Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/424d1cbf-b14c-3f85-83f1-7a77d19c8085.roa
File:                     424d1cbf-b14c-3f85-83f1-7a77d19c8085.roa (raw, json)
Hash identifier:          p8mTiAM6GzPJo9ltywuIs1ecU6PHpUh4RrMQ2CQGL7I=
Subject key identifier:   9B:00:F0:4E:02:6B:E3:18:F4:A0:25:A1:3C:72:06:CC:66:31:96:D9
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D4612E9B64A282DEDC1C96820
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/424d1cbf-b14c-3f85-83f1-7a77d19c8085.roa
Signing time:             Tue 24 Mar 2026 10:26:16 +0000
ROA not before:           Tue 24 Mar 2026 10:26:16 +0000
ROA not after:            Mon 22 Jun 2026 10:26:16 +0000
asID:                     214025
IP address blocks:        69.33.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:46:12:e9:b6:4a:28:2d:ed:c1:c9:68:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Mar 24 10:26:16 2026 GMT
            Not After : Jun 22 10:26:16 2026 GMT
        Subject: CN=39d4bda7-6c22-4186-8fcf-311b837c43e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0b:3a:9f:15:92:ea:7d:09:c7:d4:d0:d8:aa:
                    22:70:be:3d:f7:b2:7c:ad:d3:69:79:de:8a:1e:76:
                    d8:1a:03:88:4c:36:76:f7:23:42:c9:01:94:7b:b5:
                    0b:5f:65:dc:f5:0f:db:ba:e1:f4:e1:15:a2:ce:03:
                    ae:17:bd:85:ca:78:cf:8c:ed:a9:b8:74:d7:62:24:
                    5c:4f:d7:46:7e:f9:42:3d:b7:cd:c1:1a:61:b9:22:
                    73:29:c3:8a:19:45:54:a7:b2:00:95:ca:20:9e:01:
                    11:6b:44:d7:87:87:9c:ee:df:46:3c:69:91:73:2e:
                    86:90:a7:54:bb:53:1a:d7:69:ec:dd:ba:f2:44:59:
                    67:6f:15:7d:84:ea:ee:b0:bd:5b:f3:fc:4b:ac:3c:
                    6c:c2:63:fe:bf:1a:f5:59:a2:b2:fc:1f:24:ed:c4:
                    0c:2d:66:c6:71:b2:d0:fd:64:3c:e0:bd:cb:10:05:
                    7b:86:b9:e3:b1:a8:08:cd:92:05:39:ec:29:6a:48:
                    1c:8c:99:06:56:b1:7b:a6:d9:60:e0:1c:1b:c2:58:
                    95:b8:0c:7b:c7:fa:af:e9:0f:5a:aa:36:9b:b6:e7:
                    f9:8c:0a:cd:70:4d:30:e6:c0:fd:a8:23:83:e9:4b:
                    65:2e:d1:32:24:5e:2f:a1:eb:2a:88:79:92:24:83:
                    c1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:00:F0:4E:02:6B:E3:18:F4:A0:25:A1:3C:72:06:CC:66:31:96:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/424d1cbf-b14c-3f85-83f1-7a77d19c8085.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.33.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:e1:2b:eb:0a:2a:4b:9c:87:d8:fb:34:1c:0f:af:6b:ca:11:
         cc:fc:65:2d:53:05:08:bf:84:02:72:82:35:ef:98:8b:b6:5f:
         11:2e:2b:fd:0c:f5:06:b6:7d:be:fa:3a:71:bf:69:e9:61:a2:
         e3:47:39:a6:c5:4b:b5:86:3b:37:01:ca:a3:7f:47:ea:49:59:
         9f:73:25:6b:29:39:06:72:63:bb:b1:ba:71:35:f3:ce:09:f7:
         ca:85:31:3f:06:60:78:2d:8f:c6:32:34:cd:85:03:71:4b:49:
         a0:21:8e:fb:dc:1e:9f:2d:c4:79:b8:a0:ad:e9:ca:60:18:9c:
         87:2e:c9:b5:a9:15:80:15:db:70:f0:79:e3:3e:36:e5:d9:27:
         77:0b:ef:84:80:8d:3f:f3:bc:bb:fe:92:ab:e0:9a:47:3a:d7:
         46:78:29:d3:7b:b4:b8:71:d6:34:cf:7a:52:9b:67:0d:cf:bd:
         12:a8:83:1f:89:1f:a6:03:5c:c0:dc:9f:6f:83:ee:32:09:55:
         5f:d7:2a:a5:6d:d1:25:b2:a9:22:73:4b:9a:0e:f5:fa:6e:87:
         7c:7d:1b:22:37:37:f7:5d:33:dd:45:00:c9:b8:b2:57:4c:38:
         b0:22:04:88:10:ef:6f:b1:97:1b:6c:67:ca:8e:b1:21:f1:da:
         ef:90:b0:15
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1GEum2Sigt7cHJaCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDMyNDEwMjYxNloXDTI2MDYyMjEwMjYxNlowLzEtMCsGA1UEAxMk
MzlkNGJkYTctNmMyMi00MTg2LThmY2YtMzExYjgzN2M0M2UyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgs6nxWS6n0Jx9TQ2KoicL4997J8rdNped6K
HnbYGgOITDZ29yNCyQGUe7ULX2Xc9Q/buuH04RWizgOuF72FynjPjO2puHTXYiRc
T9dGfvlCPbfNwRphuSJzKcOKGUVUp7IAlcogngERa0TXh4ec7t9GPGmRcy6GkKdU
u1Ma12ns3bryRFlnbxV9hOrusL1b8/xLrDxswmP+vxr1WaKy/B8k7cQMLWbGcbLQ
/WQ84L3LEAV7hrnjsagIzZIFOewpakgcjJkGVrF7ptlg4BwbwliVuAx7x/qv6Q9a
qjabtuf5jArNcE0w5sD9qCOD6UtlLtEyJF4voesqiHmSJIPBgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJsA8E4Ca+MY9KAloTxyBsxmMZbZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNDI0ZDFjYmYtYjE0Yy0z
Zjg1LTgzZjEtN2E3N2QxOWM4MDg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARSHEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGbhK+sKKkuch9j7NBwPr2vKEcz8ZS1TBQi/hAJygjXvmIu2XxEuK/0M
9Qa2fb76OnG/aelhouNHOabFS7WGOzcByqN/R+pJWZ9zJWspOQZyY7uxunE1884J
98qFMT8GYHgtj8YyNM2FA3FLSaAhjvvcHp8txHm4oK3pymAYnIcuybWpFYAV23Dw
eeM+NuXZJ3cL74SAjT/zvLv+kqvgmkc610Z4KdN7tLhx1jTPelKbZw3PvRKogx+J
H6YDXMDcn2+D7jIJVV/XKqVt0SWyqSJzS5oO9fpuh3x9GyI3N/ddM91FAMm4sldM
OLAiBIgQ72+xlxtsZ8qOsSHx2u+QsBU=
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:28:39 2026 by rpki-client