Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/c568d9c2-52e8-309d-bbc2-2429d6c88969.roa
File:                     c568d9c2-52e8-309d-bbc2-2429d6c88969.roa (raw, json)
Hash identifier:          gWdcW6ePF9bWy00qWlwS+GOzubwHNU10DCsEc5zZFMA=
Subject key identifier:   FB:7B:FB:49:6A:BC:C2:D7:25:8A:DA:AD:4C:7B:B2:2C:5F:93:1C:DE
Certificate issuer:       /CN=ebb739b8-a0ed-4449-8c62-99ff6b94b1c3
Certificate serial:       010D0C9F4328584D44FA4159734C90354B184CC0
Authority key identifier: EE:FE:6D:FB:B0:55:03:BC:DA:B3:01:9A:91:11:03:C2:E7:54:DB:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/c568d9c2-52e8-309d-bbc2-2429d6c88969.roa
Signing time:             Tue 24 Mar 2026 01:00:31 +0000
ROA not before:           Tue 24 Mar 2026 01:00:31 +0000
ROA not after:            Mon 22 Jun 2026 01:00:31 +0000
asID:                     19528
IP address blocks:        74.209.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:fa:41:59:73:4c:90:35:4b:18:4c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebb739b8-a0ed-4449-8c62-99ff6b94b1c3
        Validity
            Not Before: Mar 24 01:00:31 2026 GMT
            Not After : Jun 22 01:00:31 2026 GMT
        Subject: CN=f2c56a37-f19e-41f0-9337-74592d79c10d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:23:c0:48:87:20:76:67:05:eb:72:f0:f0:3b:
                    f5:f9:93:b2:7f:f6:00:b4:39:fc:9e:49:60:41:97:
                    0e:20:87:3b:47:cc:30:be:d0:2c:8e:84:20:75:99:
                    9c:06:db:64:d5:b3:21:8b:a5:46:c5:a1:da:e2:0b:
                    21:54:34:11:40:f0:d0:54:6f:5f:6f:1b:d0:a9:9f:
                    43:51:29:43:82:1c:ee:81:88:4a:81:bc:4f:8a:b8:
                    55:d3:de:97:b9:8d:a5:8e:b1:0d:21:95:79:b0:ab:
                    0e:03:fe:3e:f1:f4:03:82:5d:9c:3b:da:e0:9f:72:
                    51:34:6f:e0:b9:15:f7:e2:14:c7:bb:62:b0:44:e9:
                    90:a9:75:23:6c:2b:30:4a:ec:cc:01:ea:8c:29:26:
                    fc:47:79:cb:6b:5a:53:86:85:e4:38:f4:2d:b3:3f:
                    73:fb:72:94:9c:6e:8f:72:2e:f6:f1:22:97:5d:77:
                    54:0f:42:d1:3e:85:4b:44:7f:7e:0e:8d:1f:2d:40:
                    77:09:68:0a:71:7d:43:31:68:90:a6:b3:a8:80:88:
                    30:0c:b7:b4:a7:b4:1e:a8:84:dd:e5:96:4b:99:d6:
                    ea:33:e7:77:18:bd:9d:79:32:84:42:a6:0d:0c:3d:
                    34:eb:88:b3:f7:fd:be:35:16:79:02:09:ae:e3:8d:
                    a4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:7B:FB:49:6A:BC:C2:D7:25:8A:DA:AD:4C:7B:B2:2C:5F:93:1C:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/c568d9c2-52e8-309d-bbc2-2429d6c88969.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.crl

            X509v3 Authority Key Identifier:
                keyid:EE:FE:6D:FB:B0:55:03:BC:DA:B3:01:9A:91:11:03:C2:E7:54:DB:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.209.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:c3:45:84:9c:81:13:0d:ea:6b:e3:44:fb:ab:5a:3e:a4:51:
         bc:dd:2b:64:af:68:40:c8:e0:08:5e:29:a1:34:85:2e:a8:69:
         de:ce:b2:af:de:e1:e8:9a:2c:45:f1:13:fc:4e:dc:b7:a2:78:
         91:9d:2d:e6:fd:21:4e:a7:08:39:e2:05:a7:3a:43:ff:b5:53:
         40:dc:5c:28:f4:80:5d:83:f0:18:42:c0:93:e6:30:22:6a:d1:
         45:87:43:4f:e5:17:02:1c:df:45:ab:f5:71:49:85:16:d0:19:
         ae:5f:d9:87:b1:5c:62:11:42:c0:e2:96:4c:ec:13:b6:be:3f:
         be:69:76:e7:94:ed:8a:fa:3d:e5:24:51:45:76:aa:c7:38:2b:
         18:45:79:8f:93:56:51:b1:2e:f4:ad:8e:6d:1d:e4:52:cc:00:
         6d:9e:b0:0b:2f:5e:73:49:d4:cb:ff:99:b8:07:b3:a5:20:5d:
         d8:b7:1f:b8:e8:45:72:f3:eb:47:6c:5a:07:94:1a:93:11:0b:
         c8:d8:04:8c:0d:35:68:bb:98:b9:1a:bd:87:6b:39:51:ad:92:
         6c:87:e1:54:18:e0:9b:f0:1c:2f:0a:92:b0:9a:2e:d9:b1:de:
         34:d1:df:91:48:67:8f:b6:7c:6d:cb:ce:7d:ae:dc:f5:3a:23:
         df:98:22:ca
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+kFZc0yQNUsYTMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWJiNzM5YjgtYTBlZC00NDQ5LThjNjItOTlmZjZiOTRi
MWMzMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk
ZjJjNTZhMzctZjE5ZS00MWYwLTkzMzctNzQ1OTJkNzljMTBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCPASIcgdmcF63Lw8Dv1+ZOyf/YAtDn8nklg
QZcOIIc7R8wwvtAsjoQgdZmcBttk1bMhi6VGxaHa4gshVDQRQPDQVG9fbxvQqZ9D
USlDghzugYhKgbxPirhV096XuY2ljrENIZV5sKsOA/4+8fQDgl2cO9rgn3JRNG/g
uRX34hTHu2KwROmQqXUjbCswSuzMAeqMKSb8R3nLa1pThoXkOPQtsz9z+3KUnG6P
ci728SKXXXdUD0LRPoVLRH9+Do0fLUB3CWgKcX1DMWiQprOogIgwDLe0p7QeqITd
5ZZLmdbqM+d3GL2deTKEQqYNDD0064iz9/2+NRZ5Agmu442kAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPt7+0lqvMLXJYrarUx7sixfkxzeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lYmI3
MzliOC1hMGVkLTQ0NDktOGM2Mi05OWZmNmI5NGIxYzMvYzU2OGQ5YzItNTJlOC0z
MDlkLWJiYzItMjQyOWQ2Yzg4OTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWJiNzM5YjgtYTBlZC00NDQ5LThj
NjItOTlmZjZiOTRiMWMzL2ViYjczOWI4LWEwZWQtNDQ0OS04YzYyLTk5ZmY2Yjk0
YjFjMy5jcmwwHwYDVR0jBBgwFoAU7v5t+7BVA7zaswGakREDwudU22MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9lYmI3MzliOC1hMGVkLTQ0NDktOGM2Mi05OWZm
NmI5NGIxYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAStGkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEPDRYScgRMN6mvjRPurWj6kUbzdK2SvaEDI4AheKaE0hS6oad7Osq/e
4eiaLEXxE/xO3LeieJGdLeb9IU6nCDniBac6Q/+1U0DcXCj0gF2D8BhCwJPmMCJq
0UWHQ0/lFwIc30Wr9XFJhRbQGa5f2YexXGIRQsDilkzsE7a+P75pdueU7Yr6PeUk
UUV2qsc4KxhFeY+TVlGxLvStjm0d5FLMAG2esAsvXnNJ1Mv/mbgHs6UgXdi3H7jo
RXLz60dsWgeUGpMRC8jYBIwNNWi7mLkavYdrOVGtkmyH4VQY4JvwHC8KkrCaLtmx
3jTR35FIZ4+2fG3Lzn2u3PU6I9+YIso=
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:50:00 2026 by rpki-client