Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/38dc795b-e363-3433-97fa-c1afa8a35562.roa
File:                     38dc795b-e363-3433-97fa-c1afa8a35562.roa (raw, json)
Hash identifier:          3vbJ0ZsQI2DX4kkwaXizoyvNm0iWXWTug1Lh33negGw=
Subject key identifier:   2F:56:B1:DA:7C:C9:AD:DE:A3:89:39:28:46:A3:AD:FB:62:F6:3B:11
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F89A883C626ACE057FB135080
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/38dc795b-e363-3433-97fa-c1afa8a35562.roa
Signing time:             Sun 18 Oct 2026 01:00:13 +0000
ROA not before:           Sun 18 Oct 2026 01:00:13 +0000
ROA not after:            Sat 16 Jan 2027 02:00:13 +0000
asID:                     701
IP address blocks:        67.90.46.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:89:a8:83:c6:26:ac:e0:57:fb:13:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 18 01:00:13 2026 GMT
            Not After : Jan 16 02:00:13 2027 GMT
        Subject: CN=7761c5ee-70bb-4849-8bb1-8a9703c020e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d9:b9:07:51:b7:61:0e:4d:19:d9:fb:20:50:
                    da:39:cd:18:77:72:35:cc:5e:72:c3:73:3d:7a:b1:
                    0d:e1:9f:60:ea:b2:7c:8e:c4:a6:2d:73:05:55:e5:
                    50:2e:f9:53:3c:9e:1e:2b:a5:54:4b:65:c7:ea:7e:
                    53:87:6f:cb:2f:d1:d9:b1:09:01:bc:3a:6b:ec:d4:
                    d0:cb:b7:14:be:71:0c:a4:91:7c:a4:3c:83:d1:45:
                    04:ed:f3:1e:95:fe:db:99:76:30:c1:dd:7e:e6:4a:
                    ed:c4:eb:c4:6f:e4:e2:9a:49:41:aa:57:1d:b0:f7:
                    1f:4f:72:80:63:2c:c6:c4:d5:10:ce:72:6a:d8:b2:
                    2e:74:76:d4:05:56:09:d0:59:85:ac:23:e9:d0:fd:
                    0e:36:3c:9b:1c:29:fb:40:b3:61:ed:85:d7:e9:c6:
                    75:bb:4e:e1:72:14:81:64:9b:05:9d:a1:a5:64:3a:
                    6c:2e:44:dd:ed:7f:2d:c9:b7:23:d2:dc:8d:58:1f:
                    18:fd:1e:9d:86:64:88:4b:c5:61:b3:88:9a:24:d1:
                    94:77:70:d8:e3:4a:49:b8:a7:f8:91:aa:27:29:d5:
                    2e:e0:36:13:e3:7d:a1:cc:f9:9c:9b:e0:30:79:43:
                    37:0b:b4:96:e8:91:bb:cf:98:c9:c9:b9:05:d7:70:
                    f9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:56:B1:DA:7C:C9:AD:DE:A3:89:39:28:46:A3:AD:FB:62:F6:3B:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/38dc795b-e363-3433-97fa-c1afa8a35562.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.90.46.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:1f:27:96:09:09:fe:79:2d:20:13:c4:02:b6:b9:d7:22:bf:
         9c:9b:f3:02:40:b9:c2:bf:f7:44:63:94:13:19:a3:85:c2:a7:
         3d:eb:0b:bb:3b:07:79:6a:ec:f9:43:c0:d9:23:99:18:68:58:
         aa:e5:6f:21:d1:33:c0:e0:ef:df:83:de:70:95:84:d0:d7:09:
         03:fc:f9:e1:06:98:5d:10:48:03:21:72:f0:3d:82:35:5e:e7:
         31:c9:f4:45:63:f6:ed:9b:04:b8:a5:62:b0:51:12:cd:2d:4e:
         f7:47:9e:f4:9b:42:34:d3:99:93:d6:e0:28:33:ec:46:d0:3b:
         ce:78:f4:e2:1e:d1:35:60:8a:fc:d1:f3:74:98:83:5e:dc:fe:
         0e:f7:cd:5d:e2:c1:a2:33:60:fe:ed:b1:d5:4c:ae:78:7c:16:
         ff:c9:a3:f3:2e:0b:b7:e3:b2:cd:9b:ed:45:c8:c4:8b:aa:c2:
         e3:6e:f7:21:14:d6:5b:62:61:ce:c4:a3:f7:68:91:50:68:fa:
         18:38:bf:2e:bc:29:b1:19:09:af:62:58:01:a0:29:aa:ba:2f:
         7c:23:d6:cb:12:ab:09:aa:55:36:4b:18:fd:5d:c4:d1:8b:0a:
         c8:52:51:82:a2:40:11:81:4e:d2:43:0e:b7:a1:e1:5f:6b:0a:
         93:79:9f:9e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+JqIPGJqzgV/sTUIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MTAxODAxMDAxM1oXDTI3MDExNjAyMDAxM1owLzEtMCsGA1UEAxMk
Nzc2MWM1ZWUtNzBiYi00ODQ5LThiYjEtOGE5NzAzYzAyMGU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodm5B1G3YQ5NGdn7IFDaOc0Yd3I1zF5yw3M9
erEN4Z9g6rJ8jsSmLXMFVeVQLvlTPJ4eK6VUS2XH6n5Th2/LL9HZsQkBvDpr7NTQ
y7cUvnEMpJF8pDyD0UUE7fMelf7bmXYwwd1+5krtxOvEb+TimklBqlcdsPcfT3KA
YyzGxNUQznJq2LIudHbUBVYJ0FmFrCPp0P0ONjybHCn7QLNh7YXX6cZ1u07hchSB
ZJsFnaGlZDpsLkTd7X8tybcj0tyNWB8Y/R6dhmSIS8Vhs4iaJNGUd3DY40pJuKf4
kaonKdUu4DYT432hzPmcm+AweUM3C7SW6JG7z5jJybkF13D56QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC9Wsdp8ya3eo4k5KEajrfti9jsRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzhkYzc5NWItZTM2My0z
NDMzLTk3ZmEtYzFhZmE4YTM1NTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ1ouMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIEfJ5YJCf55LSATxAK2udciv5yb8wJAucK/90RjlBMZo4XCpz3rC7s7
B3lq7PlDwNkjmRhoWKrlbyHRM8Dg79+D3nCVhNDXCQP8+eEGmF0QSAMhcvA9gjVe
5zHJ9EVj9u2bBLilYrBREs0tTvdHnvSbQjTTmZPW4Cgz7EbQO8549OIe0TVgivzR
83SYg17c/g73zV3iwaIzYP7tsdVMrnh8Fv/Jo/MuC7fjss2b7UXIxIuqwuNu9yEU
1ltiYc7Eo/dokVBo+hg4vy68KbEZCa9iWAGgKaq6L3wj1ssSqwmqVTZLGP1dxNGL
CshSUYKiQBGBTtJDDreh4V9rCpN5n54=
-----END CERTIFICATE-----
Generated at Sun Nov 1 17:36:43 2026 by rpki-client