Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/c88f8f34-c9f1-35e5-a52d-747c8d220ace.roa
File:                     c88f8f34-c9f1-35e5-a52d-747c8d220ace.roa (raw, json)
Hash identifier:          Lq4xeMT+rgoZxivL7lSAREpuiQP80UThJp52d7E3Yps=
Subject key identifier:   6E:A7:59:BC:EF:57:A6:79:B9:BC:D8:77:F8:C8:9F:6A:B2:F9:9C:F6
Certificate issuer:       /CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
Certificate serial:       010D0C9F4328584B38219FB23302BE835AB8B200
Authority key identifier: 72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/c88f8f34-c9f1-35e5-a52d-747c8d220ace.roa
Signing time:             Wed 17 Sep 2025 01:00:33 +0000
ROA not before:           Wed 17 Sep 2025 01:00:33 +0000
ROA not after:            Tue 16 Dec 2025 02:00:33 +0000
asID:                     27539
IP address blocks:        69.26.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:38:21:9f:b2:33:02:be:83:5a:b8:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
        Validity
            Not Before: Sep 17 01:00:33 2025 GMT
            Not After : Dec 16 02:00:33 2025 GMT
        Subject: CN=5ae805ae-4788-43fc-a046-8cb064c7a648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:4e:29:91:f9:a3:20:13:78:31:ee:94:04:62:
                    ec:f5:91:81:23:31:99:5f:7a:f2:a2:7f:68:67:ea:
                    5b:0a:7c:a0:fb:32:ae:18:7b:9b:60:0d:90:62:28:
                    6c:22:ba:ec:4f:53:43:5e:89:fb:7a:2b:03:bf:87:
                    d6:68:91:57:ba:32:93:74:41:c0:af:cc:55:cf:44:
                    24:8b:2b:07:44:2b:85:28:88:10:28:b6:5b:88:0f:
                    13:a1:55:ce:95:bf:cb:6b:15:d3:63:8f:69:ee:f5:
                    9f:e9:3a:e0:c3:c8:08:76:d5:a8:19:ee:1d:e6:ca:
                    e8:55:d4:75:46:25:90:ad:33:96:4a:4c:48:82:6b:
                    34:1e:f9:65:a8:2c:b4:f6:43:17:ed:0a:71:19:a1:
                    01:99:d7:2f:10:63:f3:49:12:36:92:dc:e1:59:96:
                    5f:db:0c:f2:24:b7:e1:91:31:94:9d:ba:a7:03:09:
                    79:71:fe:dd:fb:f5:6c:12:99:c7:1e:04:43:ed:e6:
                    6b:4d:68:74:27:4e:d7:eb:83:37:17:a6:07:3a:d4:
                    82:f2:ac:65:78:6d:33:d5:21:b9:52:2c:75:0d:99:
                    d9:e2:d9:fe:45:97:c9:97:f8:9c:3e:96:01:94:fe:
                    31:9d:cc:e1:63:bf:47:e6:ba:64:4e:e4:b7:61:33:
                    89:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:A7:59:BC:EF:57:A6:79:B9:BC:D8:77:F8:C8:9F:6A:B2:F9:9C:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/c88f8f34-c9f1-35e5-a52d-747c8d220ace.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl

            X509v3 Authority Key Identifier:
                keyid:72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.26.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:f8:5d:cd:d3:50:e6:49:87:b4:cd:91:c0:06:fb:d3:61:ed:
         11:9b:92:a4:fc:90:6e:10:6b:5f:47:26:b5:1b:14:56:40:ec:
         34:ec:8d:7d:67:cb:24:7c:64:61:45:75:03:31:92:0f:8e:c2:
         07:d3:11:6d:7f:18:42:67:83:29:89:61:72:c1:5c:fb:9f:34:
         22:db:5d:74:97:96:1b:55:64:a2:2f:41:81:1f:e2:1c:36:c5:
         e0:db:c6:00:32:2a:b2:f7:d5:54:24:ed:2e:ee:43:8d:c4:e8:
         ca:9b:52:3e:92:5c:bc:6f:61:51:2a:59:08:4e:08:5d:26:f3:
         b6:46:bb:cd:9c:1c:91:64:23:99:f3:9e:89:c8:4d:b4:81:f2:
         dc:96:ea:86:0a:da:d7:49:58:a4:16:27:57:60:a5:61:6c:0c:
         cd:1d:ff:df:20:9c:c8:9d:54:8b:38:c7:81:a6:ae:9c:80:d5:
         4d:87:54:df:f1:99:36:4e:d2:12:ef:14:72:35:4c:0f:08:60:
         c1:2e:2f:c2:c0:d3:80:b6:33:1a:da:f9:92:97:cb:1d:e0:62:
         84:ce:9f:43:5a:f3:8c:fd:ef:b4:7a:e7:b8:3a:4e:f8:58:83:
         16:58:fe:ed:ea:18:89:9a:9a:94:f6:6f:bc:96:10:ab:0e:15:
         1e:01:25:e6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs4IZ+yMwK+g1q4sgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDY0YTUzMDQtOTc0ZC00Yzg2LTk4MjktMmY0ZDhkYzli
OWI2MB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk
NWFlODA1YWUtNDc4OC00M2ZjLWEwNDYtOGNiMDY0YzdhNjQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk04pkfmjIBN4Me6UBGLs9ZGBIzGZX3ryon9o
Z+pbCnyg+zKuGHubYA2QYihsIrrsT1NDXon7eisDv4fWaJFXujKTdEHAr8xVz0Qk
iysHRCuFKIgQKLZbiA8ToVXOlb/LaxXTY49p7vWf6Trgw8gIdtWoGe4d5sroVdR1
RiWQrTOWSkxIgms0HvllqCy09kMX7QpxGaEBmdcvEGPzSRI2ktzhWZZf2wzyJLfh
kTGUnbqnAwl5cf7d+/VsEpnHHgRD7eZrTWh0J07X64M3F6YHOtSC8qxleG0z1SG5
Uix1DZnZ4tn+RZfJl/icPpYBlP4xnczhY79H5rpkTuS3YTOJHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG6nWbzvV6Z5ubzYd/jIn2qy+Zz2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80NjRh
NTMwNC05NzRkLTRjODYtOTgyOS0yZjRkOGRjOWI5YjYvYzg4ZjhmMzQtYzlmMS0z
NWU1LWE1MmQtNzQ3YzhkMjIwYWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDY0YTUzMDQtOTc0ZC00Yzg2LTk4
MjktMmY0ZDhkYzliOWI2LzQ2NGE1MzA0LTk3NGQtNGM4Ni05ODI5LTJmNGQ4ZGM5
YjliNi5jcmwwHwYDVR0jBBgwFoAUcgemEPwzJXUhFkgvpE9t1tV3MNUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi80NjRhNTMwNC05NzRkLTRjODYtOTgyOS0yZjRk
OGRjOWI5YjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARRoRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEj4Xc3TUOZJh7TNkcAG+9Nh7RGbkqT8kG4Qa19HJrUbFFZA7DTsjX1n
yyR8ZGFFdQMxkg+OwgfTEW1/GEJngymJYXLBXPufNCLbXXSXlhtVZKIvQYEf4hw2
xeDbxgAyKrL31VQk7S7uQ43E6MqbUj6SXLxvYVEqWQhOCF0m87ZGu82cHJFkI5nz
nonITbSB8tyW6oYK2tdJWKQWJ1dgpWFsDM0d/98gnMidVIs4x4GmrpyA1U2HVN/x
mTZO0hLvFHI1TA8IYMEuL8LA04C2Mxra+ZKXyx3gYoTOn0Na84z977R657g6TvhY
gxZY/u3qGImampT2b7yWEKsOFR4BJeY=
-----END CERTIFICATE-----
Generated at Fri Sep 19 18:03:43 2025 by rpki-client