Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/1a878653-d353-3f23-94ac-36d7d98c84d1.roa
File:                     1a878653-d353-3f23-94ac-36d7d98c84d1.roa (raw, json)
Hash identifier:          PJN4055X6QGAL6VdYgeuQhNxTgLJMOpt/UfyU7Rv1Ok=
Subject key identifier:   95:4B:36:09:E8:91:C1:16:9F:B3:74:04:56:64:BD:F7:71:AF:6D:39
Certificate issuer:       /CN=2de5d746-3402-4263-b880-ea4d7ecfc168
Certificate serial:       010D0C9F4328584E316A6928FC7944A3C06A7800
Authority key identifier: 6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/1a878653-d353-3f23-94ac-36d7d98c84d1.roa
Signing time:             Tue 16 Jun 2026 17:37:32 +0000
ROA not before:           Tue 16 Jun 2026 17:37:32 +0000
ROA not after:            Mon 14 Sep 2026 17:37:32 +0000
asID:                     22359
IP address blocks:        69.161.210.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:31:6a:69:28:fc:79:44:a3:c0:6a:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2de5d746-3402-4263-b880-ea4d7ecfc168
        Validity
            Not Before: Jun 16 17:37:32 2026 GMT
            Not After : Sep 14 17:37:32 2026 GMT
        Subject: CN=97f8806e-37ae-4761-9811-b272cc6f1be9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5a:54:d5:47:67:ef:18:d8:47:47:ac:0d:44:
                    06:0b:b7:6e:ab:f8:e4:6b:f0:e2:91:ea:13:f2:b1:
                    c9:7e:19:ec:66:f5:c7:e9:a4:1e:05:d0:42:05:6b:
                    f2:69:b9:3e:d8:ae:29:48:ea:c5:c8:41:bd:9e:bc:
                    83:82:82:d9:e3:d1:79:d9:9e:ce:01:02:12:09:ca:
                    c7:e8:ff:1d:5f:02:1d:55:9b:e3:44:3b:e6:fe:a3:
                    1a:4a:50:91:dd:d8:42:99:01:59:a4:66:d2:0b:6d:
                    bd:f6:4e:db:1c:d6:4a:7b:1c:0b:d3:66:fb:3e:12:
                    17:7d:0b:ae:5f:4c:a4:cc:8b:24:62:db:ac:97:71:
                    85:f1:84:06:fe:0c:61:0f:95:3d:b1:b6:14:5f:51:
                    13:c6:6c:d1:c5:84:f5:77:0c:44:42:cb:c6:e2:3d:
                    15:e6:61:e7:f8:4b:11:a6:d9:0d:32:85:1a:c2:7c:
                    b0:8e:6a:09:5d:b9:ab:0c:e4:5e:84:84:7a:d4:97:
                    ac:96:c2:23:dc:a0:7d:44:30:c0:e9:3a:a4:4e:74:
                    fd:04:f7:96:22:38:3d:39:39:99:85:d6:a6:19:1c:
                    42:f5:fd:c8:a1:29:4c:32:1a:cf:c7:61:23:fe:a4:
                    c2:30:5c:08:15:14:f0:1d:62:a7:c0:4b:ba:58:cd:
                    75:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:4B:36:09:E8:91:C1:16:9F:B3:74:04:56:64:BD:F7:71:AF:6D:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/1a878653-d353-3f23-94ac-36d7d98c84d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl

            X509v3 Authority Key Identifier:
                keyid:6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.161.210.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:af:10:7c:38:83:09:58:a6:46:b8:27:95:4d:ab:d6:33:8c:
         9c:cb:7a:e5:ac:1d:c2:de:41:1a:8d:03:68:c3:8d:3b:5e:56:
         7a:a0:86:04:20:b2:d4:75:63:2f:d0:00:3b:77:a8:52:99:90:
         36:66:30:72:36:de:57:d3:b0:36:de:0b:b3:fc:bd:2d:df:3f:
         9e:b9:7c:1e:ef:0d:72:dd:48:a0:d5:de:1a:f7:6b:7a:32:35:
         14:50:5e:c3:fa:79:7c:fb:20:df:5c:60:1c:00:13:64:e8:ba:
         23:67:6b:93:dd:b7:b1:9e:72:d0:c5:20:ae:2c:07:b8:b5:1a:
         96:d3:29:07:62:5a:05:2a:35:f0:f1:e3:e9:68:32:79:63:ea:
         71:2a:5b:d1:ab:2d:0f:4c:6c:51:f4:88:fa:d0:d2:9b:4c:04:
         dd:24:4d:3c:d3:0f:10:1a:2d:fe:8c:2a:80:96:fc:e2:b2:da:
         66:00:da:67:1d:41:14:8e:19:22:69:f0:00:95:09:82:af:9d:
         33:f0:fe:07:f3:e9:74:2e:ef:9f:5c:75:a1:45:3e:11:6e:f0:
         33:a8:9b:21:f0:1b:60:7a:a2:b5:b9:e9:b1:26:ae:c6:d1:b8:
         a7:01:de:5c:9c:bf:fc:45:f1:53:f7:0b:99:c2:da:8f:50:f8:
         ab:af:18:7b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4xamko/HlEo8BqeAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmRlNWQ3NDYtMzQwMi00MjYzLWI4ODAtZWE0ZDdlY2Zj
MTY4MB4XDTI2MDYxNjE3MzczMloXDTI2MDkxNDE3MzczMlowLzEtMCsGA1UEAxMk
OTdmODgwNmUtMzdhZS00NzYxLTk4MTEtYjI3MmNjNmYxYmU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1pU1Udn7xjYR0esDUQGC7duq/jka/DikeoT
8rHJfhnsZvXH6aQeBdBCBWvyabk+2K4pSOrFyEG9nryDgoLZ49F52Z7OAQISCcrH
6P8dXwIdVZvjRDvm/qMaSlCR3dhCmQFZpGbSC2299k7bHNZKexwL02b7PhIXfQuu
X0ykzIskYtusl3GF8YQG/gxhD5U9sbYUX1ETxmzRxYT1dwxEQsvG4j0V5mHn+EsR
ptkNMoUawnywjmoJXbmrDORehIR61JeslsIj3KB9RDDA6TqkTnT9BPeWIjg9OTmZ
hdamGRxC9f3IoSlMMhrPx2Ej/qTCMFwIFRTwHWKnwEu6WM11xwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJVLNgnokcEWn7N0BFZkvfdxr205MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yZGU1
ZDc0Ni0zNDAyLTQyNjMtYjg4MC1lYTRkN2VjZmMxNjgvMWE4Nzg2NTMtZDM1My0z
ZjIzLTk0YWMtMzZkN2Q5OGM4NGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMmRlNWQ3NDYtMzQwMi00MjYzLWI4
ODAtZWE0ZDdlY2ZjMTY4LzJkZTVkNzQ2LTM0MDItNDI2My1iODgwLWVhNGQ3ZWNm
YzE2OC5jcmwwHwYDVR0jBBgwFoAUa7vQBHnN1sRmwfvAalg6KhVtSHwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8yZGU1ZDc0Ni0zNDAyLTQyNjMtYjg4MC1lYTRk
N2VjZmMxNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRaHSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADWvEHw4gwlYpka4J5VNq9YzjJzLeuWsHcLeQRqNA2jDjTteVnqghgQg
stR1Yy/QADt3qFKZkDZmMHI23lfTsDbeC7P8vS3fP565fB7vDXLdSKDV3hr3a3oy
NRRQXsP6eXz7IN9cYBwAE2TouiNna5Pdt7GectDFIK4sB7i1GpbTKQdiWgUqNfDx
4+loMnlj6nEqW9GrLQ9MbFH0iPrQ0ptMBN0kTTzTDxAaLf6MKoCW/OKy2mYA2mcd
QRSOGSJp8ACVCYKvnTPw/gfz6XQu759cdaFFPhFu8DOomyHwG2B6orW56bEmrsbR
uKcB3lycv/xF8VP3C5nC2o9Q+KuvGHs=
-----END CERTIFICATE-----
Generated at Mon Jul 6 20:08:29 2026 by rpki-client