Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/70cdbe6d-223b-3bfe-ae20-e50ecbbcc7c3.roa
File:                     70cdbe6d-223b-3bfe-ae20-e50ecbbcc7c3.roa (raw, json)
Hash identifier:          MEk0ceVOHUWob+H5XkO+XqOEdb746SitlZruGRvFu3s=
Subject key identifier:   2D:FF:6E:F8:74:3F:6A:43:5E:28:77:22:35:98:86:0F:D3:23:8F:DF
Certificate issuer:       /CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca
Certificate serial:       010D0C9F4328584E7634E278B4521384C0E42C00
Authority key identifier: BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/70cdbe6d-223b-3bfe-ae20-e50ecbbcc7c3.roa
Signing time:             Sat 11 Jul 2026 09:00:12 +0000
ROA not before:           Sat 11 Jul 2026 09:00:12 +0000
ROA not after:            Fri 09 Oct 2026 09:00:12 +0000
asID:                     399575
IP address blocks:        216.205.102.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:76:34:e2:78:b4:52:13:84:c0:e4:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca
        Validity
            Not Before: Jul 11 09:00:12 2026 GMT
            Not After : Oct  9 09:00:12 2026 GMT
        Subject: CN=773eec0f-7575-470a-aed3-ff126a876482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:59:f1:11:34:ac:5a:a6:4f:67:f0:30:60:e1:
                    17:38:c4:22:e8:58:67:87:96:c5:b9:92:a6:8c:a1:
                    51:71:ff:f1:7b:45:bf:48:62:02:39:8c:9e:b3:fc:
                    d2:21:2b:2e:46:f9:a6:b2:a0:2d:95:8c:2c:d2:86:
                    07:41:3a:e7:b4:53:2e:40:3d:66:48:4a:d0:e2:5a:
                    aa:6d:ec:85:46:c0:e7:0e:d7:e0:d5:f6:a9:0b:38:
                    33:aa:cb:e4:42:bc:23:fa:dc:10:05:e7:7a:72:e6:
                    b1:f7:91:ad:86:7f:b1:33:7b:8c:1c:f5:a1:2a:a9:
                    a4:2f:be:26:fb:89:6d:ad:92:d7:fd:93:67:44:6a:
                    b3:c0:5d:76:4e:7f:69:e8:07:bd:4c:6d:99:24:7e:
                    b9:98:cd:bb:1e:7d:76:ad:cb:76:b1:03:0c:48:a2:
                    32:d5:b3:20:fe:32:2e:e1:56:30:dd:23:96:2e:da:
                    2c:05:b8:df:10:59:eb:35:30:3f:72:88:cf:60:73:
                    90:f9:4c:03:4f:b5:ab:5b:2c:d6:37:97:83:a2:81:
                    a7:cd:9f:3b:78:88:53:0e:86:e1:36:db:f5:0b:bc:
                    8d:69:a9:0d:8b:e0:9b:cb:81:9c:f1:50:91:6d:51:
                    cb:6e:34:08:94:66:bd:aa:7d:80:e8:ac:03:d3:1d:
                    38:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:FF:6E:F8:74:3F:6A:43:5E:28:77:22:35:98:86:0F:D3:23:8F:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/70cdbe6d-223b-3bfe-ae20-e50ecbbcc7c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl

            X509v3 Authority Key Identifier:
                keyid:BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.205.102.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:ff:b8:58:60:2e:a7:1c:d0:d1:42:76:62:8f:08:71:d4:38:
         71:b6:2b:f5:2b:6c:dc:56:10:12:ae:ca:44:89:da:5c:7d:2b:
         2a:6b:cd:71:79:77:38:0d:b4:d1:01:47:cd:92:e6:78:60:73:
         47:5b:ad:cb:18:7f:91:a2:85:f2:af:3a:c4:45:f1:11:c2:2f:
         d6:bb:2e:a5:10:fc:97:4d:4c:31:13:7d:25:61:11:b8:2e:8a:
         4a:ed:e0:57:97:d4:9c:c6:cc:fb:c6:89:0c:71:4a:11:47:35:
         e1:4f:82:51:ac:e0:f5:74:8b:7b:a0:13:d7:da:01:34:0c:96:
         bd:ec:15:67:44:38:d2:7f:df:e7:82:99:57:3d:e2:d5:c1:fe:
         6e:af:3d:ff:a1:34:7c:cc:1f:40:71:41:b6:61:7d:18:51:17:
         18:1d:9d:60:ff:2f:c3:4c:ee:bc:54:ba:3e:07:20:b8:69:e3:
         fc:3e:a3:1a:6f:03:cf:71:79:78:63:7e:3d:e3:0e:ae:11:49:
         bd:97:0f:86:10:48:86:c4:72:2d:40:94:e5:c1:f2:f9:d0:f6:
         c5:9e:27:dc:30:5a:f1:ab:42:37:e6:85:c6:31:c5:98:00:27:
         9b:4e:4d:bd:0e:c0:2b:13:89:e5:fd:95:7d:b9:05:bd:09:21:
         81:e6:16:41
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE52NOJ4tFIThMDkLAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjVmODdmYzMtZmM3OS00ZGI5LTk1YmMtYjJkODRjNGNm
OGNhMB4XDTI2MDcxMTA5MDAxMloXDTI2MTAwOTA5MDAxMlowLzEtMCsGA1UEAxMk
NzczZWVjMGYtNzU3NS00NzBhLWFlZDMtZmYxMjZhODc2NDgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVnxETSsWqZPZ/AwYOEXOMQi6Fhnh5bFuZKm
jKFRcf/xe0W/SGICOYyes/zSISsuRvmmsqAtlYws0oYHQTrntFMuQD1mSErQ4lqq
beyFRsDnDtfg1fapCzgzqsvkQrwj+twQBed6cuax95Gthn+xM3uMHPWhKqmkL74m
+4ltrZLX/ZNnRGqzwF12Tn9p6Ae9TG2ZJH65mM27Hn12rct2sQMMSKIy1bMg/jIu
4VYw3SOWLtosBbjfEFnrNTA/cojPYHOQ+UwDT7WrWyzWN5eDooGnzZ87eIhTDobh
Ntv1C7yNaakNi+Cby4Gc8VCRbVHLbjQIlGa9qn2A6KwD0x04pwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC3/bvh0P2pDXih3IjWYhg/TI4/fMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82NWY4
N2ZjMy1mYzc5LTRkYjktOTViYy1iMmQ4NGM0Y2Y4Y2EvNzBjZGJlNmQtMjIzYi0z
YmZlLWFlMjAtZTUwZWNiYmNjN2MzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNjVmODdmYzMtZmM3OS00ZGI5LTk1
YmMtYjJkODRjNGNmOGNhLzY1Zjg3ZmMzLWZjNzktNGRiOS05NWJjLWIyZDg0YzRj
ZjhjYS5jcmwwHwYDVR0jBBgwFoAUu9W7tLEyrQwY0eYBEwMMwU00uMIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS82NWY4N2ZjMy1mYzc5LTRkYjktOTViYy1iMmQ4
NGM0Y2Y4Y2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2M1mMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADf/uFhgLqcc0NFCdmKPCHHUOHG2K/UrbNxWEBKuykSJ2lx9KyprzXF5
dzgNtNEBR82S5nhgc0dbrcsYf5GihfKvOsRF8RHCL9a7LqUQ/JdNTDETfSVhEbgu
ikrt4FeX1JzGzPvGiQxxShFHNeFPglGs4PV0i3ugE9faATQMlr3sFWdEONJ/3+eC
mVc94tXB/m6vPf+hNHzMH0BxQbZhfRhRFxgdnWD/L8NM7rxUuj4HILhp4/w+oxpv
A89xeXhjfj3jDq4RSb2XD4YQSIbEci1AlOXB8vnQ9sWeJ9wwWvGrQjfmhcYxxZgA
J5tOTb0OwCsTieX9lX25Bb0JIYHmFkE=
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:37:43 2026 by rpki-client