Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/c8d785d0-9453-371d-ac74-5e4bbdbc96dd.roa
File:                     c8d785d0-9453-371d-ac74-5e4bbdbc96dd.roa (raw, json)
Hash identifier:          K8YQGZb+EMFB0FHq5AhNwU+GCjLuOeTy9ROdQ+cwxtc=
Subject key identifier:   18:F2:8E:53:F9:E6:0F:E7:20:B9:4A:21:26:AE:13:E9:36:12:D4:B9
Certificate issuer:       /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Certificate serial:       010D0C9F4328584DAAE02867FEE6E7AA2029C8F2
Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/c8d785d0-9453-371d-ac74-5e4bbdbc96dd.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     16509
IP address blocks:        64.69.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:28:67:fe:e6:e7:aa:20:29:c8:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=6df34278-3563-4937-9994-ec353240152f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:37:4e:5d:59:d1:4a:f0:c3:82:a6:84:02:3c:
                    c4:b4:24:35:95:56:85:95:d2:48:17:36:eb:5d:32:
                    d7:de:b6:02:38:5b:58:b4:da:ac:0c:15:ea:92:58:
                    48:7c:17:7c:a9:42:83:71:a6:9f:79:35:e9:34:8e:
                    0b:97:46:e1:42:fc:78:3b:1d:37:00:2c:96:30:71:
                    a7:df:af:ef:75:d1:d6:93:c4:63:3b:3c:1d:6d:2b:
                    9b:b5:59:4c:6d:b0:8f:11:ba:f9:9c:f3:9f:11:4c:
                    a1:e9:71:03:88:8b:71:12:fd:ae:2f:2f:ac:f4:8c:
                    02:44:5a:e4:20:6e:95:45:51:fa:06:98:55:48:55:
                    ae:ea:20:ab:e7:f0:f0:bf:3d:5f:27:14:34:21:07:
                    12:15:29:11:c9:98:61:2d:f1:24:7e:57:41:15:90:
                    23:98:cd:a9:5d:a0:e9:92:d2:48:4c:42:d1:6d:24:
                    01:93:0e:b1:06:d9:de:73:b4:57:a0:a4:e4:b8:10:
                    b8:b2:b0:ea:14:f1:fe:27:9a:e8:4c:ea:fc:79:fb:
                    cc:c9:8b:97:c9:cc:ca:db:47:07:b6:90:5a:3b:0f:
                    ec:c6:ad:05:c5:90:eb:c3:36:e1:80:ff:2b:cb:7c:
                    85:1f:d5:cf:0c:4a:4f:03:f2:4c:42:37:85:42:0a:
                    ae:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:F2:8E:53:F9:E6:0F:E7:20:B9:4A:21:26:AE:13:E9:36:12:D4:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/c8d785d0-9453-371d-ac74-5e4bbdbc96dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl

            X509v3 Authority Key Identifier:
                keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.69.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:c5:da:82:ce:9b:95:c9:43:48:a1:d6:ad:b5:af:89:67:03:
         8f:3d:ce:95:19:71:9a:8b:48:d2:37:9a:41:a4:fa:7f:42:c8:
         f6:bc:5b:38:36:5d:11:c4:f4:85:78:9e:d7:99:29:61:a5:ad:
         6f:98:8b:5c:64:58:c0:be:b2:fa:a1:cc:f6:60:5d:82:fd:bf:
         57:ad:c5:6a:43:ce:ea:c6:1c:2f:7e:89:57:69:7c:9e:19:9f:
         00:f6:64:4d:43:79:ff:32:e8:1b:74:78:b8:e9:62:bc:fc:b9:
         69:98:59:cb:5a:2e:77:ec:af:22:b8:89:e0:08:32:3d:6f:0c:
         4c:d7:91:0c:b7:a6:dc:ce:9e:f6:f6:67:4e:e5:36:7f:45:ab:
         0d:f8:d4:3b:d1:7a:3b:a9:bc:b3:12:8c:15:1b:e2:10:08:bf:
         3d:2e:fb:aa:ae:10:0c:ef:8e:88:8a:51:a2:75:ba:07:ce:70:
         8a:6f:b6:1e:5d:01:4a:47:4b:ac:ab:99:06:c4:b2:8b:0b:01:
         6a:63:e5:63:aa:02:38:fc:50:7a:ec:20:4e:d9:5e:04:8c:21:
         d3:09:9e:d5:7c:c1:28:98:8f:09:8a:6f:b9:54:77:a7:46:9d:
         9c:1b:96:e4:46:73:c2:a8:ab:6d:0e:83:aa:8d:f6:6b:bd:bc:
         92:f8:7b:3c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2q4Chn/ubnqiApyPIwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjBmYWNjYjQtNDBhOS00MTY4LWFhM2QtNTlkMTkwZWI1
YTA0MB4XDTI2MDQyOTEzMDAzMVoXDTI2MDcyODEzMDAzMVowLzEtMCsGA1UEAxMk
NmRmMzQyNzgtMzU2My00OTM3LTk5OTQtZWMzNTMyNDAxNTJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDdOXVnRSvDDgqaEAjzEtCQ1lVaFldJIFzbr
XTLX3rYCOFtYtNqsDBXqklhIfBd8qUKDcaafeTXpNI4Ll0bhQvx4Ox03ACyWMHGn
36/vddHWk8RjOzwdbSubtVlMbbCPEbr5nPOfEUyh6XEDiItxEv2uLy+s9IwCRFrk
IG6VRVH6BphVSFWu6iCr5/Dwvz1fJxQ0IQcSFSkRyZhhLfEkfldBFZAjmM2pXaDp
ktJITELRbSQBkw6xBtnec7RXoKTkuBC4srDqFPH+J5roTOr8efvMyYuXyczK20cH
tpBaOw/sxq0FxZDrwzbhgP8ry3yFH9XPDEpPA/JMQjeFQgquKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBjyjlP55g/nILlKISauE+k2EtS5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZh
Y2NiNC00MGE5LTQxNjgtYWEzZC01OWQxOTBlYjVhMDQvYzhkNzg1ZDAtOTQ1My0z
NzFkLWFjNzQtNWU0YmJkYmM5NmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjBmYWNjYjQtNDBhOS00MTY4LWFh
M2QtNTlkMTkwZWI1YTA0L2YwZmFjY2I0LTQwYTktNDE2OC1hYTNkLTU5ZDE5MGVi
NWEwNC5jcmwwHwYDVR0jBBgwFoAUrZAUzWRWZcDhdzVyttqYfTlVJJYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZhY2NiNC00MGE5LTQxNjgtYWEzZC01OWQx
OTBlYjVhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQEXfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGnF2oLOm5XJQ0ih1q21r4lnA489zpUZcZqLSNI3mkGk+n9CyPa8Wzg2
XRHE9IV4nteZKWGlrW+Yi1xkWMC+svqhzPZgXYL9v1etxWpDzurGHC9+iVdpfJ4Z
nwD2ZE1Def8y6Bt0eLjpYrz8uWmYWctaLnfsryK4ieAIMj1vDEzXkQy3ptzOnvb2
Z07lNn9Fqw341DvRejupvLMSjBUb4hAIvz0u+6quEAzvjoiKUaJ1ugfOcIpvth5d
AUpHS6yrmQbEsosLAWpj5WOqAjj8UHrsIE7ZXgSMIdMJntV8wSiYjwmKb7lUd6dG
nZwbluRGc8Koq20Og6qN9mu9vJL4ezw=
-----END CERTIFICATE-----
Generated at Sun May 3 15:32:38 2026 by rpki-client