Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/5753273d-cbb9-3c40-ac2e-30060c2cde21.roa
File:                     5753273d-cbb9-3c40-ac2e-30060c2cde21.roa (raw, json)
Hash identifier:          42cyU8oLHHxeYTbAtUe/To8q61mMYqKctd3QgLY7gkU=
Subject key identifier:   91:F6:8B:D4:F0:95:41:CB:43:B1:5B:71:0F:35:25:03:AE:C9:84:C3
Certificate issuer:       /CN=bf895287-fee6-4682-8ac4-732f64947fe4
Certificate serial:       010D0C9F4328584EF87CB2D91037D67B61595700
Authority key identifier: 75:F4:0E:37:07:76:94:83:A1:09:3D:3C:9A:77:C1:DE:97:F7:66:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/5753273d-cbb9-3c40-ac2e-30060c2cde21.roa
Signing time:             Thu 27 Aug 2026 01:00:12 +0000
ROA not before:           Thu 27 Aug 2026 01:00:12 +0000
ROA not after:            Wed 25 Nov 2026 02:00:12 +0000
asID:                     397740
IP address blocks:        67.215.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/bf895287-fee6-4682-8ac4-732f64947fe4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/bf895287-fee6-4682-8ac4-732f64947fe4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f8:7c:b2:d9:10:37:d6:7b:61:59:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf895287-fee6-4682-8ac4-732f64947fe4
        Validity
            Not Before: Aug 27 01:00:12 2026 GMT
            Not After : Nov 25 02:00:12 2026 GMT
        Subject: CN=f168a225-9c03-4ca0-adbe-3ba91500095f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:dc:8e:d1:e1:9b:27:23:9b:b6:5d:38:5b:70:
                    b4:a1:24:9f:b6:80:77:01:c6:8c:f1:b4:c5:c5:8f:
                    9b:9e:3c:91:52:14:8a:d3:ba:8f:a7:d5:80:a2:fe:
                    79:45:ea:91:eb:a6:5c:06:5d:c2:4c:0d:06:2d:e2:
                    41:52:ec:6d:4f:70:e6:4b:f0:1d:5e:ad:68:55:78:
                    0b:64:f2:4a:2b:1e:0f:54:53:c5:b9:bc:47:19:ab:
                    38:7b:94:ab:4c:3a:77:fc:b7:6f:f4:6f:64:73:39:
                    3b:5b:bb:3c:95:c3:56:a8:7d:7b:35:81:17:f6:5d:
                    26:75:ee:47:9d:13:cc:23:5b:69:41:ab:a5:f6:60:
                    25:f6:0b:a9:74:61:4c:6a:43:1a:5c:78:35:e6:df:
                    f3:b4:c0:60:d9:9f:6a:f6:9b:42:a3:7b:a2:d5:72:
                    fe:d0:d6:c1:25:0d:23:d9:f2:74:fc:b7:2b:3f:cb:
                    5d:97:6f:eb:95:ae:4f:32:b3:4a:88:f8:b7:c6:00:
                    c5:eb:6f:3a:03:a3:b6:e3:15:a2:19:85:fa:53:4c:
                    1e:3d:d3:70:60:09:d5:d3:58:6a:49:f4:1f:8c:02:
                    c4:02:9b:0b:a9:ef:3e:1e:17:65:53:f7:d7:67:80:
                    d2:ef:24:b2:5a:39:3e:a8:c2:37:c6:d6:3b:e3:23:
                    43:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F6:8B:D4:F0:95:41:CB:43:B1:5B:71:0F:35:25:03:AE:C9:84:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/5753273d-cbb9-3c40-ac2e-30060c2cde21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/bf895287-fee6-4682-8ac4-732f64947fe4.crl

            X509v3 Authority Key Identifier:
                keyid:75:F4:0E:37:07:76:94:83:A1:09:3D:3C:9A:77:C1:DE:97:F7:66:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.215.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:a3:02:2e:19:f2:ea:fb:89:56:07:ef:13:ec:4a:73:85:3f:
         8c:04:ae:d3:78:65:68:52:50:88:c8:2d:3f:c5:c8:2c:b3:db:
         ee:e3:dd:dd:96:d7:09:b5:df:e2:07:11:28:48:e9:59:2f:13:
         bd:69:03:7c:11:c0:a6:c7:5f:34:2f:90:c4:9c:e0:81:3b:d3:
         43:60:04:71:7e:65:ee:18:58:76:25:1c:6b:bb:68:7a:4f:a0:
         fe:ad:b9:56:e4:db:74:20:ab:ec:d8:b6:10:69:1e:ab:bc:07:
         bf:dc:2e:d9:88:bf:9e:06:89:74:87:a4:35:8f:ac:96:ba:c7:
         7d:08:46:8a:5e:ae:52:d1:c8:ac:9e:cd:f2:41:d3:e0:94:52:
         d0:b0:ac:2f:7b:34:47:6a:86:c3:b2:59:7f:ce:91:b8:bc:c4:
         9e:3a:b0:e3:a1:09:94:9c:44:6c:07:6f:69:be:1a:c0:a6:a8:
         9b:d9:7c:8e:7e:56:ac:6b:01:b0:01:2d:d5:f0:85:0f:93:99:
         56:86:68:a2:f8:ae:ee:b2:fe:d7:5d:d1:70:92:9c:b6:95:65:
         5c:ff:92:46:a4:df:26:fd:80:92:c0:f0:84:27:67:3b:8a:34:
         c2:83:33:3c:3e:a1:21:11:bc:9d:28:00:3b:85:6e:43:15:fd:
         74:f0:08:9c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE74fLLZEDfWe2FZVwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmY4OTUyODctZmVlNi00NjgyLThhYzQtNzMyZjY0OTQ3
ZmU0MB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk
ZjE2OGEyMjUtOWMwMy00Y2EwLWFkYmUtM2JhOTE1MDAwOTVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9yO0eGbJyObtl04W3C0oSSftoB3AcaM8bTF
xY+bnjyRUhSK07qPp9WAov55ReqR66ZcBl3CTA0GLeJBUuxtT3DmS/AdXq1oVXgL
ZPJKKx4PVFPFubxHGas4e5SrTDp3/Ldv9G9kczk7W7s8lcNWqH17NYEX9l0mde5H
nRPMI1tpQaul9mAl9gupdGFMakMaXHg15t/ztMBg2Z9q9ptCo3ui1XL+0NbBJQ0j
2fJ0/LcrP8tdl2/rla5PMrNKiPi3xgDF6286A6O24xWiGYX6U0wePdNwYAnV01hq
SfQfjALEApsLqe8+HhdlU/fXZ4DS7ySyWjk+qMI3xtY74yNDoQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJH2i9TwlUHLQ7FbcQ81JQOuyYTDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9iZjg5
NTI4Ny1mZWU2LTQ2ODItOGFjNC03MzJmNjQ5NDdmZTQvNTc1MzI3M2QtY2JiOS0z
YzQwLWFjMmUtMzAwNjBjMmNkZTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYmY4OTUyODctZmVlNi00NjgyLThh
YzQtNzMyZjY0OTQ3ZmU0L2JmODk1Mjg3LWZlZTYtNDY4Mi04YWM0LTczMmY2NDk0
N2ZlNC5jcmwwHwYDVR0jBBgwFoAUdfQONwd2lIOhCT08mnfB3pf3ZsMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi9iZjg5NTI4Ny1mZWU2LTQ2ODItOGFjNC03MzJm
NjQ5NDdmZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9ciMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF2jAi4Z8ur7iVYH7xPsSnOFP4wErtN4ZWhSUIjILT/FyCyz2+7j3d2W
1wm13+IHEShI6VkvE71pA3wRwKbHXzQvkMSc4IE700NgBHF+Ze4YWHYlHGu7aHpP
oP6tuVbk23Qgq+zYthBpHqu8B7/cLtmIv54GiXSHpDWPrJa6x30IRoperlLRyKye
zfJB0+CUUtCwrC97NEdqhsOyWX/Okbi8xJ46sOOhCZScRGwHb2m+GsCmqJvZfI5+
VqxrAbABLdXwhQ+TmVaGaKL4ru6y/tdd0XCSnLaVZVz/kkak3yb9gJLA8IQnZzuK
NMKDMzw+oSERvJ0oADuFbkMV/XTwCJw=
-----END CERTIFICATE-----
Generated at Thu Aug 27 08:53:18 2026 by rpki-client