Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ab217356-76d3-3fdb-9412-842c8a458f80.roa
File:                     ab217356-76d3-3fdb-9412-842c8a458f80.roa (raw, json)
Hash identifier:          gkWLeemFtbRgXz2OBabDW5SSEoV+oE/AEyXI/gE61mo=
Subject key identifier:   E3:D9:11:2A:AE:E2:D8:41:31:58:F9:B9:1D:7D:9D:10:27:E9:59:A3
Certificate issuer:       /CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Certificate serial:       010D0C9F4328584E31CF0CF8B5463AD8146191A0
Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ab217356-76d3-3fdb-9412-842c8a458f80.roa
Signing time:             Tue 16 Jun 2026 21:00:12 +0000
ROA not before:           Tue 16 Jun 2026 21:00:12 +0000
ROA not after:            Mon 14 Sep 2026 21:00:12 +0000
asID:                     214271
IP address blocks:        69.176.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:31:cf:0c:f8:b5:46:3a:d8:14:61:91:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8
        Validity
            Not Before: Jun 16 21:00:12 2026 GMT
            Not After : Sep 14 21:00:12 2026 GMT
        Subject: CN=4bcb40a1-db18-4e3e-bb8d-2867274b4919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:49:ad:ce:1a:97:71:40:72:94:df:87:cc:c7:
                    38:96:9e:c2:9d:79:79:1b:b2:58:c7:de:e1:93:46:
                    f9:7c:15:1a:bb:b6:01:67:05:78:92:03:e5:f7:e3:
                    43:d7:6e:bb:ed:54:84:ba:b1:4a:e8:c0:fb:04:88:
                    ce:dc:b7:74:69:23:a4:4b:e2:24:52:7a:56:d1:01:
                    d7:ce:01:cb:30:b1:dc:f4:bf:2e:c4:83:d5:5a:98:
                    60:09:f1:29:7b:ce:17:cf:b4:2d:80:0c:1a:74:22:
                    f1:82:9b:53:43:a8:96:2f:37:34:99:11:4b:dc:59:
                    7d:60:f0:06:1a:4b:0a:7c:2a:e3:07:b8:8b:de:8a:
                    9a:78:5c:6d:f2:ef:a5:00:72:fb:a7:f8:1f:34:f2:
                    8f:b2:a8:2c:1b:ed:24:35:95:b2:c0:4a:c3:d9:ae:
                    1a:b4:98:60:d1:d4:15:e8:6c:1f:85:f6:4b:91:b9:
                    39:89:53:52:75:27:48:b6:f5:f8:59:ee:82:b7:2d:
                    bf:ef:97:01:79:39:83:7e:45:d2:a0:80:ff:4b:3d:
                    76:00:c9:9f:70:fb:2a:b0:1e:73:64:c9:90:2d:90:
                    03:ed:68:61:f9:b5:3b:0f:6d:32:e6:1f:15:a0:6e:
                    52:4d:da:47:88:90:5e:ec:2d:de:f9:b6:d6:90:94:
                    62:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:D9:11:2A:AE:E2:D8:41:31:58:F9:B9:1D:7D:9D:10:27:E9:59:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ab217356-76d3-3fdb-9412-842c8a458f80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl

            X509v3 Authority Key Identifier:
                keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.176.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:4a:e1:1f:7a:91:f0:9d:03:f5:8c:6b:23:31:ca:8c:50:53:
         65:75:69:9e:1f:ae:fb:73:ac:47:83:35:20:b5:38:0b:e7:e3:
         e1:75:6c:8a:3b:63:8a:3c:5c:37:2d:9b:56:e6:0e:fe:76:eb:
         17:9f:84:dd:3b:2b:a2:78:58:0c:3c:a5:48:44:bd:29:31:6e:
         d6:a2:b2:73:d3:aa:8b:67:59:f2:62:80:50:48:d1:af:4c:70:
         3e:46:00:be:7c:c7:bb:d9:f7:bb:50:59:7f:97:8a:3e:0c:8e:
         9b:91:1e:05:ad:b0:a0:06:7d:b9:77:87:4f:f7:3e:b0:a5:14:
         eb:d9:ed:a5:83:31:90:de:68:4e:0a:d3:0d:c6:37:dc:94:16:
         ec:9c:d3:e9:62:8f:da:ce:5c:2f:cc:69:0a:7a:ab:60:39:a4:
         5b:26:55:7a:f8:7b:55:b1:02:e5:28:0d:de:06:79:50:89:a1:
         64:3f:6c:00:65:88:0d:4f:3b:15:ea:70:73:42:6c:7d:d8:23:
         25:55:54:ec:3c:b7:c7:f9:50:5c:14:a0:5d:d6:5a:a7:03:9c:
         bf:74:6a:11:1f:1c:0a:1d:80:a5:86:ed:8d:d1:6c:a7:a7:d2:
         11:60:cb:8b:c3:cf:ec:6e:4b:80:d3:51:0f:0d:8a:5a:c4:9b:
         9e:16:7f:72
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4xzwz4tUY62BRhkaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1
MGU4MB4XDTI2MDYxNjIxMDAxMloXDTI2MDkxNDIxMDAxMlowLzEtMCsGA1UEAxMk
NGJjYjQwYTEtZGIxOC00ZTNlLWJiOGQtMjg2NzI3NGI0OTE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUmtzhqXcUBylN+HzMc4lp7CnXl5G7JYx97h
k0b5fBUau7YBZwV4kgPl9+ND12677VSEurFK6MD7BIjO3Ld0aSOkS+IkUnpW0QHX
zgHLMLHc9L8uxIPVWphgCfEpe84Xz7QtgAwadCLxgptTQ6iWLzc0mRFL3Fl9YPAG
GksKfCrjB7iL3oqaeFxt8u+lAHL7p/gfNPKPsqgsG+0kNZWywErD2a4atJhg0dQV
6GwfhfZLkbk5iVNSdSdItvX4We6Cty2/75cBeTmDfkXSoID/Sz12AMmfcPsqsB5z
ZMmQLZAD7Whh+bU7D20y5h8VoG5STdpHiJBe7C3e+bbWkJRiowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOPZESqu4thBMVj5uR19nRAn6VmjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0
NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvYWIyMTczNTYtNzZkMy0z
ZmRiLTk0MTItODQyYzhhNDU4ZjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk
MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz
NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3
NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARbBXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADpK4R96kfCdA/WMayMxyoxQU2V1aZ4frvtzrEeDNSC1OAvn4+F1bIo7
Y4o8XDctm1bmDv526xefhN07K6J4WAw8pUhEvSkxbtaisnPTqotnWfJigFBI0a9M
cD5GAL58x7vZ97tQWX+Xij4MjpuRHgWtsKAGfbl3h0/3PrClFOvZ7aWDMZDeaE4K
0w3GN9yUFuyc0+lij9rOXC/MaQp6q2A5pFsmVXr4e1WxAuUoDd4GeVCJoWQ/bABl
iA1POxXqcHNCbH3YIyVVVOw8t8f5UFwUoF3WWqcDnL90ahEfHAodgKWG7Y3RbKen
0hFgy4vDz+xuS4DTUQ8NilrEm54Wf3I=
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:08:24 2026 by rpki-client