Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/d7aea177-906f-3c5a-ae7e-8bd551fb07d2.roa
File:                     d7aea177-906f-3c5a-ae7e-8bd551fb07d2.roa (raw, json)
Hash identifier:          Lcf4y8ZV7PfkkQhbS25NW7n39QEDAzuksND8PzFgJ/w=
Subject key identifier:   D2:EF:16:E8:C4:FE:7C:A9:E0:DD:96:F6:29:3C:65:29:A1:FA:BA:58
Certificate issuer:       /CN=86fea470-b380-45c0-9f6b-033b7d884388
Certificate serial:       010D0C9F4328584EBB11B431691D4585B883DB00
Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/d7aea177-906f-3c5a-ae7e-8bd551fb07d2.roa
Signing time:             Wed 05 Aug 2026 01:00:12 +0000
ROA not before:           Wed 05 Aug 2026 01:00:12 +0000
ROA not after:            Tue 03 Nov 2026 02:00:12 +0000
asID:                     19318
IP address blocks:        69.42.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bb:11:b4:31:69:1d:45:85:b8:83:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388
        Validity
            Not Before: Aug  5 01:00:12 2026 GMT
            Not After : Nov  3 02:00:12 2026 GMT
        Subject: CN=f93316d1-00d7-46b9-832c-da96f131f770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e8:5e:59:b7:fb:cf:3f:f3:79:a0:19:21:0b:
                    a9:fd:92:47:23:a7:b0:b1:cf:6c:86:13:ab:54:1a:
                    f8:78:71:f0:95:08:ca:5e:df:c7:48:ba:5d:71:c3:
                    8a:42:c8:96:ee:06:18:3b:5f:f0:38:ea:20:52:6f:
                    cc:4a:e6:fb:4b:59:57:4b:07:87:01:06:db:eb:77:
                    69:45:97:2d:10:6e:05:aa:fa:d7:ae:8f:01:18:9f:
                    74:ac:9b:b9:48:5e:4e:bd:33:bf:15:5f:7c:6f:8a:
                    14:9e:92:25:30:42:b0:d3:d4:25:90:8f:ca:3c:32:
                    af:5e:3a:a2:35:70:a5:ec:e5:b3:84:80:dc:f4:41:
                    fe:b1:19:f7:0b:a2:29:63:8a:4c:e4:62:cf:94:25:
                    15:c8:45:7e:b6:de:67:bb:f1:72:92:23:60:fc:d2:
                    6e:c2:d7:b5:eb:06:89:a0:17:fb:5f:e4:cd:08:f4:
                    c1:1b:33:46:ee:bf:e4:49:ef:4c:12:66:97:72:12:
                    81:85:b7:c5:35:9b:9b:8f:7b:bf:26:de:28:98:3e:
                    47:02:29:c5:ea:4e:be:ac:d3:20:fd:bd:e0:d7:71:
                    f7:3a:67:9f:fa:8a:de:90:96:2d:6c:ae:fa:ad:d7:
                    ff:fd:e5:ad:5a:ac:aa:33:f4:7d:97:c3:ed:93:47:
                    9c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:EF:16:E8:C4:FE:7C:A9:E0:DD:96:F6:29:3C:65:29:A1:FA:BA:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/d7aea177-906f-3c5a-ae7e-8bd551fb07d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl

            X509v3 Authority Key Identifier:
                keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.42.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:81:ae:d1:d4:71:9f:a6:29:e6:42:bc:2e:13:7a:90:18:df:
         b4:17:b9:09:23:ae:6f:e4:3e:32:7f:38:c2:45:ad:33:d6:14:
         e6:04:71:9c:61:1d:07:83:2f:7c:99:bf:5e:fa:a9:ca:6a:93:
         e9:9d:59:a0:40:cb:f4:27:fd:a0:e3:5d:e4:06:0e:d3:20:5e:
         36:a4:a8:db:3c:22:7a:4e:29:60:9b:ff:77:77:57:cc:17:d3:
         3e:31:dc:2f:24:d8:0f:9c:c1:37:2a:1d:77:8c:02:98:8a:c8:
         26:7b:2d:04:1d:e7:78:24:0b:16:d6:3e:32:5e:e4:dd:e3:13:
         7d:df:e0:96:b1:bf:2e:f6:70:2b:5a:8f:34:31:45:f4:59:6c:
         0f:d2:6e:99:2a:93:e0:e0:ca:77:75:1f:0b:0f:3b:ab:96:d9:
         68:41:20:3b:23:9e:fb:ec:81:b7:49:bc:ff:6a:44:0a:61:73:
         59:c6:1d:15:d1:bd:03:ca:06:61:8a:65:3b:51:e6:a3:e3:19:
         47:66:6c:37:19:95:02:ab:0c:b3:17:d7:f8:7f:bf:e4:07:d8:
         58:87:46:23:9d:87:fc:37:d4:e9:6d:5c:17:4f:f6:e5:a2:10:
         06:cc:58:43:e1:7d:85:cd:e1:5d:b6:66:9c:b0:85:51:8f:e9:
         dd:f8:52:24
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE67EbQxaR1FhbiD2wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0
Mzg4MB4XDTI2MDgwNTAxMDAxMloXDTI2MTEwMzAyMDAxMlowLzEtMCsGA1UEAxMk
ZjkzMzE2ZDEtMDBkNy00NmI5LTgzMmMtZGE5NmYxMzFmNzcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuheWbf7zz/zeaAZIQup/ZJHI6ewsc9shhOr
VBr4eHHwlQjKXt/HSLpdccOKQsiW7gYYO1/wOOogUm/MSub7S1lXSweHAQbb63dp
RZctEG4FqvrXro8BGJ90rJu5SF5OvTO/FV98b4oUnpIlMEKw09QlkI/KPDKvXjqi
NXCl7OWzhIDc9EH+sRn3C6IpY4pM5GLPlCUVyEV+tt5nu/FykiNg/NJuwte16waJ
oBf7X+TNCPTBGzNG7r/kSe9MEmaXchKBhbfFNZubj3u/Jt4omD5HAinF6k6+rNMg
/b3g13H3Omef+orekJYtbK76rdf//eWtWqyqM/R9l8Ptk0ecNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNLvFujE/nyp4N2W9ik8ZSmh+rpYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmZl
YTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvZDdhZWExNzctOTA2Zi0z
YzVhLWFlN2UtOGJkNTUxZmIwN2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmZWE0NzAtYjM4MC00NWMwLTlm
NmItMDMzYjdkODg0Mzg4Lzg2ZmVhNDcwLWIzODAtNDVjMC05ZjZiLTAzM2I3ZDg4
NDM4OC5jcmwwHwYDVR0jBBgwFoAUCHSKMQk8LElEoS6K1lyekgQBzxYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNi
N2Q4ODQzODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARSreMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANSBrtHUcZ+mKeZCvC4TepAY37QXuQkjrm/kPjJ/OMJFrTPWFOYEcZxh
HQeDL3yZv176qcpqk+mdWaBAy/Qn/aDjXeQGDtMgXjakqNs8InpOKWCb/3d3V8wX
0z4x3C8k2A+cwTcqHXeMApiKyCZ7LQQd53gkCxbWPjJe5N3jE33f4Jaxvy72cCta
jzQxRfRZbA/Sbpkqk+Dgynd1HwsPO6uW2WhBIDsjnvvsgbdJvP9qRAphc1nGHRXR
vQPKBmGKZTtR5qPjGUdmbDcZlQKrDLMX1/h/v+QH2FiHRiOdh/w31OltXBdP9uWi
EAbMWEPhfYXN4V22ZpywhVGP6d34UiQ=
-----END CERTIFICATE-----
Generated at Thu Sep 10 18:42:18 2026 by rpki-client