Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/433eda72-ecae-3494-981a-fb6a49ac51c7.roa
File:                     433eda72-ecae-3494-981a-fb6a49ac51c7.roa (raw, json)
Hash identifier:          3XaGtk9KtLnqVhRtxJZ4ooV6OtORp1Wu4vWMGPQ0klU=
Subject key identifier:   1F:D6:3F:B1:E7:A4:5C:98:CB:AA:00:06:46:77:A2:4C:47:7D:61:F3
Certificate issuer:       /CN=69686900-f201-4b2c-a1c7-afb725abe47f
Certificate serial:       010D0C9F4328584DA8D5AB1F90685D6B5F7B5960
Authority key identifier: 46:CD:B7:E7:87:A9:20:32:5B:E6:E3:AA:56:58:59:CC:00:57:84:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/433eda72-ecae-3494-981a-fb6a49ac51c7.roa
Signing time:             Tue 28 Apr 2026 19:27:54 +0000
ROA not before:           Tue 28 Apr 2026 19:27:54 +0000
ROA not after:            Mon 27 Jul 2026 19:27:54 +0000
asID:                     7385
IP address blocks:        64.122.136.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a8:d5:ab:1f:90:68:5d:6b:5f:7b:59:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69686900-f201-4b2c-a1c7-afb725abe47f
        Validity
            Not Before: Apr 28 19:27:54 2026 GMT
            Not After : Jul 27 19:27:54 2026 GMT
        Subject: CN=47d093ea-2f2b-444c-92b5-5ec60b206133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7e:10:c8:28:96:d9:b6:36:6a:f5:ff:95:fe:
                    72:7c:a9:7f:f4:f1:41:49:ba:4c:a2:08:86:d2:18:
                    05:d5:82:09:72:5c:a7:d9:59:80:a4:c7:74:55:60:
                    94:77:ad:4b:18:e1:d3:bd:c4:a4:6e:0c:a1:2d:e8:
                    b2:66:ab:e9:52:4d:3a:f1:52:e7:8a:a6:b6:e2:ac:
                    26:87:24:b4:6a:89:7c:f0:2c:c2:8e:c3:94:50:eb:
                    ca:a4:bc:5c:3d:2a:53:02:8f:a4:72:4f:ba:b4:49:
                    09:44:fb:fc:f8:82:d0:ad:a1:84:32:15:f3:f9:8f:
                    bd:53:89:73:aa:fa:40:ad:ad:ae:f6:77:94:f0:39:
                    42:18:95:66:77:17:a5:81:19:8c:c6:3e:ff:0f:9f:
                    e7:58:9e:5e:c8:4f:65:d5:82:48:40:fe:7f:4f:57:
                    00:70:4e:cd:31:e4:05:c5:cf:36:b6:13:b8:bb:d1:
                    4e:c0:70:59:3d:3b:27:7f:03:83:52:2f:9b:2d:9c:
                    6f:95:f6:75:23:28:40:b8:19:f3:71:ce:13:21:6f:
                    85:0d:c0:2f:0c:19:cd:b1:e2:de:41:28:4a:6f:30:
                    76:92:d0:8e:57:79:59:01:32:b0:ef:bc:10:a5:11:
                    8b:66:22:5f:aa:9e:69:37:de:e0:46:85:2f:2d:7b:
                    4d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:D6:3F:B1:E7:A4:5C:98:CB:AA:00:06:46:77:A2:4C:47:7D:61:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/433eda72-ecae-3494-981a-fb6a49ac51c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.crl

            X509v3 Authority Key Identifier:
                keyid:46:CD:B7:E7:87:A9:20:32:5B:E6:E3:AA:56:58:59:CC:00:57:84:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.122.136.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:23:fa:c4:7c:fb:4c:81:ef:6c:f7:88:dd:1f:9a:de:f3:46:
         83:08:df:a3:af:8d:fb:c8:3c:89:a0:f9:eb:cc:37:d8:b8:70:
         90:00:6d:e8:e2:fa:ab:90:ec:76:d0:e1:72:16:08:5f:33:cb:
         1c:27:3f:b6:47:a4:bb:9c:1a:ef:14:60:c0:e3:1e:9d:3c:13:
         f5:79:fa:8c:61:92:cd:29:14:16:ea:3d:85:c4:6c:32:e9:b2:
         db:b6:00:19:e2:b1:c1:bf:54:e9:92:de:86:e4:13:59:9c:a1:
         67:5f:2a:00:dc:33:1e:82:9f:f4:03:2e:51:dc:4f:f0:87:ed:
         1b:11:92:9e:a8:77:15:8c:be:66:57:ff:24:2d:48:99:11:9d:
         04:6c:cf:d8:e2:2a:9a:92:91:16:c3:77:7e:3c:93:dd:b3:73:
         b1:08:1a:83:e1:61:c1:23:66:7c:cd:72:18:d9:52:2a:c0:0b:
         d6:11:c0:c2:93:93:1a:29:de:bd:6b:d0:24:f1:f6:a9:35:42:
         79:c2:28:8b:1a:6d:6a:cb:61:88:ad:7d:04:d4:f1:79:ba:80:
         97:ea:28:40:96:83:ab:91:1b:59:ce:f2:e8:24:b1:2d:ae:a0:
         b0:af:05:d8:e2:03:bf:8e:49:12:6a:8b:5b:83:da:d4:c6:15:
         70:69:5d:3f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2o1asfkGhda197WWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjk2ODY5MDAtZjIwMS00YjJjLWExYzctYWZiNzI1YWJl
NDdmMB4XDTI2MDQyODE5Mjc1NFoXDTI2MDcyNzE5Mjc1NFowLzEtMCsGA1UEAxMk
NDdkMDkzZWEtMmYyYi00NDRjLTkyYjUtNWVjNjBiMjA2MTMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtn4QyCiW2bY2avX/lf5yfKl/9PFBSbpMogiG
0hgF1YIJclyn2VmApMd0VWCUd61LGOHTvcSkbgyhLeiyZqvpUk068VLniqa24qwm
hyS0aol88CzCjsOUUOvKpLxcPSpTAo+kck+6tEkJRPv8+ILQraGEMhXz+Y+9U4lz
qvpAra2u9neU8DlCGJVmdxelgRmMxj7/D5/nWJ5eyE9l1YJIQP5/T1cAcE7NMeQF
xc82thO4u9FOwHBZPTsnfwODUi+bLZxvlfZ1IyhAuBnzcc4TIW+FDcAvDBnNseLe
QShKbzB2ktCOV3lZATKw77wQpRGLZiJfqp5pN97gRoUvLXtNNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB/WP7HnpFyYy6oABkZ3okxHfWHzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82OTY4
NjkwMC1mMjAxLTRiMmMtYTFjNy1hZmI3MjVhYmU0N2YvNDMzZWRhNzItZWNhZS0z
NDk0LTk4MWEtZmI2YTQ5YWM1MWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNjk2ODY5MDAtZjIwMS00YjJjLWEx
YzctYWZiNzI1YWJlNDdmLzY5Njg2OTAwLWYyMDEtNGIyYy1hMWM3LWFmYjcyNWFi
ZTQ3Zi5jcmwwHwYDVR0jBBgwFoAURs2354epIDJb5uOqVlhZzABXhPIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS82OTY4NjkwMC1mMjAxLTRiMmMtYTFjNy1hZmI3
MjVhYmU0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQHqIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFUj+sR8+0yB72z3iN0fmt7zRoMI36OvjfvIPImg+evMN9i4cJAAbeji
+quQ7HbQ4XIWCF8zyxwnP7ZHpLucGu8UYMDjHp08E/V5+oxhks0pFBbqPYXEbDLp
stu2ABniscG/VOmS3obkE1mcoWdfKgDcMx6Cn/QDLlHcT/CH7RsRkp6odxWMvmZX
/yQtSJkRnQRsz9jiKpqSkRbDd348k92zc7EIGoPhYcEjZnzNchjZUirAC9YRwMKT
kxop3r1r0CTx9qk1QnnCKIsabWrLYYitfQTU8Xm6gJfqKECWg6uRG1nO8ugksS2u
oLCvBdjiA7+OSRJqi1uD2tTGFXBpXT8=
-----END CERTIFICATE-----
Generated at Sat May 9 03:56:47 2026 by rpki-client