Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/826ab4ee-b6aa-4222-ae26-8bc58c9b742a/69faa5f2-bfff-3ca2-960e-a559b65fa040.roa
File:                     69faa5f2-bfff-3ca2-960e-a559b65fa040.roa (raw, json)
Hash identifier:          D/jIk99d/TbCbjhN8TEedsHQ3iUDEMbD4yQz/mk3SrE=
Subject key identifier:   E9:D3:0B:3B:45:A3:55:F3:AE:61:2B:D9:6B:58:75:9C:F5:67:7D:6A
Certificate issuer:       /CN=826ab4ee-b6aa-4222-ae26-8bc58c9b742a
Certificate serial:       010D0C9F4328584D773A7245F30E54575C142EE0
Authority key identifier: 5B:7C:6C:55:80:AC:19:EC:C0:BF:7D:79:D4:2C:EF:DF:2D:B7:C1:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/826ab4ee-b6aa-4222-ae26-8bc58c9b742a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/826ab4ee-b6aa-4222-ae26-8bc58c9b742a/69faa5f2-bfff-3ca2-960e-a559b65fa040.roa
Signing time:             Sat 11 Apr 2026 01:00:24 +0000
ROA not before:           Sat 11 Apr 2026 01:00:24 +0000
ROA not after:            Fri 10 Jul 2026 01:00:24 +0000
asID:                     11700
IP address blocks:        205.211.88.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/826ab4ee-b6aa-4222-ae26-8bc58c9b742a/826ab4ee-b6aa-4222-ae26-8bc58c9b742a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/826ab4ee-b6aa-4222-ae26-8bc58c9b742a/826ab4ee-b6aa-4222-ae26-8bc58c9b742a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/826ab4ee-b6aa-4222-ae26-8bc58c9b742a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:77:3a:72:45:f3:0e:54:57:5c:14:2e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=826ab4ee-b6aa-4222-ae26-8bc58c9b742a
        Validity
            Not Before: Apr 11 01:00:24 2026 GMT
            Not After : Jul 10 01:00:24 2026 GMT
        Subject: CN=c9f42de1-b974-4ecc-9619-88c0e675ab4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:bf:6f:f0:e5:14:69:c4:6f:5b:34:4c:fa:50:
                    fa:76:d4:96:a2:de:90:a1:90:fb:a9:ba:f3:be:c4:
                    49:dc:af:49:d2:43:50:86:1b:7c:fd:1e:77:bd:ba:
                    87:76:0f:91:85:e0:6b:b2:bb:ea:42:a6:ad:6c:3f:
                    d8:a9:e8:46:aa:83:25:9e:e0:e7:65:67:35:8a:9e:
                    d8:3a:23:9a:e6:ab:f6:49:b2:78:e8:dc:e7:f4:f8:
                    a1:74:d7:b7:16:4b:de:d9:d8:ac:69:37:c8:dc:2a:
                    fa:dd:a0:89:20:77:f0:c5:fe:02:83:7c:f1:dc:53:
                    2c:09:62:f2:33:69:66:dc:6f:69:d6:56:18:6d:09:
                    b8:2b:fc:66:90:c8:7f:69:08:03:d8:3f:ab:8c:bf:
                    3a:5b:2a:b7:fa:1c:10:48:49:d8:c1:68:b3:e0:28:
                    3d:d1:ba:56:04:ba:5e:a2:51:67:03:29:01:4b:ff:
                    fa:1e:cc:fe:da:fe:23:ab:a0:d6:71:3f:1f:07:e7:
                    b0:9e:8b:cb:fc:ab:48:8a:f0:51:f0:9d:4e:8e:45:
                    a1:bb:0a:bf:ca:27:33:cb:38:5f:6b:e4:7d:0b:91:
                    fb:e1:2a:1a:dd:23:b2:28:6d:94:56:f9:47:5e:fa:
                    69:c1:a6:7b:76:9c:bf:62:a9:3d:83:fe:0e:57:ba:
                    ba:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:D3:0B:3B:45:A3:55:F3:AE:61:2B:D9:6B:58:75:9C:F5:67:7D:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/826ab4ee-b6aa-4222-ae26-8bc58c9b742a/69faa5f2-bfff-3ca2-960e-a559b65fa040.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/826ab4ee-b6aa-4222-ae26-8bc58c9b742a/826ab4ee-b6aa-4222-ae26-8bc58c9b742a.crl

            X509v3 Authority Key Identifier:
                keyid:5B:7C:6C:55:80:AC:19:EC:C0:BF:7D:79:D4:2C:EF:DF:2D:B7:C1:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/826ab4ee-b6aa-4222-ae26-8bc58c9b742a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.211.88.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:8f:e5:79:d6:2f:a6:4b:c6:54:7b:74:fe:74:cd:a8:c1:61:
         41:1b:6d:9a:ce:ce:03:43:32:e0:86:c4:ad:0e:8b:e7:30:f9:
         1d:cb:6e:48:f0:a2:cb:97:01:af:76:5d:e1:da:d7:49:e2:44:
         7f:1a:a3:36:1b:14:7d:4a:fd:7c:15:a9:cf:42:8e:6c:e4:28:
         9e:c2:83:90:ff:dd:59:c4:b4:58:c4:37:ba:6c:4c:02:bd:4c:
         e7:d8:aa:7c:50:e0:3c:5c:bc:d1:f6:78:64:d8:4f:6a:bd:af:
         f2:bb:eb:fe:a3:cc:b7:2c:51:92:87:de:d8:c2:cd:7c:cf:f3:
         d3:52:2f:41:96:86:f6:08:0a:ef:35:16:f5:fa:db:98:bd:a2:
         1b:94:73:9f:3b:d2:03:26:a0:62:2c:4d:fe:57:20:93:c2:a7:
         e4:d1:9d:82:9b:5e:08:01:a0:03:8f:d0:d8:9f:ac:de:92:71:
         87:03:f3:bc:cd:69:5d:5c:c0:de:7f:81:5d:38:a8:46:f4:79:
         6b:86:e8:ae:0c:9d:34:a5:2c:3c:65:3b:fe:c5:f0:20:81:25:
         3c:c5:ec:ce:9e:9d:13:b0:99:f6:6a:08:ba:45:e3:a9:2b:bc:
         dd:f7:10:c1:8b:66:7a:58:d9:7e:fd:9f:f3:b4:39:73:73:1c:
         dc:2a:cc:d9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE13OnJF8w5UV1wULuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODI2YWI0ZWUtYjZhYS00MjIyLWFlMjYtOGJjNThjOWI3
NDJhMB4XDTI2MDQxMTAxMDAyNFoXDTI2MDcxMDAxMDAyNFowLzEtMCsGA1UEAxMk
YzlmNDJkZTEtYjk3NC00ZWNjLTk2MTktODhjMGU2NzVhYjRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjL9v8OUUacRvWzRM+lD6dtSWot6QoZD7qbrz
vsRJ3K9J0kNQhht8/R53vbqHdg+RheBrsrvqQqatbD/YqehGqoMlnuDnZWc1ip7Y
OiOa5qv2SbJ46Nzn9PihdNe3Fkve2disaTfI3Cr63aCJIHfwxf4Cg3zx3FMsCWLy
M2lm3G9p1lYYbQm4K/xmkMh/aQgD2D+rjL86Wyq3+hwQSEnYwWiz4Cg90bpWBLpe
olFnAykBS//6Hsz+2v4jq6DWcT8fB+ewnovL/KtIivBR8J1OjkWhuwq/yiczyzhf
a+R9C5H74Soa3SOyKG2UVvlHXvppwaZ7dpy/Yqk9g/4OV7q6lQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOnTCztFo1XzrmEr2WtYdZz1Z31qMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84MjZh
YjRlZS1iNmFhLTQyMjItYWUyNi04YmM1OGM5Yjc0MmEvNjlmYWE1ZjItYmZmZi0z
Y2EyLTk2MGUtYTU1OWI2NWZhMDQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODI2YWI0ZWUtYjZhYS00MjIyLWFl
MjYtOGJjNThjOWI3NDJhLzgyNmFiNGVlLWI2YWEtNDIyMi1hZTI2LThiYzU4Yzli
NzQyYS5jcmwwHwYDVR0jBBgwFoAUW3xsVYCsGezAv3151Czv3y23wcMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS84MjZhYjRlZS1iNmFhLTQyMjItYWUyNi04YmM1
OGM5Yjc0MmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzdNYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACCP5XnWL6ZLxlR7dP50zajBYUEbbZrOzgNDMuCGxK0Oi+cw+R3Lbkjw
osuXAa92XeHa10niRH8aozYbFH1K/XwVqc9CjmzkKJ7Cg5D/3VnEtFjEN7psTAK9
TOfYqnxQ4DxcvNH2eGTYT2q9r/K76/6jzLcsUZKH3tjCzXzP89NSL0GWhvYICu81
FvX625i9ohuUc5870gMmoGIsTf5XIJPCp+TRnYKbXggBoAOP0NifrN6ScYcD87zN
aV1cwN5/gV04qEb0eWuG6K4MnTSlLDxlO/7F8CCBJTzF7M6enROwmfZqCLpF46kr
vN33EMGLZnpY2X79n/O0OXNzHNwqzNk=
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:04:52 2026 by rpki-client