Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3f59bca9-bb5c-3821-b0e9-db7f351006f2.roa
File:                     3f59bca9-bb5c-3821-b0e9-db7f351006f2.roa (raw, json)
Hash identifier:          23uzrTNHNSVOjSKNAK58P9k1HjHzVpViGWXocVkeLcE=
Subject key identifier:   82:98:2B:B5:94:D8:B7:99:5F:8D:36:DA:E6:A3:10:9F:EF:D2:6A:36
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584B3F62134A5192C95454D838E0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3f59bca9-bb5c-3821-b0e9-db7f351006f2.roa
Signing time:             Fri 19 Sep 2025 15:21:14 +0000
ROA not before:           Fri 19 Sep 2025 15:21:14 +0000
ROA not after:            Thu 18 Dec 2025 16:21:14 +0000
asID:                     5650
IP address blocks:        68.167.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3f:62:13:4a:51:92:c9:54:54:d8:38:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 19 15:21:14 2025 GMT
            Not After : Dec 18 16:21:14 2025 GMT
        Subject: CN=5d18e31a-90a8-4b72-95b6-1bb18ea503e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:82:34:ce:0f:d8:0b:06:5f:2c:be:52:6f:7b:
                    aa:54:e5:46:b6:f7:09:02:4b:29:6a:bb:dd:77:a8:
                    09:33:51:6e:12:80:da:81:05:44:c9:52:24:78:8a:
                    21:9e:12:67:48:dc:87:ac:0c:51:61:b6:48:f5:72:
                    e2:8f:bc:52:b0:7c:79:5f:cd:0a:c7:80:0a:d3:cb:
                    a3:12:4e:cb:fe:75:ac:37:28:e2:a5:63:01:c1:14:
                    e1:ac:97:7d:ef:ef:11:fa:9f:0a:0f:e6:b2:53:ef:
                    c1:ef:d7:4c:49:af:1b:37:6a:53:24:60:9a:7d:86:
                    ed:73:09:76:06:8f:75:27:4f:96:8c:16:83:31:2b:
                    07:8f:de:06:17:d0:f7:49:2b:38:38:03:b2:5f:04:
                    0f:1f:11:31:b5:61:4f:7e:1d:a8:de:12:a3:f8:28:
                    bc:74:bd:dd:54:b8:b7:75:92:be:19:d2:0d:8d:8d:
                    55:46:11:41:d6:6c:28:06:af:ff:59:26:df:8d:58:
                    91:50:0b:06:1c:11:dc:36:a5:11:c1:f0:e0:49:d6:
                    b8:72:b5:eb:a9:d1:5f:45:84:66:ad:e8:29:69:23:
                    c3:b1:ff:5e:df:bf:7f:6b:3a:c1:64:c0:50:e9:fb:
                    26:5a:f4:e5:02:26:10:38:8c:d5:2a:12:fc:be:d2:
                    dd:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:98:2B:B5:94:D8:B7:99:5F:8D:36:DA:E6:A3:10:9F:EF:D2:6A:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3f59bca9-bb5c-3821-b0e9-db7f351006f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.167.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:52:81:e1:c7:86:76:5c:fb:89:81:7d:69:57:4c:4d:74:ac:
         94:cf:3c:f7:96:b7:eb:7e:23:cb:d5:4f:bc:62:3b:5f:48:23:
         5e:df:58:61:e4:5e:1f:44:6b:30:bc:8d:fa:4f:91:2d:a9:e8:
         4a:3c:a8:2f:9d:d5:8e:30:06:5e:08:2c:83:dc:db:16:4a:75:
         4b:79:91:88:55:25:21:19:64:f6:37:7f:cd:7c:0e:10:44:b7:
         1d:42:93:63:c8:d2:ab:9f:3f:99:6c:e1:7c:17:b2:ac:f3:37:
         9c:d8:6f:fd:86:f3:a6:2c:88:44:e0:ed:e3:0b:db:ea:f6:52:
         d2:86:4c:fd:d1:35:71:03:48:ad:8a:88:7f:1e:65:1b:15:2e:
         2d:a2:f1:4b:64:2d:bd:0b:b8:07:5b:80:0d:5d:76:cd:c3:57:
         b6:36:50:06:30:b6:97:3d:dc:91:e2:f9:ab:66:54:50:23:2a:
         94:e0:10:0e:ce:24:5c:a9:50:43:17:86:b4:42:3e:db:4b:f8:
         7f:53:cf:44:0e:9c:06:05:0c:5e:16:7f:30:00:f7:8a:62:2c:
         57:2f:ff:f7:71:b0:f9:4c:e6:8f:9d:48:2d:d9:a6:e4:6b:47:
         7a:08:03:4c:ab:6e:a9:ef:94:f7:0e:ae:37:be:b0:0b:6b:b6:
         d0:24:9b:5f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs/YhNKUZLJVFTYOOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI1MDkxOTE1MjExNFoXDTI1MTIxODE2MjExNFowLzEtMCsGA1UEAxMk
NWQxOGUzMWEtOTBhOC00YjcyLTk1YjYtMWJiMThlYTUwM2UwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYI0zg/YCwZfLL5Sb3uqVOVGtvcJAksparvd
d6gJM1FuEoDagQVEyVIkeIohnhJnSNyHrAxRYbZI9XLij7xSsHx5X80Kx4AK08uj
Ek7L/nWsNyjipWMBwRThrJd97+8R+p8KD+ayU+/B79dMSa8bN2pTJGCafYbtcwl2
Bo91J0+WjBaDMSsHj94GF9D3SSs4OAOyXwQPHxExtWFPfh2o3hKj+Ci8dL3dVLi3
dZK+GdINjY1VRhFB1mwoBq//WSbfjViRUAsGHBHcNqURwfDgSda4crXrqdFfRYRm
regpaSPDsf9e379/azrBZMBQ6fsmWvTlAiYQOIzVKhL8vtLdOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIKYK7WU2LeZX4022uajEJ/v0mo2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvM2Y1OWJjYTktYmI1Yy0z
ODIxLWIwZTktZGI3ZjM1MTAwNmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRKcoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA5SgeHHhnZc+4mBfWlXTE10rJTPPPeWt+t+I8vVT7xiO19II17fWGHk
Xh9EazC8jfpPkS2p6Eo8qC+d1Y4wBl4ILIPc2xZKdUt5kYhVJSEZZPY3f818DhBE
tx1Ck2PI0qufP5ls4XwXsqzzN5zYb/2G86YsiETg7eML2+r2UtKGTP3RNXEDSK2K
iH8eZRsVLi2i8UtkLb0LuAdbgA1dds3DV7Y2UAYwtpc93JHi+atmVFAjKpTgEA7O
JFypUEMXhrRCPttL+H9Tz0QOnAYFDF4WfzAA94piLFcv//dxsPlM5o+dSC3ZpuRr
R3oIA0yrbqnvlPcOrje+sAtrttAkm18=
-----END CERTIFICATE-----
Generated at Sat Oct 11 08:50:51 2025 by rpki-client