Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/8e5ed9de-8260-3f23-8a5f-845c119039ad.roa
File:                     8e5ed9de-8260-3f23-8a5f-845c119039ad.roa (raw, json)
Hash identifier:          Uvcq0ghJzz1BBGrkupP6LphW9FrKEuaVW7ttyqi5/pw=
Subject key identifier:   32:C6:FC:41:D9:7E:B9:04:3D:16:8D:B0:B8:25:4B:64:81:80:29:37
Certificate issuer:       /CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
Certificate serial:       010D0C9F4328584E885A490B613B1F09332485A0
Authority key identifier: F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/8e5ed9de-8260-3f23-8a5f-845c119039ad.roa
Signing time:             Fri 17 Jul 2026 21:00:12 +0000
ROA not before:           Fri 17 Jul 2026 21:00:12 +0000
ROA not after:            Thu 15 Oct 2026 21:00:12 +0000
asID:                     3695
IP address blocks:        70.36.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:5a:49:0b:61:3b:1f:09:33:24:85:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
        Validity
            Not Before: Jul 17 21:00:12 2026 GMT
            Not After : Oct 15 21:00:12 2026 GMT
        Subject: CN=bcafb590-1a88-4a83-a7d6-61172db0990b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:33:37:03:4d:5d:1f:73:8b:35:b3:64:ed:c2:
                    df:e2:d6:12:00:e3:5a:c9:5a:bd:f8:a3:70:e4:82:
                    bc:a4:1b:d3:5f:60:41:c3:1e:c0:de:61:9d:74:9b:
                    8c:07:69:c0:bb:39:6b:3e:16:19:c8:0c:d9:05:d1:
                    89:76:08:09:06:36:0b:65:1c:0c:6b:2b:e1:f0:5f:
                    14:49:77:9c:e8:0c:7a:75:86:32:96:77:34:73:0c:
                    e5:6d:92:f1:f4:1e:a3:7f:5d:88:d7:70:5f:99:be:
                    93:1b:59:2f:18:d5:63:55:1c:c1:20:a7:38:df:6a:
                    2e:59:56:c2:99:70:ab:14:0e:7b:e5:9e:05:16:a0:
                    97:a0:0b:86:43:57:a9:ac:09:1e:d3:ba:ff:bf:dd:
                    ae:56:d6:52:bf:04:89:55:a2:73:57:e1:8b:77:3b:
                    97:41:33:ba:fe:25:ec:7e:c8:03:25:65:85:3f:90:
                    ff:81:ef:1c:e4:96:b0:43:60:c9:53:90:c0:b6:c5:
                    6c:82:29:f8:05:a4:7b:8c:d0:a5:07:59:93:dc:47:
                    00:3b:ec:80:db:e3:01:d7:90:fa:80:aa:f1:01:2c:
                    f8:4e:86:78:6d:a1:25:a7:76:80:e4:24:f1:6d:11:
                    e6:2b:ed:0a:a0:2e:4a:8b:0b:f7:d8:41:3e:90:b9:
                    e6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:C6:FC:41:D9:7E:B9:04:3D:16:8D:B0:B8:25:4B:64:81:80:29:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/8e5ed9de-8260-3f23-8a5f-845c119039ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl

            X509v3 Authority Key Identifier:
                keyid:F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.36.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:a4:b4:21:9a:27:de:71:e8:6d:05:e6:11:cd:3f:fd:6a:5a:
         f2:1a:2e:23:24:59:e2:14:84:9c:58:a3:eb:c2:50:ee:a1:73:
         dd:88:32:db:24:78:29:3a:fb:a3:47:95:8e:72:7b:0b:f3:f3:
         1f:3a:cc:d8:14:67:31:98:81:e8:06:6c:4e:ec:ec:44:0f:54:
         71:dc:7a:92:04:82:03:64:b4:5d:bb:7b:01:29:40:fb:a6:32:
         b0:16:26:0e:ef:54:57:0d:c7:58:79:5a:8f:67:0d:fe:d2:25:
         87:ce:6b:ae:93:a9:86:26:b7:cf:11:eb:c3:7d:80:15:c2:e8:
         10:4f:a4:a4:84:b1:e3:a8:1f:01:d5:38:df:84:14:9d:77:a6:
         5e:97:88:73:f8:ee:a7:eb:f9:28:d8:08:fd:e5:ed:1c:00:09:
         49:5e:38:ff:dd:78:37:64:7a:49:62:10:60:e3:0c:8c:d2:e1:
         7c:5a:84:84:84:6d:cc:71:02:c9:4c:44:d0:88:04:f0:e0:d5:
         7d:e0:0d:34:3a:8f:92:11:7e:17:e9:39:07:97:0f:35:90:00:
         a1:13:ed:f4:53:8c:16:81:bf:97:4c:88:47:81:60:48:68:dd:
         51:9c:18:a1:c7:9a:4c:79:45:a7:89:e3:28:fa:2d:41:51:f7:
         7b:a9:7b:ca
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6IWkkLYTsfCTMkhaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjljZDhiYzQtNWUzYy00Y2M4LTk0MWUtMDg0MDQzZWZi
NTIwMB4XDTI2MDcxNzIxMDAxMloXDTI2MTAxNTIxMDAxMlowLzEtMCsGA1UEAxMk
YmNhZmI1OTAtMWE4OC00YTgzLWE3ZDYtNjExNzJkYjA5OTBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDM3A01dH3OLNbNk7cLf4tYSAONayVq9+KNw
5IK8pBvTX2BBwx7A3mGddJuMB2nAuzlrPhYZyAzZBdGJdggJBjYLZRwMayvh8F8U
SXec6Ax6dYYylnc0cwzlbZLx9B6jf12I13Bfmb6TG1kvGNVjVRzBIKc432ouWVbC
mXCrFA575Z4FFqCXoAuGQ1eprAke07r/v92uVtZSvwSJVaJzV+GLdzuXQTO6/iXs
fsgDJWWFP5D/ge8c5JawQ2DJU5DAtsVsgin4BaR7jNClB1mT3EcAO+yA2+MB15D6
gKrxASz4ToZ4baElp3aA5CTxbRHmK+0KoC5Kiwv32EE+kLnmzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDLG/EHZfrkEPRaNsLglS2SBgCk3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82OWNk
OGJjNC01ZTNjLTRjYzgtOTQxZS0wODQwNDNlZmI1MjAvOGU1ZWQ5ZGUtODI2MC0z
ZjIzLThhNWYtODQ1YzExOTAzOWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjljZDhiYzQtNWUzYy00Y2M4LTk0
MWUtMDg0MDQzZWZiNTIwLzY5Y2Q4YmM0LTVlM2MtNGNjOC05NDFlLTA4NDA0M2Vm
YjUyMC5jcmwwHwYDVR0jBBgwFoAU8u5yVm4HrBcrJBWRIoc0mDBvYIkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi82OWNkOGJjNC01ZTNjLTRjYzgtOTQxZS0wODQw
NDNlZmI1MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiQDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJCktCGaJ95x6G0F5hHNP/1qWvIaLiMkWeIUhJxYo+vCUO6hc92IMtsk
eCk6+6NHlY5yewvz8x86zNgUZzGYgegGbE7s7EQPVHHcepIEggNktF27ewEpQPum
MrAWJg7vVFcNx1h5Wo9nDf7SJYfOa66TqYYmt88R68N9gBXC6BBPpKSEseOoHwHV
ON+EFJ13pl6XiHP47qfr+SjYCP3l7RwACUleOP/deDdkekliEGDjDIzS4XxahISE
bcxxAslMRNCIBPDg1X3gDTQ6j5IRfhfpOQeXDzWQAKET7fRTjBaBv5dMiEeBYEho
3VGcGKHHmkx5RaeJ4yj6LUFR93upe8o=
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:08:03 2026 by rpki-client