Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/69f69500-0679-3fdd-b7ba-c7db793e207d.roa
File:                     69f69500-0679-3fdd-b7ba-c7db793e207d.roa (raw, json)
Hash identifier:          rLjbp7GA+ZnMlNzPYnqSdDfhm+0zDqYEYNdL4WFeD5M=
Subject key identifier:   2C:D6:DE:9E:6C:68:5A:22:E6:F0:8D:55:89:85:C9:3B:92:8A:B2:A9
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584DB9C408FECD25E557FC43D0C0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/69f69500-0679-3fdd-b7ba-c7db793e207d.roa
Signing time:             Mon 04 May 2026 21:01:06 +0000
ROA not before:           Mon 04 May 2026 21:01:06 +0000
ROA not after:            Sun 02 Aug 2026 21:01:06 +0000
asID:                     203048
IP address blocks:        64.204.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b9:c4:08:fe:cd:25:e5:57:fc:43:d0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: May  4 21:01:06 2026 GMT
            Not After : Aug  2 21:01:06 2026 GMT
        Subject: CN=3e256314-c262-4b7b-8a49-aa8e20b5c3de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a5:43:53:9a:48:32:da:93:e6:d5:a9:53:96:
                    fd:b6:8c:58:23:31:13:60:04:e9:64:c0:76:7d:a5:
                    bc:d0:bf:26:5f:6a:a1:48:37:f9:7e:f3:c1:85:ab:
                    dc:ce:b7:65:da:a6:d9:7c:f5:d2:a4:0f:d0:60:83:
                    f0:d9:ce:01:f0:33:fc:fc:e3:ec:15:86:06:9c:1b:
                    60:fd:c1:e2:2c:a1:53:85:84:d4:95:68:30:34:9f:
                    05:71:ee:a1:7a:e2:d1:db:ba:36:20:1a:9d:9e:f9:
                    4d:41:d3:08:53:b4:02:09:5c:9b:32:a5:f2:6a:07:
                    a6:01:f2:b7:34:e8:16:bc:00:cf:21:26:84:9f:fe:
                    95:47:c4:50:82:b0:91:fd:8e:ba:fe:02:96:b2:bd:
                    26:57:22:f9:b8:c2:f8:75:69:57:5a:9f:c8:58:8f:
                    37:59:61:5c:32:d5:78:ab:f8:09:ae:4e:b2:36:c4:
                    94:d3:de:22:f0:39:a2:cc:c8:4e:96:8c:ca:7a:98:
                    11:03:ec:01:85:c9:5a:6a:6a:d3:15:32:b0:c5:90:
                    db:25:79:c4:13:8d:2c:6b:6b:97:23:38:09:2f:e5:
                    7c:28:8d:f3:bb:7f:17:a4:98:64:27:4d:74:23:f6:
                    a3:b7:45:49:ff:03:ac:73:39:5d:bf:91:88:54:2f:
                    5f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:D6:DE:9E:6C:68:5A:22:E6:F0:8D:55:89:85:C9:3B:92:8A:B2:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/69f69500-0679-3fdd-b7ba-c7db793e207d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.204.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:3a:c0:22:3a:89:8b:15:8c:cd:19:08:49:12:a8:5e:f4:5f:
         54:66:aa:3f:d2:7b:0b:9f:a3:53:62:30:41:dd:e7:9f:39:f2:
         7f:9a:e7:b4:0b:d3:0b:7b:06:38:e9:e3:4a:91:19:fa:1d:e0:
         38:a8:2e:96:e0:d4:cc:f9:a8:a9:7f:03:38:16:8a:db:1b:55:
         1e:4c:19:59:59:62:e6:cb:12:e9:dd:38:20:e9:09:b5:df:da:
         c8:9d:74:53:1b:3d:79:f1:bd:89:93:25:99:97:c3:0a:62:31:
         41:7c:ec:bf:eb:ec:22:81:9a:8b:bd:08:2c:db:cd:bf:56:b8:
         45:34:f9:a4:3b:07:b0:b2:6c:d1:45:43:cb:e8:11:5b:f1:15:
         b3:5b:d5:c0:1f:ba:dc:25:38:b2:6f:26:3b:20:8e:1a:09:7b:
         88:79:e8:b4:3f:02:cd:4f:9b:23:59:b7:77:75:78:76:d8:06:
         31:5f:4c:e1:93:2f:85:2d:22:b2:76:55:5b:73:dd:37:92:0f:
         3f:33:0a:b1:7d:09:ee:70:42:54:3f:32:94:7b:2e:ab:bb:33:
         ba:40:d5:0c:c0:43:b6:6a:42:65:ff:6e:c7:09:b0:fa:6a:f7:
         0f:bd:ae:68:75:20:d2:47:8e:1c:cf:6c:a7:a8:a6:1c:7a:ce:
         d4:33:7d:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE25xAj+zSXlV/xD0MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDUwNDIxMDEwNloXDTI2MDgwMjIxMDEwNlowLzEtMCsGA1UEAxMk
M2UyNTYzMTQtYzI2Mi00YjdiLThhNDktYWE4ZTIwYjVjM2RlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKVDU5pIMtqT5tWpU5b9toxYIzETYATpZMB2
faW80L8mX2qhSDf5fvPBhavczrdl2qbZfPXSpA/QYIPw2c4B8DP8/OPsFYYGnBtg
/cHiLKFThYTUlWgwNJ8Fce6heuLR27o2IBqdnvlNQdMIU7QCCVybMqXyagemAfK3
NOgWvADPISaEn/6VR8RQgrCR/Y66/gKWsr0mVyL5uML4dWlXWp/IWI83WWFcMtV4
q/gJrk6yNsSU094i8DmizMhOlozKepgRA+wBhclaamrTFTKwxZDbJXnEE40sa2uX
IzgJL+V8KI3zu38XpJhkJ010I/ajt0VJ/wOsczldv5GIVC9f8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCzW3p5saFoi5vCNVYmFyTuSirKpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNjlmNjk1MDAtMDY3OS0z
ZmRkLWI3YmEtYzdkYjc5M2UyMDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMzbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE86wCI6iYsVjM0ZCEkSqF70X1Rmqj/Sewufo1NiMEHd55858n+a57QL
0wt7Bjjp40qRGfod4DioLpbg1Mz5qKl/AzgWitsbVR5MGVlZYubLEundOCDpCbXf
2siddFMbPXnxvYmTJZmXwwpiMUF87L/r7CKBmou9CCzbzb9WuEU0+aQ7B7CybNFF
Q8voEVvxFbNb1cAfutwlOLJvJjsgjhoJe4h56LQ/As1PmyNZt3d1eHbYBjFfTOGT
L4UtIrJ2VVtz3TeSDz8zCrF9Ce5wQlQ/MpR7Lqu7M7pA1QzAQ7ZqQmX/bscJsPpq
9w+9rmh1INJHjhzPbKeophx6ztQzfdI=
-----END CERTIFICATE-----
Generated at Wed May 13 14:13:41 2026 by rpki-client