Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/f4b9a70c-3362-3056-820f-35f3ee26050a.roa
File:                     f4b9a70c-3362-3056-820f-35f3ee26050a.roa (raw, json)
Hash identifier:          ipwbo/3891Vh80JRR2dPWnhcBemBQ3bxftA9NTYCmPE=
Subject key identifier:   4A:D4:DC:F0:BF:8C:DB:D0:4B:C1:C8:EA:94:0E:2D:25:6B:D7:C9:F8
Certificate issuer:       /CN=e2213668-8973-4471-a19a-d7e8374ada63
Certificate serial:       010D0C9F4328584F7E7DC46A33970518A10F9D30
Authority key identifier: C4:C2:67:04:36:13:3B:67:5F:A5:F5:02:A2:60:55:11:8F:84:E7:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/f4b9a70c-3362-3056-820f-35f3ee26050a.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     16509
IP address blocks:        69.64.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/e2213668-8973-4471-a19a-d7e8374ada63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/e2213668-8973-4471-a19a-d7e8374ada63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:c4:6a:33:97:05:18:a1:0f:9d:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2213668-8973-4471-a19a-d7e8374ada63
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=29c0f0ea-309f-4ed1-99c1-55f949916aa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:cf:34:6f:63:2a:55:99:04:e0:5f:8e:97:32:
                    8f:7b:b0:31:c8:64:81:d8:2e:d5:06:74:d3:2d:08:
                    47:7a:40:3e:8c:6f:15:39:d8:13:bc:34:31:40:e0:
                    82:96:f2:7f:2c:f2:82:c5:2d:02:33:b5:0a:09:71:
                    1e:5d:bc:43:4c:8a:ff:39:29:65:86:a8:05:34:4c:
                    e3:de:00:21:ae:e6:b2:0c:92:f1:83:f4:a6:e2:a7:
                    48:10:7c:f5:91:92:9b:1f:0d:38:e8:a3:4b:d2:69:
                    0d:fd:b5:98:99:79:fa:46:8e:34:c5:0d:11:ba:c9:
                    46:0c:db:15:57:ae:91:00:9d:bc:5a:65:e8:bc:07:
                    01:9c:b3:5a:c8:0f:c2:ce:78:60:3f:4a:5d:c7:3f:
                    a6:7c:6f:c5:cb:90:36:1b:42:88:73:b4:bd:ca:59:
                    4c:a2:2b:ae:f3:04:a4:59:d1:e3:d8:d4:61:68:ce:
                    ed:59:53:63:d2:2a:f6:d9:ac:fc:d1:63:aa:45:28:
                    4e:2c:e1:e4:41:8f:23:14:f0:88:8b:89:43:c2:05:
                    c5:8c:26:5a:45:e2:68:ec:36:36:8f:24:57:1b:97:
                    b8:6c:11:b1:f9:37:72:c3:49:20:16:b9:47:74:31:
                    8b:64:ee:66:e8:b7:5a:76:80:e7:2d:a1:83:5e:3d:
                    d2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:D4:DC:F0:BF:8C:DB:D0:4B:C1:C8:EA:94:0E:2D:25:6B:D7:C9:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/f4b9a70c-3362-3056-820f-35f3ee26050a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/e2213668-8973-4471-a19a-d7e8374ada63.crl

            X509v3 Authority Key Identifier:
                keyid:C4:C2:67:04:36:13:3B:67:5F:A5:F5:02:A2:60:55:11:8F:84:E7:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.64.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:cf:47:38:e4:23:8b:67:7d:db:4d:e6:66:7b:0d:29:22:d2:
         c3:fe:09:d0:81:4f:b4:e6:d9:3d:43:76:0a:63:22:f7:19:d7:
         57:0e:35:31:65:e6:60:2c:7f:84:1c:66:cc:9e:f5:e3:d3:3f:
         ff:f3:89:e8:fb:d4:4c:4e:5c:11:47:7a:26:7a:08:77:97:d3:
         c8:3d:8e:1c:66:14:dc:0b:01:82:21:b0:67:4b:ec:f2:bc:cc:
         09:9e:c5:74:ef:0c:89:fa:79:1e:d9:04:53:1d:72:35:04:be:
         1f:3a:28:47:89:6a:18:7a:02:43:0e:51:a3:7c:9f:37:55:b4:
         ce:87:13:c4:75:5e:05:1b:6c:7f:dc:4d:04:05:04:ad:19:5f:
         16:f7:f6:61:3c:e5:72:ef:7a:b1:ab:9d:2f:5a:fb:ac:34:65:
         de:e3:d7:be:0c:7b:fd:e9:97:ad:4c:83:cb:c4:eb:66:71:c8:
         67:b5:b7:11:82:3b:5c:a2:35:47:04:4d:fb:ba:fc:cf:07:8d:
         06:aa:9f:e1:04:bc:4c:d3:43:9e:9e:91:a3:95:70:6b:68:05:
         c9:85:e7:da:7c:dd:50:72:ad:b0:d2:6e:51:d1:d1:96:87:0f:
         06:35:70:7f:db:ed:8a:8c:3b:84:a1:fc:e3:b7:b9:74:e8:66:
         2e:de:75:8f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9+fcRqM5cFGKEPnTAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIyMTM2NjgtODk3My00NDcxLWExOWEtZDdlODM3NGFk
YTYzMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk
MjljMGYwZWEtMzA5Zi00ZWQxLTk5YzEtNTVmOTQ5OTE2YWE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2880b2MqVZkE4F+OlzKPe7AxyGSB2C7VBnTT
LQhHekA+jG8VOdgTvDQxQOCClvJ/LPKCxS0CM7UKCXEeXbxDTIr/OSllhqgFNEzj
3gAhruayDJLxg/Sm4qdIEHz1kZKbHw046KNL0mkN/bWYmXn6Ro40xQ0RuslGDNsV
V66RAJ28WmXovAcBnLNayA/CznhgP0pdxz+mfG/Fy5A2G0KIc7S9yllMoiuu8wSk
WdHj2NRhaM7tWVNj0ir22az80WOqRShOLOHkQY8jFPCIi4lDwgXFjCZaReJo7DY2
jyRXG5e4bBGx+Tdyw0kgFrlHdDGLZO5m6LdadoDnLaGDXj3SFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFErU3PC/jNvQS8HI6pQOLSVr18n4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9lMjIx
MzY2OC04OTczLTQ0NzEtYTE5YS1kN2U4Mzc0YWRhNjMvZjRiOWE3MGMtMzM2Mi0z
MDU2LTgyMGYtMzVmM2VlMjYwNTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZTIyMTM2NjgtODk3My00NDcxLWEx
OWEtZDdlODM3NGFkYTYzL2UyMjEzNjY4LTg5NzMtNDQ3MS1hMTlhLWQ3ZTgzNzRh
ZGE2My5jcmwwHwYDVR0jBBgwFoAUxMJnBDYTO2dfpfUComBVEY+E5xMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9lMjIxMzY2OC04OTczLTQ0NzEtYTE5YS1kN2U4
Mzc0YWRhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARUCSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACrPRzjkI4tnfdtN5mZ7DSki0sP+CdCBT7Tm2T1DdgpjIvcZ11cONTFl
5mAsf4QcZsye9ePTP//ziej71ExOXBFHeiZ6CHeX08g9jhxmFNwLAYIhsGdL7PK8
zAmexXTvDIn6eR7ZBFMdcjUEvh86KEeJahh6AkMOUaN8nzdVtM6HE8R1XgUbbH/c
TQQFBK0ZXxb39mE85XLverGrnS9a+6w0Zd7j174Me/3pl61Mg8vE62ZxyGe1txGC
O1yiNUcETfu6/M8HjQaqn+EEvEzTQ56ekaOVcGtoBcmF59p83VByrbDSblHR0ZaH
DwY1cH/b7YqMO4Sh/OO3uXToZi7edY8=
-----END CERTIFICATE-----
Generated at Sun Nov 1 10:04:05 2026 by rpki-client