Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/fdac3aa7-1b1a-3447-a7e6-e2e18d4feea1.roa
File:                     fdac3aa7-1b1a-3447-a7e6-e2e18d4feea1.roa (raw, json)
Hash identifier:          AyoKsw+jNwp5ogctryd8RZgsZNAjtbMtQhMAuNslaYc=
Subject key identifier:   7B:6C:D4:0A:41:B7:2D:E9:80:4A:C4:9E:8F:51:57:5F:F2:13:0F:70
Certificate issuer:       /CN=69686900-f201-4b2c-a1c7-afb725abe47f
Certificate serial:       010D0C9F4328584DBC0C2547294E54221B174F40
Authority key identifier: 46:CD:B7:E7:87:A9:20:32:5B:E6:E3:AA:56:58:59:CC:00:57:84:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/fdac3aa7-1b1a-3447-a7e6-e2e18d4feea1.roa
Signing time:             Tue 05 May 2026 16:38:01 +0000
ROA not before:           Tue 05 May 2026 16:38:01 +0000
ROA not after:            Mon 03 Aug 2026 16:38:01 +0000
asID:                     29951
IP address blocks:        67.136.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bc:0c:25:47:29:4e:54:22:1b:17:4f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69686900-f201-4b2c-a1c7-afb725abe47f
        Validity
            Not Before: May  5 16:38:01 2026 GMT
            Not After : Aug  3 16:38:01 2026 GMT
        Subject: CN=75896cac-e6bc-493c-a30f-c02f4313993e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:1c:de:c8:b8:dc:ae:cf:f9:03:5b:56:f0:55:
                    d3:68:84:86:19:12:e4:07:4b:9b:a2:70:96:25:e7:
                    e8:3d:61:6b:67:78:ef:51:09:9e:e1:47:56:f1:4c:
                    be:52:d0:ac:99:31:e4:20:65:43:25:bc:8b:43:df:
                    e6:17:ac:2b:2e:f3:81:5c:3b:b7:11:e1:d8:7f:06:
                    5f:25:f0:3c:63:14:08:da:19:26:bd:bf:f0:25:aa:
                    9c:74:74:8b:53:05:6a:72:f6:9a:2d:8b:14:36:ad:
                    b9:86:3e:79:22:80:71:5b:e0:74:47:8e:e6:ed:f2:
                    ac:bc:e2:af:b2:17:42:7d:82:d6:ec:af:d8:32:c8:
                    04:b8:f2:34:15:4f:d0:c8:0d:b6:5c:22:0c:c0:1a:
                    f5:44:a3:d6:bb:fa:9a:a5:3e:15:4a:f1:30:8a:ef:
                    c9:de:2c:e9:23:19:1f:08:6c:71:e5:5a:37:d2:fb:
                    ff:64:8b:a7:b1:cb:b5:d7:f1:86:d1:c2:27:b5:39:
                    20:cd:be:4f:19:c2:7f:dc:64:f6:d3:5f:9c:90:d1:
                    c7:b1:ff:2a:9f:81:c0:58:43:2a:d2:ce:61:8b:3c:
                    0c:ec:0a:ac:82:11:44:1d:98:d5:71:51:7a:f5:d8:
                    bc:fe:3c:73:7b:49:33:64:7c:2d:94:92:c0:06:60:
                    2a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:6C:D4:0A:41:B7:2D:E9:80:4A:C4:9E:8F:51:57:5F:F2:13:0F:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/fdac3aa7-1b1a-3447-a7e6-e2e18d4feea1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.crl

            X509v3 Authority Key Identifier:
                keyid:46:CD:B7:E7:87:A9:20:32:5B:E6:E3:AA:56:58:59:CC:00:57:84:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.136.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:0c:b3:40:36:cd:87:83:b9:a9:71:0c:04:ca:df:0b:1a:76:
         15:b3:62:f1:11:86:81:b7:af:a8:e0:69:4b:f5:b0:0e:6c:fa:
         88:60:23:3a:0b:5a:98:5a:cc:2a:bd:09:27:da:8c:91:76:20:
         fc:d5:5b:0d:d0:da:a7:71:4b:16:ec:37:fc:a2:6a:7e:cf:2e:
         10:48:04:d2:ee:e8:90:ca:91:8b:e7:7e:f4:67:d9:94:9e:94:
         84:c5:bc:b7:79:03:47:ea:06:a9:35:36:d2:d3:b1:78:04:b7:
         e7:3f:71:8e:07:18:6f:03:43:b6:aa:d7:2d:df:a1:61:88:6b:
         17:9a:47:b1:45:ad:7a:0e:49:50:76:9a:81:99:6f:2e:4d:2d:
         65:ba:27:fa:e6:de:1e:0f:53:00:c4:fc:c4:85:12:5e:78:10:
         8c:72:7c:2a:d2:75:54:af:76:ff:e1:79:87:11:31:22:a7:0c:
         3e:20:ec:e8:84:1e:b5:d6:f1:d7:e9:3e:fe:e2:5a:02:9a:cf:
         62:ff:0c:4e:86:83:5f:8b:25:a8:e3:22:97:89:fe:6c:3c:ba:
         d7:12:c2:fd:d1:4a:26:e1:2e:10:00:fd:aa:5e:2d:ca:d5:46:
         19:b5:8f:d2:af:d8:d6:df:45:19:aa:92:bd:fb:1c:e0:7a:9a:
         a2:d4:34:ba
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE28DCVHKU5UIhsXT0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjk2ODY5MDAtZjIwMS00YjJjLWExYzctYWZiNzI1YWJl
NDdmMB4XDTI2MDUwNTE2MzgwMVoXDTI2MDgwMzE2MzgwMVowLzEtMCsGA1UEAxMk
NzU4OTZjYWMtZTZiYy00OTNjLWEzMGYtYzAyZjQzMTM5OTNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRzeyLjcrs/5A1tW8FXTaISGGRLkB0ubonCW
JefoPWFrZ3jvUQme4UdW8Uy+UtCsmTHkIGVDJbyLQ9/mF6wrLvOBXDu3EeHYfwZf
JfA8YxQI2hkmvb/wJaqcdHSLUwVqcvaaLYsUNq25hj55IoBxW+B0R47m7fKsvOKv
shdCfYLW7K/YMsgEuPI0FU/QyA22XCIMwBr1RKPWu/qapT4VSvEwiu/J3izpIxkf
CGxx5Vo30vv/ZIunscu11/GG0cIntTkgzb5PGcJ/3GT201+ckNHHsf8qn4HAWEMq
0s5hizwM7AqsghFEHZjVcVF69di8/jxze0kzZHwtlJLABmAqkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHts1ApBty3pgErEno9RV1/yEw9wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82OTY4
NjkwMC1mMjAxLTRiMmMtYTFjNy1hZmI3MjVhYmU0N2YvZmRhYzNhYTctMWIxYS0z
NDQ3LWE3ZTYtZTJlMThkNGZlZWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNjk2ODY5MDAtZjIwMS00YjJjLWEx
YzctYWZiNzI1YWJlNDdmLzY5Njg2OTAwLWYyMDEtNGIyYy1hMWM3LWFmYjcyNWFi
ZTQ3Zi5jcmwwHwYDVR0jBBgwFoAURs2354epIDJb5uOqVlhZzABXhPIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS82OTY4NjkwMC1mMjAxLTRiMmMtYTFjNy1hZmI3
MjVhYmU0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ4h9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIAMs0A2zYeDualxDATK3wsadhWzYvERhoG3r6jgaUv1sA5s+ohgIzoL
WphazCq9CSfajJF2IPzVWw3Q2qdxSxbsN/yian7PLhBIBNLu6JDKkYvnfvRn2ZSe
lITFvLd5A0fqBqk1NtLTsXgEt+c/cY4HGG8DQ7aq1y3foWGIaxeaR7FFrXoOSVB2
moGZby5NLWW6J/rm3h4PUwDE/MSFEl54EIxyfCrSdVSvdv/heYcRMSKnDD4g7OiE
HrXW8dfpPv7iWgKaz2L/DE6Gg1+LJajjIpeJ/mw8utcSwv3RSibhLhAA/apeLcrV
Rhm1j9Kv2NbfRRmqkr37HOB6mqLUNLo=
-----END CERTIFICATE-----
Generated at Wed May 13 19:12:15 2026 by rpki-client