Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/9dbe0597-903d-34a9-8315-3dd91ef42978.roa
File:                     9dbe0597-903d-34a9-8315-3dd91ef42978.roa (raw, json)
Hash identifier:          QtQOJp6+xtqFYY2VetgODfOuDMH1cWwlI1JNuEIvNMo=
Subject key identifier:   9A:62:FE:C3:F7:AC:F5:7A:71:EC:82:C3:36:A9:BE:E0:0A:F9:A5:43
Certificate issuer:       /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
Certificate serial:       010D0C9F4328584D386A45A5AD03EC6EC9272CD0
Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/9dbe0597-903d-34a9-8315-3dd91ef42978.roa
Signing time:             Thu 19 Mar 2026 13:00:41 +0000
ROA not before:           Thu 19 Mar 2026 13:00:41 +0000
ROA not after:            Wed 17 Jun 2026 13:00:41 +0000
asID:                     22765
IP address blocks:        68.170.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:38:6a:45:a5:ad:03:ec:6e:c9:27:2c:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
        Validity
            Not Before: Mar 19 13:00:41 2026 GMT
            Not After : Jun 17 13:00:41 2026 GMT
        Subject: CN=77a0320a-6bc6-4b7c-ac8e-abafe11d23de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3b:3a:a4:4d:c1:67:18:7f:3e:5c:65:bd:0e:
                    10:29:75:61:17:0f:83:74:f0:43:f6:d3:e0:a5:9b:
                    54:9d:75:3f:f8:a4:53:aa:49:7f:42:cc:02:41:86:
                    15:32:ab:8f:c2:e1:1e:87:07:fd:e6:ec:20:15:45:
                    2a:03:94:54:ad:64:73:c9:2e:c5:6d:81:f0:9b:be:
                    34:ab:35:5e:60:27:ac:25:96:6f:9a:c3:3a:34:80:
                    48:f1:e4:d1:c6:4e:71:9f:7e:20:f8:b2:9e:dc:d7:
                    b8:d3:58:15:d2:15:e4:66:b3:35:69:ea:f0:2d:f0:
                    34:2d:e6:6a:7a:ab:04:65:33:e7:56:f8:65:0e:e6:
                    fe:1d:a0:19:64:00:e4:33:1d:da:b7:a2:76:d4:0b:
                    d7:3b:e6:5a:9f:83:d4:58:1c:b8:0d:9f:e7:a9:2d:
                    ad:56:19:94:c7:54:f7:e0:56:78:4c:7e:a4:6f:56:
                    87:49:b7:a9:74:74:c6:3d:72:05:d7:f7:e9:fb:b8:
                    7e:35:43:7c:12:8a:0c:ed:41:06:10:4a:62:b7:39:
                    88:05:cf:60:48:2d:9e:73:f2:b3:9f:b7:b2:97:90:
                    b0:01:2f:a3:f2:23:2e:17:e7:5c:e9:37:9f:31:75:
                    1c:73:9c:d8:e9:f4:90:58:97:53:09:8b:1a:17:e4:
                    a3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:62:FE:C3:F7:AC:F5:7A:71:EC:82:C3:36:A9:BE:E0:0A:F9:A5:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/9dbe0597-903d-34a9-8315-3dd91ef42978.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl

            X509v3 Authority Key Identifier:
                keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.170.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:18:0c:a1:10:94:62:c7:75:2e:94:39:72:a2:1e:32:20:fe:
         9f:08:57:d4:c4:f0:5d:40:5a:39:a7:be:7e:94:1d:13:e4:0b:
         c1:53:96:d0:c1:6a:5d:db:4a:1d:3a:6f:11:48:d4:aa:1a:0b:
         aa:5c:8e:8b:c0:01:ac:0a:4f:c4:1b:01:21:99:ea:76:d4:7d:
         3e:5c:2e:8e:89:50:83:c2:76:1c:7b:9d:e0:3b:2e:ce:d8:d2:
         c3:77:60:0c:74:a3:89:ff:ce:37:9f:77:c9:55:27:8a:71:dd:
         8b:bc:0f:dc:f6:6f:9a:a8:13:17:94:eb:fb:8d:3f:38:35:34:
         59:53:e7:a0:cc:33:7e:69:ff:3f:bf:e8:fa:d3:c4:2a:dc:c8:
         eb:f0:74:f3:d3:03:c4:b4:2c:24:17:7d:51:5d:95:d7:bc:d8:
         c7:f2:8e:36:d9:af:72:a1:54:d2:12:29:10:b8:29:98:e7:58:
         14:91:e5:88:48:84:d1:55:a6:60:3b:2e:02:f5:2b:0a:ca:bf:
         4e:f1:0b:ee:68:da:1b:60:da:4b:59:69:1e:09:80:88:c9:9e:
         26:32:b8:bb:75:7c:31:92:1e:40:b8:d6:48:a8:2a:64:27:28:
         83:f2:0c:8f:69:0e:36:13:71:07:55:df:cd:b3:c4:1d:54:f8:
         53:f6:7f:81
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04akWlrQPsbsknLNAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTZhMjMzNDYtNWEwZS00OTc2LTliMzMtM2I0ZDFkOTBj
ZmEzMB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk
NzdhMDMyMGEtNmJjNi00YjdjLWFjOGUtYWJhZmUxMWQyM2RlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjs6pE3BZxh/PlxlvQ4QKXVhFw+DdPBD9tPg
pZtUnXU/+KRTqkl/QswCQYYVMquPwuEehwf95uwgFUUqA5RUrWRzyS7FbYHwm740
qzVeYCesJZZvmsM6NIBI8eTRxk5xn34g+LKe3Ne401gV0hXkZrM1aerwLfA0LeZq
eqsEZTPnVvhlDub+HaAZZADkMx3at6J21AvXO+Zan4PUWBy4DZ/nqS2tVhmUx1T3
4FZ4TH6kb1aHSbepdHTGPXIF1/fp+7h+NUN8EooM7UEGEEpitzmIBc9gSC2ec/Kz
n7eyl5CwAS+j8iMuF+dc6TefMXUcc5zY6fSQWJdTCYsaF+Sj1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJpi/sP3rPV6ceyCwzapvuAK+aVDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81NmEy
MzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRkMWQ5MGNmYTMvOWRiZTA1OTctOTAzZC0z
NGE5LTgzMTUtM2RkOTFlZjQyOTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTZhMjMzNDYtNWEwZS00OTc2LTli
MzMtM2I0ZDFkOTBjZmEzLzU2YTIzMzQ2LTVhMGUtNDk3Ni05YjMzLTNiNGQxZDkw
Y2ZhMy5jcmwwHwYDVR0jBBgwFoAUvyAy5XvXgcfAsCmYszNV0WIz6JkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi81NmEyMzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRk
MWQ5MGNmYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKrJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFQYDKEQlGLHdS6UOXKiHjIg/p8IV9TE8F1AWjmnvn6UHRPkC8FTltDB
al3bSh06bxFI1KoaC6pcjovAAawKT8QbASGZ6nbUfT5cLo6JUIPCdhx7neA7Ls7Y
0sN3YAx0o4n/zjefd8lVJ4px3Yu8D9z2b5qoExeU6/uNPzg1NFlT56DMM35p/z+/
6PrTxCrcyOvwdPPTA8S0LCQXfVFdlde82MfyjjbZr3KhVNISKRC4KZjnWBSR5YhI
hNFVpmA7LgL1KwrKv07xC+5o2htg2ktZaR4JgIjJniYyuLt1fDGSHkC41kioKmQn
KIPyDI9pDjYTcQdV382zxB1U+FP2f4E=
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:04:02 2026 by rpki-client