Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/1f7d0ad7-8527-3c40-b2ee-85cbdcfd3285.roa
File:                     1f7d0ad7-8527-3c40-b2ee-85cbdcfd3285.roa (raw, json)
Hash identifier:          QRAZxf0i6ZQB6XoSiBGr8j0N129nNVkut9J7/8c4Kfk=
Subject key identifier:   D0:CC:D6:2D:71:EE:7E:48:F6:CE:50:CF:46:23:5B:D7:FB:7E:7D:AF
Certificate issuer:       /CN=ec11d358-69b9-4c96-bf47-e3edd5cff218
Certificate serial:       010D0C9F4328584D9B85569004F1F004E4F55400
Authority key identifier: A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/1f7d0ad7-8527-3c40-b2ee-85cbdcfd3285.roa
Signing time:             Fri 24 Apr 2026 01:00:23 +0000
ROA not before:           Fri 24 Apr 2026 01:00:23 +0000
ROA not after:            Thu 23 Jul 2026 01:00:23 +0000
asID:                     212374
IP address blocks:        69.168.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9b:85:56:90:04:f1:f0:04:e4:f5:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec11d358-69b9-4c96-bf47-e3edd5cff218
        Validity
            Not Before: Apr 24 01:00:23 2026 GMT
            Not After : Jul 23 01:00:23 2026 GMT
        Subject: CN=1acb4431-ab12-40b9-932e-5fdc4db4f0fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ff:e6:b8:71:21:04:fa:f9:81:3e:70:ad:59:
                    54:93:f5:f7:14:ef:35:3d:1b:31:a1:54:32:04:b8:
                    c9:b2:15:e7:10:8b:cd:43:dc:93:b5:4a:71:06:7b:
                    49:18:37:4c:b4:27:d3:bc:6e:a4:0b:54:10:97:d4:
                    12:dc:9b:e6:26:ca:3e:f1:fe:1b:d9:0c:c8:79:18:
                    4c:1c:8a:41:28:61:10:09:4d:74:6e:65:82:54:dc:
                    c5:14:b1:1a:98:55:88:7e:58:9e:3c:ef:9d:43:7c:
                    4f:31:f5:f0:68:f2:33:f3:c2:b1:5a:4e:dc:4c:ac:
                    fb:07:a3:07:d7:73:89:b1:61:03:92:9a:3f:e7:d2:
                    c8:a0:a8:79:15:85:f0:63:e0:9e:d4:7a:55:5f:f2:
                    e3:3f:21:32:b2:3b:09:e0:71:09:ba:16:3c:3a:7d:
                    25:50:fc:54:62:a5:85:c2:be:f7:80:58:c1:d6:14:
                    ca:90:45:10:64:3a:c9:cc:ef:11:b9:a4:80:12:ae:
                    d9:a5:79:2a:20:10:6c:40:d2:cd:95:21:12:6d:69:
                    9e:12:eb:ca:85:01:6b:b3:28:60:4a:f8:b8:63:4b:
                    ed:36:08:e5:c6:33:26:32:78:17:f3:be:2a:b7:61:
                    c8:f6:df:cd:e2:4f:91:5c:0a:95:eb:7b:1e:f6:e5:
                    78:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:CC:D6:2D:71:EE:7E:48:F6:CE:50:CF:46:23:5B:D7:FB:7E:7D:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/1f7d0ad7-8527-3c40-b2ee-85cbdcfd3285.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl

            X509v3 Authority Key Identifier:
                keyid:A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.168.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:e2:ce:95:04:33:d9:be:df:db:77:ef:4f:fb:5b:0d:2c:1b:
         b9:49:fa:72:ab:4a:be:ab:7b:c6:19:a6:51:31:6b:ce:a3:95:
         7a:3b:7f:ba:eb:d4:b0:42:3c:9b:b4:e6:e8:29:4b:9c:b7:ea:
         95:bc:be:ac:eb:91:b4:65:d4:f6:50:bd:46:6c:c7:6e:c4:22:
         31:d0:cd:e4:d2:c4:cf:48:50:6b:8a:ee:14:ed:77:92:0f:68:
         e2:8e:7e:d8:de:e7:86:c8:c3:d2:cb:a3:d3:7e:e8:c4:6e:ab:
         63:a9:14:b6:04:99:bd:54:7d:1d:6c:a0:d2:3f:92:fe:f8:03:
         71:90:a8:99:1e:d7:02:38:83:3d:ce:b5:7e:8b:95:93:ad:97:
         e7:8a:30:0d:29:7a:b2:12:f0:8c:b8:69:7f:c5:94:28:79:4e:
         f4:89:80:89:5a:10:1a:02:bc:a6:49:f2:7b:95:d8:fd:1d:19:
         1c:40:60:e9:66:04:01:22:a6:66:77:0e:0b:ad:6b:a3:f2:25:
         72:ca:24:fa:09:67:5a:42:45:77:fb:2d:f1:c1:23:17:98:ae:
         41:11:03:b0:82:18:5f:dd:60:d7:11:96:a2:a1:e4:eb:e4:9f:
         26:58:a6:bf:aa:ab:79:ef:14:45:18:a8:f9:1d:2c:1e:72:5e:
         7b:65:62:e0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2bhVaQBPHwBOT1VAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWMxMWQzNTgtNjliOS00Yzk2LWJmNDctZTNlZGQ1Y2Zm
MjE4MB4XDTI2MDQyNDAxMDAyM1oXDTI2MDcyMzAxMDAyM1owLzEtMCsGA1UEAxMk
MWFjYjQ0MzEtYWIxMi00MGI5LTkzMmUtNWZkYzRkYjRmMGZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0P/muHEhBPr5gT5wrVlUk/X3FO81PRsxoVQy
BLjJshXnEIvNQ9yTtUpxBntJGDdMtCfTvG6kC1QQl9QS3JvmJso+8f4b2QzIeRhM
HIpBKGEQCU10bmWCVNzFFLEamFWIfliePO+dQ3xPMfXwaPIz88KxWk7cTKz7B6MH
13OJsWEDkpo/59LIoKh5FYXwY+Ce1HpVX/LjPyEysjsJ4HEJuhY8On0lUPxUYqWF
wr73gFjB1hTKkEUQZDrJzO8RuaSAEq7ZpXkqIBBsQNLNlSESbWmeEuvKhQFrsyhg
Svi4Y0vtNgjlxjMmMngX874qt2HI9t/N4k+RXAqV63se9uV4YQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNDM1i1x7n5I9s5Qz0YjW9f7fn2vMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lYzEx
ZDM1OC02OWI5LTRjOTYtYmY0Ny1lM2VkZDVjZmYyMTgvMWY3ZDBhZDctODUyNy0z
YzQwLWIyZWUtODVjYmRjZmQzMjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWMxMWQzNTgtNjliOS00Yzk2LWJm
NDctZTNlZGQ1Y2ZmMjE4L2VjMTFkMzU4LTY5YjktNGM5Ni1iZjQ3LWUzZWRkNWNm
ZjIxOC5jcmwwHwYDVR0jBBgwFoAUoUAcC1VOMwu+PVO2Hd8acJrxAbYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lYzExZDM1OC02OWI5LTRjOTYtYmY0Ny1lM2Vk
ZDVjZmYyMTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARajiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADnizpUEM9m+39t370/7Ww0sG7lJ+nKrSr6re8YZplExa86jlXo7f7rr
1LBCPJu05ugpS5y36pW8vqzrkbRl1PZQvUZsx27EIjHQzeTSxM9IUGuK7hTtd5IP
aOKOftje54bIw9LLo9N+6MRuq2OpFLYEmb1UfR1soNI/kv74A3GQqJke1wI4gz3O
tX6LlZOtl+eKMA0perIS8Iy4aX/FlCh5TvSJgIlaEBoCvKZJ8nuV2P0dGRxAYOlm
BAEipmZ3Dguta6PyJXLKJPoJZ1pCRXf7LfHBIxeYrkERA7CCGF/dYNcRlqKh5Ovk
nyZYpr+qq3nvFEUYqPkdLB5yXntlYuA=
-----END CERTIFICATE-----
Generated at Wed May 13 09:34:32 2026 by rpki-client