Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/0fa48090-d929-31dd-8b0e-1378908185e2.roa
File:                     0fa48090-d929-31dd-8b0e-1378908185e2.roa (raw, json)
Hash identifier:          Jg6uNahUGsVkEJCsVQhmTGwnMJ75Fc/AgAlggaUpQT4=
Subject key identifier:   39:6A:1B:41:08:51:AD:08:E1:A0:7E:49:5A:F7:08:FB:2E:77:9B:28
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584D7E353D99C63E7A55208F3700
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/0fa48090-d929-31dd-8b0e-1378908185e2.roa
Signing time:             Mon 13 Apr 2026 13:00:30 +0000
ROA not before:           Mon 13 Apr 2026 13:00:30 +0000
ROA not after:            Sun 12 Jul 2026 13:00:30 +0000
asID:                     20001
IP address blocks:        68.234.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7e:35:3d:99:c6:3e:7a:55:20:8f:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Apr 13 13:00:30 2026 GMT
            Not After : Jul 12 13:00:30 2026 GMT
        Subject: CN=ce2d0da3-55b5-4cfa-9947-a7b39fa1239d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:25:d0:a8:f6:08:7b:65:55:64:ef:cd:e2:dc:
                    ce:6a:04:fe:56:f2:32:41:2b:67:ae:ff:62:7d:37:
                    c4:db:d6:b2:1f:f8:17:fb:3e:a7:10:e1:a2:fb:f6:
                    e8:d0:d2:ff:1d:e1:79:8d:b2:4d:3b:de:6a:34:d2:
                    14:ab:bb:8f:e1:37:f8:3e:b9:d6:2b:2b:d8:58:5f:
                    d4:b1:7c:35:ec:5a:d7:a4:2f:fc:fc:dc:30:32:9b:
                    9a:40:48:e1:35:f5:4d:5b:0b:cd:92:f1:63:7c:43:
                    ba:e6:a9:23:2f:72:12:a4:7c:c4:7d:f4:b2:15:8a:
                    15:3b:76:97:ea:cc:4b:c6:84:79:d3:b1:1a:3a:5b:
                    c4:c0:68:fa:40:ec:68:f2:76:f4:a4:59:d5:ed:d0:
                    e9:cc:7e:68:56:27:c9:3e:8c:90:65:92:15:b1:b5:
                    74:c2:83:2a:50:e4:17:8f:61:28:26:9d:2e:0a:ae:
                    b7:3f:3b:f3:59:82:4a:63:88:ee:1f:f1:99:83:37:
                    82:76:f9:a4:ca:37:8e:67:f0:ce:e9:c5:58:25:2d:
                    98:88:e2:b6:05:66:59:28:d3:0c:87:fa:73:8e:85:
                    e7:6b:ff:ab:97:f1:be:d0:1f:3b:86:21:60:63:ed:
                    31:a9:e1:32:ae:97:8f:f5:6f:cf:e7:21:35:b6:ee:
                    e0:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:6A:1B:41:08:51:AD:08:E1:A0:7E:49:5A:F7:08:FB:2E:77:9B:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/0fa48090-d929-31dd-8b0e-1378908185e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.234.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:59:a2:ee:6d:ac:75:84:6a:c4:a1:4f:83:87:6f:62:d4:08:
         f3:c6:39:1d:51:56:34:7a:c7:e7:93:93:25:b6:ee:98:bc:81:
         29:ca:6d:52:57:f5:99:d7:07:a1:7a:3d:bb:de:93:cf:b1:3c:
         ef:dc:a3:b6:3b:60:4b:1a:1f:ee:b2:43:88:3e:86:b8:4f:f4:
         65:68:2b:87:63:41:65:6e:10:e1:0d:f5:63:d6:3f:6e:a1:fe:
         2c:ab:ea:33:c1:45:cb:dc:11:a9:d7:69:32:72:8c:8b:5b:3a:
         1d:ed:3d:84:77:2e:09:65:13:23:7c:8c:c7:25:3e:8e:54:98:
         fd:40:d4:7c:86:6e:f8:40:a5:54:45:64:e6:93:e8:e0:65:4b:
         a8:39:d2:00:6e:7e:7f:68:5e:23:a1:4c:4a:e5:cc:9d:2c:f5:
         4b:7f:d9:ff:2b:c5:9e:20:50:3f:4f:e1:e3:ab:63:5d:b9:00:
         80:66:7e:4c:c9:26:d9:8b:7e:0a:7b:0d:26:43:46:c8:14:24:
         f6:4e:3a:63:e7:11:f1:fb:25:6d:50:67:40:3f:5e:54:f4:99:
         4c:2c:95:9e:77:2d:4b:e8:5f:31:d1:f6:78:7b:dc:6c:46:1a:
         f1:61:c9:c6:f0:1d:be:a2:e2:fe:98:3f:61:bf:d1:c8:34:4f:
         31:16:85:22
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1+NT2Zxj56VSCPNwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI2MDQxMzEzMDAzMFoXDTI2MDcxMjEzMDAzMFowLzEtMCsGA1UEAxMk
Y2UyZDBkYTMtNTViNS00Y2ZhLTk5NDctYTdiMzlmYTEyMzlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCXQqPYIe2VVZO/N4tzOagT+VvIyQStnrv9i
fTfE29ayH/gX+z6nEOGi+/bo0NL/HeF5jbJNO95qNNIUq7uP4Tf4PrnWKyvYWF/U
sXw17FrXpC/8/NwwMpuaQEjhNfVNWwvNkvFjfEO65qkjL3ISpHzEffSyFYoVO3aX
6sxLxoR507EaOlvEwGj6QOxo8nb0pFnV7dDpzH5oVifJPoyQZZIVsbV0woMqUOQX
j2EoJp0uCq63PzvzWYJKY4juH/GZgzeCdvmkyjeOZ/DO6cVYJS2YiOK2BWZZKNMM
h/pzjoXna/+rl/G+0B87hiFgY+0xqeEyrpeP9W/P5yE1tu7gWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDlqG0EIUa0I4aB+SVr3CPsud5soMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvMGZhNDgwOTAtZDkyOS0z
MWRkLThiMGUtMTM3ODkwODE4NWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROooMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMBZou5trHWEasShT4OHb2LUCPPGOR1RVjR6x+eTkyW27pi8gSnKbVJX
9ZnXB6F6Pbvek8+xPO/co7Y7YEsaH+6yQ4g+hrhP9GVoK4djQWVuEOEN9WPWP26h
/iyr6jPBRcvcEanXaTJyjItbOh3tPYR3LgllEyN8jMclPo5UmP1A1HyGbvhApVRF
ZOaT6OBlS6g50gBufn9oXiOhTErlzJ0s9Ut/2f8rxZ4gUD9P4eOrY125AIBmfkzJ
JtmLfgp7DSZDRsgUJPZOOmPnEfH7JW1QZ0A/XlT0mUwslZ53LUvoXzHR9nh73GxG
GvFhycbwHb6i4v6YP2G/0cg0TzEWhSI=
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:06:39 2026 by rpki-client