Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/0fe26e97-d17f-3e1e-9220-70d22cabe622.roa
File:                     0fe26e97-d17f-3e1e-9220-70d22cabe622.roa (raw, json)
Hash identifier:          CKrKsWlQ0wPc8vGhuZjl2v2+m2KN003v6lhVGHtiel8=
Subject key identifier:   B4:D9:39:E2:34:4A:9D:38:52:BD:54:CA:CC:C9:83:4D:A2:7F:A4:63
Certificate issuer:       /CN=69686900-f201-4b2c-a1c7-afb725abe47f
Certificate serial:       010D0C9F4328584F4989D10193C912426A6DF5A0
Authority key identifier: 46:CD:B7:E7:87:A9:20:32:5B:E6:E3:AA:56:58:59:CC:00:57:84:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/0fe26e97-d17f-3e1e-9220-70d22cabe622.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     19717
IP address blocks:        209.63.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:d1:01:93:c9:12:42:6a:6d:f5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69686900-f201-4b2c-a1c7-afb725abe47f
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=bf84e61e-5ffa-41e5-8a4c-2e84a340810c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ba:f4:fd:4f:6a:ea:bc:8e:3e:d1:7f:d6:94:
                    9d:48:55:41:0a:b7:77:92:81:cb:c9:35:87:17:ac:
                    b1:fd:e6:df:e3:a4:5e:ff:e2:80:ef:c5:68:12:bd:
                    27:b8:bb:63:11:91:af:da:06:88:ae:c6:bd:ac:f4:
                    9b:af:f6:d8:8f:a5:39:4e:6c:72:43:62:01:9d:76:
                    84:c6:0c:ad:6f:7f:70:24:97:f4:2b:a6:0e:eb:93:
                    24:1a:0d:ea:56:cd:f5:7e:dd:b7:f7:99:7a:8c:88:
                    2c:d3:e8:ca:c9:18:c5:6b:f7:e0:ff:43:e0:7d:81:
                    2e:05:b6:c4:b2:56:e6:b1:12:b7:18:bd:d7:55:5f:
                    c0:70:72:9e:41:e0:b0:df:e7:6c:0c:6c:55:9c:3f:
                    62:5f:4c:4a:39:e0:20:e6:14:ff:6d:8a:80:7a:1d:
                    ff:aa:62:81:b3:63:bf:36:7e:35:da:07:b3:2c:06:
                    c4:d8:cb:44:06:59:46:f8:68:56:41:f8:4a:68:3e:
                    3f:18:71:a0:7e:b8:0a:17:a9:d6:0a:44:08:0b:27:
                    bd:ee:70:89:c8:83:cf:0f:d4:76:59:a0:ca:1f:cf:
                    df:2a:0e:ba:52:35:c9:3b:f6:5a:60:d2:4d:64:b9:
                    45:f8:bf:f4:fd:46:33:f4:ba:60:00:a0:c5:4b:b8:
                    03:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:D9:39:E2:34:4A:9D:38:52:BD:54:CA:CC:C9:83:4D:A2:7F:A4:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/0fe26e97-d17f-3e1e-9220-70d22cabe622.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.crl

            X509v3 Authority Key Identifier:
                keyid:46:CD:B7:E7:87:A9:20:32:5B:E6:E3:AA:56:58:59:CC:00:57:84:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.63.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:c0:56:2b:9a:6a:14:46:f5:f2:43:ff:49:6e:84:9f:bc:3b:
         87:71:5b:89:2d:c6:ab:33:ee:a2:a4:6b:f8:98:3c:be:e2:f8:
         2c:50:17:3c:11:df:9b:cd:ae:fa:18:5b:b0:89:6f:e4:c3:5f:
         77:74:33:de:07:4d:1a:b3:ae:63:8f:ce:a6:ac:07:ad:9f:e4:
         6c:87:cd:b6:2b:88:8f:6b:f0:fe:60:44:16:fb:d2:55:56:23:
         96:06:b2:a2:f6:32:0f:3d:9b:32:8f:b0:cd:ef:87:2d:71:d8:
         3a:e1:06:1b:e4:93:a6:ed:1d:49:10:8e:ec:bb:63:8d:bb:af:
         0b:58:69:c0:51:26:77:b7:ed:16:26:bb:8e:15:9f:09:6e:3a:
         0e:67:ee:8e:33:4b:2a:1d:16:ea:19:f9:d8:4f:0d:f6:10:16:
         87:f8:05:b3:47:7a:b8:32:45:c6:e2:d1:b4:e0:3b:66:10:77:
         68:99:a5:ff:35:ca:be:50:a6:c2:4a:f6:b6:40:c4:fb:97:26:
         09:8d:b3:e9:1c:bf:e1:5a:ed:2d:ca:e6:ab:39:54:67:1d:87:
         df:ab:25:d2:20:af:0d:6a:db:29:ec:03:89:01:ee:8d:67:16:
         7a:fa:e6:52:a8:9a:fc:fb:c5:86:d6:43:c3:d5:c7:cd:24:35:
         1b:ba:f4:27
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JidEBk8kSQmpt9aAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjk2ODY5MDAtZjIwMS00YjJjLWExYzctYWZiNzI1YWJl
NDdmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
YmY4NGU2MWUtNWZmYS00MWU1LThhNGMtMmU4NGEzNDA4MTBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbr0/U9q6ryOPtF/1pSdSFVBCrd3koHLyTWH
F6yx/ebf46Re/+KA78VoEr0nuLtjEZGv2gaIrsa9rPSbr/bYj6U5TmxyQ2IBnXaE
xgytb39wJJf0K6YO65MkGg3qVs31ft2395l6jIgs0+jKyRjFa/fg/0PgfYEuBbbE
slbmsRK3GL3XVV/AcHKeQeCw3+dsDGxVnD9iX0xKOeAg5hT/bYqAeh3/qmKBs2O/
Nn412gezLAbE2MtEBllG+GhWQfhKaD4/GHGgfrgKF6nWCkQICye97nCJyIPPD9R2
WaDKH8/fKg66UjXJO/ZaYNJNZLlF+L/0/UYz9LpgAKDFS7gD2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLTZOeI0Sp04Ur1UyszJg02if6RjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82OTY4
NjkwMC1mMjAxLTRiMmMtYTFjNy1hZmI3MjVhYmU0N2YvMGZlMjZlOTctZDE3Zi0z
ZTFlLTkyMjAtNzBkMjJjYWJlNjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNjk2ODY5MDAtZjIwMS00YjJjLWEx
YzctYWZiNzI1YWJlNDdmLzY5Njg2OTAwLWYyMDEtNGIyYy1hMWM3LWFmYjcyNWFi
ZTQ3Zi5jcmwwHwYDVR0jBBgwFoAURs2354epIDJb5uOqVlhZzABXhPIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS82OTY4NjkwMC1mMjAxLTRiMmMtYTFjNy1hZmI3
MjVhYmU0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0T8qMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADjAViuaahRG9fJD/0luhJ+8O4dxW4ktxqsz7qKka/iYPL7i+CxQFzwR
35vNrvoYW7CJb+TDX3d0M94HTRqzrmOPzqasB62f5GyHzbYriI9r8P5gRBb70lVW
I5YGsqL2Mg89mzKPsM3vhy1x2DrhBhvkk6btHUkQjuy7Y427rwtYacBRJne37RYm
u44VnwluOg5n7o4zSyodFuoZ+dhPDfYQFof4BbNHergyRcbi0bTgO2YQd2iZpf81
yr5QpsJK9rZAxPuXJgmNs+kcv+Fa7S3K5qs5VGcdh9+rJdIgrw1q2ynsA4kB7o1n
Fnr65lKomvz7xYbWQ8PVx80kNRu69Cc=
-----END CERTIFICATE-----
Generated at Sun Oct 11 21:41:34 2026 by rpki-client