Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d73415dc-f122-322a-b951-8b7109a57654.roa
File:                     d73415dc-f122-322a-b951-8b7109a57654.roa (raw, json)
Hash identifier:          gE80rMV+6gtBnLZuVLjBEO2/IYW6mZMFi4h4MoZE1rc=
Subject key identifier:   85:C4:57:80:9F:0A:36:1E:45:A0:42:3A:D0:1D:47:EB:DA:59:96:5F
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F475D788745B965BB65E71F10
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d73415dc-f122-322a-b951-8b7109a57654.roa
Signing time:             Thu 24 Sep 2026 07:06:10 +0000
ROA not before:           Thu 24 Sep 2026 07:06:10 +0000
ROA not after:            Wed 23 Dec 2026 08:06:10 +0000
asID:                     402265
IP address blocks:        69.33.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:47:5d:78:87:45:b9:65:bb:65:e7:1f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 24 07:06:10 2026 GMT
            Not After : Dec 23 08:06:10 2026 GMT
        Subject: CN=ab26941e-413b-40f1-8ede-9046196e1154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b7:58:67:c2:59:70:06:1f:52:59:8a:22:58:
                    53:a7:ff:aa:61:ad:e1:32:ee:1f:35:30:1f:85:51:
                    36:f0:9d:f2:3f:d7:1c:01:d0:4e:c2:8d:b9:3f:d5:
                    2d:10:7d:ea:37:49:ef:1d:36:cd:a0:c3:f6:c5:38:
                    68:88:00:96:b0:3a:20:28:d1:d6:78:39:aa:6d:08:
                    85:35:6f:cb:da:f4:35:f9:eb:74:d6:dd:45:f5:3c:
                    b2:26:05:9c:06:36:43:43:2a:ac:ad:d4:3c:2f:82:
                    12:3e:ab:8b:37:c9:de:87:26:37:35:a7:f6:31:f9:
                    83:6c:b3:50:4a:f1:09:40:8d:51:e0:e9:de:ba:82:
                    62:0e:15:67:e0:40:7b:07:aa:9f:20:da:ec:6a:59:
                    ef:4d:94:bc:66:74:ce:ea:14:3b:b5:9b:99:51:d0:
                    68:da:0b:20:90:c0:f7:c4:29:6f:b6:53:4e:2a:b8:
                    dc:60:e6:78:40:24:53:07:31:7a:dd:e5:7d:b4:8e:
                    b3:e0:18:4b:51:c2:36:1e:43:be:f5:97:ca:00:57:
                    39:fa:da:60:b0:e9:63:e3:0b:43:32:3b:cb:5a:3d:
                    bc:a7:18:7a:0d:4a:a4:b0:70:13:99:93:9f:7d:b7:
                    eb:d7:f4:a2:61:4d:c1:4d:9a:b1:75:0d:65:64:00:
                    6d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:C4:57:80:9F:0A:36:1E:45:A0:42:3A:D0:1D:47:EB:DA:59:96:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d73415dc-f122-322a-b951-8b7109a57654.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.33.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:44:a4:53:27:f1:8c:46:2e:92:be:7e:15:11:c5:3e:d0:86:
         d8:d7:df:09:66:7e:7d:36:9e:c4:35:1a:42:cf:e4:7e:8a:29:
         22:cb:54:b1:a5:be:bc:16:72:d0:26:99:e9:dc:d2:cd:3f:2b:
         f9:a7:35:7a:e2:b4:58:99:ed:98:71:2c:ca:23:78:8e:93:f3:
         8b:bc:0b:df:84:91:a5:23:6c:cc:1b:47:de:c2:79:33:4e:3e:
         d0:28:30:20:f3:75:aa:dc:ac:c7:70:6c:1c:43:1e:4d:e0:f6:
         70:db:2e:b4:1e:6b:ee:58:c3:ef:fb:71:1a:d8:8c:fb:7f:38:
         19:82:39:da:82:ba:0c:34:11:2b:21:24:19:1a:2a:63:f2:5a:
         cd:41:b7:a3:69:04:17:f2:6a:80:6a:c3:a4:9e:bc:4f:dc:9d:
         c7:9d:42:88:0f:e5:56:08:fc:2b:44:c2:1c:eb:f3:4c:51:7d:
         03:7e:39:02:a2:19:c9:5d:99:07:08:9a:e9:21:7e:0d:8b:75:
         d1:c7:43:cd:e7:7d:f5:cd:f6:4a:0b:1c:9b:ad:69:71:e2:bf:
         8f:fd:5e:70:81:a9:d7:ea:4c:6a:4f:f8:ca:04:8c:c8:60:d8:
         59:de:a6:b1:d6:ef:23:4f:c7:8d:a3:6a:f0:8c:8f:e7:63:73:
         eb:2c:4e:35
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9HXXiHRbllu2XnHxAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDkyNDA3MDYxMFoXDTI2MTIyMzA4MDYxMFowLzEtMCsGA1UEAxMk
YWIyNjk0MWUtNDEzYi00MGYxLThlZGUtOTA0NjE5NmUxMTU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbdYZ8JZcAYfUlmKIlhTp/+qYa3hMu4fNTAf
hVE28J3yP9ccAdBOwo25P9UtEH3qN0nvHTbNoMP2xThoiACWsDogKNHWeDmqbQiF
NW/L2vQ1+et01t1F9TyyJgWcBjZDQyqsrdQ8L4ISPquLN8nehyY3Naf2MfmDbLNQ
SvEJQI1R4OneuoJiDhVn4EB7B6qfINrsalnvTZS8ZnTO6hQ7tZuZUdBo2gsgkMD3
xClvtlNOKrjcYOZ4QCRTBzF63eV9tI6z4BhLUcI2HkO+9ZfKAFc5+tpgsOlj4wtD
MjvLWj28pxh6DUqksHATmZOffbfr1/SiYU3BTZqxdQ1lZABtDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIXEV4CfCjYeRaBCOtAdR+vaWZZfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZDczNDE1ZGMtZjEyMi0z
MjJhLWI5NTEtOGI3MTA5YTU3NjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARSGqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFNEpFMn8YxGLpK+fhURxT7QhtjX3wlmfn02nsQ1GkLP5H6KKSLLVLGl
vrwWctAmmenc0s0/K/mnNXritFiZ7ZhxLMojeI6T84u8C9+EkaUjbMwbR97CeTNO
PtAoMCDzdarcrMdwbBxDHk3g9nDbLrQea+5Yw+/7cRrYjPt/OBmCOdqCugw0ESsh
JBkaKmPyWs1Bt6NpBBfyaoBqw6SevE/cncedQogP5VYI/CtEwhzr80xRfQN+OQKi
GcldmQcImukhfg2LddHHQ83nffXN9koLHJutaXHiv4/9XnCBqdfqTGpP+MoEjMhg
2FneprHW7yNPx42javCMj+djc+ssTjU=
-----END CERTIFICATE-----
Generated at Sun Oct 11 21:02:02 2026 by rpki-client