Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/6b6ff68f-d399-3bcd-9efc-3909a2e9367d.roa
File:                     6b6ff68f-d399-3bcd-9efc-3909a2e9367d.roa (raw, json)
Hash identifier:          1OC/iqhiOmy9sVN46CC4k63Vca8N9hBZP2jx58IE9UM=
Subject key identifier:   73:D0:6D:11:B2:66:EA:4E:27:62:3B:4C:F6:15:B8:3B:B3:47:CC:5C
Certificate issuer:       /CN=38e671ad-3e19-48ff-801c-f18f3c194278
Certificate serial:       010D0C9F4328584F85784B82FD7C652C3BCA3E00
Authority key identifier: D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/6b6ff68f-d399-3bcd-9efc-3909a2e9367d.roa
Signing time:             Fri 16 Oct 2026 13:00:12 +0000
ROA not before:           Fri 16 Oct 2026 13:00:12 +0000
ROA not after:            Thu 14 Jan 2027 14:00:12 +0000
asID:                     63023
IP address blocks:        167.17.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:85:78:4b:82:fd:7c:65:2c:3b:ca:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38e671ad-3e19-48ff-801c-f18f3c194278
        Validity
            Not Before: Oct 16 13:00:12 2026 GMT
            Not After : Jan 14 14:00:12 2027 GMT
        Subject: CN=40a2587c-61c1-4eb4-b9c4-8e2671e856bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:66:19:32:33:c3:4f:e1:af:cc:04:8a:72:e1:
                    b2:e8:04:a6:d1:42:16:42:8b:d6:b9:d3:0c:e3:d4:
                    e1:f6:04:7b:28:3e:d3:8d:a3:56:2e:8c:b7:19:76:
                    63:1f:7d:67:0b:b3:a6:a2:86:5d:e3:82:38:b9:23:
                    a6:3f:a5:ea:52:49:a3:92:a5:9c:83:8e:27:e7:46:
                    79:ee:7e:34:e5:e9:f7:48:2b:d8:88:c9:c9:bb:5c:
                    b8:49:07:08:72:3c:d7:18:c1:d7:6d:21:39:1a:ab:
                    7a:85:81:4f:4c:25:19:fe:63:ee:ce:4e:ff:0d:80:
                    38:61:7a:b9:9a:86:c7:11:60:44:ed:14:f7:5e:e5:
                    60:2b:6a:61:ba:05:1e:1a:48:8d:a8:f7:39:dd:5b:
                    f9:64:58:6b:bb:49:17:6a:36:b6:e0:95:d4:6b:c1:
                    fd:67:38:4a:4e:03:1d:3e:ca:1b:54:01:4f:35:19:
                    2a:06:25:ee:ac:16:ea:41:8b:49:71:b7:ff:e0:35:
                    77:3f:71:4d:42:23:e3:88:79:b1:ac:48:02:7a:4b:
                    1f:44:38:25:69:e4:34:43:e6:51:7c:08:ed:2c:e0:
                    ea:15:b7:61:41:6a:f5:aa:c7:78:34:53:0e:b5:de:
                    94:50:af:7e:52:bd:26:90:56:2f:e8:ef:db:8b:03:
                    93:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:D0:6D:11:B2:66:EA:4E:27:62:3B:4C:F6:15:B8:3B:B3:47:CC:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/6b6ff68f-d399-3bcd-9efc-3909a2e9367d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl

            X509v3 Authority Key Identifier:
                keyid:D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.17.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:d5:b7:4e:ae:ce:df:86:4d:51:9b:da:91:30:c0:57:7f:ec:
         ee:de:32:cf:2f:5c:a6:63:c4:3f:1f:be:42:da:82:b4:60:61:
         9c:63:fa:fc:26:4b:0a:f8:98:f9:d7:11:e7:9d:01:5d:c2:98:
         19:99:27:df:6f:1d:3f:6d:22:e1:72:47:16:f3:6b:7d:5a:87:
         12:0d:c9:c2:c7:46:9d:c0:bd:e3:60:2d:b4:0c:2a:15:e9:b8:
         22:87:09:d1:fd:8f:b7:10:f5:eb:fb:d3:43:c5:1b:e2:ef:be:
         30:93:16:9f:9a:17:23:c3:20:39:8f:5b:79:f8:de:71:03:67:
         50:a4:8a:5d:79:35:c3:af:fd:54:ec:b9:0e:21:25:62:7c:86:
         f3:19:57:c8:1b:31:88:05:be:dc:c2:86:35:00:95:9d:b3:c7:
         ee:ed:6a:3b:23:4e:6f:6a:f7:71:3d:2d:76:91:e9:0c:a1:38:
         6c:b7:81:8b:51:63:8c:d0:57:c4:7f:a2:1a:19:d3:0e:86:6c:
         36:09:74:ad:21:a2:ed:72:64:d7:76:58:8d:12:a5:68:3a:de:
         0f:ff:5f:17:6b:7b:ec:8d:96:43:3e:e9:71:15:16:bb:d5:ec:
         5a:f5:f8:27:b0:81:c9:4d:0f:71:77:0d:ff:31:6a:42:b2:ac:
         d7:cd:f2:5f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+FeEuC/XxlLDvKPgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzhlNjcxYWQtM2UxOS00OGZmLTgwMWMtZjE4ZjNjMTk0
Mjc4MB4XDTI2MTAxNjEzMDAxMloXDTI3MDExNDE0MDAxMlowLzEtMCsGA1UEAxMk
NDBhMjU4N2MtNjFjMS00ZWI0LWI5YzQtOGUyNjcxZTg1NmJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWYZMjPDT+GvzASKcuGy6ASm0UIWQovWudMM
49Th9gR7KD7TjaNWLoy3GXZjH31nC7OmooZd44I4uSOmP6XqUkmjkqWcg44n50Z5
7n405en3SCvYiMnJu1y4SQcIcjzXGMHXbSE5Gqt6hYFPTCUZ/mPuzk7/DYA4YXq5
mobHEWBE7RT3XuVgK2phugUeGkiNqPc53Vv5ZFhru0kXaja24JXUa8H9ZzhKTgMd
PsobVAFPNRkqBiXurBbqQYtJcbf/4DV3P3FNQiPjiHmxrEgCeksfRDglaeQ0Q+ZR
fAjtLODqFbdhQWr1qsd4NFMOtd6UUK9+Ur0mkFYv6O/biwOTnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHPQbRGyZupOJ2I7TPYVuDuzR8xcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zOGU2
NzFhZC0zZTE5LTQ4ZmYtODAxYy1mMThmM2MxOTQyNzgvNmI2ZmY2OGYtZDM5OS0z
YmNkLTllZmMtMzkwOWEyZTkzNjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzhlNjcxYWQtM2UxOS00OGZmLTgw
MWMtZjE4ZjNjMTk0Mjc4LzM4ZTY3MWFkLTNlMTktNDhmZi04MDFjLWYxOGYzYzE5
NDI3OC5jcmwwHwYDVR0jBBgwFoAU0c/1zkbBlqJdyuADKGIFCAjz7BAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8zOGU2NzFhZC0zZTE5LTQ4ZmYtODAxYy1mMThm
M2MxOTQyNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApxFEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABPVt06uzt+GTVGb2pEwwFd/7O7eMs8vXKZjxD8fvkLagrRgYZxj+vwm
Swr4mPnXEeedAV3CmBmZJ99vHT9tIuFyRxbza31ahxINycLHRp3AveNgLbQMKhXp
uCKHCdH9j7cQ9ev700PFG+LvvjCTFp+aFyPDIDmPW3n43nEDZ1Ckil15NcOv/VTs
uQ4hJWJ8hvMZV8gbMYgFvtzChjUAlZ2zx+7tajsjTm9q93E9LXaR6QyhOGy3gYtR
Y4zQV8R/ohoZ0w6GbDYJdK0hou1yZNd2WI0SpWg63g//Xxdre+yNlkM+6XEVFrvV
7Fr1+CewgclND3F3Df8xakKyrNfN8l8=
-----END CERTIFICATE-----
Generated at Tue Oct 27 17:05:26 2026 by rpki-client