Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/c1719613-adaa-3b20-8d6e-1067457ff8b6.roa
File:                     c1719613-adaa-3b20-8d6e-1067457ff8b6.roa (raw, json)
Hash identifier:          PTAm15DSOQ0THaofXk5ikBRDooQDq1wZLDm3FTnUoYM=
Subject key identifier:   4B:C2:A5:FA:31:4F:9E:AC:AE:84:C7:58:24:ED:39:23:5D:59:A5:74
Certificate issuer:       /CN=4a39e371-6e3b-458b-9b07-c3a075c5aecd
Certificate serial:       010D0C9F4328584F5CFD59DEE8AA59777440C680
Authority key identifier: 56:D5:8B:45:0B:7A:97:85:04:F5:AD:94:62:26:62:54:ED:E2:B1:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/c1719613-adaa-3b20-8d6e-1067457ff8b6.roa
Signing time:             Fri 02 Oct 2026 01:00:12 +0000
ROA not before:           Fri 02 Oct 2026 01:00:12 +0000
ROA not after:            Thu 31 Dec 2026 02:00:12 +0000
asID:                     40933
IP address blocks:        70.33.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/4a39e371-6e3b-458b-9b07-c3a075c5aecd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/4a39e371-6e3b-458b-9b07-c3a075c5aecd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5c:fd:59:de:e8:aa:59:77:74:40:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a39e371-6e3b-458b-9b07-c3a075c5aecd
        Validity
            Not Before: Oct  2 01:00:12 2026 GMT
            Not After : Dec 31 02:00:12 2026 GMT
        Subject: CN=a6f1073e-18a7-477d-8eb5-01e67376f71d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:10:fa:6f:34:83:02:05:00:f9:0d:57:5d:a8:
                    32:60:b3:08:66:6f:19:38:5a:87:41:e5:33:8d:45:
                    36:d6:c5:2f:52:39:a2:70:d2:31:d2:34:b4:0f:f0:
                    fe:92:03:02:ca:09:97:bc:7d:4d:a9:51:63:d3:b7:
                    f4:81:cd:38:b4:8e:88:9f:0b:99:2b:59:c6:d0:3f:
                    df:c9:10:3a:48:48:5b:a5:40:ac:49:bc:6d:69:56:
                    80:86:e0:fa:3c:c6:a8:2e:31:c2:e5:ba:d2:bd:b9:
                    5c:9c:71:98:d3:34:d5:46:9a:23:f9:f6:e3:88:a2:
                    d9:c9:e1:8a:cc:39:48:57:fb:b5:1b:17:e8:9e:a4:
                    c1:1d:8d:75:e7:2f:ff:09:fb:c2:38:87:8d:42:e2:
                    24:d2:2f:05:27:49:7e:19:c7:05:63:95:f9:e5:f1:
                    ac:61:2d:36:a3:bf:1a:c6:40:3f:5e:6c:df:98:f4:
                    e1:a4:ff:ed:c7:f5:38:bf:91:dd:0c:0e:82:de:fa:
                    26:6b:bf:37:55:11:ff:3c:23:f6:91:05:a9:72:34:
                    53:04:ee:91:48:8c:6c:a6:54:0b:8d:c7:45:63:77:
                    40:90:81:cf:d7:53:fd:13:95:da:14:4c:4b:24:f0:
                    38:f5:61:82:f1:1f:1f:8d:01:c9:54:ee:0b:8f:f1:
                    c7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:C2:A5:FA:31:4F:9E:AC:AE:84:C7:58:24:ED:39:23:5D:59:A5:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/c1719613-adaa-3b20-8d6e-1067457ff8b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/4a39e371-6e3b-458b-9b07-c3a075c5aecd.crl

            X509v3 Authority Key Identifier:
                keyid:56:D5:8B:45:0B:7A:97:85:04:F5:AD:94:62:26:62:54:ED:E2:B1:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.33.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:d7:e0:2e:db:6c:1b:98:8b:b1:07:c7:3c:ec:9f:c9:51:6e:
         99:b1:96:73:1d:8c:b8:35:c8:cc:84:09:0c:a3:18:b4:9d:95:
         5d:ec:88:6e:f8:7d:29:10:f0:63:79:a2:39:d2:85:f0:99:eb:
         31:58:e6:3c:1c:5a:4f:9f:63:2f:ea:0d:e9:68:71:d0:15:8b:
         73:c3:00:f6:d4:2f:8e:fa:27:0a:67:d0:83:95:99:4b:5f:15:
         19:a3:e8:d8:3b:a2:b3:b3:a2:6c:df:05:56:28:9b:5b:7e:07:
         1a:df:2f:bb:60:37:70:3e:49:8d:53:d9:9d:25:e9:a8:17:cd:
         f0:02:5d:7d:5c:e0:01:cc:ba:ca:13:99:34:49:19:19:3e:48:
         e9:98:f9:43:6f:86:08:18:c3:2d:4d:78:c6:9e:33:a5:71:de:
         78:3b:04:37:65:86:e5:f6:b2:b7:a6:e0:d7:c5:b6:4b:50:bb:
         7f:f4:60:0b:2c:18:e5:29:82:6b:10:c7:0b:b6:ef:48:dd:b7:
         84:5b:e0:be:b2:b3:93:ee:8b:5b:da:54:cf:da:49:2b:a2:15:
         82:70:f2:1f:4e:14:0f:80:f5:aa:31:1f:23:30:d8:34:a3:78:
         b5:88:83:68:af:fd:7f:29:bf:13:d7:c0:c5:47:43:a5:17:9f:
         b0:73:12:bd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9c/Vne6KpZd3RAxoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEzOWUzNzEtNmUzYi00NThiLTliMDctYzNhMDc1YzVh
ZWNkMB4XDTI2MTAwMjAxMDAxMloXDTI2MTIzMTAyMDAxMlowLzEtMCsGA1UEAxMk
YTZmMTA3M2UtMThhNy00NzdkLThlYjUtMDFlNjczNzZmNzFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihD6bzSDAgUA+Q1XXagyYLMIZm8ZOFqHQeUz
jUU21sUvUjmicNIx0jS0D/D+kgMCygmXvH1NqVFj07f0gc04tI6InwuZK1nG0D/f
yRA6SEhbpUCsSbxtaVaAhuD6PMaoLjHC5brSvblcnHGY0zTVRpoj+fbjiKLZyeGK
zDlIV/u1GxfonqTBHY115y//CfvCOIeNQuIk0i8FJ0l+GccFY5X55fGsYS02o78a
xkA/XmzfmPThpP/tx/U4v5HdDA6C3voma783VRH/PCP2kQWpcjRTBO6RSIxsplQL
jcdFY3dAkIHP11P9E5XaFExLJPA49WGC8R8fjQHJVO4Lj/HHzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEvCpfoxT56sroTHWCTtOSNdWaV0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi80YTM5
ZTM3MS02ZTNiLTQ1OGItOWIwNy1jM2EwNzVjNWFlY2QvYzE3MTk2MTMtYWRhYS0z
YjIwLThkNmUtMTA2NzQ1N2ZmOGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k
ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvNGEzOWUzNzEtNmUzYi00NThiLTli
MDctYzNhMDc1YzVhZWNkLzRhMzllMzcxLTZlM2ItNDU4Yi05YjA3LWMzYTA3NWM1
YWVjZC5jcmwwHwYDVR0jBBgwFoAUVtWLRQt6l4UE9a2UYiZiVO3isa8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4
Ny1iMmNjLTU2ODkzODFhM2M0Mi80YTM5ZTM3MS02ZTNiLTQ1OGItOWIwNy1jM2Ew
NzVjNWFlY2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiEhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADPX4C7bbBuYi7EHxzzsn8lRbpmxlnMdjLg1yMyECQyjGLSdlV3siG74
fSkQ8GN5ojnShfCZ6zFY5jwcWk+fYy/qDelocdAVi3PDAPbUL476Jwpn0IOVmUtf
FRmj6Ng7orOzomzfBVYom1t+BxrfL7tgN3A+SY1T2Z0l6agXzfACXX1c4AHMusoT
mTRJGRk+SOmY+UNvhggYwy1NeMaeM6Vx3ng7BDdlhuX2srem4NfFtktQu3/0YAss
GOUpgmsQxwu270jdt4Rb4L6ys5Pui1vaVM/aSSuiFYJw8h9OFA+A9aoxHyMw2DSj
eLWIg2iv/X8pvxPXwMVHQ6UXn7BzEr0=
-----END CERTIFICATE-----
Generated at Sun Oct 11 16:54:10 2026 by rpki-client