Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/8cfde022-5b1f-3cc1-80aa-c8038b04cc5b.roa
File:                     8cfde022-5b1f-3cc1-80aa-c8038b04cc5b.roa (raw, json)
Hash identifier:          tZKCdrIpzJBLkUICs7OJtL/oD7oNgK8yr49CJm6CGqE=
Subject key identifier:   38:97:6C:94:FA:57:9C:03:D0:4E:B7:3A:6C:45:A7:61:D8:5A:FF:95
Certificate issuer:       /CN=5294026e-22fb-4d13-b040-a0d74302e57e
Certificate serial:       010D0C9F4328584E46BF28DD1FD4AA93A3E9F200
Authority key identifier: 01:9A:82:A4:B4:AB:DC:DA:9E:35:9F:5A:72:BB:1A:93:59:97:7B:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/8cfde022-5b1f-3cc1-80aa-c8038b04cc5b.roa
Signing time:             Wed 24 Jun 2026 09:00:12 +0000
ROA not before:           Wed 24 Jun 2026 09:00:12 +0000
ROA not after:            Tue 22 Sep 2026 09:00:12 +0000
asID:                     10361
IP address blocks:        69.191.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/5294026e-22fb-4d13-b040-a0d74302e57e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/5294026e-22fb-4d13-b040-a0d74302e57e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:46:bf:28:dd:1f:d4:aa:93:a3:e9:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5294026e-22fb-4d13-b040-a0d74302e57e
        Validity
            Not Before: Jun 24 09:00:12 2026 GMT
            Not After : Sep 22 09:00:12 2026 GMT
        Subject: CN=ca01a97f-4d94-4121-b97e-0ad560790952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a4:f7:ad:ba:e6:28:5c:14:a5:9f:d0:57:d0:
                    12:2b:0b:ee:5a:43:bd:68:97:41:1e:5c:89:96:7c:
                    c0:3d:4e:5d:18:3c:14:13:5e:ba:c2:36:43:29:2f:
                    64:1e:26:4b:c9:73:db:c7:da:fa:f4:e9:da:f8:7b:
                    69:11:1a:16:9e:28:b8:c3:c6:0b:2e:33:1c:4b:d2:
                    75:83:65:90:3d:db:56:9b:eb:c3:d8:8e:dd:23:5b:
                    54:4f:79:11:7b:32:1e:14:66:e4:5a:91:df:9f:b4:
                    16:43:83:d6:d2:6d:dd:42:69:21:23:d8:04:c0:e0:
                    47:6f:65:c3:86:3d:43:05:31:a4:2a:5a:71:c0:19:
                    d2:ab:50:95:5c:29:a6:51:97:6f:64:a9:cb:08:e4:
                    3a:fe:69:21:f3:3a:cf:df:f7:23:65:4b:ff:02:2b:
                    a8:5f:cb:91:9f:3c:75:46:4d:49:1a:8c:16:5b:f8:
                    e2:d9:f8:79:8a:cb:d3:13:ce:6c:16:56:fb:d0:d0:
                    3a:40:14:e2:79:c5:48:0d:70:84:a2:9f:b9:39:90:
                    e1:bc:11:64:0e:23:81:a8:1a:a2:84:97:7b:eb:79:
                    e9:77:41:67:1e:93:a7:e7:bf:03:2e:c8:93:63:1e:
                    ee:ab:66:19:2d:29:cc:f3:7e:70:a8:bd:b3:19:88:
                    ac:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:97:6C:94:FA:57:9C:03:D0:4E:B7:3A:6C:45:A7:61:D8:5A:FF:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/8cfde022-5b1f-3cc1-80aa-c8038b04cc5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/5294026e-22fb-4d13-b040-a0d74302e57e.crl

            X509v3 Authority Key Identifier:
                keyid:01:9A:82:A4:B4:AB:DC:DA:9E:35:9F:5A:72:BB:1A:93:59:97:7B:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.191.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:7b:ae:84:cc:39:7b:89:ce:35:6c:02:d8:87:c0:33:68:11:
         9a:d4:75:a2:65:82:58:2d:9e:da:a0:78:81:be:d2:1b:23:43:
         fe:c8:24:22:03:fe:37:c1:ec:1e:9f:e2:64:55:fe:3a:f1:c3:
         95:79:6d:d8:58:15:e5:dd:05:a1:b2:82:3e:5e:30:98:2b:b7:
         be:66:37:03:6a:18:14:2c:a8:32:e9:a5:f1:64:70:c1:51:29:
         13:5c:92:a7:95:10:a0:d4:8e:eb:7b:8e:2e:d9:4b:f3:64:03:
         0e:4b:35:06:fb:b0:65:c3:1e:f2:a2:f5:a0:c3:fe:9d:fb:3d:
         7f:f9:d4:11:41:51:d8:22:d7:87:2f:e7:9d:30:56:64:60:c1:
         0e:16:cd:46:a6:75:e9:03:5f:c0:b2:f1:67:7b:e7:c8:ca:74:
         90:59:da:12:33:68:b0:00:36:5e:ff:d8:3f:86:67:fc:42:e5:
         39:db:1a:e2:6b:dc:12:20:cf:17:7e:c5:89:ee:b1:de:9d:58:
         ed:3d:4e:23:75:34:c9:47:d5:3f:08:ba:6e:7d:ff:28:c1:aa:
         e5:da:b6:04:ef:14:d8:25:3e:7d:8b:ee:28:40:e8:fe:81:95:
         a6:96:5e:96:39:8f:29:b2:82:4a:08:d2:7c:29:96:8e:d2:19:
         a0:b9:48:b2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5GvyjdH9Sqk6Pp8gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTI5NDAyNmUtMjJmYi00ZDEzLWIwNDAtYTBkNzQzMDJl
NTdlMB4XDTI2MDYyNDA5MDAxMloXDTI2MDkyMjA5MDAxMlowLzEtMCsGA1UEAxMk
Y2EwMWE5N2YtNGQ5NC00MTIxLWI5N2UtMGFkNTYwNzkwOTUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqT3rbrmKFwUpZ/QV9ASKwvuWkO9aJdBHlyJ
lnzAPU5dGDwUE166wjZDKS9kHiZLyXPbx9r69Ona+HtpERoWnii4w8YLLjMcS9J1
g2WQPdtWm+vD2I7dI1tUT3kRezIeFGbkWpHfn7QWQ4PW0m3dQmkhI9gEwOBHb2XD
hj1DBTGkKlpxwBnSq1CVXCmmUZdvZKnLCOQ6/mkh8zrP3/cjZUv/AiuoX8uRnzx1
Rk1JGowWW/ji2fh5isvTE85sFlb70NA6QBTiecVIDXCEop+5OZDhvBFkDiOBqBqi
hJd763npd0FnHpOn578DLsiTYx7uq2YZLSnM835wqL2zGYisCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDiXbJT6V5wD0E63OmxFp2HYWv+VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81Mjk0
MDI2ZS0yMmZiLTRkMTMtYjA0MC1hMGQ3NDMwMmU1N2UvOGNmZGUwMjItNWIxZi0z
Y2MxLTgwYWEtYzgwMzhiMDRjYzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTI5NDAyNmUtMjJmYi00ZDEzLWIw
NDAtYTBkNzQzMDJlNTdlLzUyOTQwMjZlLTIyZmItNGQxMy1iMDQwLWEwZDc0MzAy
ZTU3ZS5jcmwwHwYDVR0jBBgwFoAUAZqCpLSr3NqeNZ9acrsak1mXe8YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81Mjk0MDI2ZS0yMmZiLTRkMTMtYjA0MC1hMGQ3
NDMwMmU1N2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARb+JMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADR7roTMOXuJzjVsAtiHwDNoEZrUdaJlglgtntqgeIG+0hsjQ/7IJCID
/jfB7B6f4mRV/jrxw5V5bdhYFeXdBaGygj5eMJgrt75mNwNqGBQsqDLppfFkcMFR
KRNckqeVEKDUjut7ji7ZS/NkAw5LNQb7sGXDHvKi9aDD/p37PX/51BFBUdgi14cv
550wVmRgwQ4WzUamdekDX8Cy8Wd758jKdJBZ2hIzaLAANl7/2D+GZ/xC5TnbGuJr
3BIgzxd+xYnusd6dWO09TiN1NMlH1T8Ium59/yjBquXatgTvFNglPn2L7ihA6P6B
laaWXpY5jymygkoI0nwplo7SGaC5SLI=
-----END CERTIFICATE-----
Generated at Mon Jul 13 12:51:48 2026 by rpki-client