Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/74ade279-0939-30cb-880a-31011298fb47.roa
File:                     74ade279-0939-30cb-880a-31011298fb47.roa (raw, json)
Hash identifier:          qC3E/pMH9nho11Vv0aSWrjNobHF4C84U1i9sH0aneeU=
Subject key identifier:   BA:0F:92:6B:89:EA:D9:26:98:05:67:ED:51:A7:E5:A9:7D:BA:3E:80
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F54CC52FB9D85B1D0FEA67A6E
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/74ade279-0939-30cb-880a-31011298fb47.roa
Signing time:             Tue 29 Sep 2026 02:35:02 +0000
ROA not before:           Tue 29 Sep 2026 02:35:02 +0000
ROA not after:            Mon 28 Dec 2026 03:35:02 +0000
asID:                     393446
IP address blocks:        68.164.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:cc:52:fb:9d:85:b1:d0:fe:a6:7a:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 29 02:35:02 2026 GMT
            Not After : Dec 28 03:35:02 2026 GMT
        Subject: CN=12d5d79b-8946-43d1-860a-636089db7c79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7f:77:db:7c:e3:5e:c8:05:c2:32:37:4c:b2:
                    f2:b5:fb:ad:00:99:c9:dd:46:ea:72:58:6e:76:b0:
                    5d:96:3a:fc:7b:1f:19:29:20:7b:6a:3a:eb:61:13:
                    4c:33:52:52:da:56:f9:24:e6:75:51:56:78:e2:0e:
                    52:48:4d:66:21:e1:ee:83:53:ad:2d:77:3e:25:a8:
                    c9:c8:8a:6c:1e:94:fb:2d:5e:fb:fc:e8:09:b0:f4:
                    ba:13:48:bb:4f:8d:72:d3:ea:02:19:d6:46:36:f0:
                    22:7d:af:41:45:3b:4e:65:fc:fe:14:fe:36:55:6f:
                    1d:68:db:14:7f:2b:59:b9:bf:12:e3:9d:31:c4:05:
                    b8:1b:32:a6:24:14:26:4d:18:9b:66:21:86:a4:2f:
                    23:f7:93:48:8f:b1:09:a1:18:02:3f:22:c2:f9:2e:
                    b3:3f:37:e8:05:b2:f9:7e:4e:a3:46:e5:35:28:e5:
                    dc:43:e6:7e:22:1b:f2:4c:4f:61:a4:79:fb:8f:36:
                    2f:f0:84:65:c5:98:42:ba:16:bf:c0:46:71:67:ee:
                    29:7f:bf:9e:a9:3c:c1:76:0f:d9:9f:a4:8e:58:2b:
                    46:d0:9a:59:ff:9b:f5:dc:1f:f1:b4:60:1a:6f:83:
                    23:32:f8:66:03:6b:aa:0d:a5:ea:ee:36:60:81:6b:
                    95:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:0F:92:6B:89:EA:D9:26:98:05:67:ED:51:A7:E5:A9:7D:BA:3E:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/74ade279-0939-30cb-880a-31011298fb47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.164.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:f2:06:09:6b:01:98:29:70:e3:34:d0:71:50:77:83:5b:48:
         f6:3e:58:1b:d3:97:81:2c:1d:4f:ea:62:41:7c:06:74:dd:d6:
         46:ac:8d:e2:13:ec:6b:bc:5c:c8:24:a2:74:54:3c:6d:3f:70:
         d8:26:35:29:28:c0:58:01:2f:17:ac:0a:7b:03:6c:f8:53:85:
         ad:1d:be:d2:d6:06:a5:19:5e:f4:6f:18:b5:c8:f4:cb:f9:52:
         83:bb:b8:9d:db:21:2a:34:20:47:d5:c2:36:98:b4:93:d3:dd:
         b0:7c:66:3e:b3:68:ff:e8:5f:bb:b0:92:fb:71:06:a9:51:eb:
         2e:2d:b2:40:94:b0:3d:bc:92:2f:23:29:f6:dd:34:14:64:35:
         3b:ff:68:d2:13:1e:e3:5e:f8:ba:13:f4:82:f4:4f:21:17:32:
         7f:b9:cf:12:a6:b3:9d:0d:08:cc:b4:93:4b:39:37:cd:a4:1d:
         50:d6:c3:d5:fb:3c:50:a4:19:70:62:bc:c1:69:b4:0b:5f:2f:
         14:af:4f:57:34:2d:8b:5e:c0:f4:1d:5b:f7:50:d2:80:ca:43:
         ea:0c:eb:bc:8c:22:b0:f5:88:b4:14:3f:d4:39:42:27:9f:3a:
         71:e7:37:6a:1c:16:c8:68:b1:3f:f4:01:58:7d:2d:1b:29:f3:
         f9:6c:68:47
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UzFL7nYWx0P6mem4wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDkyOTAyMzUwMloXDTI2MTIyODAzMzUwMlowLzEtMCsGA1UEAxMk
MTJkNWQ3OWItODk0Ni00M2QxLTg2MGEtNjM2MDg5ZGI3Yzc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv39323zjXsgFwjI3TLLytfutAJnJ3Ubqclhu
drBdljr8ex8ZKSB7ajrrYRNMM1JS2lb5JOZ1UVZ44g5SSE1mIeHug1OtLXc+JajJ
yIpsHpT7LV77/OgJsPS6E0i7T41y0+oCGdZGNvAifa9BRTtOZfz+FP42VW8daNsU
fytZub8S450xxAW4GzKmJBQmTRibZiGGpC8j95NIj7EJoRgCPyLC+S6zPzfoBbL5
fk6jRuU1KOXcQ+Z+IhvyTE9hpHn7jzYv8IRlxZhCuha/wEZxZ+4pf7+eqTzBdg/Z
n6SOWCtG0JpZ/5v13B/xtGAab4MjMvhmA2uqDaXq7jZggWuVCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLoPkmuJ6tkmmAVn7VGn5al9uj6AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNzRhZGUyNzktMDkzOS0z
MGNiLTg4MGEtMzEwMTEyOThmYjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKQ5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGPyBglrAZgpcOM00HFQd4NbSPY+WBvTl4EsHU/qYkF8BnTd1kasjeIT
7Gu8XMgkonRUPG0/cNgmNSkowFgBLxesCnsDbPhTha0dvtLWBqUZXvRvGLXI9Mv5
UoO7uJ3bISo0IEfVwjaYtJPT3bB8Zj6zaP/oX7uwkvtxBqlR6y4tskCUsD28ki8j
KfbdNBRkNTv/aNITHuNe+LoT9IL0TyEXMn+5zxKms50NCMy0k0s5N82kHVDWw9X7
PFCkGXBivMFptAtfLxSvT1c0LYtewPQdW/dQ0oDKQ+oM67yMIrD1iLQUP9Q5Qief
OnHnN2ocFshosT/0AVh9LRsp8/lsaEc=
-----END CERTIFICATE-----
Generated at Sun Oct 11 10:12:28 2026 by rpki-client