Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/23f4195c-cc45-3bda-ba73-68c72a73ec42.roa
File:                     23f4195c-cc45-3bda-ba73-68c72a73ec42.roa (raw, json)
Hash identifier:          ckSknM6KK1oUmy0XYojJIgGDGAhdsoxDk1HB3G3vZRE=
Subject key identifier:   D9:E1:12:CE:2D:07:77:27:E7:B5:90:77:DA:87:F7:C2:35:D7:31:2E
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E7204CDE475CA04CA7808BD40
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/23f4195c-cc45-3bda-ba73-68c72a73ec42.roa
Signing time:             Thu 09 Jul 2026 21:00:11 +0000
ROA not before:           Thu 09 Jul 2026 21:00:11 +0000
ROA not after:            Wed 07 Oct 2026 21:00:11 +0000
asID:                     834
IP address blocks:        69.33.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:72:04:cd:e4:75:ca:04:ca:78:08:bd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul  9 21:00:11 2026 GMT
            Not After : Oct  7 21:00:11 2026 GMT
        Subject: CN=6dba8031-801a-45dd-9646-cea0850a6487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fa:20:a2:4f:33:84:ce:20:e1:1f:1c:c5:c0:
                    38:3b:08:7b:1f:11:83:96:e9:ec:a4:a9:1c:62:0d:
                    3e:d5:5b:2b:df:73:15:b3:18:89:cb:4f:c3:da:6e:
                    0f:43:37:5d:73:30:1a:a3:6b:55:2f:d3:db:0f:7f:
                    84:fe:48:49:2c:7f:5b:da:36:38:01:df:56:bf:34:
                    3c:f7:d8:f1:d0:b5:0c:02:fe:73:42:06:d7:0d:e6:
                    49:ae:85:a7:41:16:75:45:3b:34:1d:3c:49:39:d3:
                    fc:cd:50:e0:bf:ba:82:ea:62:95:ee:e3:48:91:d5:
                    f2:f5:1c:9e:4c:17:91:5b:15:92:32:d0:30:9e:64:
                    c6:c1:8e:96:7a:88:5c:ab:03:36:ce:ef:3d:73:0e:
                    84:b3:f0:b5:69:ea:b5:8e:22:36:ff:b5:72:14:02:
                    e5:a0:2a:2b:3a:d0:a5:11:03:19:76:74:10:02:48:
                    04:d4:26:22:19:5d:1a:b7:b6:c1:f4:a7:83:0f:f7:
                    7e:11:f8:d3:82:09:4d:0d:30:6c:15:6c:0d:28:d9:
                    d2:c1:67:23:4e:e8:95:af:13:9f:ec:57:23:87:31:
                    1e:61:77:6f:33:35:c4:67:18:59:55:13:de:7c:bf:
                    a5:3a:4c:df:a4:47:bb:77:bd:24:7b:c4:c7:ef:ad:
                    55:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:E1:12:CE:2D:07:77:27:E7:B5:90:77:DA:87:F7:C2:35:D7:31:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/23f4195c-cc45-3bda-ba73-68c72a73ec42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.33.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:f1:e5:6c:b2:be:b1:bd:88:0e:2d:e3:03:80:9f:87:bc:db:
         4d:79:53:3e:49:45:df:31:d6:c5:0f:0b:8d:00:27:78:28:72:
         32:05:5a:54:0c:28:b2:5c:aa:87:01:42:61:78:d3:45:0e:67:
         f9:51:86:ef:47:e6:83:dd:34:4f:a0:80:b9:e5:e7:81:b8:68:
         47:36:a0:f8:6e:06:7d:54:fb:91:7e:c3:9b:5c:e2:0a:50:6c:
         30:9a:c7:f8:d1:b1:04:ca:64:e4:7b:59:35:95:f0:ff:fa:6d:
         a1:d8:02:47:80:3f:1c:d5:42:fb:84:e7:2f:01:af:29:93:05:
         6a:4a:0b:05:55:8c:07:bd:b3:c6:6f:b3:80:4e:a7:e6:a1:23:
         99:c5:cc:97:3f:9e:12:3d:a0:db:db:dc:0f:c5:48:6b:04:70:
         56:6e:d2:b5:77:49:21:04:eb:68:53:bf:1e:c7:0a:20:ce:98:
         5a:63:9a:45:70:c1:1c:fc:cb:0a:dc:8e:ac:32:93:f7:cf:94:
         51:30:21:b6:c7:bc:c1:9b:d5:85:bc:e4:5f:30:ae:23:51:28:
         8a:6d:57:6b:f2:a4:e5:46:13:36:44:ff:ee:8c:74:32:aa:f3:
         6f:99:54:80:b5:df:8b:de:47:8f:58:cd:d8:94:79:ca:22:81:
         1b:c3:6f:b7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5yBM3kdcoEyngIvUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDcwOTIxMDAxMVoXDTI2MTAwNzIxMDAxMVowLzEtMCsGA1UEAxMk
NmRiYTgwMzEtODAxYS00NWRkLTk2NDYtY2VhMDg1MGE2NDg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvogok8zhM4g4R8cxcA4Owh7HxGDlunspKkc
Yg0+1Vsr33MVsxiJy0/D2m4PQzddczAao2tVL9PbD3+E/khJLH9b2jY4Ad9WvzQ8
99jx0LUMAv5zQgbXDeZJroWnQRZ1RTs0HTxJOdP8zVDgv7qC6mKV7uNIkdXy9Rye
TBeRWxWSMtAwnmTGwY6WeohcqwM2zu89cw6Es/C1aeq1jiI2/7VyFALloCorOtCl
EQMZdnQQAkgE1CYiGV0at7bB9KeDD/d+EfjTgglNDTBsFWwNKNnSwWcjTuiVrxOf
7FcjhzEeYXdvMzXEZxhZVRPefL+lOkzfpEe7d70ke8TH761VvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNnhEs4tB3cn57WQd9qH98I11zEuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMjNmNDE5NWMtY2M0NS0z
YmRhLWJhNzMtNjhjNzJhNzNlYzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARSEFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALzx5WyyvrG9iA4t4wOAn4e82015Uz5JRd8x1sUPC40AJ3gocjIFWlQM
KLJcqocBQmF400UOZ/lRhu9H5oPdNE+ggLnl54G4aEc2oPhuBn1U+5F+w5tc4gpQ
bDCax/jRsQTKZOR7WTWV8P/6baHYAkeAPxzVQvuE5y8BrymTBWpKCwVVjAe9s8Zv
s4BOp+ahI5nFzJc/nhI9oNvb3A/FSGsEcFZu0rV3SSEE62hTvx7HCiDOmFpjmkVw
wRz8ywrcjqwyk/fPlFEwIbbHvMGb1YW85F8wriNRKIptV2vypOVGEzZE/+6MdDKq
82+ZVIC134veR49YzdiUecoigRvDb7c=
-----END CERTIFICATE-----
Generated at Fri Jul 10 13:52:32 2026 by rpki-client