Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/4defbb35-e060-34ce-a58d-8d9835579215.roa
File:                     4defbb35-e060-34ce-a58d-8d9835579215.roa (raw, json)
Hash identifier:          0UYZa8LXY90r4Cns5LAkeKDT+rtX5eyvd6cld8ShymI=
Subject key identifier:   3C:6B:64:2A:A7:16:63:32:6D:63:CC:1B:09:43:64:78:00:44:7B:20
Certificate issuer:       /CN=80e43277-4490-4cc9-99ec-5726af08c8ab
Certificate serial:       010D0C9F4328584F3A17D434317A6BC927F30700
Authority key identifier: F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/4defbb35-e060-34ce-a58d-8d9835579215.roa
Signing time:             Sat 19 Sep 2026 13:00:12 +0000
ROA not before:           Sat 19 Sep 2026 13:00:12 +0000
ROA not after:            Fri 18 Dec 2026 14:00:12 +0000
asID:                     23520
IP address blocks:        69.79.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3a:17:d4:34:31:7a:6b:c9:27:f3:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e43277-4490-4cc9-99ec-5726af08c8ab
        Validity
            Not Before: Sep 19 13:00:12 2026 GMT
            Not After : Dec 18 14:00:12 2026 GMT
        Subject: CN=ecc4f79b-096e-4ad5-a6f6-e13c0de2f001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:13:fa:62:f4:38:26:b1:59:a5:9f:4a:10:54:
                    aa:69:93:59:c0:9c:48:9c:54:1c:fb:72:72:7e:16:
                    fc:ef:69:d7:0f:cd:9a:90:1e:97:ed:65:74:6d:1f:
                    48:40:78:61:f6:06:ac:94:b1:1c:b1:af:25:e4:3d:
                    45:4c:22:9d:3d:e7:8b:2f:e7:48:50:56:b1:8f:10:
                    ea:21:36:3c:2f:9f:4e:9a:23:cc:33:cd:02:d9:16:
                    56:c2:ad:cd:c6:7d:d6:9b:a2:b6:11:63:d5:e2:a9:
                    bc:97:ec:0f:df:bd:cc:27:4a:2b:08:15:ee:8e:35:
                    26:cf:2e:35:db:d0:f1:d8:70:37:a1:4b:b4:e2:55:
                    1c:ed:4e:a2:6f:df:e4:76:a8:fd:40:57:c9:61:ae:
                    66:61:77:d6:18:c8:75:2e:9d:f7:61:2e:33:d0:85:
                    fe:1e:ee:85:19:1f:36:3c:40:b2:d9:35:89:be:18:
                    13:82:a1:f1:9d:8f:75:9d:76:1b:96:f0:4c:36:e9:
                    fe:27:2e:61:8a:a0:0d:b6:4c:e0:7c:34:f2:17:d1:
                    52:4f:74:3d:ff:45:85:a7:64:c9:5e:98:ec:de:53:
                    3b:35:ac:65:bb:31:67:46:ad:87:88:ee:07:af:06:
                    f1:ba:ce:9e:f2:dc:30:59:30:aa:69:a3:0b:67:de:
                    15:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:6B:64:2A:A7:16:63:32:6D:63:CC:1B:09:43:64:78:00:44:7B:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/4defbb35-e060-34ce-a58d-8d9835579215.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.crl

            X509v3 Authority Key Identifier:
                keyid:F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.79.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:d2:d3:61:27:3b:bd:a1:80:07:da:79:12:7c:05:8d:a3:b3:
         46:4d:92:9b:d3:76:72:ae:fc:25:0b:68:b3:ba:a0:e1:a5:2b:
         84:15:e6:bc:be:47:25:5b:b0:c8:c1:12:bd:00:ce:d6:7b:40:
         d4:1b:ef:36:3a:43:90:03:80:7b:f8:d1:11:c8:d6:19:b1:c9:
         66:b6:ce:f4:7c:9a:0c:51:37:ce:ab:59:a4:66:70:70:1c:f0:
         2d:b3:0c:af:ec:8d:0e:a2:86:42:70:12:af:71:58:6c:67:05:
         84:9e:f8:76:66:8b:37:e8:64:22:71:73:25:73:01:39:89:d4:
         d1:20:40:40:f3:33:5f:b8:5c:c1:fc:1b:ff:6a:82:75:b5:64:
         d9:22:6c:53:5f:ca:f7:03:2a:d2:8f:79:1a:af:8c:05:e4:d0:
         12:d3:87:f0:58:dc:b9:79:d2:1c:88:3c:c1:c2:51:d3:49:a8:
         9f:31:47:48:9e:ad:7f:b9:4a:c2:6b:c6:3a:5f:a6:58:96:39:
         87:06:11:b8:46:f1:f6:3c:20:9c:2f:c4:a0:df:94:58:34:62:
         6d:f7:4c:fe:43:3a:e0:4f:55:09:5e:1d:53:3e:8e:f7:0a:7b:
         6d:bf:70:33:7c:b1:5d:17:c0:be:b2:bc:0e:2f:a2:06:be:82:
         ef:81:5c:1a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86F9Q0MXprySfzBwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODBlNDMyNzctNDQ5MC00Y2M5LTk5ZWMtNTcyNmFmMDhj
OGFiMB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk
ZWNjNGY3OWItMDk2ZS00YWQ1LWE2ZjYtZTEzYzBkZTJmMDAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBP6YvQ4JrFZpZ9KEFSqaZNZwJxInFQc+3Jy
fhb872nXD82akB6X7WV0bR9IQHhh9gaslLEcsa8l5D1FTCKdPeeLL+dIUFaxjxDq
ITY8L59OmiPMM80C2RZWwq3Nxn3Wm6K2EWPV4qm8l+wP373MJ0orCBXujjUmzy41
29Dx2HA3oUu04lUc7U6ib9/kdqj9QFfJYa5mYXfWGMh1Lp33YS4z0IX+Hu6FGR82
PECy2TWJvhgTgqHxnY91nXYblvBMNun+Jy5hiqANtkzgfDTyF9FST3Q9/0WFp2TJ
Xpjs3lM7NaxluzFnRq2HiO4Hrwbxus6e8twwWTCqaaMLZ94VEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDxrZCqnFmMybWPMGwlDZHgARHsgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MGU0
MzI3Ny00NDkwLTRjYzktOTllYy01NzI2YWYwOGM4YWIvNGRlZmJiMzUtZTA2MC0z
NGNlLWE1OGQtOGQ5ODM1NTc5MjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODBlNDMyNzctNDQ5MC00Y2M5LTk5
ZWMtNTcyNmFmMDhjOGFiLzgwZTQzMjc3LTQ0OTAtNGNjOS05OWVjLTU3MjZhZjA4
YzhhYi5jcmwwHwYDVR0jBBgwFoAU9W5QKXAQrkNBl+H/jCjkkjkd3fAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS84MGU0MzI3Ny00NDkwLTRjYzktOTllYy01NzI2
YWYwOGM4YWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARU/nMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHjS02EnO72hgAfaeRJ8BY2js0ZNkpvTdnKu/CULaLO6oOGlK4QV5ry+
RyVbsMjBEr0AztZ7QNQb7zY6Q5ADgHv40RHI1hmxyWa2zvR8mgxRN86rWaRmcHAc
8C2zDK/sjQ6ihkJwEq9xWGxnBYSe+HZmizfoZCJxcyVzATmJ1NEgQEDzM1+4XMH8
G/9qgnW1ZNkibFNfyvcDKtKPeRqvjAXk0BLTh/BY3Ll50hyIPMHCUdNJqJ8xR0ie
rX+5SsJrxjpfpliWOYcGEbhG8fY8IJwvxKDflFg0Ym33TP5DOuBPVQleHVM+jvcK
e22/cDN8sV0XwL6yvA4voga+gu+BXBo=
-----END CERTIFICATE-----
Generated at Sun Sep 27 10:29:25 2026 by rpki-client