Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d2ebf92-acd0-4b14-a67d-e7a909997e7e/be570c92-8b93-3295-9dff-321eca27ae67.roa
File:                     be570c92-8b93-3295-9dff-321eca27ae67.roa (raw, json)
Hash identifier:          AB6wyv7nnxqCm29e5ee/wOFw8heF8mZMiL+NfcYitxM=
Subject key identifier:   55:D4:21:20:F9:BF:7B:D2:4E:3D:BC:B7:96:06:F9:0D:79:A3:A3:CD
Certificate issuer:       /CN=0d2ebf92-acd0-4b14-a67d-e7a909997e7e
Certificate serial:       010D0C9F4328584E5E7A04950E6BD0180D82CCE0
Authority key identifier: 5D:83:33:DD:1D:16:CC:71:56:EE:F9:75:CC:8B:13:1E:6B:7C:E8:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d2ebf92-acd0-4b14-a67d-e7a909997e7e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d2ebf92-acd0-4b14-a67d-e7a909997e7e/be570c92-8b93-3295-9dff-321eca27ae67.roa
Signing time:             Thu 02 Jul 2026 21:00:12 +0000
ROA not before:           Thu 02 Jul 2026 21:00:12 +0000
ROA not after:            Wed 30 Sep 2026 21:00:12 +0000
asID:                     401967
IP address blocks:        69.9.170.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d2ebf92-acd0-4b14-a67d-e7a909997e7e/0d2ebf92-acd0-4b14-a67d-e7a909997e7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d2ebf92-acd0-4b14-a67d-e7a909997e7e/0d2ebf92-acd0-4b14-a67d-e7a909997e7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d2ebf92-acd0-4b14-a67d-e7a909997e7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5e:7a:04:95:0e:6b:d0:18:0d:82:cc:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d2ebf92-acd0-4b14-a67d-e7a909997e7e
        Validity
            Not Before: Jul  2 21:00:12 2026 GMT
            Not After : Sep 30 21:00:12 2026 GMT
        Subject: CN=d83823c7-db7a-49c3-901a-8a04c7d542df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c2:2f:ad:48:7a:32:03:5f:a1:d7:25:3c:5c:
                    0e:7e:8e:8f:6c:df:7a:d7:1a:c4:3a:ac:24:9a:5c:
                    b9:06:c0:75:6c:9c:4c:61:d6:cf:e7:d1:cd:4e:d5:
                    f7:41:ac:3a:bf:ea:54:33:3f:2b:9f:4c:f0:f5:90:
                    de:7c:e6:4b:2e:eb:a1:5c:57:0e:e7:d4:5d:99:41:
                    b1:f1:14:0f:42:f0:4e:10:78:b5:53:3c:af:ea:65:
                    c6:b1:ba:49:ba:7e:a5:ed:42:89:8a:ed:eb:33:82:
                    fa:5a:37:57:12:9f:79:fc:40:03:21:e4:66:ae:68:
                    a4:fa:e1:c2:59:e7:59:ee:c9:3f:91:f0:1b:cc:75:
                    3f:b4:6f:2a:5b:c8:36:46:59:a8:b3:e2:d4:65:03:
                    1d:bc:42:3f:65:22:a8:81:da:fd:9b:bb:34:3a:cf:
                    e5:d6:ee:8c:c9:4b:9e:e4:47:6b:1a:18:0d:b4:9d:
                    97:04:25:38:85:b9:a3:5a:8e:89:a4:85:6f:d3:e9:
                    b3:ce:2d:ee:0a:ed:71:88:94:b9:69:50:40:bf:2b:
                    65:02:4b:dd:c7:50:30:0b:ef:3d:57:ae:92:73:07:
                    69:eb:7d:62:8a:52:9a:01:3e:80:aa:0d:46:04:88:
                    2d:ee:1e:e8:76:f3:f2:dd:c9:e5:9b:b2:bc:50:6a:
                    11:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:D4:21:20:F9:BF:7B:D2:4E:3D:BC:B7:96:06:F9:0D:79:A3:A3:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d2ebf92-acd0-4b14-a67d-e7a909997e7e/be570c92-8b93-3295-9dff-321eca27ae67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d2ebf92-acd0-4b14-a67d-e7a909997e7e/0d2ebf92-acd0-4b14-a67d-e7a909997e7e.crl

            X509v3 Authority Key Identifier:
                keyid:5D:83:33:DD:1D:16:CC:71:56:EE:F9:75:CC:8B:13:1E:6B:7C:E8:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d2ebf92-acd0-4b14-a67d-e7a909997e7e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.9.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:01:22:25:72:9d:71:1f:25:72:ac:ac:f1:e2:9e:92:ea:87:
         18:96:b6:b2:9b:52:47:ca:e3:69:1a:9d:24:ee:53:61:33:b9:
         db:f5:de:99:ba:63:a3:c9:da:ea:6a:54:b9:31:84:ed:23:ca:
         d1:36:d9:2f:8f:32:c8:f3:f3:24:77:94:89:99:ff:bb:40:14:
         64:83:02:d1:24:17:52:e0:e3:a5:34:93:78:77:7c:4c:f1:77:
         a3:27:a7:e1:f9:1a:d3:d9:8d:b1:10:af:12:c1:db:a3:01:41:
         05:3e:f4:53:e6:68:da:eb:ef:b0:87:86:68:5f:7c:99:f9:20:
         12:51:69:02:be:ad:76:13:cb:f0:74:76:e9:3d:ba:18:75:91:
         2c:73:c1:00:a2:a8:9e:3c:42:78:6f:1f:c0:19:ce:68:c7:ff:
         84:1e:d4:8e:af:81:b6:b0:c0:70:5b:06:a6:8f:13:cc:2f:05:
         1a:79:cf:15:a2:4f:ad:6b:a8:7f:00:ab:e4:99:6a:68:c6:b2:
         92:21:7a:ba:98:af:1d:7f:2e:dd:8e:33:80:00:3c:1b:9b:60:
         2a:a7:12:85:82:3f:7f:0d:a4:32:89:7f:84:d9:38:e3:7c:3d:
         b4:bc:a9:c4:09:21:53:61:16:63:6d:a5:97:bd:9b:8a:56:d5:
         f3:ba:c2:dc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5eegSVDmvQGA2CzOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQyZWJmOTItYWNkMC00YjE0LWE2N2QtZTdhOTA5OTk3
ZTdlMB4XDTI2MDcwMjIxMDAxMloXDTI2MDkzMDIxMDAxMlowLzEtMCsGA1UEAxMk
ZDgzODIzYzctZGI3YS00OWMzLTkwMWEtOGEwNGM3ZDU0MmRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcIvrUh6MgNfodclPFwOfo6PbN961xrEOqwk
mly5BsB1bJxMYdbP59HNTtX3Qaw6v+pUMz8rn0zw9ZDefOZLLuuhXFcO59RdmUGx
8RQPQvBOEHi1Uzyv6mXGsbpJun6l7UKJiu3rM4L6WjdXEp95/EADIeRmrmik+uHC
WedZ7sk/kfAbzHU/tG8qW8g2Rlmos+LUZQMdvEI/ZSKogdr9m7s0Os/l1u6MyUue
5EdrGhgNtJ2XBCU4hbmjWo6JpIVv0+mzzi3uCu1xiJS5aVBAvytlAkvdx1AwC+89
V66Scwdp631iilKaAT6Aqg1GBIgt7h7odvPy3cnlm7K8UGoR9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFXUISD5v3vSTj28t5YG+Q15o6PNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDJl
YmY5Mi1hY2QwLTRiMTQtYTY3ZC1lN2E5MDk5OTdlN2UvYmU1NzBjOTItOGI5My0z
Mjk1LTlkZmYtMzIxZWNhMjdhZTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQyZWJmOTItYWNkMC00YjE0LWE2
N2QtZTdhOTA5OTk3ZTdlLzBkMmViZjkyLWFjZDAtNGIxNC1hNjdkLWU3YTkwOTk5
N2U3ZS5jcmwwHwYDVR0jBBgwFoAUXYMz3R0WzHFW7vl1zIsTHmt86HIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDJlYmY5Mi1hY2QwLTRiMTQtYTY3ZC1lN2E5
MDk5OTdlN2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRQmqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIEBIiVynXEfJXKsrPHinpLqhxiWtrKbUkfK42kanSTuU2Ezudv13pm6
Y6PJ2upqVLkxhO0jytE22S+PMsjz8yR3lImZ/7tAFGSDAtEkF1Lg46U0k3h3fEzx
d6Mnp+H5GtPZjbEQrxLB26MBQQU+9FPmaNrr77CHhmhffJn5IBJRaQK+rXYTy/B0
duk9uhh1kSxzwQCiqJ48QnhvH8AZzmjH/4Qe1I6vgbawwHBbBqaPE8wvBRp5zxWi
T61rqH8Aq+SZamjGspIherqYrx1/Lt2OM4AAPBubYCqnEoWCP38NpDKJf4TZOON8
PbS8qcQJIVNhFmNtpZe9m4pW1fO6wtw=
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:55:31 2026 by rpki-client