Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48/56f3e8d5-c8b8-365b-a649-5cf63058640c.roa
File:                     56f3e8d5-c8b8-365b-a649-5cf63058640c.roa (raw, json)
Hash identifier:          UeUg1+HangIOFdLWQ4GvfKiT9qzcOjRxaYGa5BFEqIs=
Subject key identifier:   90:95:34:5D:F8:37:06:D9:67:0E:A8:1A:71:9B:6A:23:3B:4F:F9:CF
Certificate issuer:       /CN=dde9f29d-2580-453b-ad9f-2dca85edaa48
Certificate serial:       010D0C9F4328584F4976EACB57158B55D3A00C00
Authority key identifier: 87:DB:F8:A2:F9:3B:FF:88:79:0B:06:0C:AF:B8:2D:43:1A:01:47:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48/56f3e8d5-c8b8-365b-a649-5cf63058640c.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     394968
IP address blocks:        69.42.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48/dde9f29d-2580-453b-ad9f-2dca85edaa48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48/dde9f29d-2580-453b-ad9f-2dca85edaa48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:ea:cb:57:15:8b:55:d3:a0:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dde9f29d-2580-453b-ad9f-2dca85edaa48
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=cde2bc6c-04ff-46be-a78b-926e17347763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f6:41:44:62:b5:9b:85:fe:bc:b2:9c:9b:99:
                    e0:64:69:a4:29:ae:62:a5:a8:76:45:f5:a4:7d:5c:
                    6b:54:e3:66:ca:db:9b:5d:ea:9a:1a:45:c6:80:ac:
                    64:2e:e6:8c:5c:49:fe:11:ce:b7:ef:ef:80:95:cd:
                    a5:5d:5a:36:39:c1:88:d0:04:c6:26:28:21:33:74:
                    3c:98:02:23:30:89:d8:a9:36:e8:61:52:ba:32:eb:
                    08:5d:e9:0c:83:de:14:e6:08:1b:d9:42:cc:29:67:
                    15:cf:c2:df:e4:7d:e1:fd:d4:da:22:b5:06:72:31:
                    ca:2e:41:bc:1e:42:e4:13:e9:bd:44:57:8f:15:eb:
                    a0:69:3e:b8:fc:db:b8:66:dd:62:0c:4d:75:e0:15:
                    01:89:83:56:f5:33:63:d5:54:3a:96:b4:a8:3b:56:
                    a3:29:88:51:50:94:c8:57:8d:cc:f9:1e:b3:7a:11:
                    95:70:23:8d:70:bd:86:d4:c3:27:64:be:6d:74:64:
                    c6:01:54:83:90:da:da:07:79:5f:a5:6f:e8:b8:60:
                    7e:3a:03:d6:ad:56:42:cf:b2:04:70:f0:33:d2:48:
                    70:0d:db:68:73:f1:95:5e:2b:f3:99:39:de:b2:67:
                    68:e2:5f:eb:b3:2f:af:7c:96:8c:79:3f:c6:11:9b:
                    cb:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:95:34:5D:F8:37:06:D9:67:0E:A8:1A:71:9B:6A:23:3B:4F:F9:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48/56f3e8d5-c8b8-365b-a649-5cf63058640c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48/dde9f29d-2580-453b-ad9f-2dca85edaa48.crl

            X509v3 Authority Key Identifier:
                keyid:87:DB:F8:A2:F9:3B:FF:88:79:0B:06:0C:AF:B8:2D:43:1A:01:47:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.42.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:57:af:41:4d:e4:2d:36:68:f0:f8:f9:ba:3b:71:72:39:a6:
         43:da:8e:d7:45:cb:e9:d7:51:f9:29:09:19:88:12:90:0a:81:
         df:64:5e:01:9c:69:97:d2:e8:46:d9:fa:c5:72:a2:75:04:bf:
         d5:11:01:49:b2:12:3f:4d:f2:d3:24:11:36:ee:4e:4b:85:62:
         98:8e:3e:9c:d8:d6:24:03:15:d5:31:0d:a6:83:cb:1c:27:6a:
         34:cc:ba:2a:58:31:13:23:b6:36:97:a7:6b:38:96:c6:5d:4b:
         f6:3f:43:c3:15:4f:8b:52:45:91:c4:11:90:3f:36:dc:1a:c3:
         04:ff:db:96:4a:5c:73:af:de:29:4b:b2:3f:82:75:46:73:ec:
         34:1f:32:81:16:2d:6b:eb:1b:eb:e4:25:13:37:b7:b8:e0:3f:
         0b:cd:ad:97:49:3e:7b:77:bd:a4:f8:ee:06:79:81:a3:ff:f0:
         b2:0a:54:fa:75:a3:3e:00:59:46:2a:49:7d:40:a8:a2:4c:81:
         3a:73:15:3d:a2:59:74:b9:73:1e:cb:a2:0a:42:7e:ab:1a:56:
         41:4a:33:dc:22:51:0c:42:c3:71:af:40:2b:d4:8a:7b:54:44:
         93:11:95:9b:d6:2c:ed:db:98:c8:99:8a:e3:ce:25:26:4a:db:
         fd:9c:31:61
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdurLVxWLVdOgDAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGRlOWYyOWQtMjU4MC00NTNiLWFkOWYtMmRjYTg1ZWRh
YTQ4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
Y2RlMmJjNmMtMDRmZi00NmJlLWE3OGItOTI2ZTE3MzQ3NzYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifZBRGK1m4X+vLKcm5ngZGmkKa5ipah2RfWk
fVxrVONmytubXeqaGkXGgKxkLuaMXEn+Ec637++Alc2lXVo2OcGI0ATGJighM3Q8
mAIjMInYqTboYVK6MusIXekMg94U5ggb2ULMKWcVz8Lf5H3h/dTaIrUGcjHKLkG8
HkLkE+m9RFePFeugaT64/Nu4Zt1iDE114BUBiYNW9TNj1VQ6lrSoO1ajKYhRUJTI
V43M+R6zehGVcCONcL2G1MMnZL5tdGTGAVSDkNraB3lfpW/ouGB+OgPWrVZCz7IE
cPAz0khwDdtoc/GVXivzmTnesmdo4l/rsy+vfJaMeT/GEZvLTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJCVNF34NwbZZw6oGnGbaiM7T/nPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kZGU5
ZjI5ZC0yNTgwLTQ1M2ItYWQ5Zi0yZGNhODVlZGFhNDgvNTZmM2U4ZDUtYzhiOC0z
NjViLWE2NDktNWNmNjMwNTg2NDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGRlOWYyOWQtMjU4MC00NTNiLWFk
OWYtMmRjYTg1ZWRhYTQ4L2RkZTlmMjlkLTI1ODAtNDUzYi1hZDlmLTJkY2E4NWVk
YWE0OC5jcmwwHwYDVR0jBBgwFoAUh9v4ovk7/4h5CwYMr7gtQxoBRxUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kZGU5ZjI5ZC0yNTgwLTQ1M2ItYWQ5Zi0yZGNh
ODVlZGFhNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERSrAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKJXr0FN5C02aPD4+bo7cXI5pkPajtdFy+nXUfkpCRmIEpAKgd9kXgGc
aZfS6EbZ+sVyonUEv9URAUmyEj9N8tMkETbuTkuFYpiOPpzY1iQDFdUxDaaDyxwn
ajTMuipYMRMjtjaXp2s4lsZdS/Y/Q8MVT4tSRZHEEZA/NtwawwT/25ZKXHOv3ilL
sj+CdUZz7DQfMoEWLWvrG+vkJRM3t7jgPwvNrZdJPnt3vaT47gZ5gaP/8LIKVPp1
oz4AWUYqSX1AqKJMgTpzFT2iWXS5cx7LogpCfqsaVkFKM9wiUQxCw3GvQCvUintU
RJMRlZvWLO3bmMiZiuPOJSZK2/2cMWE=
-----END CERTIFICATE-----
Generated at Sat Sep 26 14:28:40 2026 by rpki-client