:25:85:4e:16:6f:fe:36:05:62:89:3a:8a:4d:c6:
         dc:40:e6:59:2b:08:47:eb:54:b0:cc:ca:95:e0:a7:a8:a9:f4:
         1f:c8:5d:5e:96:a4:f4:68:c2:ec:6f:a5:53:53:71:11:8b:87:
         40:b2:f4:ad:95:f2:86:b4:cb:1b:ee:02:8d:8d:d1:ea:7b:ca:
         ce:39:5e:52:90:97:48:1d:da:b6:43:19:2a:e5:30:1c:8f:e7:
         98:62:e2:d8:1f:c6:39:f1:c2:14:d0:5f:6b:d0:82:c5:8d:37:
         b4:f5:5a:d4:3f:b5:16:dc:2b:7c:1f:1d:ce:b4:6d:81:44:fc:
         c4:eb:dd:da:08:bd:9d:4a:13:df:ca:0d:3e:54:cb:70:50:89:
         7d:03:01:47:7e:8a:a9:6c:e9:b5:4a:49:22:4e:c8:68:81:85:
         0d:59:f9:72:50:d9:98:f9:85:bd:37:02:19:37:c4:b5:05:cb:
         1a:53:a0:18:39:68:92:a9:17:44:77:3b:47:d8:c8:36:2b:ca:
         d8:bc:3f:09:bd:4c:5a:6d:ff:cd:88:45:b8:b9:e2:16:11:38:
         b6:45:17:e3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4tn0HBEZ3mrSoBGoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDYxNTA5MDAxMloXDTI2MDkxMzA5MDAxMlowLzEtMCsGA1UEAxMk
NGEzNjZmOGQtNTJhYi00YTM3LWI3NjMtYzZkNmZhZWQ0ZWNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLSeoYdQtuxE7jPLvqI7ZdMHmYhQfxkno6vT
kDwk/4wcAVV0gkFmqwhb5i8s5eAHh2EmV3jmm9R94i3zRx8X9V1Dl1zekWNP7xbU
dVmNTQHrNUghaGQvnsXv/anZru3BljcM6bc9V8kCugw3Oqy8a1x8HAJ5TQ0wP3F2
MZgs246FWxV9qfmaYfyscyno3LbgzbEr7T5Wrw7yLgDhny+3AMiDO91a0Zh4vnFw
5gdgeILEGq52gjHcpfYAqrTOHXLGBCHomhOJs+37N5zBQixneZZQM/Xk+Zl8su9i
EMcGFEGJXhpWAFdtqa2XkEbQTjaEGawdNJfKb5iWkFgpGbu+WwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGL/HWnvNmzFjS5Mn7l2N/zS4M3oMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMGY5YTkzYjUtMTg5Ni0z
NTUzLWFkZDQtMTZkZjEyMTc5ZmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0NbuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG+zbiLelR8tP9SdYUJ4p271P+qfHTHun++6eiL2bQI0pSvbzoNfIWol
hU4Wb/42BWKJOopNxtxA5lkrCEfrVLDMypXgp6ip9B/IXV6WpPRowuxvpVNTcRGL
h0Cy9K2V8oa0yxvuAo2N0ep7ys45XlKQl0gd2rZDGSrlMByP55hi4tgfxjnxwhTQ
X2vQgsWNN7T1WtQ/tRbcK3wfHc60bYFE/MTr3doIvZ1KE9/KDT5Uy3BQiX0DAUd+
iqls6bVKSSJOyGiBhQ1Z+XJQ2Zj5hb03Ahk3xLUFyxpToBg5aJKpF0R3O0fYyDYr
yti8Pwm9TFpt/82IRbi54hYROLZFF+M=
-----END CERTIFICATE-----
Generated at Mon Jul 13 10:39:35 2026 by rpki-client