Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a6b962cd-d36a-4673-8d04-bc6f84e0b6ef/da062c78-fd30-3b98-9013-67733a49211c.roa
File:                     da062c78-fd30-3b98-9013-67733a49211c.roa (raw, json)
Hash identifier:          2D0dsFzpncalQAz20MqLoGMAgGuqr0xdXimbmofH29Y=
Subject key identifier:   47:E0:71:4D:01:A7:3F:7F:A6:32:81:2A:01:C4:A6:45:14:82:87:C2
Certificate issuer:       /CN=a6b962cd-d36a-4673-8d04-bc6f84e0b6ef
Certificate serial:       010D0C9F4328584F4F080B6C6F042313DB2A8980
Authority key identifier: DE:D8:8F:EB:35:B0:BE:79:41:0A:41:62:52:2C:1D:C1:44:8A:D3:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a6b962cd-d36a-4673-8d04-bc6f84e0b6ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a6b962cd-d36a-4673-8d04-bc6f84e0b6ef/da062c78-fd30-3b98-9013-67733a49211c.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     32475
IP address blocks:        67.208.32.0/21 maxlen: 21
                          67.208.40.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a6b962cd-d36a-4673-8d04-bc6f84e0b6ef/a6b962cd-d36a-4673-8d04-bc6f84e0b6ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a6b962cd-d36a-4673-8d04-bc6f84e0b6ef/a6b962cd-d36a-4673-8d04-bc6f84e0b6ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a6b962cd-d36a-4673-8d04-bc6f84e0b6ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:08:0b:6c:6f:04:23:13:db:2a:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b962cd-d36a-4673-8d04-bc6f84e0b6ef
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=97dc9971-bb90-4f3e-ae60-a56874aadea3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c9:b9:39:3c:d2:88:f3:1b:06:da:ff:76:8b:
                    f7:2e:26:83:93:3c:66:26:58:8b:a9:62:9d:03:84:
                    f5:fd:fa:3b:72:f8:ca:bc:12:55:e3:bc:dd:30:2f:
                    3d:9c:d8:47:96:c3:8b:3a:33:e6:a0:b9:68:ba:21:
                    c2:f2:1a:96:13:c9:58:bd:a2:72:76:21:4e:c5:ad:
                    d7:c8:d9:87:e7:98:59:51:b8:c6:a8:22:85:88:6c:
                    21:4c:c2:82:9f:da:c3:69:8f:8d:60:12:96:71:25:
                    b0:62:27:4d:39:e7:b6:2d:6c:69:c6:52:a8:4c:e3:
                    d2:eb:03:bd:9f:9f:d0:e5:e4:f0:ad:5f:b7:f5:a1:
                    a1:78:78:e0:ba:94:da:93:56:28:30:52:c4:0a:3d:
                    c5:f6:74:ed:d2:55:8a:ce:f9:3c:ce:7f:42:d4:58:
                    df:9e:93:b5:fc:2a:06:72:31:70:e2:81:4e:0a:37:
                    7c:d6:05:4e:ca:68:ea:d3:60:8b:d1:c9:75:bc:5e:
                    28:17:3e:cc:35:62:f9:5f:2b:99:0e:31:08:5e:28:
                    af:1a:c2:2c:b9:19:61:c5:30:9a:ab:ec:53:e4:c6:
                    9d:34:59:27:c4:73:07:5e:71:3d:9a:76:ae:79:32:
                    55:16:59:f6:bd:40:66:43:fe:b2:9f:f8:9b:c8:00:
                    82:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:E0:71:4D:01:A7:3F:7F:A6:32:81:2A:01:C4:A6:45:14:82:87:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a6b962cd-d36a-4673-8d04-bc6f84e0b6ef/da062c78-fd30-3b98-9013-67733a49211c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a6b962cd-d36a-4673-8d04-bc6f84e0b6ef/a6b962cd-d36a-4673-8d04-bc6f84e0b6ef.crl

            X509v3 Authority Key Identifier:
                keyid:DE:D8:8F:EB:35:B0:BE:79:41:0A:41:62:52:2C:1D:C1:44:8A:D3:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a6b962cd-d36a-4673-8d04-bc6f84e0b6ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.208.32.0-67.208.43.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:28:11:3c:5f:c0:32:31:8e:28:e3:46:68:f4:29:d4:23:6f:
         79:ea:96:f2:4c:ac:be:71:e9:e9:3d:79:47:09:c1:2e:0c:a3:
         53:f5:24:ba:c6:96:16:c3:0b:10:96:f8:2a:cb:47:6d:5b:38:
         80:db:e6:e0:10:ca:94:39:58:b8:6a:5b:e5:64:ba:87:37:7f:
         d9:39:7a:eb:ec:87:0e:b4:d7:50:b4:f2:69:7f:eb:b9:f6:50:
         35:48:61:d6:d9:10:ac:a2:3d:8a:a1:8b:f0:50:3e:c1:3d:98:
         e8:4a:21:99:a6:a9:15:cf:93:a1:1c:de:39:c2:ed:ac:31:25:
         a7:fa:4a:72:13:fe:24:46:e3:b6:ae:b7:5a:39:a4:79:c8:d6:
         0a:16:c0:c4:f9:ee:82:2f:9e:a2:42:c8:95:ad:32:42:2b:70:
         a0:bf:18:7e:eb:a6:fe:ed:1f:eb:41:a5:d9:b3:c9:99:75:91:
         3f:cc:ac:b3:71:9e:9b:df:b8:65:5e:35:9a:3b:cc:c3:bb:9c:
         96:81:f0:1a:95:71:fa:80:48:e0:8a:61:94:96:37:41:b3:99:
         b9:bf:45:b8:38:03:7c:2d:57:36:1c:44:e4:b4:33:e9:53:aa:
         de:75:9e:54:af:41:63:ed:b9:00:c9:98:47:5c:b4:4a:b8:fb:
         24:c1:fa:22
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE9PCAtsbwQjE9sqiYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTZiOTYyY2QtZDM2YS00NjczLThkMDQtYmM2Zjg0ZTBi
NmVmMB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk
OTdkYzk5NzEtYmI5MC00ZjNlLWFlNjAtYTU2ODc0YWFkZWEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8m5OTzSiPMbBtr/dov3LiaDkzxmJliLqWKd
A4T1/fo7cvjKvBJV47zdMC89nNhHlsOLOjPmoLlouiHC8hqWE8lYvaJydiFOxa3X
yNmH55hZUbjGqCKFiGwhTMKCn9rDaY+NYBKWcSWwYidNOee2LWxpxlKoTOPS6wO9
n5/Q5eTwrV+39aGheHjgupTak1YoMFLECj3F9nTt0lWKzvk8zn9C1FjfnpO1/CoG
cjFw4oFOCjd81gVOymjq02CL0cl1vF4oFz7MNWL5XyuZDjEIXiivGsIsuRlhxTCa
q+xT5MadNFknxHMHXnE9mnaueTJVFln2vUBmQ/6yn/ibyACCHQIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFEfgcU0Bpz9/pjKBKgHEpkUUgofCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hNmI5
NjJjZC1kMzZhLTQ2NzMtOGQwNC1iYzZmODRlMGI2ZWYvZGEwNjJjNzgtZmQzMC0z
Yjk4LTkwMTMtNjc3MzNhNDkyMTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYTZiOTYyY2QtZDM2YS00NjczLThk
MDQtYmM2Zjg0ZTBiNmVmL2E2Yjk2MmNkLWQzNmEtNDY3My04ZDA0LWJjNmY4NGUw
YjZlZi5jcmwwHwYDVR0jBBgwFoAU3tiP6zWwvnlBCkFiUiwdwUSK054wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9hNmI5NjJjZC1kMzZhLTQ2NzMtOGQwNC1iYzZm
ODRlMGI2ZWYuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAVD0CAD
BAJD0CgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEABCgRPF/AMjGOKONGaPQp1CNveeqW8kysvnHp6T15RwnB
LgyjU/UkusaWFsMLEJb4KstHbVs4gNvm4BDKlDlYuGpb5WS6hzd/2Tl66+yHDrTX
ULTyaX/rufZQNUhh1tkQrKI9iqGL8FA+wT2Y6EohmaapFc+ToRzeOcLtrDElp/pK
chP+JEbjtq63WjmkecjWChbAxPnugi+eokLIla0yQitwoL8Yfuum/u0f60Gl2bPJ
mXWRP8yss3Gem9+4ZV41mjvMw7ucloHwGpVx+oBI4IphlJY3QbOZub9FuDgDfC1X
NhxE5LQz6VOq3nWeVK9BY+25AMmYR1y0Srj7JMH6Ig==
-----END CERTIFICATE-----
Generated at Wed Oct 28 07:22:25 2026 by rpki-client