Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/3c81c484-0624-3ef9-90d4-536d42c6b168.roa
File:                     3c81c484-0624-3ef9-90d4-536d42c6b168.roa (raw, json)
Hash identifier:          mO3xtDzRDJNvKPkwOwjt0wZnHvlxuov2emvIpSX6NMk=
Subject key identifier:   20:F3:97:6F:FE:DB:CC:BF:95:5B:DF:32:45:F9:28:90:84:8A:01:2E
Certificate issuer:       /CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
Certificate serial:       010D0C9F4328584CC777444DADB5D58C96196AC0
Authority key identifier: F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/3c81c484-0624-3ef9-90d4-536d42c6b168.roa
Signing time:             Sat 07 Feb 2026 02:00:31 +0000
ROA not before:           Sat 07 Feb 2026 02:00:31 +0000
ROA not after:            Fri 08 May 2026 01:00:31 +0000
asID:                     3695
IP address blocks:        70.36.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c7:77:44:4d:ad:b5:d5:8c:96:19:6a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
        Validity
            Not Before: Feb  7 02:00:31 2026 GMT
            Not After : May  8 01:00:31 2026 GMT
        Subject: CN=bd4301aa-6530-408a-8755-b1851d114fa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:75:27:e0:31:b2:10:10:11:08:25:8a:e5:f5:
                    8a:3d:cc:97:7e:d1:c0:7e:b6:40:c6:b9:16:8a:fc:
                    c4:03:a3:f8:36:e0:77:e4:a1:95:18:e2:c0:dc:6c:
                    b1:6f:8e:7c:f2:06:13:02:36:24:55:94:51:4c:7b:
                    01:ee:ea:80:d2:8d:a6:e9:7c:34:2e:39:30:8d:49:
                    e4:50:6b:1c:0d:a1:51:ae:fa:91:05:af:44:35:7f:
                    0c:fd:d7:90:3b:54:44:67:36:48:e9:e3:4b:42:2e:
                    20:db:b5:33:9b:06:e1:fe:1a:43:53:47:d2:09:40:
                    f5:60:23:dc:95:0a:08:b6:24:80:2e:26:56:c9:a4:
                    d2:3e:aa:1c:d2:ec:b1:f0:d8:a0:a5:55:d6:67:a8:
                    52:7f:19:11:7f:b4:31:3a:9e:9e:e0:b4:87:bb:f2:
                    ff:5b:90:9e:d5:8a:74:fe:72:ac:e9:23:57:28:07:
                    c4:c7:33:01:97:0a:1d:f0:a3:b2:5b:d7:02:a6:70:
                    21:36:61:87:f5:e4:85:c1:34:3f:1d:94:29:1e:14:
                    42:d4:aa:a1:fd:18:ed:18:56:0d:80:f2:0c:df:72:
                    70:7e:e9:14:c7:d9:73:17:eb:38:b1:5c:cb:b0:03:
                    fd:23:78:fd:d3:82:0f:27:e8:4d:f9:46:df:5a:a6:
                    f1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:F3:97:6F:FE:DB:CC:BF:95:5B:DF:32:45:F9:28:90:84:8A:01:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/3c81c484-0624-3ef9-90d4-536d42c6b168.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl

            X509v3 Authority Key Identifier:
                keyid:F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.36.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:ab:d5:f7:68:1b:d2:9b:8a:77:f5:cf:be:4d:c3:f2:60:1b:
         e9:af:51:71:a8:f5:f4:f8:c9:a5:c0:8d:27:88:db:d7:52:1c:
         1b:26:78:8a:20:e7:2c:b0:35:e0:98:bd:f9:c0:04:d6:49:d1:
         ee:d2:21:13:0c:5a:16:88:c8:1c:94:3c:5f:eb:4b:d6:f7:aa:
         ad:27:73:bc:6f:68:df:32:ac:3a:18:ed:09:b6:17:b4:56:c5:
         4d:c7:4b:73:93:7f:5d:33:dd:39:30:fc:83:97:e5:02:05:a5:
         eb:ec:15:dd:65:9f:1d:e7:81:c3:06:82:e8:5e:47:69:f5:bd:
         01:f5:62:0a:89:a1:cb:f4:e9:7e:ba:bf:00:e2:97:0a:ac:c7:
         62:3f:3f:17:01:ea:38:8c:f9:5a:ec:d5:f4:66:11:18:05:d6:
         8f:9c:54:60:82:3b:44:d3:b7:57:12:c4:30:61:0f:6b:28:10:
         f1:db:76:e5:38:0a:db:d0:a2:43:7d:2e:f2:89:4b:ea:29:86:
         f1:19:52:e9:5d:1c:1a:d3:39:2d:43:45:23:ad:18:73:7f:2d:
         89:19:d0:3e:9e:5b:ce:b4:2d:d0:e9:58:a2:0b:f2:88:cd:35:
         4e:84:89:07:69:c6:85:90:64:d8:db:7e:8e:a8:57:c6:74:00:
         37:20:4e:7b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzHd0RNrbXVjJYZasAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjljZDhiYzQtNWUzYy00Y2M4LTk0MWUtMDg0MDQzZWZi
NTIwMB4XDTI2MDIwNzAyMDAzMVoXDTI2MDUwODAxMDAzMVowLzEtMCsGA1UEAxMk
YmQ0MzAxYWEtNjUzMC00MDhhLTg3NTUtYjE4NTFkMTE0ZmE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnUn4DGyEBARCCWK5fWKPcyXftHAfrZAxrkW
ivzEA6P4NuB35KGVGOLA3Gyxb4588gYTAjYkVZRRTHsB7uqA0o2m6Xw0LjkwjUnk
UGscDaFRrvqRBa9ENX8M/deQO1REZzZI6eNLQi4g27Uzmwbh/hpDU0fSCUD1YCPc
lQoItiSALiZWyaTSPqoc0uyx8NigpVXWZ6hSfxkRf7QxOp6e4LSHu/L/W5Ce1Yp0
/nKs6SNXKAfExzMBlwod8KOyW9cCpnAhNmGH9eSFwTQ/HZQpHhRC1Kqh/RjtGFYN
gPIM33JwfukUx9lzF+s4sVzLsAP9I3j904IPJ+hN+UbfWqbxGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCDzl2/+28y/lVvfMkX5KJCEigEuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82OWNk
OGJjNC01ZTNjLTRjYzgtOTQxZS0wODQwNDNlZmI1MjAvM2M4MWM0ODQtMDYyNC0z
ZWY5LTkwZDQtNTM2ZDQyYzZiMTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjljZDhiYzQtNWUzYy00Y2M4LTk0
MWUtMDg0MDQzZWZiNTIwLzY5Y2Q4YmM0LTVlM2MtNGNjOC05NDFlLTA4NDA0M2Vm
YjUyMC5jcmwwHwYDVR0jBBgwFoAU8u5yVm4HrBcrJBWRIoc0mDBvYIkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi82OWNkOGJjNC01ZTNjLTRjYzgtOTQxZS0wODQw
NDNlZmI1MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiQKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAByr1fdoG9Kbinf1z75Nw/JgG+mvUXGo9fT4yaXAjSeI29dSHBsmeIog
5yywNeCYvfnABNZJ0e7SIRMMWhaIyByUPF/rS9b3qq0nc7xvaN8yrDoY7Qm2F7RW
xU3HS3OTf10z3Tkw/IOX5QIFpevsFd1lnx3ngcMGguheR2n1vQH1YgqJocv06X66
vwDilwqsx2I/PxcB6jiM+Vrs1fRmERgF1o+cVGCCO0TTt1cSxDBhD2soEPHbduU4
CtvQokN9LvKJS+ophvEZUuldHBrTOS1DRSOtGHN/LYkZ0D6eW860LdDpWKIL8ojN
NU6EiQdpxoWQZNjbfo6oV8Z0ADcgTns=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:47:21 2026 by rpki-client