Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/bf34b10c-399e-3953-8e59-8b8cfd54eb83.roa
File:                     bf34b10c-399e-3953-8e59-8b8cfd54eb83.roa (raw, json)
Hash identifier:          Pov4HAiblXh39E4VfJiEKko1LRqwBYpIWqNhvgyTyOA=
Subject key identifier:   5F:4A:E2:F7:E4:F7:9C:72:FB:B8:62:6A:96:B8:91:76:9E:92:56:18
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584D571FC121E0F1441250D87EC0
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/bf34b10c-399e-3953-8e59-8b8cfd54eb83.roa
Signing time:             Mon 30 Mar 2026 13:00:30 +0000
ROA not before:           Mon 30 Mar 2026 13:00:30 +0000
ROA not after:            Sun 28 Jun 2026 13:00:30 +0000
asID:                     13768
IP address blocks:        69.90.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:1f:c1:21:e0:f1:44:12:50:d8:7e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Mar 30 13:00:30 2026 GMT
            Not After : Jun 28 13:00:30 2026 GMT
        Subject: CN=74144801-4550-4cd1-904c-7c8231a30d9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f7:3a:36:22:ff:54:3f:6b:4d:d8:95:35:48:
                    4c:a2:d0:86:72:9c:0d:23:2f:14:bb:45:fd:96:92:
                    b5:55:7d:86:d4:65:43:88:46:2d:75:73:2b:8f:a4:
                    f3:7b:48:90:91:d8:cb:3b:58:f1:f8:3c:5e:25:31:
                    e3:7b:c8:54:e6:4f:99:2e:00:6f:77:c1:d1:b2:d8:
                    16:86:21:04:22:b7:2a:5a:5c:13:ba:af:d4:01:ce:
                    b6:c7:6e:79:09:f1:b4:29:b1:9d:00:86:74:98:71:
                    46:de:4a:b0:98:f1:52:99:d1:6b:dd:45:3d:bb:c2:
                    af:99:96:d2:46:7a:d7:d0:6b:fa:66:83:c2:3c:97:
                    48:c8:6a:02:55:a3:25:80:7a:1a:93:6d:90:b5:5a:
                    6a:87:73:9d:fa:ce:56:de:3e:c6:16:1d:8e:81:c2:
                    02:1d:81:e9:d6:24:9e:07:63:47:f7:21:9f:7b:0d:
                    29:05:b5:c2:ec:2a:f3:a0:ac:dc:99:c8:32:dc:b4:
                    ee:a0:cc:ba:f9:2a:30:e8:41:eb:d5:11:fb:ee:72:
                    52:15:22:b0:ef:04:0c:20:27:7f:68:3f:75:4e:22:
                    14:9a:df:45:9a:b4:2b:05:a4:9a:d0:38:22:2f:cc:
                    aa:f1:02:f7:b3:a3:f7:e0:72:3b:ba:b8:f4:bf:45:
                    c2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:4A:E2:F7:E4:F7:9C:72:FB:B8:62:6A:96:B8:91:76:9E:92:56:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/bf34b10c-399e-3953-8e59-8b8cfd54eb83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.90.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:98:cc:c6:2e:72:68:91:c1:cb:e2:67:ae:9e:ba:42:2e:09:
         d8:75:b1:dd:44:f1:db:cc:1f:69:3e:7c:cc:a6:cb:76:18:5f:
         9b:1d:0e:3b:34:9b:43:bd:81:1e:78:72:4f:72:fe:7b:7d:33:
         d0:c7:28:a2:ec:76:31:6b:11:32:aa:59:a3:bd:03:7d:c4:9b:
         00:fe:31:6c:aa:a7:04:07:e4:d8:1d:ae:89:c8:60:2c:01:9e:
         53:83:97:14:0c:a4:fa:53:3d:4b:74:af:3c:5b:50:35:15:82:
         e9:0c:35:2f:f1:27:9b:fd:ed:ed:ed:5b:f6:59:c8:79:82:24:
         81:80:57:3a:b5:97:95:dc:ce:e6:8c:1b:55:8b:41:b9:61:4d:
         d6:1f:e6:81:cb:31:f7:85:e6:b9:13:6c:dd:70:f6:03:bb:6a:
         a1:8e:4a:8c:ea:53:d5:61:d1:b2:87:56:65:3d:1b:35:81:c8:
         04:70:d2:0e:47:8d:ca:cc:93:13:54:fe:1b:a6:b3:1d:12:84:
         f4:7c:af:43:56:9d:5b:2c:fb:ff:e3:1e:09:e4:c6:4f:7d:07:
         76:29:09:ba:af:f3:51:38:de:b9:85:46:9c:39:71:27:0c:b1:
         07:96:e5:39:e4:f6:99:4d:aa:92:9d:f0:dc:bd:8a:2b:3d:11:
         59:a1:d2:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1XH8Eh4PFEElDYfsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk
YjEwMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk
NzQxNDQ4MDEtNDU1MC00Y2QxLTkwNGMtN2M4MjMxYTMwZDlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPc6NiL/VD9rTdiVNUhMotCGcpwNIy8Uu0X9
lpK1VX2G1GVDiEYtdXMrj6Tze0iQkdjLO1jx+DxeJTHje8hU5k+ZLgBvd8HRstgW
hiEEIrcqWlwTuq/UAc62x255CfG0KbGdAIZ0mHFG3kqwmPFSmdFr3UU9u8KvmZbS
RnrX0Gv6ZoPCPJdIyGoCVaMlgHoak22QtVpqh3Od+s5W3j7GFh2OgcICHYHp1iSe
B2NH9yGfew0pBbXC7CrzoKzcmcgy3LTuoMy6+Sow6EHr1RH77nJSFSKw7wQMICd/
aD91TiIUmt9FmrQrBaSa0DgiL8yq8QL3s6P34HI7urj0v0XCtwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF9K4vfk95xy+7hiapa4kXaeklYYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3
OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvYmYzNGIxMGMtMzk5ZS0z
OTUzLThlNTktOGI4Y2ZkNTRlYjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0
YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1
ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl
NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARVoOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHeYzMYucmiRwcviZ66eukIuCdh1sd1E8dvMH2k+fMymy3YYX5sdDjs0
m0O9gR54ck9y/nt9M9DHKKLsdjFrETKqWaO9A33EmwD+MWyqpwQH5NgdronIYCwB
nlODlxQMpPpTPUt0rzxbUDUVgukMNS/xJ5v97e3tW/ZZyHmCJIGAVzq1l5XczuaM
G1WLQblhTdYf5oHLMfeF5rkTbN1w9gO7aqGOSozqU9Vh0bKHVmU9GzWByARw0g5H
jcrMkxNU/humsx0ShPR8r0NWnVss+//jHgnkxk99B3YpCbqv81E43rmFRpw5cScM
sQeW5Tnk9plNqpKd8Ny9iis9EVmh0g8=
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:15:40 2026 by rpki-client