Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48/fff01e26-8c69-32bd-b1ba-5567dbdd6213.roa
File:                     fff01e26-8c69-32bd-b1ba-5567dbdd6213.roa (raw, json)
Hash identifier:          DxSf8ARCfNRXvmMxmkHBpXznaIT23Njq9y38cXPLd6Y=
Subject key identifier:   9F:9E:4C:B1:FC:C3:B7:69:57:48:82:F5:3E:F2:55:F5:FA:97:E6:06
Certificate issuer:       /CN=dde9f29d-2580-453b-ad9f-2dca85edaa48
Certificate serial:       010D0C9F4328584EA7965E46DF392DBDE4C07100
Authority key identifier: 87:DB:F8:A2:F9:3B:FF:88:79:0B:06:0C:AF:B8:2D:43:1A:01:47:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48/fff01e26-8c69-32bd-b1ba-5567dbdd6213.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     26404
IP address blocks:        69.42.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48/dde9f29d-2580-453b-ad9f-2dca85edaa48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48/dde9f29d-2580-453b-ad9f-2dca85edaa48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:5e:46:df:39:2d:bd:e4:c0:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dde9f29d-2580-453b-ad9f-2dca85edaa48
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=a631925e-91b9-4710-a3b3-1fa69db44ab0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9e:6d:99:1a:33:d4:53:ec:6e:d6:10:80:56:
                    c0:9c:1d:83:29:14:3c:10:2f:e9:90:fb:26:79:85:
                    c4:7a:7e:39:98:1f:75:cc:98:a6:33:6a:19:a5:2a:
                    b7:f6:ea:d7:ae:82:13:1a:58:d4:86:cc:4c:a9:10:
                    62:d0:4b:f6:e4:e9:ec:6e:6b:27:64:58:9d:fe:bd:
                    b3:f5:17:59:fc:79:46:44:9b:93:4e:4c:f4:65:53:
                    b0:3c:87:bc:53:92:48:7f:24:82:f6:a1:e4:32:03:
                    e5:60:21:25:69:8e:b6:bf:ca:5d:05:20:6f:6c:72:
                    2d:9a:e0:21:9e:22:e8:42:86:c5:44:86:ba:77:3d:
                    42:56:6c:5f:b8:c5:22:dc:5a:24:84:83:b1:80:15:
                    56:c9:e6:f9:38:65:fa:34:5a:9d:41:37:0b:30:a8:
                    3d:e1:68:56:d5:79:31:52:8b:cc:0a:41:d1:8f:70:
                    24:d4:9b:91:95:44:59:61:15:c3:6b:d7:7d:70:43:
                    b8:d3:61:1f:00:ce:a8:78:c5:bd:34:a1:5b:62:bd:
                    a6:c6:8e:70:73:a0:37:c4:39:e8:d6:c0:8a:67:3d:
                    3f:64:ac:66:67:95:70:ea:0b:e3:b2:13:cf:d3:97:
                    28:e8:0a:bd:f9:32:22:84:7b:2b:a4:53:d5:d1:78:
                    10:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:9E:4C:B1:FC:C3:B7:69:57:48:82:F5:3E:F2:55:F5:FA:97:E6:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48/fff01e26-8c69-32bd-b1ba-5567dbdd6213.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48/dde9f29d-2580-453b-ad9f-2dca85edaa48.crl

            X509v3 Authority Key Identifier:
                keyid:87:DB:F8:A2:F9:3B:FF:88:79:0B:06:0C:AF:B8:2D:43:1A:01:47:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.42.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:b8:b8:80:04:c9:b0:91:b9:25:8f:d3:1f:50:04:06:0a:3f:
         87:d0:2e:cb:ee:91:c5:6c:b4:c4:82:5b:8c:c7:a5:20:f9:42:
         86:c3:08:12:2b:0a:0c:9b:7d:42:c2:9c:0a:ca:ef:29:0b:bd:
         d4:9b:39:65:47:ea:29:b5:2b:2e:82:73:f9:fe:cb:6a:59:eb:
         59:20:84:fc:9b:f7:4b:80:3b:32:4f:54:e2:4c:87:f7:3d:c6:
         fa:16:13:df:1a:9a:f7:70:1b:ff:15:3f:90:96:0b:e4:2b:35:
         44:01:b5:f6:0a:e3:ac:e4:72:86:6d:ff:11:40:2c:ae:ac:9e:
         ab:a2:13:02:9c:c0:72:6d:ff:b2:27:5e:3f:fa:38:88:be:cf:
         aa:d1:bb:cb:84:2b:e5:f3:54:e0:c4:0f:e2:98:b9:70:3b:b4:
         b1:1a:39:a1:04:11:5d:6f:b8:ff:80:26:7b:73:20:fc:32:21:
         99:a4:f9:41:f2:e4:29:9d:b8:08:70:53:63:9d:af:95:bf:c7:
         f2:f1:34:66:6c:be:8b:eb:8d:12:eb:95:90:aa:d9:61:3e:30:
         94:6e:3f:b9:4c:88:55:a0:c4:4f:2a:31:51:7b:27:10:4f:8a:
         ff:d9:22:d2:2d:28:02:69:7c:4b:cb:a1:10:85:11:a6:1b:15:
         4d:93:da:73
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nll5G3zktveTAcQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGRlOWYyOWQtMjU4MC00NTNiLWFkOWYtMmRjYTg1ZWRh
YTQ4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
YTYzMTkyNWUtOTFiOS00NzEwLWEzYjMtMWZhNjlkYjQ0YWIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZ5tmRoz1FPsbtYQgFbAnB2DKRQ8EC/pkPsm
eYXEen45mB91zJimM2oZpSq39urXroITGljUhsxMqRBi0Ev25OnsbmsnZFid/r2z
9RdZ/HlGRJuTTkz0ZVOwPIe8U5JIfySC9qHkMgPlYCElaY62v8pdBSBvbHItmuAh
niLoQobFRIa6dz1CVmxfuMUi3FokhIOxgBVWyeb5OGX6NFqdQTcLMKg94WhW1Xkx
UovMCkHRj3Ak1JuRlURZYRXDa9d9cEO402EfAM6oeMW9NKFbYr2mxo5wc6A3xDno
1sCKZz0/ZKxmZ5Vw6gvjshPP05co6Aq9+TIihHsrpFPV0XgQAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ+eTLH8w7dpV0iC9T7yVfX6l+YGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kZGU5
ZjI5ZC0yNTgwLTQ1M2ItYWQ5Zi0yZGNhODVlZGFhNDgvZmZmMDFlMjYtOGM2OS0z
MmJkLWIxYmEtNTU2N2RiZGQ2MjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGRlOWYyOWQtMjU4MC00NTNiLWFk
OWYtMmRjYTg1ZWRhYTQ4L2RkZTlmMjlkLTI1ODAtNDUzYi1hZDlmLTJkY2E4NWVk
YWE0OC5jcmwwHwYDVR0jBBgwFoAUh9v4ovk7/4h5CwYMr7gtQxoBRxUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kZGU5ZjI5ZC0yNTgwLTQ1M2ItYWQ5Zi0yZGNh
ODVlZGFhNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERSrAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFK4uIAEybCRuSWP0x9QBAYKP4fQLsvukcVstMSCW4zHpSD5QobDCBIr
CgybfULCnArK7ykLvdSbOWVH6im1Ky6Cc/n+y2pZ61kghPyb90uAOzJPVOJMh/c9
xvoWE98amvdwG/8VP5CWC+QrNUQBtfYK46zkcoZt/xFALK6snquiEwKcwHJt/7In
Xj/6OIi+z6rRu8uEK+XzVODED+KYuXA7tLEaOaEEEV1vuP+AJntzIPwyIZmk+UHy
5CmduAhwU2Odr5W/x/LxNGZsvovrjRLrlZCq2WE+MJRuP7lMiFWgxE8qMVF7JxBP
iv/ZItItKAJpfEvLoRCFEaYbFU2T2nM=
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:35:45 2026 by rpki-client