Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/e9a4706f-25f1-33e5-bc52-526516eab1d3.roa
File:                     e9a4706f-25f1-33e5-bc52-526516eab1d3.roa (raw, json)
Hash identifier:          tB7SFaToudFp8zmLiRSO/qwc6SAFPR6HaYG9yIi+m1o=
Subject key identifier:   CC:1A:65:B4:7D:7C:64:75:52:EF:F5:8B:DB:06:55:BA:63:CE:C9:2F
Certificate issuer:       /CN=69686900-f201-4b2c-a1c7-afb725abe47f
Certificate serial:       010D0C9F4328584E33FB1640F7E35808C1BE1990
Authority key identifier: 46:CD:B7:E7:87:A9:20:32:5B:E6:E3:AA:56:58:59:CC:00:57:84:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/e9a4706f-25f1-33e5-bc52-526516eab1d3.roa
Signing time:             Wed 17 Jun 2026 15:40:39 +0000
ROA not before:           Wed 17 Jun 2026 15:40:39 +0000
ROA not after:            Tue 15 Sep 2026 15:40:39 +0000
asID:                     29951
IP address blocks:        70.96.86.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:33:fb:16:40:f7:e3:58:08:c1:be:19:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69686900-f201-4b2c-a1c7-afb725abe47f
        Validity
            Not Before: Jun 17 15:40:39 2026 GMT
            Not After : Sep 15 15:40:39 2026 GMT
        Subject: CN=4b644f87-3af3-4674-ab5a-1d30ec4d99f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a9:06:46:72:58:67:31:36:42:ab:45:ed:d9:
                    11:d6:fd:ca:f7:a2:ff:74:90:87:3d:0e:fd:6a:5b:
                    39:69:72:1d:e1:99:42:d0:75:ad:ff:0a:ba:6c:5c:
                    09:43:cb:a4:dc:18:9b:a6:7a:3a:5a:05:d4:7b:f2:
                    ec:e3:2f:fb:70:38:b9:fb:40:6e:86:15:40:01:28:
                    7e:39:ea:64:37:1d:4d:c0:3d:3a:83:67:a6:46:71:
                    32:ba:4a:82:cf:4e:97:75:10:57:21:ad:3a:77:5e:
                    1f:85:12:27:81:6d:02:b8:3e:62:08:f4:13:0c:3b:
                    e5:58:36:1f:b8:77:c9:60:6a:56:c6:ee:3f:ae:4d:
                    8f:d3:08:65:67:9d:3d:d5:0f:42:1b:7a:ae:7a:2e:
                    9a:7a:04:06:26:5d:91:dd:cd:ae:b4:d0:dd:a0:50:
                    73:75:06:fe:04:f9:ed:3e:75:78:27:dd:1a:c4:ee:
                    90:f4:40:94:22:c8:4d:2e:5e:ec:b0:9a:6a:14:02:
                    a0:28:43:85:e8:74:14:67:01:ab:44:60:0a:32:7a:
                    0a:19:2d:c5:b1:88:68:df:1e:2d:ba:16:fa:38:e5:
                    e1:3c:0a:79:30:15:5e:3d:86:08:b5:66:d0:ef:33:
                    62:72:e5:9d:6d:2f:29:27:ee:cf:75:f7:8b:dc:70:
                    9d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:1A:65:B4:7D:7C:64:75:52:EF:F5:8B:DB:06:55:BA:63:CE:C9:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/e9a4706f-25f1-33e5-bc52-526516eab1d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.crl

            X509v3 Authority Key Identifier:
                keyid:46:CD:B7:E7:87:A9:20:32:5B:E6:E3:AA:56:58:59:CC:00:57:84:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.96.86.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:ab:f4:f6:fd:8d:31:2c:e5:30:69:db:41:bf:ed:21:de:4d:
         38:d6:b5:96:22:45:6b:14:f8:29:3e:f3:a0:b7:a0:02:67:80:
         c6:ef:01:1f:b5:cb:fc:d6:c0:53:6a:4c:4f:3e:87:8a:09:71:
         e8:a8:e9:99:43:4a:2e:6f:7b:a9:af:17:14:35:aa:22:b0:9a:
         57:0b:36:b8:44:f2:18:3a:67:c7:c1:4d:de:e6:ff:bb:2b:49:
         4e:91:d1:ff:d0:03:e4:f1:26:a1:e3:ea:cd:d9:d2:87:34:e2:
         c7:86:73:b1:5f:dd:9a:d6:b2:b2:63:9e:56:03:5c:7c:ba:48:
         ea:17:9a:87:0d:6a:84:44:5b:77:ee:c2:2c:f4:51:3f:b0:7d:
         6e:ca:d4:87:11:f4:e0:be:6d:ad:2a:9b:9e:fb:b4:fa:40:7b:
         ab:81:d7:65:22:16:a8:bc:ff:ba:4e:ab:f9:f4:f4:3a:3b:ca:
         ff:74:cc:b6:89:82:e5:d1:5d:c7:27:db:38:53:5c:bf:a1:38:
         df:23:2b:a1:cc:46:2b:1e:0a:42:3e:22:a2:a1:53:0e:4b:df:
         b4:d1:6c:a7:aa:d6:9f:f0:9e:eb:0a:f2:65:bb:2f:d0:90:b7:
         ef:70:ea:dc:11:87:90:85:04:93:d5:e8:5a:80:68:b4:8b:f2:
         19:2f:15:e8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4z+xZA9+NYCMG+GZAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjk2ODY5MDAtZjIwMS00YjJjLWExYzctYWZiNzI1YWJl
NDdmMB4XDTI2MDYxNzE1NDAzOVoXDTI2MDkxNTE1NDAzOVowLzEtMCsGA1UEAxMk
NGI2NDRmODctM2FmMy00Njc0LWFiNWEtMWQzMGVjNGQ5OWYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoakGRnJYZzE2QqtF7dkR1v3K96L/dJCHPQ79
als5aXId4ZlC0HWt/wq6bFwJQ8uk3Bibpno6WgXUe/Ls4y/7cDi5+0BuhhVAASh+
OepkNx1NwD06g2emRnEyukqCz06XdRBXIa06d14fhRIngW0CuD5iCPQTDDvlWDYf
uHfJYGpWxu4/rk2P0whlZ5091Q9CG3quei6aegQGJl2R3c2utNDdoFBzdQb+BPnt
PnV4J90axO6Q9ECUIshNLl7ssJpqFAKgKEOF6HQUZwGrRGAKMnoKGS3FsYho3x4t
uhb6OOXhPAp5MBVePYYItWbQ7zNicuWdbS8pJ+7PdfeL3HCdTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMwaZbR9fGR1Uu/1i9sGVbpjzskvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82OTY4
NjkwMC1mMjAxLTRiMmMtYTFjNy1hZmI3MjVhYmU0N2YvZTlhNDcwNmYtMjVmMS0z
M2U1LWJjNTItNTI2NTE2ZWFiMWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNjk2ODY5MDAtZjIwMS00YjJjLWEx
YzctYWZiNzI1YWJlNDdmLzY5Njg2OTAwLWYyMDEtNGIyYy1hMWM3LWFmYjcyNWFi
ZTQ3Zi5jcmwwHwYDVR0jBBgwFoAURs2354epIDJb5uOqVlhZzABXhPIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS82OTY4NjkwMC1mMjAxLTRiMmMtYTFjNy1hZmI3
MjVhYmU0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRmBWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGar9Pb9jTEs5TBp20G/7SHeTTjWtZYiRWsU+Ck+86C3oAJngMbvAR+1
y/zWwFNqTE8+h4oJceio6ZlDSi5ve6mvFxQ1qiKwmlcLNrhE8hg6Z8fBTd7m/7sr
SU6R0f/QA+TxJqHj6s3Z0oc04seGc7Ff3ZrWsrJjnlYDXHy6SOoXmocNaoREW3fu
wiz0UT+wfW7K1IcR9OC+ba0qm577tPpAe6uB12UiFqi8/7pOq/n09Do7yv90zLaJ
guXRXccn2zhTXL+hON8jK6HMRiseCkI+IqKhUw5L37TRbKeq1p/wnusK8mW7L9CQ
t+9w6twRh5CFBJPV6FqAaLSL8hkvFeg=
-----END CERTIFICATE-----
Generated at Mon Jun 29 19:57:15 2026 by rpki-client