Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/6c76a8da-00a0-3b5d-81a9-2b9be04cca6f.roa
File:                     6c76a8da-00a0-3b5d-81a9-2b9be04cca6f.roa (raw, json)
Hash identifier:          d1lQdVvIUGE3s32p2dhplZAGJMXzlfa8fl78IuiXyVw=
Subject key identifier:   73:8A:6D:F3:CD:F1:63:8D:5D:15:01:4B:F7:43:17:01:74:89:90:6F
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F4328584DEDE0B0C06A5AE30A1192D680
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/6c76a8da-00a0-3b5d-81a9-2b9be04cca6f.roa
Signing time:             Sat 23 May 2026 13:00:31 +0000
ROA not before:           Sat 23 May 2026 13:00:31 +0000
ROA not after:            Fri 21 Aug 2026 13:00:31 +0000
asID:                     7015
IP address blocks:        69.91.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ed:e0:b0:c0:6a:5a:e3:0a:11:92:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: May 23 13:00:31 2026 GMT
            Not After : Aug 21 13:00:31 2026 GMT
        Subject: CN=d6f0aee2-2ed5-4d8e-8b24-8ff973eb727f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:44:8c:08:1e:72:02:94:6d:0c:f0:1b:e5:26:
                    8a:a8:19:bb:9c:c4:9b:07:de:b2:51:8c:64:be:bb:
                    87:e0:27:3e:55:76:ac:42:25:40:22:6d:14:d3:e7:
                    b8:c7:9f:3f:b6:cc:20:ec:a0:06:51:22:ca:a9:6e:
                    b5:bc:02:60:32:a6:66:1d:aa:24:f7:af:8f:d4:82:
                    b2:9c:0b:c8:e9:e9:a4:88:d7:38:87:64:0d:38:af:
                    dd:ea:bf:60:e4:2f:72:41:4d:aa:a5:85:2b:23:b3:
                    e0:c8:8c:a7:98:53:62:39:5e:14:4c:94:f1:3b:11:
                    89:88:7e:80:c7:55:b7:2b:1c:2a:5b:5c:8c:10:9f:
                    d9:ff:b4:fd:5b:53:2e:79:38:2d:5a:4c:bf:78:e6:
                    04:cc:f3:83:73:6e:bd:85:cb:f4:95:da:44:b2:6b:
                    a9:38:94:50:28:77:7e:d2:cc:1a:0d:82:74:40:19:
                    9d:30:e1:c0:4c:b3:57:2b:85:d2:0a:16:4c:35:62:
                    97:2e:31:d2:54:4b:de:2a:7c:5a:4d:2b:7f:50:3a:
                    88:02:db:9b:99:7f:df:c5:69:19:da:ca:a8:ab:49:
                    64:cb:cc:3d:b1:8c:46:57:d0:91:ae:dc:8d:cd:55:
                    61:b2:71:c2:19:95:65:a2:76:39:c5:56:98:de:f4:
                    a7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:8A:6D:F3:CD:F1:63:8D:5D:15:01:4B:F7:43:17:01:74:89:90:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/6c76a8da-00a0-3b5d-81a9-2b9be04cca6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.91.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:70:34:44:75:8d:ef:a0:8d:d0:bd:b7:34:f6:ad:a5:7c:50:
         01:73:f9:d3:2f:20:11:15:d7:95:b0:22:ed:f3:a2:fd:43:b8:
         ae:d3:95:a5:d1:5b:9c:48:ff:da:9f:4e:e5:7b:b6:8f:ea:c1:
         a6:06:0d:38:e0:d1:95:b1:69:62:42:26:14:5e:9d:ff:46:58:
         65:05:bb:63:fb:86:3e:f0:2d:61:43:11:bc:1a:88:92:45:ad:
         7c:52:f3:da:8b:8a:d3:84:0b:19:9a:14:a4:4d:cf:cd:af:fd:
         41:a0:d0:91:2c:e6:cf:2b:7b:00:a1:36:a5:cb:d8:d1:58:64:
         98:7c:01:53:98:06:73:ff:cd:d8:39:24:3b:13:36:78:f5:c1:
         a9:82:be:c3:ef:9e:0e:92:48:5e:10:92:0b:79:e3:15:7f:03:
         7e:1b:fd:e9:b9:d2:23:be:0c:d3:bd:18:4b:e0:ef:7f:a6:ee:
         9d:59:76:1f:c4:93:56:c9:2f:d6:86:37:3a:7d:a3:4d:91:1f:
         1e:06:7b:ab:f2:cf:3d:4c:38:27:02:ea:19:b0:a7:e1:3d:0c:
         d2:f3:c0:4c:18:81:34:72:33:6d:47:39:ab:0d:4c:64:1f:38:
         de:21:d1:5e:b1:99:12:d3:3b:5d:3e:4f:42:74:62:11:ab:6c:
         41:00:93:94
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3t4LDAalrjChGS1oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3
ZDNkMB4XDTI2MDUyMzEzMDAzMVoXDTI2MDgyMTEzMDAzMVowLzEtMCsGA1UEAxMk
ZDZmMGFlZTItMmVkNS00ZDhlLThiMjQtOGZmOTczZWI3MjdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kSMCB5yApRtDPAb5SaKqBm7nMSbB96yUYxk
vruH4Cc+VXasQiVAIm0U0+e4x58/tswg7KAGUSLKqW61vAJgMqZmHaok96+P1IKy
nAvI6emkiNc4h2QNOK/d6r9g5C9yQU2qpYUrI7PgyIynmFNiOV4UTJTxOxGJiH6A
x1W3KxwqW1yMEJ/Z/7T9W1MueTgtWky/eOYEzPODc269hcv0ldpEsmupOJRQKHd+
0swaDYJ0QBmdMOHATLNXK4XSChZMNWKXLjHSVEveKnxaTSt/UDqIAtubmX/fxWkZ
2sqoq0lky8w9sYxGV9CRrtyNzVVhsnHCGZVlonY5xVaY3vSn9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHOKbfPN8WONXRUBS/dDFwF0iZBvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5
OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNmM3NmE4ZGEtMDBhMC0z
YjVkLTgxYTktMmI5YmUwNGNjYTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4
NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz
N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5
NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARVuKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFhwNER1je+gjdC9tzT2raV8UAFz+dMvIBEV15WwIu3zov1DuK7TlaXR
W5xI/9qfTuV7to/qwaYGDTjg0ZWxaWJCJhRenf9GWGUFu2P7hj7wLWFDEbwaiJJF
rXxS89qLitOECxmaFKRNz82v/UGg0JEs5s8rewChNqXL2NFYZJh8AVOYBnP/zdg5
JDsTNnj1wamCvsPvng6SSF4Qkgt54xV/A34b/em50iO+DNO9GEvg73+m7p1Zdh/E
k1bJL9aGNzp9o02RHx4Ge6vyzz1MOCcC6hmwp+E9DNLzwEwYgTRyM21HOasNTGQf
ON4h0V6xmRLTO10+T0J0YhGrbEEAk5Q=
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:40:36 2026 by rpki-client