Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/520345ea-0aef-3ece-b707-c56f1368c0b7.roa
File:                     520345ea-0aef-3ece-b707-c56f1368c0b7.roa (raw, json)
Hash identifier:          YaKAk1Hetm03FdsAgRsxAqQZ1TcnAdcv4WUWgEsf8bs=
Subject key identifier:   67:33:AA:0F:87:44:77:47:70:A2:22:4F:4C:F4:A4:3C:29:C6:81:F7
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F4328584E885A4DF598F2D3BF55FA7800
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/520345ea-0aef-3ece-b707-c56f1368c0b7.roa
Signing time:             Fri 17 Jul 2026 21:00:12 +0000
ROA not before:           Fri 17 Jul 2026 21:00:12 +0000
ROA not after:            Thu 15 Oct 2026 21:00:12 +0000
asID:                     46652
IP address blocks:        69.55.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:5a:4d:f5:98:f2:d3:bf:55:fa:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Jul 17 21:00:12 2026 GMT
            Not After : Oct 15 21:00:12 2026 GMT
        Subject: CN=1df558c3-a13d-40b8-95a8-9bc042a40b81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c5:0f:87:0a:93:34:4a:8c:3f:90:54:a8:a3:
                    9e:7a:ef:2e:9f:31:5c:a3:d0:40:dd:8a:42:06:99:
                    ab:ec:d1:d8:3d:fa:d4:1d:ef:d5:2f:71:dd:56:4c:
                    91:57:a6:db:84:28:10:4f:a3:d9:9b:88:60:21:7a:
                    f6:ce:08:4f:cc:d7:f0:45:64:7c:07:52:74:dd:01:
                    44:63:2e:b8:68:4f:57:c9:28:dc:9c:6c:4b:b6:12:
                    68:74:e2:49:3a:60:23:37:01:12:35:6b:07:59:6e:
                    a7:cc:93:3d:1e:b3:c6:b1:c8:9b:fc:a8:38:d5:d2:
                    d3:a1:ca:fe:be:b6:f1:0e:0f:fa:6c:ce:1a:3a:f2:
                    34:d7:13:2f:8f:84:4e:d2:78:3c:ec:c8:29:84:b8:
                    ac:f5:03:e8:6c:03:3d:38:38:d5:84:ec:b4:e4:d0:
                    47:1c:5c:b7:6c:4e:15:af:5c:f9:d2:5a:4e:84:ea:
                    b4:2b:83:66:21:bc:1b:5f:4d:a7:16:0a:1b:a4:3d:
                    00:cb:c4:55:41:3e:f0:7f:1a:1d:74:2b:82:cd:da:
                    66:ae:72:90:9a:ed:a2:6d:3c:b6:ed:3e:05:97:01:
                    33:df:ba:73:7f:48:3c:49:b0:19:e5:19:be:6c:80:
                    b1:db:1a:6d:38:71:d0:c8:da:25:60:2c:68:2b:3e:
                    2c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:33:AA:0F:87:44:77:47:70:A2:22:4F:4C:F4:A4:3C:29:C6:81:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/520345ea-0aef-3ece-b707-c56f1368c0b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.55.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:dd:5a:5b:7f:c2:51:ba:fb:35:30:09:c0:f2:1b:0f:82:52:
         1e:09:e8:4e:1a:07:19:0b:19:bc:10:f7:39:30:00:e2:40:5a:
         ac:b7:7f:5b:0d:d0:9b:88:b9:bf:76:c2:00:b4:0d:97:62:36:
         09:8f:4d:ff:5f:1f:e8:85:f7:34:f3:14:9d:99:ce:b2:85:c8:
         1a:68:24:a0:81:ba:8e:c8:e4:7c:3b:1c:4d:8e:5d:46:29:09:
         99:e9:32:00:ee:ee:cc:38:9a:df:03:2e:2a:0e:e8:fd:1f:2c:
         8b:43:9b:73:b0:c0:be:62:17:c8:31:79:9a:ff:27:6f:e4:df:
         00:bb:12:5d:3e:88:d0:99:55:95:c2:de:1b:4a:1e:42:26:7a:
         c2:c8:0a:a0:1e:6d:6d:4d:b8:a3:c7:8e:86:d3:6e:5e:41:1d:
         85:3b:8c:f1:24:61:67:9c:93:68:6a:0d:57:7b:10:74:d2:1c:
         ab:7a:84:5f:0e:c0:0c:0f:76:15:07:b1:4a:f5:f6:9a:f1:bb:
         41:01:87:a0:77:10:31:1e:45:71:bf:bd:61:d0:b9:10:56:a8:
         fa:86:a1:f9:a2:a9:02:91:e6:a2:08:a7:84:ae:b3:ce:69:52:
         db:af:6f:ef:98:03:10:43:17:03:dc:04:79:b4:a8:ae:61:18:
         a7:07:9a:d6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6IWk31mPLTv1X6eAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy
Njk4MB4XDTI2MDcxNzIxMDAxMloXDTI2MTAxNTIxMDAxMlowLzEtMCsGA1UEAxMk
MWRmNTU4YzMtYTEzZC00MGI4LTk1YTgtOWJjMDQyYTQwYjgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcUPhwqTNEqMP5BUqKOeeu8unzFco9BA3YpC
Bpmr7NHYPfrUHe/VL3HdVkyRV6bbhCgQT6PZm4hgIXr2zghPzNfwRWR8B1J03QFE
Yy64aE9XySjcnGxLthJodOJJOmAjNwESNWsHWW6nzJM9HrPGscib/Kg41dLTocr+
vrbxDg/6bM4aOvI01xMvj4RO0ng87MgphLis9QPobAM9ODjVhOy05NBHHFy3bE4V
r1z50lpOhOq0K4NmIbwbX02nFgobpD0Ay8RVQT7wfxoddCuCzdpmrnKQmu2ibTy2
7T4FlwEz37pzf0g8SbAZ5Rm+bICx2xptOHHQyNolYCxoKz4svQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGczqg+HRHdHcKIiT0z0pDwpxoH3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4
ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvNTIwMzQ1ZWEtMGFlZi0z
ZWNlLWI3MDctYzU2ZjEzNjhjMGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh
ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl
MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3
ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERTcwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAELdWlt/wlG6+zUwCcDyGw+CUh4J6E4aBxkLGbwQ9zkwAOJAWqy3f1sN
0JuIub92wgC0DZdiNgmPTf9fH+iF9zTzFJ2ZzrKFyBpoJKCBuo7I5Hw7HE2OXUYp
CZnpMgDu7sw4mt8DLioO6P0fLItDm3OwwL5iF8gxeZr/J2/k3wC7El0+iNCZVZXC
3htKHkImesLICqAebW1NuKPHjobTbl5BHYU7jPEkYWeck2hqDVd7EHTSHKt6hF8O
wAwPdhUHsUr19prxu0EBh6B3EDEeRXG/vWHQuRBWqPqGofmiqQKR5qIIp4Sus85p
Utuvb++YAxBDFwPcBHm0qK5hGKcHmtY=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:57:02 2026 by rpki-client