Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/68d2d145-e3fc-3282-879c-98e353d19681.roa
File:                     68d2d145-e3fc-3282-879c-98e353d19681.roa (raw, json)
Hash identifier:          NPgs8qXZ0aW/M/AELxTCAf+VeVa6iCLqtadvN7TJIDg=
Subject key identifier:   18:E0:1C:E5:31:80:3F:D3:9B:08:82:28:ED:B0:B8:0B:05:41:29:B3
Certificate issuer:       /CN=5294026e-22fb-4d13-b040-a0d74302e57e
Certificate serial:       010D0C9F4328584E6B0A30126CD0E3BFEC57DB80
Authority key identifier: 01:9A:82:A4:B4:AB:DC:DA:9E:35:9F:5A:72:BB:1A:93:59:97:7B:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/68d2d145-e3fc-3282-879c-98e353d19681.roa
Signing time:             Tue 07 Jul 2026 09:00:12 +0000
ROA not before:           Tue 07 Jul 2026 09:00:12 +0000
ROA not after:            Mon 05 Oct 2026 09:00:12 +0000
asID:                     10361
IP address blocks:        69.191.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/5294026e-22fb-4d13-b040-a0d74302e57e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/5294026e-22fb-4d13-b040-a0d74302e57e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6b:0a:30:12:6c:d0:e3:bf:ec:57:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5294026e-22fb-4d13-b040-a0d74302e57e
        Validity
            Not Before: Jul  7 09:00:12 2026 GMT
            Not After : Oct  5 09:00:12 2026 GMT
        Subject: CN=9aed92ff-4956-4449-9e44-27b60a154cd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:cd:0a:50:3f:0c:cb:9b:1a:92:31:80:4d:12:
                    eb:23:0e:1b:2c:98:6c:0e:c1:3b:6a:77:1f:03:36:
                    ac:b8:13:e6:95:be:8b:27:52:0b:5a:2a:b0:11:2b:
                    b7:17:2a:21:31:8d:52:d0:bb:f0:34:4e:f7:a9:d5:
                    e2:b3:af:81:14:01:6e:c7:67:25:69:59:f6:43:6f:
                    8c:ff:85:67:a9:e2:8c:c8:05:45:8e:94:4f:20:c0:
                    0e:63:73:78:59:cb:c8:fe:31:44:90:25:52:63:d9:
                    65:6e:e9:bc:78:6a:26:2a:79:98:6b:f9:03:b4:35:
                    ab:df:7a:cc:e4:9e:6c:e6:c5:85:3a:26:59:7b:b9:
                    c7:9d:cb:b5:52:d2:5c:9e:68:e8:d9:33:20:c3:cb:
                    e6:ac:ce:47:3f:22:8d:35:83:2e:f6:c4:f7:0b:dc:
                    68:ab:df:ea:22:09:6d:d8:f7:96:3e:44:a1:fc:4c:
                    8c:06:54:80:e0:ee:09:41:bd:d6:5d:57:c9:84:2f:
                    65:2d:e3:4c:58:83:e9:cc:a5:b3:5a:a4:e5:6c:29:
                    53:b7:fd:6e:86:55:e6:08:49:84:40:4d:fe:78:98:
                    cd:68:c0:b0:8e:9d:81:8c:33:32:2f:70:41:1e:68:
                    30:04:99:26:28:b1:bc:fa:5c:45:cb:0f:5c:84:d3:
                    95:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E0:1C:E5:31:80:3F:D3:9B:08:82:28:ED:B0:B8:0B:05:41:29:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/68d2d145-e3fc-3282-879c-98e353d19681.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/5294026e-22fb-4d13-b040-a0d74302e57e.crl

            X509v3 Authority Key Identifier:
                keyid:01:9A:82:A4:B4:AB:DC:DA:9E:35:9F:5A:72:BB:1A:93:59:97:7B:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.191.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:2c:ef:56:2b:44:19:ec:15:e4:79:91:92:7b:8e:9e:a8:03:
         b8:01:a6:38:71:54:89:31:b3:ed:55:9d:8f:90:d6:cf:e9:30:
         db:3f:90:26:08:d5:9a:36:b2:99:4b:e6:5a:3d:35:92:b0:de:
         ae:75:e7:9e:89:0d:13:3a:5a:48:77:a1:fe:d1:01:44:1f:d4:
         e1:6f:1e:0c:b7:f4:90:61:c0:cb:24:68:cb:61:9f:eb:a7:7f:
         74:3c:a1:c0:bd:8c:84:16:bb:89:b1:13:32:0e:53:0d:28:14:
         a6:0b:e9:22:2d:cd:1b:76:19:5c:85:17:e9:28:58:94:d9:18:
         1f:29:8e:d8:62:52:cd:be:e5:e5:9f:62:4b:84:2b:e4:1c:08:
         68:8c:c1:b9:4f:fa:48:e8:42:af:12:32:b1:d2:43:d3:8b:22:
         f0:38:d8:a1:64:d6:1e:14:5f:3f:2a:6b:28:21:17:02:4a:33:
         56:42:80:a0:fe:66:5a:1b:5f:ec:70:7b:e6:6d:89:04:87:c0:
         1e:fa:44:a3:c3:a2:a6:96:78:2d:a8:66:0f:66:80:f1:03:28:
         db:06:22:69:23:8a:13:0b:f0:ac:63:16:b3:d4:c0:97:5f:a8:
         bb:9a:f3:d5:0b:a2:33:57:67:c1:5c:7d:04:88:fd:cd:66:67:
         ca:9c:15:3a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5rCjASbNDjv+xX24AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTI5NDAyNmUtMjJmYi00ZDEzLWIwNDAtYTBkNzQzMDJl
NTdlMB4XDTI2MDcwNzA5MDAxMloXDTI2MTAwNTA5MDAxMlowLzEtMCsGA1UEAxMk
OWFlZDkyZmYtNDk1Ni00NDQ5LTllNDQtMjdiNjBhMTU0Y2Q5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhs0KUD8My5sakjGATRLrIw4bLJhsDsE7ancf
AzasuBPmlb6LJ1ILWiqwESu3FyohMY1S0LvwNE73qdXis6+BFAFux2claVn2Q2+M
/4VnqeKMyAVFjpRPIMAOY3N4WcvI/jFEkCVSY9llbum8eGomKnmYa/kDtDWr33rM
5J5s5sWFOiZZe7nHncu1UtJcnmjo2TMgw8vmrM5HPyKNNYMu9sT3C9xoq9/qIglt
2PeWPkSh/EyMBlSA4O4JQb3WXVfJhC9lLeNMWIPpzKWzWqTlbClTt/1uhlXmCEmE
QE3+eJjNaMCwjp2BjDMyL3BBHmgwBJkmKLG8+lxFyw9chNOV3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBjgHOUxgD/TmwiCKO2wuAsFQSmzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81Mjk0
MDI2ZS0yMmZiLTRkMTMtYjA0MC1hMGQ3NDMwMmU1N2UvNjhkMmQxNDUtZTNmYy0z
MjgyLTg3OWMtOThlMzUzZDE5NjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTI5NDAyNmUtMjJmYi00ZDEzLWIw
NDAtYTBkNzQzMDJlNTdlLzUyOTQwMjZlLTIyZmItNGQxMy1iMDQwLWEwZDc0MzAy
ZTU3ZS5jcmwwHwYDVR0jBBgwFoAUAZqCpLSr3NqeNZ9acrsak1mXe8YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81Mjk0MDI2ZS0yMmZiLTRkMTMtYjA0MC1hMGQ3
NDMwMmU1N2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARb/QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGcs71YrRBnsFeR5kZJ7jp6oA7gBpjhxVIkxs+1VnY+Q1s/pMNs/kCYI
1Zo2splL5lo9NZKw3q51556JDRM6Wkh3of7RAUQf1OFvHgy39JBhwMskaMthn+un
f3Q8ocC9jIQWu4mxEzIOUw0oFKYL6SItzRt2GVyFF+koWJTZGB8pjthiUs2+5eWf
YkuEK+QcCGiMwblP+kjoQq8SMrHSQ9OLIvA42KFk1h4UXz8qayghFwJKM1ZCgKD+
ZlobX+xwe+ZtiQSHwB76RKPDoqaWeC2oZg9mgPEDKNsGImkjihML8KxjFrPUwJdf
qLua89ULojNXZ8FcfQSI/c1mZ8qcFTo=
-----END CERTIFICATE-----
Generated at Mon Jul 13 12:51:47 2026 by rpki-client