Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/832eb89e-0327-3f89-967d-82dea62e93ed.roa
File:                     832eb89e-0327-3f89-967d-82dea62e93ed.roa (raw, json)
Hash identifier:          MH45q+3PStSQGogZZP4EdjayQ5fqdm8oOzpj/R4WgpY=
Subject key identifier:   8D:B3:1B:0A:F9:FC:F2:4E:56:D5:CF:9D:5B:60:CD:D4:2C:50:C1:BD
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E4DBA0938812DB4069624F440
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/832eb89e-0327-3f89-967d-82dea62e93ed.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     3561
IP address blocks:        69.46.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:ba:09:38:81:2d:b4:06:96:24:f4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=bc592a5e-7a01-4eb6-b613-d712fedba5ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:02:ad:8a:06:73:c1:04:d5:b1:a0:2c:8a:5c:
                    22:95:16:39:d5:54:74:11:1d:50:c6:08:80:c6:ba:
                    0f:29:4e:62:7c:d4:75:ff:c8:a8:81:db:c2:4f:70:
                    bd:8b:35:fb:23:63:e2:a9:79:08:94:48:b1:5c:92:
                    b0:86:83:4e:6a:cc:74:c1:d4:fc:78:aa:c5:d7:e5:
                    77:62:29:c6:a3:be:a3:bf:ce:00:3f:84:33:5b:42:
                    21:22:55:4a:f7:b6:db:94:8a:5b:53:0b:b8:fd:f6:
                    84:04:a7:a3:ef:cf:67:73:f3:1e:6f:e6:b4:47:33:
                    a0:09:84:29:11:35:68:97:a2:a8:18:63:8c:db:1f:
                    1b:d1:3e:86:4c:28:a0:0d:af:ea:62:2a:b7:65:68:
                    00:dc:7d:0d:f9:e2:f1:8e:58:08:10:3b:a2:dd:f2:
                    b6:6d:ae:40:7b:c7:94:60:67:dd:36:af:2d:70:31:
                    71:4a:b1:4d:d6:ca:cc:c1:11:2e:6e:20:88:89:a6:
                    8d:ab:20:53:80:e0:15:e6:19:19:48:c5:22:ae:5c:
                    09:8d:37:5d:b5:48:e5:e3:d4:43:2c:a9:29:e6:ba:
                    e3:e9:55:81:6a:63:c6:73:a8:a6:96:76:cf:fb:12:
                    80:78:50:9e:4e:17:b8:6d:fc:65:16:6f:09:7f:34:
                    f4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:B3:1B:0A:F9:FC:F2:4E:56:D5:CF:9D:5B:60:CD:D4:2C:50:C1:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/832eb89e-0327-3f89-967d-82dea62e93ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.46.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:47:8c:1b:c6:93:b4:09:e6:b2:1a:4f:7c:56:46:18:7a:ef:
         b9:c5:22:b1:05:6c:1c:c4:e1:60:0f:93:e5:39:b0:6a:f0:1e:
         19:0c:2b:49:df:99:fc:83:3e:0e:12:63:3c:49:18:56:0d:34:
         46:2e:3e:3c:07:ba:5a:5d:47:05:5c:24:47:86:59:74:09:fa:
         27:ab:ee:7d:60:4c:67:b8:38:2a:6a:ef:5e:94:18:2e:31:cf:
         31:0f:d9:f7:56:09:ab:97:1f:e2:e4:0a:01:00:44:50:da:da:
         33:d6:b5:30:e4:5b:3b:71:1b:98:68:4d:bb:b0:b0:9e:b9:e1:
         74:b7:70:5c:99:ae:d1:27:e4:14:0b:22:a6:c1:48:66:5f:bf:
         3f:b9:f4:16:6a:78:09:6c:d1:9e:f7:00:5d:88:b8:e2:ab:53:
         40:0e:be:33:91:a4:b9:3b:aa:04:c7:92:c4:b0:e0:c2:6d:27:
         59:da:bf:e2:02:89:0d:dd:f8:d7:77:7d:c4:5c:d6:20:9a:ab:
         4c:ca:e0:b3:b5:c4:80:c3:c0:de:e6:94:f7:ab:c4:1b:7e:e5:
         18:83:bb:fb:6a:a5:ce:e5:34:f4:a1:07:29:ba:40:9a:2d:c9:
         a1:c2:a1:3a:3c:eb:dd:b2:88:55:1c:4a:a1:15:96:50:b2:2e:
         a7:e3:18:17
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5Nugk4gS20BpYk9EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk
MDY4MB4XDTI2MDYyNjIxMDAxMVoXDTI2MDkyNDIxMDAxMVowLzEtMCsGA1UEAxMk
YmM1OTJhNWUtN2EwMS00ZWI2LWI2MTMtZDcxMmZlZGJhNWFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogKtigZzwQTVsaAsilwilRY51VR0ER1QxgiA
xroPKU5ifNR1/8iogdvCT3C9izX7I2PiqXkIlEixXJKwhoNOasx0wdT8eKrF1+V3
YinGo76jv84AP4QzW0IhIlVK97bblIpbUwu4/faEBKej789nc/Meb+a0RzOgCYQp
ETVol6KoGGOM2x8b0T6GTCigDa/qYiq3ZWgA3H0N+eLxjlgIEDui3fK2ba5Ae8eU
YGfdNq8tcDFxSrFN1srMwREubiCIiaaNqyBTgOAV5hkZSMUirlwJjTddtUjl49RD
LKkp5rrj6VWBamPGc6imlnbP+xKAeFCeThe4bfxlFm8JfzT09wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI2zGwr5/PJOVtXPnVtgzdQsUMG9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi
MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvODMyZWI4OWUtMDMyNy0z
Zjg5LTk2N2QtODJkZWE2MmU5M2VkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj
NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk
ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk
ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARS5BMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAANHjBvGk7QJ5rIaT3xWRhh677nFIrEFbBzE4WAPk+U5sGrwHhkMK0nf
mfyDPg4SYzxJGFYNNEYuPjwHulpdRwVcJEeGWXQJ+ier7n1gTGe4OCpq716UGC4x
zzEP2fdWCauXH+LkCgEARFDa2jPWtTDkWztxG5hoTbuwsJ654XS3cFyZrtEn5BQL
IqbBSGZfvz+59BZqeAls0Z73AF2IuOKrU0AOvjORpLk7qgTHksSw4MJtJ1nav+IC
iQ3d+Nd3fcRc1iCaq0zK4LO1xIDDwN7mlPerxBt+5RiDu/tqpc7lNPShBym6QJot
yaHCoTo8692yiFUcSqEVllCyLqfjGBc=
-----END CERTIFICATE-----
Generated at Tue Jul 7 11:54:06 2026 by rpki-client