Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/69d73c84-d2dc-3e1e-a41c-6a4317fbb008.roa
File:                     69d73c84-d2dc-3e1e-a41c-6a4317fbb008.roa (raw, json)
Hash identifier:          HqiFyFy5erOXvXGBtWtS7VZxcQZJb0jCKUMInLZN4EM=
Subject key identifier:   34:7D:20:33:2A:F8:E2:F9:E0:0E:43:27:6D:64:57:CF:00:99:C5:FD
Certificate issuer:       /CN=3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc
Certificate serial:       010D0C9F4328584EA7942A3BBE55DA745EDE9A80
Authority key identifier: 56:34:70:D9:2B:60:85:B1:A7:7C:A0:97:7D:A5:7A:1D:B8:27:54:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/69d73c84-d2dc-3e1e-a41c-6a4317fbb008.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     10497
IP address blocks:        164.114.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:2a:3b:be:55:da:74:5e:de:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=9f1beb7d-e06c-4ad3-8cb0-ec7075b4ffb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:68:35:4d:42:51:46:2d:a4:1d:f9:31:da:ed:
                    a3:8e:e0:0d:78:37:be:f7:84:66:92:c5:e0:43:d7:
                    2e:37:c4:b1:3e:69:35:4c:39:9e:b3:db:79:e0:00:
                    c1:a5:dc:82:7f:0f:bb:9a:b3:c4:95:9c:aa:4f:22:
                    8b:25:0b:01:4c:d7:c6:cb:2a:55:8e:4a:3a:bc:2b:
                    9d:c9:4c:66:e8:74:b4:30:4c:49:3f:ca:63:5b:92:
                    d5:c6:0c:b3:81:29:1e:d0:9f:92:d6:8d:51:a0:24:
                    7b:6e:b4:ee:bc:f0:ad:73:db:6b:a4:1a:9c:4e:f2:
                    ac:15:40:e5:a4:29:bd:26:ad:fa:22:37:1b:4a:ae:
                    b2:7d:59:06:5b:c7:55:b8:3e:18:09:9b:e4:24:66:
                    d1:59:18:d5:ea:2e:f1:21:b3:fe:fe:43:ba:eb:4f:
                    59:fc:de:e3:7e:64:5a:bb:94:77:4d:91:ed:28:16:
                    07:8b:41:de:42:38:b7:b8:75:99:60:6a:c4:b8:98:
                    81:63:31:0c:ac:08:b6:77:15:4b:6c:f1:49:da:7c:
                    75:c9:23:f5:a2:4a:11:fb:b0:ef:b7:5f:62:0f:c1:
                    54:ab:fb:86:6d:5d:f3:82:a6:50:f7:3f:8f:f2:c1:
                    19:80:9a:a9:07:8b:90:ce:09:a2:52:87:a5:67:f5:
                    60:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:7D:20:33:2A:F8:E2:F9:E0:0E:43:27:6D:64:57:CF:00:99:C5:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/69d73c84-d2dc-3e1e-a41c-6a4317fbb008.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.crl

            X509v3 Authority Key Identifier:
                keyid:56:34:70:D9:2B:60:85:B1:A7:7C:A0:97:7D:A5:7A:1D:B8:27:54:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.114.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:59:9c:89:20:94:fc:da:61:54:db:a1:db:29:55:45:b4:53:
         8e:75:c7:9f:db:40:79:92:34:9b:e5:04:8e:9c:36:49:c7:68:
         db:7f:91:b7:3e:61:ce:3b:91:d5:17:84:14:f1:cd:76:68:db:
         b6:b9:bf:aa:33:06:c2:21:f5:73:4c:60:bf:c8:ab:7f:61:a6:
         c6:1a:d0:34:49:5a:e3:b3:e3:77:96:b2:b3:71:c4:71:86:f1:
         06:7e:66:ae:db:cc:60:18:cf:f9:0a:6a:5d:bb:ca:15:c0:46:
         b1:67:a6:f6:3a:1e:27:ca:47:28:6a:ee:20:2f:85:91:ec:38:
         e1:f3:07:83:0e:31:1a:50:b0:f1:5c:86:cb:ba:43:34:b2:7b:
         f3:b0:83:b9:62:bd:df:7a:b0:7b:d2:09:16:cc:5b:c1:4f:25:
         47:ac:12:eb:bc:b6:d9:b3:38:07:e6:d4:de:60:8f:45:10:14:
         63:34:b9:4c:28:f7:04:fa:21:19:ae:8a:fb:51:91:dd:bf:9a:
         f9:04:9c:a3:7a:10:8f:6f:02:9b:be:6e:61:14:4f:23:e2:7e:
         51:7f:c3:13:c1:6c:ca:cd:de:f3:fc:15:bf:02:d0:88:62:ba:
         85:f7:ca:e5:aa:cf:e6:27:f8:80:f7:1b:21:2f:4e:7c:ec:14:
         11:27:4e:08
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE6nlCo7vlXadF7emoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2I2MzVmZGQtODFhNy00YzVkLThmOTAtOWU3NTEzYjNk
Y2RjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
OWYxYmViN2QtZTA2Yy00YWQzLThjYjAtZWM3MDc1YjRmZmIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2g1TUJRRi2kHfkx2u2jjuANeDe+94RmksXg
Q9cuN8SxPmk1TDmes9t54ADBpdyCfw+7mrPElZyqTyKLJQsBTNfGyypVjko6vCud
yUxm6HS0MExJP8pjW5LVxgyzgSke0J+S1o1RoCR7brTuvPCtc9trpBqcTvKsFUDl
pCm9Jq36IjcbSq6yfVkGW8dVuD4YCZvkJGbRWRjV6i7xIbP+/kO6609Z/N7jfmRa
u5R3TZHtKBYHi0HeQji3uHWZYGrEuJiBYzEMrAi2dxVLbPFJ2nx1ySP1okoR+7Dv
t19iD8FUq/uGbV3zgqZQ9z+P8sEZgJqpB4uQzgmiUoelZ/VgDQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDR9IDMq+OL54A5DJ21kV88AmcX9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYjYz
NWZkZC04MWE3LTRjNWQtOGY5MC05ZTc1MTNiM2RjZGMvNjlkNzNjODQtZDJkYy0z
ZTFlLWE0MWMtNmE0MzE3ZmJiMDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2I2MzVmZGQtODFhNy00YzVkLThm
OTAtOWU3NTEzYjNkY2RjLzNiNjM1ZmRkLTgxYTctNGM1ZC04ZjkwLTllNzUxM2Iz
ZGNkYy5jcmwwHwYDVR0jBBgwFoAUVjRw2StghbGnfKCXfaV6HbgnVAUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8zYjYzNWZkZC04MWE3LTRjNWQtOGY5MC05ZTc1
MTNiM2RjZGMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMApHIwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAEVmciSCU/NphVNuh2ylVRbRTjnXHn9tAeZI0m+UEjpw2Scdo23+Rtz5h
zjuR1ReEFPHNdmjbtrm/qjMGwiH1c0xgv8irf2GmxhrQNEla47Pjd5ays3HEcYbx
Bn5mrtvMYBjP+QpqXbvKFcBGsWem9joeJ8pHKGruIC+Fkew44fMHgw4xGlCw8VyG
y7pDNLJ787CDuWK933qwe9IJFsxbwU8lR6wS67y22bM4B+bU3mCPRRAUYzS5TCj3
BPohGa6K+1GR3b+a+QSco3oQj28Cm75uYRRPI+J+UX/DE8Fsys3e8/wVvwLQiGK6
hffK5arP5if4gPcbIS9OfOwUESdOCA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:05:53 2026 by rpki-client