Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/61ad0864-bbc6-339f-97aa-c14eb1f79878.roa
File:                     61ad0864-bbc6-339f-97aa-c14eb1f79878.roa (raw, json)
Hash identifier:          tfT2j3G2XO2hLkf6pYvXKPpraKd15VFTAb9Ar54/MSY=
Subject key identifier:   51:D0:6D:04:F8:F8:89:94:1E:6E:9D:51:60:2F:2D:40:80:9A:D8:57
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D460ACA19A9FDCF9E91265D00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/61ad0864-bbc6-339f-97aa-c14eb1f79878.roa
Signing time:             Tue 24 Mar 2026 10:09:54 +0000
ROA not before:           Tue 24 Mar 2026 10:09:54 +0000
ROA not after:            Mon 22 Jun 2026 10:09:54 +0000
asID:                     32693
IP address blocks:        69.33.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:46:0a:ca:19:a9:fd:cf:9e:91:26:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Mar 24 10:09:54 2026 GMT
            Not After : Jun 22 10:09:54 2026 GMT
        Subject: CN=366646a8-f80e-45a5-b5ff-af56d744c901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:2c:cc:92:03:e6:d2:86:1c:56:c5:7e:51:31:
                    c1:43:36:60:ed:44:33:12:24:b8:cb:b2:f4:45:f8:
                    3c:fd:2e:e3:36:52:bc:7a:96:6e:33:af:70:76:8f:
                    11:ca:20:63:e0:a6:76:9d:20:c4:ef:ef:99:66:d2:
                    e3:4f:e8:0a:93:c8:4a:10:30:1b:59:41:d0:4a:bf:
                    7b:e7:a1:65:16:b4:92:6a:00:83:13:28:3d:5f:12:
                    40:78:9a:23:66:83:b0:eb:23:8e:c6:46:6d:ff:a9:
                    3f:70:8f:5c:99:6f:6a:f1:6e:7f:30:b3:cf:92:68:
                    32:17:ea:da:ad:c9:f0:52:f9:5f:87:ee:98:6e:7e:
                    d0:9d:66:c5:d0:a1:7e:0a:e2:e6:88:73:3d:cd:8e:
                    cf:64:0b:d3:c8:a4:54:c8:c6:b3:c9:ba:f9:d2:2c:
                    78:1d:ee:05:91:88:5c:22:32:bd:d9:87:b3:29:24:
                    82:1b:0a:fe:2f:de:37:17:18:60:b3:66:8d:5d:7c:
                    af:bd:e3:84:0b:09:75:52:c8:a7:59:24:ce:85:e9:
                    84:12:60:86:ea:2a:fc:63:45:4c:55:59:5b:22:a1:
                    08:c1:aa:69:e7:2f:dc:63:3d:3a:cc:4e:d5:49:2a:
                    e3:52:b3:a5:36:01:2e:fe:3d:b3:9c:1d:d3:91:36:
                    1f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:D0:6D:04:F8:F8:89:94:1E:6E:9D:51:60:2F:2D:40:80:9A:D8:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/61ad0864-bbc6-339f-97aa-c14eb1f79878.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.33.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:aa:a2:7d:ff:7e:4f:77:2f:f0:22:e8:07:f8:23:dd:fa:a3:
         ea:37:fb:6e:81:df:29:b9:5b:f4:47:4b:72:89:ba:61:71:cd:
         b0:5e:5f:64:cb:4b:82:44:f6:39:57:86:ff:7a:c4:d4:f2:f5:
         3e:f1:41:d4:a8:90:e3:67:e0:2f:fa:33:5e:5e:64:fb:4f:ea:
         0a:96:65:f0:26:40:af:ce:15:8a:f1:ee:65:30:23:ef:52:b2:
         5d:c8:45:4b:07:51:0b:8e:12:17:41:b0:d7:d7:03:37:7f:1c:
         c7:30:ee:97:e0:78:27:2f:60:d5:65:f6:35:09:b9:01:af:b5:
         84:50:32:7f:5e:13:4d:45:9f:28:3f:20:0a:d8:82:2e:5b:f2:
         a5:48:ee:d7:ba:e6:e2:61:73:45:b1:35:85:bb:53:c4:a6:5d:
         56:52:a2:42:69:fc:fe:2b:d3:b2:b9:38:d3:6e:c6:80:48:d4:
         a0:4d:11:57:ff:18:09:a7:30:07:de:37:06:16:c2:98:8e:a4:
         43:5c:c7:df:c4:36:ee:97:01:b7:9c:ed:0e:8e:eb:2d:e5:6c:
         73:0f:71:0f:28:73:21:d0:a6:b2:fa:75:24:40:93:f0:55:b0:
         ee:07:6c:d6:4b:4a:ec:97:90:f8:8d:08:6a:9b:e1:f5:ae:48:
         16:13:2d:99
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1GCsoZqf3PnpEmXQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDMyNDEwMDk1NFoXDTI2MDYyMjEwMDk1NFowLzEtMCsGA1UEAxMk
MzY2NjQ2YTgtZjgwZS00NWE1LWI1ZmYtYWY1NmQ3NDRjOTAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3izMkgPm0oYcVsV+UTHBQzZg7UQzEiS4y7L0
Rfg8/S7jNlK8epZuM69wdo8RyiBj4KZ2nSDE7++ZZtLjT+gKk8hKEDAbWUHQSr97
56FlFrSSagCDEyg9XxJAeJojZoOw6yOOxkZt/6k/cI9cmW9q8W5/MLPPkmgyF+ra
rcnwUvlfh+6Ybn7QnWbF0KF+CuLmiHM9zY7PZAvTyKRUyMazybr50ix4He4FkYhc
IjK92YezKSSCGwr+L943Fxhgs2aNXXyvveOECwl1UsinWSTOhemEEmCG6ir8Y0VM
VVlbIqEIwapp5y/cYz06zE7VSSrjUrOlNgEu/j2znB3TkTYfGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFHQbQT4+ImUHm6dUWAvLUCAmthXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNjFhZDA4NjQtYmJjNi0z
MzlmLTk3YWEtYzE0ZWIxZjc5ODc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARSHoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALmqon3/fk93L/Ai6Af4I936o+o3+26B3ym5W/RHS3KJumFxzbBeX2TL
S4JE9jlXhv96xNTy9T7xQdSokONn4C/6M15eZPtP6gqWZfAmQK/OFYrx7mUwI+9S
sl3IRUsHUQuOEhdBsNfXAzd/HMcw7pfgeCcvYNVl9jUJuQGvtYRQMn9eE01Fnyg/
IArYgi5b8qVI7te65uJhc0WxNYW7U8SmXVZSokJp/P4r07K5ONNuxoBI1KBNEVf/
GAmnMAfeNwYWwpiOpENcx9/ENu6XAbec7Q6O6y3lbHMPcQ8ocyHQprL6dSRAk/BV
sO4HbNZLSuyXkPiNCGqb4fWuSBYTLZk=
-----END CERTIFICATE-----
Generated at Wed Mar 25 18:15:59 2026 by rpki-client