Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/b3e21819-3ce8-3bb5-8b06-9eeddc9f6531.roa
File:                     b3e21819-3ce8-3bb5-8b06-9eeddc9f6531.roa (raw, json)
Hash identifier:          PFGG6DpJNOTr9EQi7kYm5q4r58sBHatbgMZiJFHOcvc=
Subject key identifier:   C2:3C:F3:9B:24:F9:EF:30:75:F6:97:9F:6D:9E:F9:41:19:C5:D9:C8
Certificate issuer:       /CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Certificate serial:       010D0C9F4328584EFB4763F6A9080C25617F9C80
Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/b3e21819-3ce8-3bb5-8b06-9eeddc9f6531.roa
Signing time:             Fri 28 Aug 2026 01:00:12 +0000
ROA not before:           Fri 28 Aug 2026 01:00:12 +0000
ROA not after:            Thu 26 Nov 2026 02:00:12 +0000
asID:                     13737
IP address blocks:        67.214.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fb:47:63:f6:a9:08:0c:25:61:7f:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e
        Validity
            Not Before: Aug 28 01:00:12 2026 GMT
            Not After : Nov 26 02:00:12 2026 GMT
        Subject: CN=d2c4add3-d6b0-4a41-9b00-83884ca86f7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:0c:04:74:35:71:4f:06:ef:70:3a:c6:57:93:
                    f9:5c:22:00:4b:50:07:af:22:a3:e0:6e:68:fc:a1:
                    ac:ab:83:73:0c:37:df:52:7c:e5:a3:3d:d4:64:ee:
                    64:9b:60:8f:89:d7:74:bc:17:43:8e:f3:1f:80:3c:
                    b6:38:22:1d:a6:30:c2:18:38:15:52:b6:97:ec:b7:
                    e9:f2:b1:dc:6f:ab:99:1c:7a:db:5b:e3:d5:33:6d:
                    92:b4:f4:7f:19:36:b0:64:86:dc:2e:e3:b6:7d:08:
                    37:34:01:27:5a:ac:57:c3:84:02:fd:36:f5:7d:c7:
                    a5:9b:7f:e3:5c:83:b8:01:03:e5:a0:33:41:c5:84:
                    cc:a2:77:2b:89:e3:4c:88:27:25:cd:52:c0:55:46:
                    90:e4:ff:2f:ad:a8:8f:68:63:ee:8b:82:60:30:28:
                    c1:53:3b:73:a6:32:36:12:71:42:a6:ca:a8:23:fd:
                    1f:cd:72:fc:c9:e2:12:6d:0b:93:1d:f4:bd:9f:32:
                    dd:f1:c5:30:56:36:3d:07:45:d3:69:8d:70:07:13:
                    4e:fd:8a:ec:67:b3:bf:66:08:05:23:0e:3d:ab:fd:
                    b9:08:84:c0:fb:e3:e4:b4:cb:83:8a:d3:2e:41:92:
                    49:a4:e3:5d:5f:5a:1e:22:cb:c9:ef:0a:c0:3d:54:
                    fd:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:3C:F3:9B:24:F9:EF:30:75:F6:97:9F:6D:9E:F9:41:19:C5:D9:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/b3e21819-3ce8-3bb5-8b06-9eeddc9f6531.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl

            X509v3 Authority Key Identifier:
                keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.214.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:95:5d:e4:37:70:dc:7a:18:62:96:2e:ad:26:3a:46:16:60:
         5c:56:d4:9d:33:1b:36:e9:4e:ee:4e:7b:cd:0d:cc:b3:be:35:
         f5:fc:47:3c:ac:fe:81:e6:e0:09:39:5d:5a:00:1c:39:78:7c:
         f8:d4:71:f2:95:c1:db:6e:03:db:8c:d2:69:92:a1:64:92:92:
         ac:ee:22:05:a8:65:80:5a:35:c4:b6:c5:5c:1e:af:92:78:52:
         12:51:c6:31:21:2e:e6:8f:a9:a5:4c:b3:c6:9e:6a:31:37:13:
         64:8e:77:f6:4c:05:49:73:94:45:e5:d0:c4:64:9d:90:11:4c:
         5d:f8:2e:e2:a8:00:66:19:7c:cf:64:18:85:bb:b8:0d:fb:8b:
         eb:a6:5b:99:87:2d:20:05:e8:0a:3d:72:27:77:3a:f0:f8:9b:
         6a:c7:bc:b7:19:47:25:9d:a9:29:ff:66:32:1c:54:d8:6d:47:
         10:2b:34:bd:c4:be:a0:92:3d:de:3d:3f:f4:cd:9c:b2:75:43:
         26:7e:a6:84:73:24:c7:24:13:d9:ef:12:28:be:7d:05:75:cd:
         44:85:0c:6a:69:2a:52:23:98:1f:82:35:62:41:fc:1f:19:b4:
         23:89:44:b9:a4:e5:47:c5:38:48:06:41:72:c7:39:ff:ba:4b:
         2f:ee:ba:5c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE77R2P2qQgMJWF/nIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWUzZTk5Y2MtNzk5Mi00YWMxLWEyNTYtOTE3Y2NlMDc1
MzJlMB4XDTI2MDgyODAxMDAxMloXDTI2MTEyNjAyMDAxMlowLzEtMCsGA1UEAxMk
ZDJjNGFkZDMtZDZiMC00YTQxLTliMDAtODM4ODRjYTg2ZjdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAwEdDVxTwbvcDrGV5P5XCIAS1AHryKj4G5o
/KGsq4NzDDffUnzloz3UZO5km2CPidd0vBdDjvMfgDy2OCIdpjDCGDgVUraX7Lfp
8rHcb6uZHHrbW+PVM22StPR/GTawZIbcLuO2fQg3NAEnWqxXw4QC/Tb1fcelm3/j
XIO4AQPloDNBxYTMoncrieNMiCclzVLAVUaQ5P8vraiPaGPui4JgMCjBUztzpjI2
EnFCpsqoI/0fzXL8yeISbQuTHfS9nzLd8cUwVjY9B0XTaY1wBxNO/YrsZ7O/ZggF
Iw49q/25CITA++PktMuDitMuQZJJpONdX1oeIsvJ7wrAPVT9MQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMI885sk+e8wdfaXn22e+UEZxdnIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTNl
OTljYy03OTkyLTRhYzEtYTI1Ni05MTdjY2UwNzUzMmUvYjNlMjE4MTktM2NlOC0z
YmI1LThiMDYtOWVlZGRjOWY2NTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWUzZTk5Y2MtNzk5Mi00YWMxLWEy
NTYtOTE3Y2NlMDc1MzJlLzVlM2U5OWNjLTc5OTItNGFjMS1hMjU2LTkxN2NjZTA3
NTMyZS5jcmwwHwYDVR0jBBgwFoAU2RNicrf45rV9n/DguoV/tj3NwN8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTNlOTljYy03OTkyLTRhYzEtYTI1Ni05MTdj
Y2UwNzUzMmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9a0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACyVXeQ3cNx6GGKWLq0mOkYWYFxW1J0zGzbpTu5Oe80NzLO+NfX8Rzys
/oHm4Ak5XVoAHDl4fPjUcfKVwdtuA9uM0mmSoWSSkqzuIgWoZYBaNcS2xVwer5J4
UhJRxjEhLuaPqaVMs8aeajE3E2SOd/ZMBUlzlEXl0MRknZARTF34LuKoAGYZfM9k
GIW7uA37i+umW5mHLSAF6Ao9cid3OvD4m2rHvLcZRyWdqSn/ZjIcVNhtRxArNL3E
vqCSPd49P/TNnLJ1QyZ+poRzJMckE9nvEii+fQV1zUSFDGppKlIjmB+CNWJB/B8Z
tCOJRLmk5UfFOEgGQXLHOf+6Sy/uulw=
-----END CERTIFICATE-----
Generated at Sat Aug 29 07:31:06 2026 by rpki-client