Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bea7252e-9e40-3dc4-8b58-256c4f918764.roa
File:                     bea7252e-9e40-3dc4-8b58-256c4f918764.roa (raw, json)
Hash identifier:          IoMLEaMp6btRGbhZiEyg2M4u3k+VTRgD3jpPZthXUb4=
Subject key identifier:   04:4C:DD:82:47:A9:46:BC:BB:68:04:C3:9D:C9:73:0F:BE:48:24:A4
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F8F81A319DAC63A6CAE998A50
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bea7252e-9e40-3dc4-8b58-256c4f918764.roa
Signing time:             Tue 20 Oct 2026 03:17:15 +0000
ROA not before:           Tue 20 Oct 2026 03:17:15 +0000
ROA not after:            Mon 18 Jan 2027 04:17:15 +0000
asID:                     219053
IP address blocks:        68.164.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8f:81:a3:19:da:c6:3a:6c:ae:99:8a:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Oct 20 03:17:15 2026 GMT
            Not After : Jan 18 04:17:15 2027 GMT
        Subject: CN=96890d6d-17dd-4792-a8cf-37b71380fd8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:97:e4:2e:24:b7:64:af:4a:41:df:63:99:0f:
                    1d:31:17:ac:f1:0c:dd:06:b8:a4:db:4b:ff:5b:9e:
                    93:fc:16:98:51:86:5a:0f:6d:47:2a:c8:46:ab:8f:
                    dc:f5:ec:d7:8c:84:10:4a:fc:77:da:74:9f:22:cb:
                    29:0d:64:93:6c:8e:f0:be:73:73:0b:44:8a:82:d1:
                    ed:e3:32:69:74:09:89:e0:fc:7e:a2:ff:a1:da:e6:
                    ac:10:f6:a3:06:02:36:45:73:3c:e6:ec:f5:4d:89:
                    79:da:22:1d:83:bc:c5:0a:42:4a:68:0e:a6:41:27:
                    89:ec:f9:d7:46:26:39:bf:0d:47:4c:7e:c9:82:ea:
                    3a:53:46:16:9b:56:15:7d:a2:ac:ed:97:6c:ee:73:
                    06:2f:46:de:61:ab:81:d4:2f:4b:27:b5:02:bc:e4:
                    19:61:28:74:c1:2e:1c:c6:80:08:d5:5d:85:6a:6a:
                    67:61:45:29:86:59:38:c7:24:73:61:ee:4d:90:8a:
                    c2:cc:26:2e:4f:89:5c:18:91:dd:fa:e2:7f:ba:e0:
                    5e:82:d9:40:b2:58:1a:a8:5a:1f:10:62:67:59:d5:
                    32:c4:7b:73:76:93:ba:e0:80:c6:6d:69:0e:d2:d0:
                    76:2c:ab:c2:aa:b9:2b:d4:54:33:9c:59:56:48:2f:
                    6c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:4C:DD:82:47:A9:46:BC:BB:68:04:C3:9D:C9:73:0F:BE:48:24:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bea7252e-9e40-3dc4-8b58-256c4f918764.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.164.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:cf:ef:87:a9:5d:26:57:4d:e0:7b:30:b5:bb:9b:67:5e:42:
         0e:29:f0:de:b4:09:ad:62:dc:7c:bf:9a:70:e8:c3:9c:34:45:
         dc:b3:8f:95:52:6f:18:57:a8:c6:e3:c7:05:ac:33:c5:1e:a4:
         bb:46:8e:86:ce:a6:da:56:83:45:e4:31:81:4f:da:d3:4e:74:
         83:76:55:b0:43:72:d8:76:61:9a:05:9a:34:bb:d0:ae:50:a6:
         25:6e:35:6c:3c:64:83:62:ae:89:0e:b9:ec:03:2e:20:7e:45:
         17:7f:b7:e1:ff:26:49:2a:8c:2a:02:99:d3:99:5d:08:a2:42:
         74:b8:b9:e2:9a:65:d1:4f:df:f9:7e:da:94:89:00:7c:95:b3:
         a0:61:62:28:bb:29:b3:ff:16:ef:b8:d4:1f:7f:0b:a6:14:0f:
         4b:88:ee:6d:99:c7:05:79:8e:87:2d:f6:bf:3a:93:5b:33:c6:
         41:0a:26:69:15:43:17:72:26:75:ff:f6:bf:63:c7:b9:59:a9:
         f3:fb:35:ef:ef:7b:36:94:0c:bc:75:d1:6d:d6:ca:6a:98:ea:
         d4:e5:5b:1b:bc:35:30:3c:d4:4b:6c:60:26:6c:b7:3a:45:82:
         b2:00:55:70:0c:c4:49:51:55:25:37:4f:87:24:e2:7e:39:58:
         3a:5b:6e:50
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+PgaMZ2sY6bK6ZilAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MTAyMDAzMTcxNVoXDTI3MDExODA0MTcxNVowLzEtMCsGA1UEAxMk
OTY4OTBkNmQtMTdkZC00NzkyLWE4Y2YtMzdiNzEzODBmZDhmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZfkLiS3ZK9KQd9jmQ8dMRes8QzdBrik20v/
W56T/BaYUYZaD21HKshGq4/c9ezXjIQQSvx32nSfIsspDWSTbI7wvnNzC0SKgtHt
4zJpdAmJ4Px+ov+h2uasEPajBgI2RXM85uz1TYl52iIdg7zFCkJKaA6mQSeJ7PnX
RiY5vw1HTH7Jguo6U0YWm1YVfaKs7Zds7nMGL0beYauB1C9LJ7UCvOQZYSh0wS4c
xoAI1V2FampnYUUphlk4xyRzYe5NkIrCzCYuT4lcGJHd+uJ/uuBegtlAslgaqFof
EGJnWdUyxHtzdpO64IDGbWkO0tB2LKvCqrkr1FQznFlWSC9szQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFARM3YJHqUa8u2gEw53Jcw++SCSkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYmVhNzI1MmUtOWU0MC0z
ZGM0LThiNTgtMjU2YzRmOTE4NzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKQLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACTP74epXSZXTeB7MLW7m2deQg4p8N60Ca1i3Hy/mnDow5w0Rdyzj5VS
bxhXqMbjxwWsM8UepLtGjobOptpWg0XkMYFP2tNOdIN2VbBDcth2YZoFmjS70K5Q
piVuNWw8ZINirokOuewDLiB+RRd/t+H/JkkqjCoCmdOZXQiiQnS4ueKaZdFP3/l+
2pSJAHyVs6BhYii7KbP/Fu+41B9/C6YUD0uI7m2ZxwV5joct9r86k1szxkEKJmkV
QxdyJnX/9r9jx7lZqfP7Ne/vezaUDLx10W3WymqY6tTlWxu8NTA81EtsYCZstzpF
grIAVXAMxElRVSU3T4ck4n45WDpbblA=
-----END CERTIFICATE-----
Generated at Tue Oct 27 00:14:11 2026 by rpki-client