Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/e9e6eaa8-0604-3fda-b462-373b12e38138.roa
File:                     e9e6eaa8-0604-3fda-b462-373b12e38138.roa (raw, json)
Hash identifier:          BEv7lcRnUVv48w3Lh28pot/27ZDKi+wmJgWt9tu4Rs8=
Subject key identifier:   02:B7:0E:F6:9A:4D:77:BD:FB:F6:24:2D:D2:70:03:8B:74:88:BA:0E
Certificate issuer:       /CN=937a6fc8-35c3-4151-aa2e-2513420f9344
Certificate serial:       010D0C9F4328584CEA5CE40F0FD1A67DEA6A6000
Authority key identifier: 6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/e9e6eaa8-0604-3fda-b462-373b12e38138.roa
Signing time:             Thu 19 Feb 2026 14:00:40 +0000
ROA not before:           Thu 19 Feb 2026 14:00:40 +0000
ROA not after:            Wed 20 May 2026 13:00:40 +0000
asID:                     13720
IP address blocks:        69.174.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:5c:e4:0f:0f:d1:a6:7d:ea:6a:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=937a6fc8-35c3-4151-aa2e-2513420f9344
        Validity
            Not Before: Feb 19 14:00:40 2026 GMT
            Not After : May 20 13:00:40 2026 GMT
        Subject: CN=0807321e-da85-422a-b74e-3deb2f2e216a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:09:25:e5:f7:7e:fa:c2:71:2f:ff:25:d3:7b:
                    a6:f6:3a:42:0e:a6:9a:a1:cd:4b:98:c8:92:d6:28:
                    11:d2:2a:50:6f:e1:b0:7f:bf:2e:17:39:3c:f1:8d:
                    91:b9:44:4c:07:21:0f:ff:a0:73:06:3b:49:b5:d7:
                    5b:f4:92:1a:f9:75:78:10:bd:47:c3:d2:9a:2c:a2:
                    40:e3:6a:2a:af:d2:46:88:3f:83:d4:4a:c6:82:bf:
                    74:bb:51:c7:ef:c5:88:2a:16:c1:c3:81:a8:3d:d4:
                    57:69:d7:27:b8:44:3f:0e:b7:29:dd:f2:97:b1:5f:
                    3e:81:42:24:ef:89:cd:2b:a9:50:1f:f4:33:53:4b:
                    d1:85:3c:21:23:db:03:aa:e9:4b:38:11:24:7f:fa:
                    84:a3:87:ae:19:c2:82:7c:b0:38:8a:96:ee:05:6c:
                    44:a8:b6:4e:f0:49:3f:77:14:70:c1:c0:5b:f3:9e:
                    c7:c3:9b:5a:1e:e4:ca:98:d6:c8:9d:7b:f9:1a:cf:
                    a1:ed:5e:5c:7f:14:1d:34:84:12:a5:86:d3:da:33:
                    40:07:fb:6b:e5:bf:9b:b0:08:07:b1:39:7b:42:36:
                    00:fc:5f:b3:89:66:17:de:2d:10:95:c5:06:3a:76:
                    9a:dc:27:d8:ec:ad:b4:c4:5a:46:0c:07:72:74:2a:
                    de:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:B7:0E:F6:9A:4D:77:BD:FB:F6:24:2D:D2:70:03:8B:74:88:BA:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/e9e6eaa8-0604-3fda-b462-373b12e38138.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl

            X509v3 Authority Key Identifier:
                keyid:6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.174.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:03:ca:74:db:19:b5:11:c3:b2:35:c2:d6:08:c3:1b:14:bf:
         15:58:94:c4:49:27:69:28:b9:40:7b:3b:c9:26:e4:c6:59:44:
         67:19:6e:f1:ce:56:4c:07:7e:2a:a6:79:73:1a:28:b3:7a:d9:
         9d:1f:28:29:dd:53:29:53:31:ad:5d:df:42:25:4f:a8:d1:79:
         18:f0:25:f5:be:c3:a4:c7:97:f4:23:35:a2:5d:1c:b8:c5:12:
         00:f1:8d:23:b6:ef:6b:7a:d2:0b:ce:a6:9d:c5:35:b4:fe:9f:
         33:cd:e9:0f:78:92:f2:bd:eb:e0:fe:3b:14:e2:cf:4b:6a:18:
         97:e7:d3:f5:48:e6:d8:d8:37:53:1b:ef:59:41:28:33:d9:d6:
         e3:93:1b:f2:70:9f:e9:c9:e1:17:5a:f1:e7:2c:9f:87:f2:dd:
         52:9d:94:24:c2:a0:05:96:5c:29:e4:f7:0c:c9:50:e3:8b:18:
         d0:ed:b0:25:d0:93:27:71:a0:96:4e:49:f6:89:b7:0f:80:f8:
         bc:e6:46:25:a7:74:c0:b3:6d:5a:f9:e5:0e:15:28:f0:98:27:
         0b:e4:58:d4:98:d8:88:87:4d:1a:98:9d:a7:da:29:a9:f9:e8:
         87:84:6e:eb:e2:e1:cb:0d:65:bb:91:9f:c8:fc:a5:c8:d0:78:
         99:6f:50:31
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzqXOQPD9GmfepqYAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM3YTZmYzgtMzVjMy00MTUxLWFhMmUtMjUxMzQyMGY5
MzQ0MB4XDTI2MDIxOTE0MDA0MFoXDTI2MDUyMDEzMDA0MFowLzEtMCsGA1UEAxMk
MDgwNzMyMWUtZGE4NS00MjJhLWI3NGUtM2RlYjJmMmUyMTZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQkl5fd++sJxL/8l03um9jpCDqaaoc1LmMiS
1igR0ipQb+Gwf78uFzk88Y2RuURMByEP/6BzBjtJtddb9JIa+XV4EL1Hw9KaLKJA
42oqr9JGiD+D1ErGgr90u1HH78WIKhbBw4GoPdRXadcnuEQ/Drcp3fKXsV8+gUIk
74nNK6lQH/QzU0vRhTwhI9sDqulLOBEkf/qEo4euGcKCfLA4ipbuBWxEqLZO8Ek/
dxRwwcBb857Hw5taHuTKmNbInXv5Gs+h7V5cfxQdNIQSpYbT2jNAB/tr5b+bsAgH
sTl7QjYA/F+ziWYX3i0QlcUGOnaa3CfY7K20xFpGDAdydCreKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAK3DvaaTXe9+/YkLdJwA4t0iLoOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85Mzdh
NmZjOC0zNWMzLTQxNTEtYWEyZS0yNTEzNDIwZjkzNDQvZTllNmVhYTgtMDYwNC0z
ZmRhLWI0NjItMzczYjEyZTM4MTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTM3YTZmYzgtMzVjMy00MTUxLWFh
MmUtMjUxMzQyMGY5MzQ0LzkzN2E2ZmM4LTM1YzMtNDE1MS1hYTJlLTI1MTM0MjBm
OTM0NC5jcmwwHwYDVR0jBBgwFoAUah/mTh0WOW2Gbpk7qGQprsNO/HgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MzdhNmZjOC0zNWMzLTQxNTEtYWEyZS0yNTEz
NDIwZjkzNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARa7DMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKEDynTbGbURw7I1wtYIwxsUvxVYlMRJJ2kouUB7O8km5MZZRGcZbvHO
VkwHfiqmeXMaKLN62Z0fKCndUylTMa1d30IlT6jReRjwJfW+w6THl/QjNaJdHLjF
EgDxjSO272t60gvOpp3FNbT+nzPN6Q94kvK96+D+OxTiz0tqGJfn0/VI5tjYN1Mb
71lBKDPZ1uOTG/Jwn+nJ4Rda8ecsn4fy3VKdlCTCoAWWXCnk9wzJUOOLGNDtsCXQ
kydxoJZOSfaJtw+A+LzmRiWndMCzbVr55Q4VKPCYJwvkWNSY2IiHTRqYnafaKan5
6IeEbuvi4csNZbuRn8j8pcjQeJlvUDE=
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:11:29 2026 by rpki-client