Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba639547-69d9-4284-b9b1-ef6cd6542aa6/5a0595b2-494f-3a14-a5c1-dae22ac4af46.roa
File:                     5a0595b2-494f-3a14-a5c1-dae22ac4af46.roa (raw, json)
Hash identifier:          7yl52vT/zTaf2yz52LTpjklRuh2y3mbH1rNdKncWaho=
Subject key identifier:   5D:0F:A6:25:A3:BA:2C:08:17:F0:24:E2:C6:34:40:86:AB:DB:4D:17
Certificate issuer:       /CN=ba639547-69d9-4284-b9b1-ef6cd6542aa6
Certificate serial:       010D0C9F4328584DC8304BA629DAE1C6D227C764
Authority key identifier: 9D:AA:D8:AB:28:D7:C6:59:C5:AA:58:E4:D7:88:95:96:3F:B5:59:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba639547-69d9-4284-b9b1-ef6cd6542aa6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba639547-69d9-4284-b9b1-ef6cd6542aa6/5a0595b2-494f-3a14-a5c1-dae22ac4af46.roa
Signing time:             Sun 10 May 2026 01:00:24 +0000
ROA not before:           Sun 10 May 2026 01:00:24 +0000
ROA not after:            Sat 08 Aug 2026 01:00:24 +0000
asID:                     15329
IP address blocks:        69.67.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba639547-69d9-4284-b9b1-ef6cd6542aa6/ba639547-69d9-4284-b9b1-ef6cd6542aa6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba639547-69d9-4284-b9b1-ef6cd6542aa6/ba639547-69d9-4284-b9b1-ef6cd6542aa6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba639547-69d9-4284-b9b1-ef6cd6542aa6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c8:30:4b:a6:29:da:e1:c6:d2:27:c7:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba639547-69d9-4284-b9b1-ef6cd6542aa6
        Validity
            Not Before: May 10 01:00:24 2026 GMT
            Not After : Aug  8 01:00:24 2026 GMT
        Subject: CN=0c370254-3905-450b-a268-bfc6558f0d0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:54:2a:99:1f:80:1d:14:cd:da:50:20:2f:5c:
                    90:6b:30:70:3b:1b:23:36:33:d7:a3:52:2b:56:d9:
                    4e:9f:08:f2:6a:42:76:2b:56:01:15:ad:62:db:ee:
                    cc:80:b7:af:29:c6:7f:37:74:78:fc:92:96:f0:0c:
                    ca:da:83:62:a2:c2:20:c1:05:b6:51:02:03:22:3d:
                    3f:a9:b1:b8:78:d6:d3:31:e0:cd:a5:84:c9:47:33:
                    2a:94:77:27:14:c5:8f:e6:cb:32:e0:a8:59:45:42:
                    fd:18:76:cf:7b:a7:ca:29:1c:e0:e2:88:4f:d4:76:
                    16:4b:8b:8c:16:0b:ba:61:15:ad:73:1b:e1:b8:f2:
                    e8:e8:d8:c0:73:13:d3:7f:3b:1d:cf:8c:25:7c:04:
                    65:16:15:fc:5c:a9:ab:2c:2c:09:c8:6f:87:ed:51:
                    18:64:2b:2f:ee:8b:69:1b:74:ee:68:46:11:30:86:
                    6b:1b:64:0d:b3:bc:bd:3f:d1:63:17:97:f1:9b:81:
                    33:74:d0:88:4e:24:b8:b9:8e:9c:d4:cd:11:0e:27:
                    17:81:81:2d:61:fc:93:b8:d2:16:b2:a8:fe:4c:8c:
                    35:f5:95:fc:98:21:f0:d6:4c:1a:c8:c1:f9:48:9b:
                    f7:68:ff:19:6f:5c:d8:a7:04:50:c0:c2:70:61:b1:
                    12:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:0F:A6:25:A3:BA:2C:08:17:F0:24:E2:C6:34:40:86:AB:DB:4D:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba639547-69d9-4284-b9b1-ef6cd6542aa6/5a0595b2-494f-3a14-a5c1-dae22ac4af46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba639547-69d9-4284-b9b1-ef6cd6542aa6/ba639547-69d9-4284-b9b1-ef6cd6542aa6.crl

            X509v3 Authority Key Identifier:
                keyid:9D:AA:D8:AB:28:D7:C6:59:C5:AA:58:E4:D7:88:95:96:3F:B5:59:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba639547-69d9-4284-b9b1-ef6cd6542aa6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.67.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:09:eb:1c:a4:a0:6b:a7:6f:c6:95:d9:85:7f:b0:6d:4a:cb:
         f3:db:25:39:56:06:67:7a:9f:90:11:4e:7d:8c:dc:c3:39:c7:
         a0:77:d1:a5:79:70:1d:a1:04:15:7b:8b:b1:2e:8d:40:cc:9c:
         e8:ab:96:28:55:68:9d:20:9d:67:77:6d:c5:2d:3b:9e:5a:6d:
         2f:38:e9:2f:61:a2:45:eb:76:03:90:55:ca:8f:f9:8e:09:d6:
         83:da:66:db:29:3c:b4:e4:1c:e7:55:bb:9b:97:a6:f5:1f:8d:
         14:f7:1b:cc:75:81:ca:d6:fc:fe:7f:f0:10:6f:9b:a2:af:4f:
         30:08:29:c2:7d:b2:8f:00:3e:89:6f:e8:8e:e0:6c:26:70:b8:
         b4:0f:21:4e:18:55:9b:0c:1e:81:ec:c7:e1:27:ba:95:da:89:
         7c:78:42:e1:50:de:23:bc:79:d7:59:9f:6f:fd:66:93:1b:78:
         89:91:16:46:a9:35:28:59:70:c9:c5:94:af:3d:e5:d1:72:4d:
         a4:95:ec:66:fa:ae:06:98:45:70:20:25:23:f7:e6:39:1d:fb:
         23:a0:36:4b:9a:89:98:72:d1:10:27:b6:f8:50:06:fe:64:37:
         bb:ed:01:3c:af:f3:43:e5:3e:26:4d:b5:eb:dc:9c:18:30:4e:
         d7:87:89:5b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3IMEumKdrhxtInx2QwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmE2Mzk1NDctNjlkOS00Mjg0LWI5YjEtZWY2Y2Q2NTQy
YWE2MB4XDTI2MDUxMDAxMDAyNFoXDTI2MDgwODAxMDAyNFowLzEtMCsGA1UEAxMk
MGMzNzAyNTQtMzkwNS00NTBiLWEyNjgtYmZjNjU1OGYwZDBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1QqmR+AHRTN2lAgL1yQazBwOxsjNjPXo1Ir
VtlOnwjyakJ2K1YBFa1i2+7MgLevKcZ/N3R4/JKW8AzK2oNiosIgwQW2UQIDIj0/
qbG4eNbTMeDNpYTJRzMqlHcnFMWP5ssy4KhZRUL9GHbPe6fKKRzg4ohP1HYWS4uM
Fgu6YRWtcxvhuPLo6NjAcxPTfzsdz4wlfARlFhX8XKmrLCwJyG+H7VEYZCsv7otp
G3TuaEYRMIZrG2QNs7y9P9FjF5fxm4EzdNCITiS4uY6c1M0RDicXgYEtYfyTuNIW
sqj+TIw19ZX8mCHw1kwayMH5SJv3aP8Zb1zYpwRQwMJwYbESwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF0PpiWjuiwIF/Ak4sY0QIar200XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iYTYz
OTU0Ny02OWQ5LTQyODQtYjliMS1lZjZjZDY1NDJhYTYvNWEwNTk1YjItNDk0Zi0z
YTE0LWE1YzEtZGFlMjJhYzRhZjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYmE2Mzk1NDctNjlkOS00Mjg0LWI5
YjEtZWY2Y2Q2NTQyYWE2L2JhNjM5NTQ3LTY5ZDktNDI4NC1iOWIxLWVmNmNkNjU0
MmFhNi5jcmwwHwYDVR0jBBgwFoAUnarYqyjXxlnFqljk14iVlj+1WYkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9iYTYzOTU0Ny02OWQ5LTQyODQtYjliMS1lZjZj
ZDY1NDJhYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARUOqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGAJ6xykoGunb8aV2YV/sG1Ky/PbJTlWBmd6n5ARTn2M3MM5x6B30aV5
cB2hBBV7i7EujUDMnOirlihVaJ0gnWd3bcUtO55abS846S9hokXrdgOQVcqP+Y4J
1oPaZtspPLTkHOdVu5uXpvUfjRT3G8x1gcrW/P5/8BBvm6KvTzAIKcJ9so8APolv
6I7gbCZwuLQPIU4YVZsMHoHsx+EnupXaiXx4QuFQ3iO8eddZn2/9ZpMbeImRFkap
NShZcMnFlK895dFyTaSV7Gb6rgaYRXAgJSP35jkd+yOgNkuaiZhy0RAntvhQBv5k
N7vtATyv80PlPiZNtevcnBgwTteHiVs=
-----END CERTIFICATE-----
Generated at Wed May 13 04:38:23 2026 by rpki-client