Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/74fee4a1-6d1d-3384-befc-8936e91b742f.roa
File:                     74fee4a1-6d1d-3384-befc-8936e91b742f.roa (raw, json)
Hash identifier:          SS1OTDRrRyJwhzBDCVpiqhnV2GYBQQJdFse6TIj6ds4=
Subject key identifier:   9A:53:9D:68:1B:B4:D6:75:02:39:F0:C9:1F:86:60:F3:19:B1:DA:80
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584E296F0CBE9913DB6C7D935600
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/74fee4a1-6d1d-3384-befc-8936e91b742f.roa
Signing time:             Sat 13 Jun 2026 21:00:12 +0000
ROA not before:           Sat 13 Jun 2026 21:00:12 +0000
ROA not after:            Fri 11 Sep 2026 21:00:12 +0000
asID:                     25899
IP address blocks:        208.70.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:29:6f:0c:be:99:13:db:6c:7d:93:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Jun 13 21:00:12 2026 GMT
            Not After : Sep 11 21:00:12 2026 GMT
        Subject: CN=e7b1b20f-6345-46db-885e-8029ab49f259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:58:f3:e0:a4:3b:44:bd:03:bd:2c:92:13:2a:
                    55:cd:1c:3d:1b:87:f2:b9:a6:4f:33:e1:12:70:34:
                    02:de:46:8f:79:22:ae:b2:c0:f5:7b:2a:9a:e7:c7:
                    35:c6:0a:c2:3c:ce:f2:5b:4a:b7:b2:30:43:ca:30:
                    41:cd:67:2d:80:6f:49:45:7f:81:03:ca:63:42:fc:
                    0d:51:dc:20:fe:8e:cc:b8:72:7b:1a:92:33:59:1a:
                    9a:eb:e5:ba:d9:d9:b2:f9:30:44:9e:48:f6:64:16:
                    c3:ee:f8:23:7e:c2:bc:2a:8a:7d:8e:6c:ef:cd:98:
                    0a:4a:46:46:09:dd:cc:0c:6d:c3:93:7e:b6:af:e2:
                    04:ed:a5:77:1f:3b:a7:7d:36:2d:ac:0c:75:d1:59:
                    90:6b:87:48:b3:01:be:25:ab:00:5f:5e:be:fb:05:
                    2b:e6:b1:fa:6c:5d:60:d3:42:57:7a:47:c5:d2:97:
                    65:23:21:fc:8a:10:61:d6:25:0e:cd:74:33:95:8d:
                    b5:02:56:02:d9:6a:84:f8:b6:8b:c4:f4:be:96:fa:
                    dc:80:ed:dd:db:fb:31:ef:9f:72:fa:59:05:4f:22:
                    ba:91:5d:15:b7:a0:37:17:09:ed:71:9e:eb:fe:00:
                    fe:5a:9d:6f:52:14:62:c7:63:d3:12:65:4a:1a:45:
                    93:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:53:9D:68:1B:B4:D6:75:02:39:F0:C9:1F:86:60:F3:19:B1:DA:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/74fee4a1-6d1d-3384-befc-8936e91b742f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.70.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:d7:41:bb:bd:68:24:07:34:47:8d:15:c0:93:2b:de:8b:b4:
         3c:66:67:f2:a0:dd:a9:42:2a:c6:9d:c1:71:d7:16:3a:d5:c9:
         5d:22:e1:89:fc:f3:ef:2d:46:c5:04:c3:39:e8:63:6d:1b:01:
         23:13:09:6f:04:0a:9d:88:30:1e:22:c0:78:b6:9e:87:51:5f:
         02:2d:07:5e:52:80:8b:56:15:8d:4d:39:39:fc:16:19:bc:cd:
         76:43:aa:a8:54:d2:c5:e6:b7:80:d8:e0:97:55:9f:f9:27:7f:
         17:49:0b:cf:1a:a4:0f:3d:41:51:9a:ef:94:9d:cd:f2:79:97:
         ff:30:57:6e:82:4d:f6:c1:b2:c2:2c:3e:f2:f9:18:21:b9:ca:
         52:c1:4a:d9:ca:54:57:25:f8:04:8a:51:7c:ca:c8:44:81:97:
         40:ef:ea:c9:00:f9:dc:a0:a6:a8:de:e0:29:13:a8:39:c5:2a:
         d3:2b:a4:01:f4:30:93:3b:b1:f7:b6:86:de:91:45:3e:49:ef:
         c9:18:37:59:e7:db:a0:58:af:df:cd:74:e9:b6:4d:77:35:1c:
         ec:5f:cb:9d:c4:02:fa:ec:10:9b:13:0c:f1:fd:e9:85:0e:5a:
         1d:a1:3c:47:9b:a9:49:35:e8:54:6b:d1:da:eb:46:d2:46:6e:
         46:9f:c1:08
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4pbwy+mRPbbH2TVgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0
MGFmMB4XDTI2MDYxMzIxMDAxMloXDTI2MDkxMTIxMDAxMlowLzEtMCsGA1UEAxMk
ZTdiMWIyMGYtNjM0NS00NmRiLTg4NWUtODAyOWFiNDlmMjU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVjz4KQ7RL0DvSySEypVzRw9G4fyuaZPM+ES
cDQC3kaPeSKussD1eyqa58c1xgrCPM7yW0q3sjBDyjBBzWctgG9JRX+BA8pjQvwN
Udwg/o7MuHJ7GpIzWRqa6+W62dmy+TBEnkj2ZBbD7vgjfsK8Kop9jmzvzZgKSkZG
Cd3MDG3Dk362r+IE7aV3HzunfTYtrAx10VmQa4dIswG+JasAX16++wUr5rH6bF1g
00JXekfF0pdlIyH8ihBh1iUOzXQzlY21AlYC2WqE+LaLxPS+lvrcgO3d2/sx759y
+lkFTyK6kV0Vt6A3FwntcZ7r/gD+Wp1vUhRix2PTEmVKGkWTWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJpTnWgbtNZ1AjnwyR+GYPMZsdqAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1
Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvNzRmZWU0YTEtNmQxZC0z
Mzg0LWJlZmMtODkzNmU5MWI3NDJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk
ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk
NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl
YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EapMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHPXQbu9aCQHNEeNFcCTK96LtDxmZ/Kg3alCKsadwXHXFjrVyV0i4Yn8
8+8tRsUEwznoY20bASMTCW8ECp2IMB4iwHi2nodRXwItB15SgItWFY1NOTn8Fhm8
zXZDqqhU0sXmt4DY4JdVn/knfxdJC88apA89QVGa75SdzfJ5l/8wV26CTfbBssIs
PvL5GCG5ylLBStnKVFcl+ASKUXzKyESBl0Dv6skA+dygpqje4CkTqDnFKtMrpAH0
MJM7sfe2ht6RRT5J78kYN1nn26BYr9/NdOm2TXc1HOxfy53EAvrsEJsTDPH96YUO
Wh2hPEebqUk16FRr0drrRtJGbkafwQg=
-----END CERTIFICATE-----
Generated at Fri Jul 17 10:45:59 2026 by rpki-client