Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/33dbbea8-571c-3660-83a2-453501880bbb.roa
File:                     33dbbea8-571c-3660-83a2-453501880bbb.roa (raw, json)
Hash identifier:          G9tBXOMqPq7ij4Xiz1RV5hfqPUHJwFzMbSI7BYs70Ok=
Subject key identifier:   D2:E1:F1:C6:BB:BD:6F:08:C9:6B:C2:B2:58:44:C8:C3:E5:38:67:86
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584EBF224E0E50DB146E78309B40
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/33dbbea8-571c-3660-83a2-453501880bbb.roa
Signing time:             Thu 06 Aug 2026 11:57:02 +0000
ROA not before:           Thu 06 Aug 2026 11:57:02 +0000
ROA not after:            Wed 04 Nov 2026 12:57:02 +0000
asID:                     63099
IP address blocks:        209.101.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bf:22:4e:0e:50:db:14:6e:78:30:9b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Aug  6 11:57:02 2026 GMT
            Not After : Nov  4 12:57:02 2026 GMT
        Subject: CN=61080040-5f30-494d-a537-a9e8b373e6b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8b:2f:a8:61:04:b6:da:ca:08:24:e1:c9:78:
                    9a:87:59:de:17:2a:ec:e9:0e:56:05:25:5d:84:31:
                    5c:56:44:c9:a5:4b:68:1e:5b:ca:dd:18:c0:03:ba:
                    f0:04:0e:a7:dd:c4:28:89:db:83:0a:95:65:f3:2d:
                    3a:64:30:0f:22:cf:94:c7:cd:ac:9e:d8:fa:de:61:
                    45:d6:6f:5a:be:24:8d:8d:b7:66:ea:56:43:b7:01:
                    bd:0d:28:3b:ad:14:e5:25:db:f5:15:91:dc:14:20:
                    d9:8d:1a:5c:1a:70:4f:ca:85:c8:8c:6c:17:54:97:
                    d3:88:6c:70:2c:27:df:73:03:64:6f:49:7e:0f:1a:
                    e6:11:59:b0:06:bc:0e:81:4f:68:c2:48:6d:17:58:
                    c8:88:ed:c9:41:6e:6c:d0:4a:a0:a5:41:35:ec:99:
                    e4:63:90:82:ea:f9:1e:58:7e:ab:ff:1d:ed:c3:9d:
                    5e:21:39:9c:0a:98:da:89:a9:4b:12:7b:a4:23:3c:
                    db:ba:50:ef:aa:93:44:4b:87:9d:28:a3:5f:b7:6b:
                    3c:c9:24:a2:72:4d:ff:00:0b:6f:4e:9f:bd:5b:56:
                    ee:d9:07:c4:54:79:11:c3:92:0e:3f:ee:39:1f:c6:
                    bc:b7:7d:4b:8e:a3:20:36:aa:fb:97:e3:a8:1c:81:
                    f2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E1:F1:C6:BB:BD:6F:08:C9:6B:C2:B2:58:44:C8:C3:E5:38:67:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/33dbbea8-571c-3660-83a2-453501880bbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.101.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:a1:a8:c7:e6:96:79:23:ad:82:b9:e0:89:06:89:20:04:31:
         4f:d4:32:5a:19:eb:d1:02:5d:0f:df:02:81:86:a2:2f:95:a8:
         79:43:c2:83:16:62:1c:3e:25:ba:77:6d:dd:4b:59:4c:ad:48:
         18:86:c3:66:3b:fa:34:c1:ab:9e:40:5b:fc:03:d0:43:ee:99:
         7a:b2:1b:f8:f9:3a:26:15:bd:fe:19:f4:6e:3d:7d:04:cc:28:
         1f:9c:f2:c8:b0:44:99:19:21:f4:47:25:39:e4:ea:7d:9c:12:
         8f:63:1f:5c:76:1e:ad:fa:3a:8e:6e:de:8c:5b:85:75:bc:b6:
         6a:f1:8b:ab:72:ae:dd:35:dc:5c:9b:eb:88:1b:5d:0a:3d:83:
         b4:53:dc:f7:d8:3b:00:85:59:30:69:27:6c:a8:5e:b7:16:af:
         3b:36:01:f9:6a:0e:a3:42:9b:d0:27:fa:1f:f9:ae:8d:b8:b1:
         41:ca:4e:c0:e0:73:34:8f:c7:db:35:79:6e:a8:4e:62:d1:55:
         5f:a8:ea:b4:bc:f3:9c:b5:9f:a4:ff:f7:a4:63:98:4c:45:22:
         24:2b:74:e2:66:62:5c:ca:18:df:20:4c:89:dc:a1:95:3c:ee:
         a6:aa:4f:d9:24:6a:89:b5:e2:49:a4:a6:1a:88:1d:fb:06:9d:
         77:75:cd:e6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6/Ik4OUNsUbngwm0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDgwNjExNTcwMloXDTI2MTEwNDEyNTcwMlowLzEtMCsGA1UEAxMk
NjEwODAwNDAtNWYzMC00OTRkLWE1MzctYTllOGIzNzNlNmIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIsvqGEEttrKCCThyXiah1neFyrs6Q5WBSVd
hDFcVkTJpUtoHlvK3RjAA7rwBA6n3cQoiduDCpVl8y06ZDAPIs+Ux82sntj63mFF
1m9aviSNjbdm6lZDtwG9DSg7rRTlJdv1FZHcFCDZjRpcGnBPyoXIjGwXVJfTiGxw
LCffcwNkb0l+DxrmEVmwBrwOgU9owkhtF1jIiO3JQW5s0EqgpUE17JnkY5CC6vke
WH6r/x3tw51eITmcCpjaialLEnukIzzbulDvqpNES4edKKNft2s8ySSick3/AAtv
Tp+9W1bu2QfEVHkRw5IOP+45H8a8t31LjqMgNqr7l+OoHIHyeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNLh8ca7vW8IyWvCslhEyMPlOGeGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMzNkYmJlYTgtNTcxYy0z
NjYwLTgzYTItNDUzNTAxODgwYmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG2hqMfmlnkjrYK54IkGiSAEMU/UMloZ69ECXQ/fAoGGoi+VqHlDwoMW
Yhw+Jbp3bd1LWUytSBiGw2Y7+jTBq55AW/wD0EPumXqyG/j5OiYVvf4Z9G49fQTM
KB+c8siwRJkZIfRHJTnk6n2cEo9jH1x2Hq36Oo5u3oxbhXW8tmrxi6tyrt013Fyb
64gbXQo9g7RT3PfYOwCFWTBpJ2yoXrcWrzs2AflqDqNCm9An+h/5ro24sUHKTsDg
czSPx9s1eW6oTmLRVV+o6rS885y1n6T/96RjmExFIiQrdOJmYlzKGN8gTIncoZU8
7qaqT9kkaom14kmkphqIHfsGnXd1zeY=
-----END CERTIFICATE-----
Generated at Wed Aug 26 07:58:24 2026 by rpki-client