Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e381cbd6-d113-4ae5-805a-aa3e1601cf49/e94347ca-7eb8-3307-99e2-9b78f40925e8.roa
File:                     e94347ca-7eb8-3307-99e2-9b78f40925e8.roa (raw, json)
Hash identifier:          MBFtJwNp0D33XhEFlWXzcWupAMt9P8inNCrf1hqj+5w=
Subject key identifier:   42:85:4F:9C:58:23:C6:C2:C9:86:38:D6:94:75:F2:5F:70:AA:30:74
Certificate issuer:       /CN=e381cbd6-d113-4ae5-805a-aa3e1601cf49
Certificate serial:       010D0C9F4328584F7345888F62495FDFBDC4D2E0
Authority key identifier: 9D:28:82:CC:E4:C3:26:39:6C:08:9D:EC:65:18:25:0E:46:87:B8:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e381cbd6-d113-4ae5-805a-aa3e1601cf49.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e381cbd6-d113-4ae5-805a-aa3e1601cf49/e94347ca-7eb8-3307-99e2-9b78f40925e8.roa
Signing time:             Sat 10 Oct 2026 00:33:31 +0000
ROA not before:           Sat 10 Oct 2026 00:33:31 +0000
ROA not after:            Thu 07 Jan 2027 14:47:47 +0000
asID:                     40253
IP address blocks:        69.36.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e381cbd6-d113-4ae5-805a-aa3e1601cf49/e381cbd6-d113-4ae5-805a-aa3e1601cf49.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e381cbd6-d113-4ae5-805a-aa3e1601cf49/e381cbd6-d113-4ae5-805a-aa3e1601cf49.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e381cbd6-d113-4ae5-805a-aa3e1601cf49.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:73:45:88:8f:62:49:5f:df:bd:c4:d2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e381cbd6-d113-4ae5-805a-aa3e1601cf49
        Validity
            Not Before: Oct 10 00:33:31 2026 GMT
            Not After : Jan  7 14:47:47 2027 GMT
        Subject: CN=61cea7e4-67eb-46b9-8702-1443999f21c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4f:e2:a0:26:67:47:51:df:44:96:59:d2:09:
                    47:61:63:ea:4b:36:97:62:a9:88:8f:e3:a3:9b:dd:
                    62:1d:bd:db:eb:79:88:4c:75:88:9a:06:64:57:47:
                    db:0d:1a:eb:13:c9:1f:d2:c9:35:b4:ce:e6:8a:cc:
                    f4:52:d7:ce:de:4a:bc:00:67:55:1c:ca:b5:7e:e6:
                    8a:13:78:e7:a4:aa:73:77:40:a2:28:a7:ea:d6:9e:
                    cd:88:69:4d:03:2d:fa:20:fc:fb:70:c9:96:78:22:
                    38:d3:f8:28:b2:59:8c:cd:89:85:72:c4:b1:36:d5:
                    89:ad:76:09:ab:1c:b0:a8:43:82:44:7f:4a:a8:08:
                    5d:1e:93:07:97:a7:f7:cc:f7:29:b7:1b:d4:43:8d:
                    29:f6:16:1a:0b:ef:55:b6:82:14:6e:7d:c9:e3:b1:
                    23:d4:cf:3a:ab:9d:e9:e8:e0:6d:86:64:6e:be:be:
                    7a:ec:77:e4:71:34:cd:ca:92:e5:2f:94:63:84:a5:
                    51:04:d0:33:49:18:88:7f:ed:6a:c0:62:18:5f:f3:
                    87:15:82:dd:e7:8c:85:95:45:06:9b:39:aa:2c:c6:
                    e1:81:64:60:9e:b4:f8:be:2b:0a:76:4f:28:c0:ab:
                    4b:c3:7a:a0:22:10:79:a0:56:ed:c2:06:0c:38:c9:
                    d3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:85:4F:9C:58:23:C6:C2:C9:86:38:D6:94:75:F2:5F:70:AA:30:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e381cbd6-d113-4ae5-805a-aa3e1601cf49/e94347ca-7eb8-3307-99e2-9b78f40925e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e381cbd6-d113-4ae5-805a-aa3e1601cf49/e381cbd6-d113-4ae5-805a-aa3e1601cf49.crl

            X509v3 Authority Key Identifier:
                keyid:9D:28:82:CC:E4:C3:26:39:6C:08:9D:EC:65:18:25:0E:46:87:B8:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e381cbd6-d113-4ae5-805a-aa3e1601cf49.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.36.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:0d:d2:55:24:81:2b:f6:5c:53:f5:09:96:b6:30:08:af:67:
         7f:dc:a7:eb:ef:90:1c:5f:f8:dc:41:60:df:f1:62:8b:52:71:
         cc:ac:ba:0d:6c:4e:a3:8f:dd:0e:ad:04:e1:84:87:77:a8:6a:
         25:d2:08:c9:35:d0:fa:86:b2:ca:40:cd:e4:e7:70:ab:ca:99:
         88:eb:be:18:6a:4b:7b:75:22:0b:15:e1:46:a0:60:89:89:67:
         a0:d0:21:c0:6b:21:50:57:fb:83:a7:9b:8c:c9:3c:5d:61:53:
         99:e7:fd:fd:c5:d6:6d:b4:e4:28:70:53:52:8a:ad:67:d4:b7:
         20:ca:54:d2:86:24:ce:95:6a:49:6f:14:69:22:b0:4c:06:22:
         62:a8:87:eb:2a:54:02:c5:25:e5:ad:28:f4:24:de:02:71:eb:
         7e:6e:86:c1:5f:98:84:be:d4:fd:ec:60:b3:04:78:48:0e:55:
         51:52:55:9c:c7:50:1a:75:0d:56:09:72:a5:56:91:ef:2e:97:
         29:16:36:eb:cb:d5:4a:ec:f0:c3:94:e3:28:2a:e1:52:ea:68:
         67:21:9f:9c:77:32:96:f2:60:25:55:bb:02:2c:53:c9:2d:59:
         47:51:f4:11:fe:fc:26:d9:03:50:2e:07:4d:29:1a:14:1a:f2:
         56:9b:d5:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9zRYiPYklf373E0uAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTM4MWNiZDYtZDExMy00YWU1LTgwNWEtYWEzZTE2MDFj
ZjQ5MB4XDTI2MTAxMDAwMzMzMVoXDTI3MDEwNzE0NDc0N1owLzEtMCsGA1UEAxMk
NjFjZWE3ZTQtNjdlYi00NmI5LTg3MDItMTQ0Mzk5OWYyMWMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsk/ioCZnR1HfRJZZ0glHYWPqSzaXYqmIj+Oj
m91iHb3b63mITHWImgZkV0fbDRrrE8kf0sk1tM7misz0UtfO3kq8AGdVHMq1fuaK
E3jnpKpzd0CiKKfq1p7NiGlNAy36IPz7cMmWeCI40/goslmMzYmFcsSxNtWJrXYJ
qxywqEOCRH9KqAhdHpMHl6f3zPcptxvUQ40p9hYaC+9VtoIUbn3J47Ej1M86q53p
6OBthmRuvr567HfkcTTNypLlL5RjhKVRBNAzSRiIf+1qwGIYX/OHFYLd54yFlUUG
mzmqLMbhgWRgnrT4visKdk8owKtLw3qgIhB5oFbtwgYMOMnTbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEKFT5xYI8bCyYY41pR18l9wqjB0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9lMzgx
Y2JkNi1kMTEzLTRhZTUtODA1YS1hYTNlMTYwMWNmNDkvZTk0MzQ3Y2EtN2ViOC0z
MzA3LTk5ZTItOWI3OGY0MDkyNWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZTM4MWNiZDYtZDExMy00YWU1LTgw
NWEtYWEzZTE2MDFjZjQ5L2UzODFjYmQ2LWQxMTMtNGFlNS04MDVhLWFhM2UxNjAx
Y2Y0OS5jcmwwHwYDVR0jBBgwFoAUnSiCzOTDJjlsCJ3sZRglDkaHuAQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi9lMzgxY2JkNi1kMTEzLTRhZTUtODA1YS1hYTNl
MTYwMWNmNDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRSQsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKwN0lUkgSv2XFP1CZa2MAivZ3/cp+vvkBxf+NxBYN/xYotSccysug1s
TqOP3Q6tBOGEh3eoaiXSCMk10PqGsspAzeTncKvKmYjrvhhqS3t1IgsV4UagYImJ
Z6DQIcBrIVBX+4Onm4zJPF1hU5nn/f3F1m205ChwU1KKrWfUtyDKVNKGJM6Vaklv
FGkisEwGImKoh+sqVALFJeWtKPQk3gJx635uhsFfmIS+1P3sYLMEeEgOVVFSVZzH
UBp1DVYJcqVWke8ulykWNuvL1Urs8MOU4ygq4VLqaGchn5x3MpbyYCVVuwIsU8kt
WUdR9BH+/CbZA1AuB00pGhQa8lab1d0=
-----END CERTIFICATE-----
Generated at Sun Oct 25 22:31:44 2026 by rpki-client