Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782/42027eea-f518-38da-a8a8-97e9aca956d3.roa
File:                     42027eea-f518-38da-a8a8-97e9aca956d3.roa (raw, json)
Hash identifier:          8jjvwhP8/attVYW1YAF9qMFGhBWsNCyo2HvFPV0NW68=
Subject key identifier:   DE:D5:37:B2:AC:0A:09:C7:89:64:90:54:BF:4A:E2:3F:F9:AF:C2:B9
Certificate issuer:       /CN=cb3c1858-774e-412f-8f35-dbceb0979782
Certificate serial:       010D0C9F4328584D40CA5CF20B4DBBEFF499DAC0
Authority key identifier: B3:17:21:79:FB:C7:21:75:01:31:E9:A1:28:22:A6:C2:CA:8D:B6:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782/42027eea-f518-38da-a8a8-97e9aca956d3.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     23118
IP address blocks:        69.36.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782/cb3c1858-774e-412f-8f35-dbceb0979782.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782/cb3c1858-774e-412f-8f35-dbceb0979782.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:5c:f2:0b:4d:bb:ef:f4:99:da:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb3c1858-774e-412f-8f35-dbceb0979782
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=86a2a370-4db8-4a0e-baea-c124ae8ac49c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b3:6a:c7:3d:0f:9b:a5:21:e6:eb:c1:d1:75:
                    c7:4b:63:53:3f:09:2d:0e:bf:dc:9d:a0:3f:cc:de:
                    d9:2c:1f:d3:23:0a:9b:e3:89:4d:f8:74:e7:b6:0e:
                    e7:3b:6a:10:1d:95:21:36:17:3c:ea:6d:bb:be:5a:
                    d8:61:6c:0d:e5:c8:e1:6a:41:c9:1a:e1:25:67:88:
                    69:be:04:21:20:9e:a0:00:cb:89:6e:24:2b:60:69:
                    d8:4f:e2:50:22:15:d1:f5:9a:85:56:a9:af:7f:09:
                    8c:28:f0:e4:56:f9:4f:bc:62:a5:6a:b7:90:c9:13:
                    00:3c:5f:6c:65:1d:78:64:fe:62:20:50:e2:c3:25:
                    55:43:c4:05:78:92:b3:fd:2a:ad:fe:a9:8a:dc:80:
                    00:de:c9:e0:93:e3:fd:8f:d5:d9:4a:39:8e:4d:27:
                    fe:4f:4a:e4:25:9f:6e:4c:0e:3d:f9:9a:ee:9a:d5:
                    dd:07:2c:f6:c4:b3:09:9b:90:37:a3:31:16:33:84:
                    71:49:d8:b0:92:01:37:47:10:fb:a2:dc:63:33:34:
                    d1:7c:4e:7c:37:f4:5d:f4:86:4d:67:8d:ff:e1:ac:
                    51:24:b2:51:bf:8d:72:40:ca:82:ad:1a:d6:26:cd:
                    4c:08:93:ab:25:23:1c:2e:0e:8c:31:c3:97:77:85:
                    8b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:D5:37:B2:AC:0A:09:C7:89:64:90:54:BF:4A:E2:3F:F9:AF:C2:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782/42027eea-f518-38da-a8a8-97e9aca956d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782/cb3c1858-774e-412f-8f35-dbceb0979782.crl

            X509v3 Authority Key Identifier:
                keyid:B3:17:21:79:FB:C7:21:75:01:31:E9:A1:28:22:A6:C2:CA:8D:B6:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.36.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:48:ad:9d:32:af:d0:64:f8:f7:22:cb:4e:d6:2a:6d:21:4e:
         d9:59:92:fc:b8:aa:bd:19:26:50:57:1a:43:59:54:43:87:f1:
         49:04:53:db:6d:e7:9b:7a:62:f9:61:bb:db:49:6b:a7:b2:c5:
         e0:22:e6:7f:83:7b:41:94:72:44:d2:7c:7a:30:a4:34:5c:9f:
         51:cc:ac:07:1b:a4:69:a8:3c:ff:9a:aa:b4:33:8e:8a:0b:27:
         a4:23:21:34:2c:c7:3d:d3:92:22:64:e3:aa:0e:cb:2f:c4:c5:
         a2:d3:2e:e9:48:51:2d:b5:8e:db:82:40:d0:b6:12:f1:c1:ae:
         d7:44:8d:41:55:53:b0:9b:bd:72:0c:47:48:89:0c:8c:34:12:
         99:92:14:e5:b9:24:00:49:31:9f:13:cc:16:88:26:4b:00:5c:
         c8:70:95:83:04:ae:e5:fd:77:74:d7:2b:e0:d2:1c:67:f0:c3:
         d7:c4:13:d4:b3:6d:22:43:d4:06:c4:35:ca:32:39:9a:b7:e0:
         1a:9b:3a:33:ae:b8:16:e0:2c:a6:27:0f:bc:7c:5f:53:8c:19:
         4a:f6:b0:02:e2:e8:f4:14:c2:a9:81:a7:e2:6f:7b:07:52:d8:
         6e:a3:46:bd:9d:b4:14:a1:66:f9:2a:e7:bf:40:7e:f7:cd:55:
         d3:f2:20:84
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1AylzyC0277/SZ2sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2IzYzE4NTgtNzc0ZS00MTJmLThmMzUtZGJjZWIwOTc5
NzgyMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk
ODZhMmEzNzAtNGRiOC00YTBlLWJhZWEtYzEyNGFlOGFjNDljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7Nqxz0Pm6Uh5uvB0XXHS2NTPwktDr/cnaA/
zN7ZLB/TIwqb44lN+HTntg7nO2oQHZUhNhc86m27vlrYYWwN5cjhakHJGuElZ4hp
vgQhIJ6gAMuJbiQrYGnYT+JQIhXR9ZqFVqmvfwmMKPDkVvlPvGKlareQyRMAPF9s
ZR14ZP5iIFDiwyVVQ8QFeJKz/Sqt/qmK3IAA3sngk+P9j9XZSjmOTSf+T0rkJZ9u
TA49+ZrumtXdByz2xLMJm5A3ozEWM4RxSdiwkgE3RxD7otxjMzTRfE58N/Rd9IZN
Z43/4axRJLJRv41yQMqCrRrWJs1MCJOrJSMcLg6MMcOXd4WLNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN7VN7KsCgnHiWSQVL9K4j/5r8K5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9jYjNj
MTg1OC03NzRlLTQxMmYtOGYzNS1kYmNlYjA5Nzk3ODIvNDIwMjdlZWEtZjUxOC0z
OGRhLWE4YTgtOTdlOWFjYTk1NmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvY2IzYzE4NTgtNzc0ZS00MTJmLThm
MzUtZGJjZWIwOTc5NzgyL2NiM2MxODU4LTc3NGUtNDEyZi04ZjM1LWRiY2ViMDk3
OTc4Mi5jcmwwHwYDVR0jBBgwFoAUsxchefvHIXUBMemhKCKmwsqNtjwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9jYjNjMTg1OC03NzRlLTQxMmYtOGYzNS1kYmNl
YjA5Nzk3ODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARSTRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAFIrZ0yr9Bk+Pciy07WKm0hTtlZkvy4qr0ZJlBXGkNZVEOH8UkEU9tt
55t6Yvlhu9tJa6eyxeAi5n+De0GUckTSfHowpDRcn1HMrAcbpGmoPP+aqrQzjooL
J6QjITQsxz3TkiJk46oOyy/ExaLTLulIUS21jtuCQNC2EvHBrtdEjUFVU7CbvXIM
R0iJDIw0EpmSFOW5JABJMZ8TzBaIJksAXMhwlYMEruX9d3TXK+DSHGfww9fEE9Sz
bSJD1AbENcoyOZq34BqbOjOuuBbgLKYnD7x8X1OMGUr2sALi6PQUwqmBp+JvewdS
2G6jRr2dtBShZvkq579AfvfNVdPyIIQ=
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:37:12 2026 by rpki-client