Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/65122dd1-be99-3fa0-b027-9b823f5a9852.roa
File:                     65122dd1-be99-3fa0-b027-9b823f5a9852.roa (raw, json)
Hash identifier:          DAQmt5ScvRWLiYX49UKBSpv5evPlgCFpJprULo0/ir8=
Subject key identifier:   E8:B7:94:62:A3:7E:BB:EA:E1:8F:CD:75:4A:47:01:C4:CA:B5:D5:1F
Certificate issuer:       /CN=69686900-f201-4b2c-a1c7-afb725abe47f
Certificate serial:       010D0C9F4328584DEDE0998C10E6D59EF27B2100
Authority key identifier: 46:CD:B7:E7:87:A9:20:32:5B:E6:E3:AA:56:58:59:CC:00:57:84:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/65122dd1-be99-3fa0-b027-9b823f5a9852.roa
Signing time:             Sat 23 May 2026 13:00:31 +0000
ROA not before:           Sat 23 May 2026 13:00:31 +0000
ROA not after:            Fri 21 Aug 2026 13:00:31 +0000
asID:                     0
IP address blocks:        209.63.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ed:e0:99:8c:10:e6:d5:9e:f2:7b:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69686900-f201-4b2c-a1c7-afb725abe47f
        Validity
            Not Before: May 23 13:00:31 2026 GMT
            Not After : Aug 21 13:00:31 2026 GMT
        Subject: CN=b43f73e7-cf99-453a-a5fe-6b4a91ff871f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:05:92:3f:f8:a2:00:e9:a0:0c:f8:bf:1f:cb:
                    5b:15:be:cc:33:ec:db:48:e0:6b:9c:a5:d6:d8:93:
                    16:46:88:5e:e9:fa:be:5e:cb:3b:1b:e3:bb:f1:b5:
                    86:02:4b:b5:c1:3b:06:be:c6:3c:5b:e7:ad:c3:68:
                    e6:27:99:8c:67:65:7d:f0:eb:b0:28:97:d5:7e:fb:
                    e7:8b:a5:52:6a:61:da:b4:fb:50:e2:47:50:18:d2:
                    52:5a:a3:22:ad:64:8b:0c:12:2d:df:ee:05:08:54:
                    e5:fa:81:04:99:3f:b1:f8:62:ea:8b:ea:0b:87:2c:
                    ef:59:4d:60:1c:5c:60:e5:23:e5:28:08:a0:96:6d:
                    21:60:4e:cc:44:3e:28:ed:97:d7:05:a9:c6:fa:b8:
                    55:3d:90:67:2c:bc:8b:ff:22:7f:14:de:31:7a:3b:
                    1c:65:73:4d:40:d5:47:41:84:e9:cf:7a:59:48:a2:
                    e0:34:2e:b4:bc:f5:6d:86:65:0f:74:91:13:c0:3b:
                    d8:4c:ed:d4:61:89:40:98:2d:92:8a:cc:62:1b:d7:
                    fe:37:d9:cb:21:43:cb:28:eb:4d:fe:ea:eb:e5:42:
                    d9:2f:a1:ed:e6:e0:ee:6b:14:e1:30:3d:ca:a6:73:
                    68:71:82:89:d8:4b:e0:7d:5c:d3:25:ad:64:25:9a:
                    f1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:B7:94:62:A3:7E:BB:EA:E1:8F:CD:75:4A:47:01:C4:CA:B5:D5:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/65122dd1-be99-3fa0-b027-9b823f5a9852.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.crl

            X509v3 Authority Key Identifier:
                keyid:46:CD:B7:E7:87:A9:20:32:5B:E6:E3:AA:56:58:59:CC:00:57:84:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.63.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:9c:e1:6d:90:ab:08:a2:45:9b:4d:b1:0a:e6:80:71:d1:96:
         9d:e6:bf:6e:fe:44:ad:4b:be:19:38:9c:5a:10:bd:40:99:ce:
         11:ad:bc:67:a0:a9:fa:49:0a:3d:8f:be:81:5d:a3:d6:bf:44:
         43:df:22:b7:97:b3:e6:b1:ef:e1:04:69:bd:01:c5:23:6e:15:
         a5:98:52:31:44:55:5c:d2:7b:47:99:12:84:30:c2:84:a3:81:
         8d:8c:82:5f:8c:77:07:93:d8:c6:87:b9:83:0f:7f:78:af:ca:
         0a:ad:ff:8d:db:cc:33:2b:ac:a4:2f:96:80:db:a8:13:35:e5:
         7c:83:73:d4:c6:aa:0f:8d:74:a9:44:fb:6a:37:67:8e:61:9d:
         9a:9d:45:1e:ba:de:67:b7:5a:e7:b2:49:32:59:34:9e:fc:ac:
         a8:0e:9c:6e:c0:98:a3:32:2c:76:24:a5:40:9f:2e:39:1b:fe:
         08:8d:46:0f:1f:3e:32:43:00:be:00:73:c2:b2:a7:de:1e:5f:
         55:6d:d3:54:2e:d3:57:7e:84:c6:ce:58:60:5c:36:2b:4b:1a:
         c8:a4:d0:17:ea:05:1c:b8:b9:b7:6f:f5:3e:7b:96:e1:25:e4:
         b6:19:b9:9f:85:9b:6f:43:02:9b:16:c7:4a:ec:31:7c:b6:47:
         75:3a:59:94
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3t4JmMEObVnvJ7IQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjk2ODY5MDAtZjIwMS00YjJjLWExYzctYWZiNzI1YWJl
NDdmMB4XDTI2MDUyMzEzMDAzMVoXDTI2MDgyMTEzMDAzMVowLzEtMCsGA1UEAxMk
YjQzZjczZTctY2Y5OS00NTNhLWE1ZmUtNmI0YTkxZmY4NzFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgWSP/iiAOmgDPi/H8tbFb7MM+zbSOBrnKXW
2JMWRohe6fq+Xss7G+O78bWGAku1wTsGvsY8W+etw2jmJ5mMZ2V98OuwKJfVfvvn
i6VSamHatPtQ4kdQGNJSWqMirWSLDBIt3+4FCFTl+oEEmT+x+GLqi+oLhyzvWU1g
HFxg5SPlKAiglm0hYE7MRD4o7ZfXBanG+rhVPZBnLLyL/yJ/FN4xejscZXNNQNVH
QYTpz3pZSKLgNC60vPVthmUPdJETwDvYTO3UYYlAmC2SisxiG9f+N9nLIUPLKOtN
/urr5ULZL6Ht5uDuaxThMD3KpnNocYKJ2EvgfVzTJa1kJZrxHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOi3lGKjfrvq4Y/NdUpHAcTKtdUfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82OTY4
NjkwMC1mMjAxLTRiMmMtYTFjNy1hZmI3MjVhYmU0N2YvNjUxMjJkZDEtYmU5OS0z
ZmEwLWIwMjctOWI4MjNmNWE5ODUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNjk2ODY5MDAtZjIwMS00YjJjLWEx
YzctYWZiNzI1YWJlNDdmLzY5Njg2OTAwLWYyMDEtNGIyYy1hMWM3LWFmYjcyNWFi
ZTQ3Zi5jcmwwHwYDVR0jBBgwFoAURs2354epIDJb5uOqVlhZzABXhPIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS82OTY4NjkwMC1mMjAxLTRiMmMtYTFjNy1hZmI3
MjVhYmU0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0T8IMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAACc4W2QqwiiRZtNsQrmgHHRlp3mv27+RK1Lvhk4nFoQvUCZzhGtvGeg
qfpJCj2PvoFdo9a/REPfIreXs+ax7+EEab0BxSNuFaWYUjFEVVzSe0eZEoQwwoSj
gY2Mgl+MdweT2MaHuYMPf3ivygqt/43bzDMrrKQvloDbqBM15XyDc9TGqg+NdKlE
+2o3Z45hnZqdRR663me3WueySTJZNJ78rKgOnG7AmKMyLHYkpUCfLjkb/giNRg8f
PjJDAL4Ac8Kyp94eX1Vt01Qu01d+hMbOWGBcNitLGsik0BfqBRy4ubdv9T57luEl
5LYZuZ+Fm29DApsWx0rsMXy2R3U6WZQ=
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:36:55 2026 by rpki-client