Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/eda5bfd5-d3a1-3be2-b50d-84700c9d7e68.roa
File:                     eda5bfd5-d3a1-3be2-b50d-84700c9d7e68.roa (raw, json)
Hash identifier:          s2uBhn8bgMAZor4R9n6M1TVU0lCZVn3T7hTmqsCjno0=
Subject key identifier:   67:F5:70:95:A4:B7:E1:62:7E:C2:A8:3D:2F:01:95:12:F7:66:CF:A7
Certificate issuer:       /CN=ec11d358-69b9-4c96-bf47-e3edd5cff218
Certificate serial:       010D0C9F4328584E815F99751B31FB38E02E7090
Authority key identifier: A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/eda5bfd5-d3a1-3be2-b50d-84700c9d7e68.roa
Signing time:             Wed 15 Jul 2026 09:00:13 +0000
ROA not before:           Wed 15 Jul 2026 09:00:13 +0000
ROA not after:            Tue 13 Oct 2026 09:00:13 +0000
asID:                     212374
IP address blocks:        69.168.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:81:5f:99:75:1b:31:fb:38:e0:2e:70:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec11d358-69b9-4c96-bf47-e3edd5cff218
        Validity
            Not Before: Jul 15 09:00:13 2026 GMT
            Not After : Oct 13 09:00:13 2026 GMT
        Subject: CN=838a0502-6836-4fbb-9748-ef82069a694b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:49:93:a4:51:43:91:f0:df:f2:8d:ff:00:2c:
                    e7:0f:20:c9:58:91:1e:c5:4d:30:17:3c:dc:1c:f3:
                    29:10:50:a0:50:dc:30:eb:78:13:ef:7e:53:a5:c8:
                    62:99:a5:c6:1d:bc:e8:bd:86:89:6c:05:7c:4c:7e:
                    2d:28:1c:82:6a:00:77:2d:64:88:eb:02:7a:58:0f:
                    54:78:ea:99:51:a3:27:65:5f:df:8b:64:43:4d:6f:
                    57:fa:08:77:39:b2:33:c1:6c:e3:06:4f:b3:b9:95:
                    e8:b0:c2:65:3e:43:3a:75:21:32:c7:23:d8:34:66:
                    16:a5:35:9e:85:41:f8:7f:20:18:52:ee:92:53:5c:
                    c4:06:7f:e5:19:93:ec:26:88:6c:d3:43:63:79:b9:
                    4e:58:71:c2:f5:ec:b6:f2:e8:42:40:21:0c:2c:95:
                    58:55:d9:dc:9d:0e:58:4a:fc:c8:51:46:ed:f6:80:
                    d5:35:03:a5:66:a3:6c:99:06:2e:d5:ec:d4:d4:26:
                    34:fb:f3:04:87:d6:e6:ff:2e:24:f1:77:9d:05:27:
                    ca:b8:67:db:8f:df:8d:a5:39:68:f1:91:d0:07:52:
                    e3:5d:fe:0a:14:6d:ad:0f:09:dc:6f:88:ea:5c:e7:
                    13:cf:58:7e:e1:99:ed:47:62:72:73:8d:79:cf:2a:
                    25:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F5:70:95:A4:B7:E1:62:7E:C2:A8:3D:2F:01:95:12:F7:66:CF:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/eda5bfd5-d3a1-3be2-b50d-84700c9d7e68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl

            X509v3 Authority Key Identifier:
                keyid:A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.168.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:b3:6f:f8:87:2e:7b:cd:ce:47:8b:18:5d:c4:de:a5:9a:9b:
         ff:9a:89:65:b4:0e:c0:b2:09:61:31:72:ae:d6:cd:d4:b4:da:
         97:27:06:f3:92:18:b8:86:2c:74:18:c0:bc:1c:b0:16:01:ff:
         6e:03:bb:dc:46:eb:d5:e7:a8:ab:0a:7d:ea:52:6a:04:32:60:
         32:43:ce:60:41:b1:e6:d7:af:86:5a:41:90:9e:a8:c3:6a:5b:
         be:b7:98:32:a9:ab:91:83:ee:ab:e2:92:0d:f7:8f:ac:3b:28:
         c6:cb:f0:5d:a9:bf:e7:5d:e3:ec:b9:75:68:37:4e:b0:99:4c:
         79:3a:b7:0f:e6:41:4a:aa:3e:e6:d2:2b:ac:bb:e7:55:4e:92:
         be:63:ca:ba:ec:5e:8a:c2:10:6c:e1:d5:8f:49:fd:25:6d:74:
         9d:c1:66:66:37:b4:60:4d:a3:d1:16:b7:c7:11:14:60:b7:93:
         21:af:eb:b2:3c:85:03:4a:f1:e0:74:91:47:11:df:a6:ae:04:
         d8:9c:96:3c:64:3f:72:6a:1a:a0:e5:ef:31:08:26:20:b3:69:
         bc:f7:6a:a0:78:46:a2:9f:3f:0d:d3:fa:1c:66:57:23:67:c2:
         fd:cd:e2:46:62:5f:91:6e:b3:48:9f:37:d8:24:ee:d9:cb:0a:
         cd:e1:eb:8c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6BX5l1GzH7OOAucJAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWMxMWQzNTgtNjliOS00Yzk2LWJmNDctZTNlZGQ1Y2Zm
MjE4MB4XDTI2MDcxNTA5MDAxM1oXDTI2MTAxMzA5MDAxM1owLzEtMCsGA1UEAxMk
ODM4YTA1MDItNjgzNi00ZmJiLTk3NDgtZWY4MjA2OWE2OTRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0mTpFFDkfDf8o3/ACznDyDJWJEexU0wFzzc
HPMpEFCgUNww63gT735TpchimaXGHbzovYaJbAV8TH4tKByCagB3LWSI6wJ6WA9U
eOqZUaMnZV/fi2RDTW9X+gh3ObIzwWzjBk+zuZXosMJlPkM6dSEyxyPYNGYWpTWe
hUH4fyAYUu6SU1zEBn/lGZPsJohs00NjeblOWHHC9ey28uhCQCEMLJVYVdncnQ5Y
SvzIUUbt9oDVNQOlZqNsmQYu1ezU1CY0+/MEh9bm/y4k8XedBSfKuGfbj9+NpTlo
8ZHQB1LjXf4KFG2tDwncb4jqXOcTz1h+4ZntR2Jyc415zyolkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGf1cJWkt+FifsKoPS8BlRL3Zs+nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lYzEx
ZDM1OC02OWI5LTRjOTYtYmY0Ny1lM2VkZDVjZmYyMTgvZWRhNWJmZDUtZDNhMS0z
YmUyLWI1MGQtODQ3MDBjOWQ3ZTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWMxMWQzNTgtNjliOS00Yzk2LWJm
NDctZTNlZGQ1Y2ZmMjE4L2VjMTFkMzU4LTY5YjktNGM5Ni1iZjQ3LWUzZWRkNWNm
ZjIxOC5jcmwwHwYDVR0jBBgwFoAUoUAcC1VOMwu+PVO2Hd8acJrxAbYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lYzExZDM1OC02OWI5LTRjOTYtYmY0Ny1lM2Vk
ZDVjZmYyMTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARajoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJKzb/iHLnvNzkeLGF3E3qWam/+aiWW0DsCyCWExcq7WzdS02pcnBvOS
GLiGLHQYwLwcsBYB/24Du9xG69XnqKsKfepSagQyYDJDzmBBsebXr4ZaQZCeqMNq
W763mDKpq5GD7qvikg33j6w7KMbL8F2pv+dd4+y5dWg3TrCZTHk6tw/mQUqqPubS
K6y751VOkr5jyrrsXorCEGzh1Y9J/SVtdJ3BZmY3tGBNo9EWt8cRFGC3kyGv67I8
hQNK8eB0kUcR36auBNicljxkP3JqGqDl7zEIJiCzabz3aqB4RqKfPw3T+hxmVyNn
wv3N4kZiX5Fus0ifN9gk7tnLCs3h64w=
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:11:09 2026 by rpki-client