Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6c07296a-0b58-37ce-984d-bef9a710cba3.roa
File:                     6c07296a-0b58-37ce-984d-bef9a710cba3.roa (raw, json)
Hash identifier:          mk8Kxtk+ZHmhtVN1nw+BS0D4iauHGVvymT3U9vYVxzk=
Subject key identifier:   8B:55:82:AB:B4:EE:A2:0F:FC:10:C5:1A:F2:A0:D3:97:85:A7:3B:9D
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D55BA418F71DF5355A45D6700
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6c07296a-0b58-37ce-984d-bef9a710cba3.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     36916
IP address blocks:        69.17.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:ba:41:8f:71:df:53:55:a4:5d:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=1a2d77d1-729d-4c85-87b5-6f19d21b557c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:67:7e:ac:93:95:44:84:57:c0:5b:7f:11:f5:
                    1b:1a:ac:03:55:58:e4:4d:c1:eb:0b:e6:db:67:08:
                    e4:a8:23:a6:0d:1a:5e:5a:69:dd:87:cc:e9:88:d9:
                    a8:57:4f:86:8d:de:77:4d:64:0d:34:e0:17:82:7c:
                    57:67:50:b2:bf:d2:8b:54:6d:9f:d2:4e:dc:e5:70:
                    d5:20:42:87:64:97:7a:64:7f:e8:47:e0:85:6e:e3:
                    6d:2b:63:2f:18:63:80:2a:59:f1:77:d7:e8:5f:86:
                    6f:0e:17:b5:e6:df:06:c6:1e:2f:fb:18:00:e3:ed:
                    2e:86:56:9c:3b:d2:69:8b:9a:87:ba:7f:b1:fe:82:
                    2d:78:1d:a6:7c:fa:01:97:08:dc:bc:25:ff:49:87:
                    67:43:43:0e:8a:b0:47:22:c1:b8:26:9a:fb:61:05:
                    4a:72:50:3d:50:9f:b6:7a:a0:b4:aa:53:d2:6c:ce:
                    2d:95:78:48:03:62:ed:e1:47:4b:e4:b0:4b:5f:b8:
                    f8:dd:af:da:d8:fd:35:05:1a:05:b0:1b:c5:e0:1e:
                    33:36:73:10:49:58:83:6a:3c:73:f0:22:3a:eb:b1:
                    90:02:02:45:81:3d:40:d3:4a:89:0f:07:5c:96:a0:
                    74:bb:45:31:f7:49:0e:ed:5d:79:20:fc:21:ce:8f:
                    eb:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:55:82:AB:B4:EE:A2:0F:FC:10:C5:1A:F2:A0:D3:97:85:A7:3B:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6c07296a-0b58-37ce-984d-bef9a710cba3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.17.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:a5:a0:55:c7:ef:55:98:2d:55:c6:32:37:ef:8e:7a:bb:16:
         4b:de:7c:6f:15:ad:7d:a0:f0:f5:b4:56:b4:9c:7b:52:ba:64:
         f3:e8:40:25:1f:96:40:f0:b7:07:97:e8:5b:8e:3a:7f:12:58:
         aa:e0:84:25:26:0e:46:5a:3b:2a:a8:1c:51:00:9d:55:d8:08:
         fd:d1:4b:ee:69:f3:81:83:07:35:27:85:e0:23:1e:ac:7b:1c:
         5a:7e:5a:11:52:08:41:8c:0f:48:e3:48:a0:df:d4:3a:6f:e0:
         59:88:00:80:43:81:6a:ad:04:3c:0f:c6:bd:e1:d7:70:9b:3c:
         5b:b6:54:7a:b5:a4:99:f1:6a:67:66:14:99:df:8e:c2:d1:de:
         b7:2e:c0:79:1c:f5:26:59:c4:8e:68:6d:a2:a0:39:06:23:2a:
         1e:c2:38:62:41:d0:fd:70:dd:98:fe:3a:11:7b:47:bb:c6:a1:
         a7:a3:ac:49:af:f2:12:89:61:b4:40:8a:e6:b8:63:e2:bc:3a:
         f0:ad:45:ec:c4:38:c1:06:85:e7:0d:21:90:9d:10:e8:16:82:
         fa:ee:1f:31:cc:ba:51:2f:c4:cd:7d:14:ed:6d:89:97:15:7d:
         bd:02:7f:2e:4a:78:29:a7:e6:e9:b6:36:65:61:e5:ae:e0:f7:
         79:c5:be:43
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VukGPcd9TVaRdZwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk
MWEyZDc3ZDEtNzI5ZC00Yzg1LTg3YjUtNmYxOWQyMWI1NTdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8md+rJOVRIRXwFt/EfUbGqwDVVjkTcHrC+bb
ZwjkqCOmDRpeWmndh8zpiNmoV0+Gjd53TWQNNOAXgnxXZ1Cyv9KLVG2f0k7c5XDV
IEKHZJd6ZH/oR+CFbuNtK2MvGGOAKlnxd9foX4ZvDhe15t8Gxh4v+xgA4+0uhlac
O9Jpi5qHun+x/oIteB2mfPoBlwjcvCX/SYdnQ0MOirBHIsG4Jpr7YQVKclA9UJ+2
eqC0qlPSbM4tlXhIA2Lt4UdL5LBLX7j43a/a2P01BRoFsBvF4B4zNnMQSViDajxz
8CI667GQAgJFgT1A00qJDwdclqB0u0Ux90kO7V15IPwhzo/rHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFItVgqu07qIP/BDFGvKg05eFpzudMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNmMwNzI5NmEtMGI1OC0z
N2NlLTk4NGQtYmVmOWE3MTBjYmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRRFwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALqloFXH71WYLVXGMjfvjnq7FkvefG8VrX2g8PW0VrSce1K6ZPPoQCUf
lkDwtweX6FuOOn8SWKrghCUmDkZaOyqoHFEAnVXYCP3RS+5p84GDBzUnheAjHqx7
HFp+WhFSCEGMD0jjSKDf1Dpv4FmIAIBDgWqtBDwPxr3h13CbPFu2VHq1pJnxamdm
FJnfjsLR3rcuwHkc9SZZxI5obaKgOQYjKh7COGJB0P1w3Zj+OhF7R7vGoaejrEmv
8hKJYbRAiua4Y+K8OvCtRezEOMEGhecNIZCdEOgWgvruHzHMulEvxM19FO1tiZcV
fb0Cfy5KeCmn5um2NmVh5a7g93nFvkM=
-----END CERTIFICATE-----
Generated at Fri Apr 10 23:17:09 2026 by rpki-client