Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb/74ce8a24-2c71-3ed6-9dec-c8ea958c3a7b.roa
File:                     74ce8a24-2c71-3ed6-9dec-c8ea958c3a7b.roa (raw, json)
Hash identifier:          Dg+Ye6Nx6hmNkjNvzkl1Vl/wo+vq0RcwoYXkzNLB7wA=
Subject key identifier:   C1:50:3D:6E:0B:BA:CC:C7:A1:9C:B3:8A:C8:3E:7A:37:59:20:E9:38
Certificate issuer:       /CN=332d4c1c-68fd-46ba-9450-84697fbe4bcb
Certificate serial:       010D0C9F4328584F70284B4801CFE3A63C150580
Authority key identifier: 04:D2:50:7C:E0:55:F4:5A:1A:02:70:D2:84:82:43:CC:30:79:71:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb/74ce8a24-2c71-3ed6-9dec-c8ea958c3a7b.roa
Signing time:             Thu 08 Oct 2026 21:47:10 +0000
ROA not before:           Thu 08 Oct 2026 21:47:10 +0000
ROA not after:            Wed 06 Jan 2027 22:47:10 +0000
asID:                     19871
IP address blocks:        64.69.216.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb/332d4c1c-68fd-46ba-9450-84697fbe4bcb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb/332d4c1c-68fd-46ba-9450-84697fbe4bcb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 24 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:70:28:4b:48:01:cf:e3:a6:3c:15:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=332d4c1c-68fd-46ba-9450-84697fbe4bcb
        Validity
            Not Before: Oct  8 21:47:10 2026 GMT
            Not After : Jan  6 22:47:10 2027 GMT
        Subject: CN=b84a8e9f-b3ca-4b93-af05-e0f87db757f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:be:35:4f:9d:01:cd:08:52:1f:91:28:ca:dd:
                    c0:da:f0:f8:d1:5c:42:98:a0:53:c5:5d:79:3c:ee:
                    33:5a:b2:55:d9:12:c7:fc:61:24:bb:fa:04:53:48:
                    95:da:c6:28:09:4c:e4:83:1b:e1:39:ff:6f:c1:0e:
                    20:1f:fa:cb:97:0f:38:1f:bc:2e:f4:d1:b3:a4:e8:
                    fc:0a:f7:7b:77:3c:a5:10:b2:d7:4c:f8:b0:77:78:
                    e9:3d:e8:c5:90:88:83:31:4b:ca:ed:9b:c9:d0:10:
                    51:9a:29:ab:2f:e5:02:f7:f0:3c:a7:d5:7f:fc:fb:
                    64:83:14:ea:20:a5:55:a6:10:1c:4b:50:31:26:88:
                    f6:2c:86:5d:b1:d5:76:eb:c4:fd:e0:a7:5b:8b:c5:
                    fa:da:93:96:ed:60:7f:bc:15:0d:00:15:6d:67:18:
                    67:57:2e:db:c3:83:f1:07:2c:8e:6d:a0:c7:59:2a:
                    c9:f7:91:a8:b5:3e:5b:10:f1:92:66:e9:b6:2e:d3:
                    fc:d5:33:ea:89:1e:b5:c4:0e:46:b6:64:db:42:90:
                    e1:e0:cc:a0:03:57:19:57:64:23:f7:90:91:89:9c:
                    d8:d7:44:93:b3:51:87:77:b9:79:ac:e1:14:ea:02:
                    3e:91:72:63:27:39:3d:02:03:a8:23:69:5c:75:63:
                    0e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:50:3D:6E:0B:BA:CC:C7:A1:9C:B3:8A:C8:3E:7A:37:59:20:E9:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb/74ce8a24-2c71-3ed6-9dec-c8ea958c3a7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb/332d4c1c-68fd-46ba-9450-84697fbe4bcb.crl

            X509v3 Authority Key Identifier:
                keyid:04:D2:50:7C:E0:55:F4:5A:1A:02:70:D2:84:82:43:CC:30:79:71:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.69.216.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:da:f4:ab:c2:0c:71:42:69:13:bd:2c:18:e4:e4:2e:ad:20:
         d8:0a:2c:49:73:b3:88:91:c1:fd:e1:c1:69:e5:7a:96:91:08:
         b7:ce:d6:d9:6d:c9:17:42:08:17:2d:ae:f1:35:21:42:50:bc:
         2b:d4:d9:47:fd:37:e8:6b:f4:fa:50:8a:08:d4:34:8e:71:5e:
         d2:c3:f2:6c:f9:3f:9c:f2:67:a9:87:dd:63:2f:8b:0f:49:42:
         ca:b2:b3:27:46:63:b9:9c:3d:33:f1:5b:2c:b8:b6:b2:4a:44:
         38:00:6f:22:9f:a5:88:98:bd:a5:b7:68:c3:fc:7c:33:7c:b5:
         73:56:42:18:44:17:70:7e:52:16:f9:ac:75:ab:e7:ec:22:11:
         42:b0:3a:48:a8:59:bf:ef:d1:47:31:28:41:d1:64:6a:ba:48:
         79:57:0e:c0:73:b3:40:95:83:98:24:e3:04:8c:31:17:71:96:
         44:c6:3b:a5:d9:b4:48:c8:f7:e0:77:84:83:2d:ee:2c:55:61:
         4e:6f:c3:5e:9c:13:2d:8e:d1:8a:d2:ce:18:af:a5:7c:0f:0c:
         f7:22:45:f8:14:02:f3:21:5d:97:a0:d0:0f:42:cd:55:74:63:
         fc:35:e2:5f:24:5a:05:02:ae:2b:9a:d5:03:49:fd:2a:9c:f9:
         86:a8:2e:27
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9wKEtIAc/jpjwVBYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzMyZDRjMWMtNjhmZC00NmJhLTk0NTAtODQ2OTdmYmU0
YmNiMB4XDTI2MTAwODIxNDcxMFoXDTI3MDEwNjIyNDcxMFowLzEtMCsGA1UEAxMk
Yjg0YThlOWYtYjNjYS00YjkzLWFmMDUtZTBmODdkYjc1N2Y1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2L41T50BzQhSH5Eoyt3A2vD40VxCmKBTxV15
PO4zWrJV2RLH/GEku/oEU0iV2sYoCUzkgxvhOf9vwQ4gH/rLlw84H7wu9NGzpOj8
Cvd7dzylELLXTPiwd3jpPejFkIiDMUvK7ZvJ0BBRmimrL+UC9/A8p9V//PtkgxTq
IKVVphAcS1AxJoj2LIZdsdV268T94Kdbi8X62pOW7WB/vBUNABVtZxhnVy7bw4Px
ByyObaDHWSrJ95GotT5bEPGSZum2LtP81TPqiR61xA5GtmTbQpDh4MygA1cZV2Qj
95CRiZzY10STs1GHd7l5rOEU6gI+kXJjJzk9AgOoI2lcdWMOTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMFQPW4LuszHoZyzisg+ejdZIOk4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zMzJk
NGMxYy02OGZkLTQ2YmEtOTQ1MC04NDY5N2ZiZTRiY2IvNzRjZThhMjQtMmM3MS0z
ZWQ2LTlkZWMtYzhlYTk1OGMzYTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzMyZDRjMWMtNjhmZC00NmJhLTk0
NTAtODQ2OTdmYmU0YmNiLzMzMmQ0YzFjLTY4ZmQtNDZiYS05NDUwLTg0Njk3ZmJl
NGJjYi5jcmwwHwYDVR0jBBgwFoAUBNJQfOBV9FoaAnDShIJDzDB5ccYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8zMzJkNGMxYy02OGZkLTQ2YmEtOTQ1MC04NDY5
N2ZiZTRiY2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQEXYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALXa9KvCDHFCaRO9LBjk5C6tINgKLElzs4iRwf3hwWnlepaRCLfO1tlt
yRdCCBctrvE1IUJQvCvU2Uf9N+hr9PpQigjUNI5xXtLD8mz5P5zyZ6mH3WMviw9J
QsqysydGY7mcPTPxWyy4trJKRDgAbyKfpYiYvaW3aMP8fDN8tXNWQhhEF3B+Uhb5
rHWr5+wiEUKwOkioWb/v0UcxKEHRZGq6SHlXDsBzs0CVg5gk4wSMMRdxlkTGO6XZ
tEjI9+B3hIMt7ixVYU5vw16cEy2O0YrSzhivpXwPDPciRfgUAvMhXZeg0A9CzVV0
Y/w14l8kWgUCriua1QNJ/Sqc+YaoLic=
-----END CERTIFICATE-----
Generated at Thu Oct 22 11:53:41 2026 by rpki-client