Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/b40d2ab7-c882-34d6-9ee6-0ec5cf503a4e.roa
File:                     b40d2ab7-c882-34d6-9ee6-0ec5cf503a4e.roa (raw, json)
Hash identifier:          iHDAlJEpqmj0NfTQBGMoIEkBuhjqjb0UQiJkRc8ffVw=
Subject key identifier:   95:66:9B:17:DA:C7:04:76:5D:B6:5A:3C:CD:4E:AE:EC:10:39:BA:51
Certificate issuer:       /CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
Certificate serial:       010D0C9F4328584EA44516572D46CD8480189E40
Authority key identifier: 72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/b40d2ab7-c882-34d6-9ee6-0ec5cf503a4e.roa
Signing time:             Mon 27 Jul 2026 21:00:11 +0000
ROA not before:           Mon 27 Jul 2026 21:00:11 +0000
ROA not after:            Sun 25 Oct 2026 21:00:11 +0000
asID:                     27539
IP address blocks:        69.26.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a4:45:16:57:2d:46:cd:84:80:18:9e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
        Validity
            Not Before: Jul 27 21:00:11 2026 GMT
            Not After : Oct 25 21:00:11 2026 GMT
        Subject: CN=1bf0e9e6-cf56-4e09-94b4-0e0b9ae8f193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f4:98:f8:43:e1:e9:61:c3:05:08:d6:30:01:
                    f5:f5:88:4f:5c:8f:27:24:d0:ab:80:0e:4b:54:27:
                    5c:4b:03:21:5d:4e:92:17:b2:6c:98:44:b1:59:60:
                    a7:21:98:db:24:32:68:ee:88:22:b7:b2:44:34:b0:
                    df:d4:27:21:f6:c8:1a:7a:79:d5:79:53:4f:47:3f:
                    fc:f8:bc:c4:05:c7:1d:fe:dc:38:30:08:9a:de:0b:
                    9b:1f:d9:fd:05:54:ca:c3:90:56:35:4a:23:38:eb:
                    6e:a2:96:39:ff:99:fb:cf:95:c6:5d:29:41:37:f2:
                    96:b3:56:36:43:8c:84:3b:79:1a:68:f9:3f:f5:8b:
                    f4:6d:a2:55:3b:80:13:bf:14:d5:f1:c3:55:08:fb:
                    f9:e9:89:42:52:20:44:4f:3e:a4:3b:7a:40:20:bb:
                    8e:f8:f3:42:60:53:bf:cf:17:ba:a8:6b:94:d9:e5:
                    42:a7:f7:37:45:d3:0b:ca:ca:d1:19:79:f3:7e:4e:
                    44:34:cc:a3:b6:ed:8d:3e:a0:5f:82:c2:52:81:4c:
                    63:55:2e:fb:95:9a:1f:fb:d9:a4:20:5a:6f:bc:4b:
                    93:90:33:9c:fa:96:34:c7:a3:ba:70:39:39:2c:46:
                    9b:f0:cb:fc:70:f8:7c:32:31:bc:75:de:ca:f5:96:
                    11:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:66:9B:17:DA:C7:04:76:5D:B6:5A:3C:CD:4E:AE:EC:10:39:BA:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/b40d2ab7-c882-34d6-9ee6-0ec5cf503a4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl

            X509v3 Authority Key Identifier:
                keyid:72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.26.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:2a:a0:87:56:a5:e9:24:2a:96:7d:2f:fb:1a:aa:8e:d5:80:
         5c:d5:4c:b0:fe:65:ac:b1:0c:4a:89:fe:0c:34:bc:db:5a:15:
         05:55:d2:f9:3d:67:99:9a:fa:3b:41:6d:c6:ed:ab:31:4e:78:
         b3:eb:b8:63:b2:75:71:44:76:f9:27:d6:74:29:32:ac:39:81:
         7a:a1:27:e5:1a:59:17:2f:43:0a:e2:65:43:23:a9:11:11:2b:
         7a:a1:81:53:9d:e0:32:b0:98:6d:e2:23:d9:43:66:2a:6d:13:
         cb:ad:68:f4:38:b7:17:f8:c7:8f:30:18:6a:85:6f:ee:37:cb:
         22:e2:0d:f9:66:8f:13:3c:72:df:53:32:ed:14:65:24:3a:38:
         04:d5:2b:ef:73:40:f6:2b:75:d4:0c:b7:df:61:6d:f4:0e:b0:
         21:c3:97:86:34:3f:28:fb:62:ff:77:05:41:1e:e2:93:ba:33:
         7b:43:dc:a5:a3:f6:e2:77:b3:02:c5:cc:19:03:60:63:19:4f:
         6a:00:c0:19:8d:e3:8d:49:ca:bd:c9:b7:57:4b:06:08:0a:58:
         81:b6:12:f8:ea:a4:af:b6:c8:fa:1f:36:43:ec:6c:dd:c9:95:
         49:fe:78:1d:29:dd:2d:5e:ac:83:e8:4f:76:4d:eb:fa:24:04:
         0f:8b:c8:7d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6kRRZXLUbNhIAYnkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDY0YTUzMDQtOTc0ZC00Yzg2LTk4MjktMmY0ZDhkYzli
OWI2MB4XDTI2MDcyNzIxMDAxMVoXDTI2MTAyNTIxMDAxMVowLzEtMCsGA1UEAxMk
MWJmMGU5ZTYtY2Y1Ni00ZTA5LTk0YjQtMGUwYjlhZThmMTkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivSY+EPh6WHDBQjWMAH19YhPXI8nJNCrgA5L
VCdcSwMhXU6SF7JsmESxWWCnIZjbJDJo7ogit7JENLDf1Cch9sgaennVeVNPRz/8
+LzEBccd/tw4MAia3gubH9n9BVTKw5BWNUojOOtuopY5/5n7z5XGXSlBN/KWs1Y2
Q4yEO3kaaPk/9Yv0baJVO4ATvxTV8cNVCPv56YlCUiBETz6kO3pAILuO+PNCYFO/
zxe6qGuU2eVCp/c3RdMLysrRGXnzfk5ENMyjtu2NPqBfgsJSgUxjVS77lZof+9mk
IFpvvEuTkDOc+pY0x6O6cDk5LEab8Mv8cPh8MjG8dd7K9ZYRcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJVmmxfaxwR2XbZaPM1OruwQObpRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80NjRh
NTMwNC05NzRkLTRjODYtOTgyOS0yZjRkOGRjOWI5YjYvYjQwZDJhYjctYzg4Mi0z
NGQ2LTllZTYtMGVjNWNmNTAzYTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDY0YTUzMDQtOTc0ZC00Yzg2LTk4
MjktMmY0ZDhkYzliOWI2LzQ2NGE1MzA0LTk3NGQtNGM4Ni05ODI5LTJmNGQ4ZGM5
YjliNi5jcmwwHwYDVR0jBBgwFoAUcgemEPwzJXUhFkgvpE9t1tV3MNUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi80NjRhNTMwNC05NzRkLTRjODYtOTgyOS0yZjRk
OGRjOWI5YjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARRoQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ0qoIdWpekkKpZ9L/saqo7VgFzVTLD+ZayxDEqJ/gw0vNtaFQVV0vk9
Z5ma+jtBbcbtqzFOeLPruGOydXFEdvkn1nQpMqw5gXqhJ+UaWRcvQwriZUMjqRER
K3qhgVOd4DKwmG3iI9lDZiptE8utaPQ4txf4x48wGGqFb+43yyLiDflmjxM8ct9T
Mu0UZSQ6OATVK+9zQPYrddQMt99hbfQOsCHDl4Y0Pyj7Yv93BUEe4pO6M3tD3KWj
9uJ3swLFzBkDYGMZT2oAwBmN441Jyr3Jt1dLBggKWIG2EvjqpK+2yPofNkPsbN3J
lUn+eB0p3S1erIPoT3ZN6/okBA+LyH0=
-----END CERTIFICATE-----
Generated at Thu Aug 13 21:59:35 2026 by rpki-client