Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/3cbd2192-dd50-3039-9b40-d591803b93fc.roa
File:                     3cbd2192-dd50-3039-9b40-d591803b93fc.roa (raw, json)
Hash identifier:          PfZPXfyxQTMk8v64XThqcqt0iRABN4ItfBJHAOhCHEs=
Subject key identifier:   60:E6:5D:B1:62:A1:CF:C0:56:BF:19:5C:0D:A6:DB:A2:00:17:64:40
Certificate issuer:       /CN=911afcc4-db22-4282-acca-e1e676a5ae20
Certificate serial:       010D0C9F4328584EA2DFBC148C9D123627ED1200
Authority key identifier: 69:1A:B6:E8:3E:67:94:46:39:E2:EF:D1:4C:D5:E4:75:69:36:90:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/3cbd2192-dd50-3039-9b40-d591803b93fc.roa
Signing time:             Mon 27 Jul 2026 09:00:12 +0000
ROA not before:           Mon 27 Jul 2026 09:00:12 +0000
ROA not after:            Sun 25 Oct 2026 09:00:12 +0000
asID:                     16509
IP address blocks:        69.7.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/911afcc4-db22-4282-acca-e1e676a5ae20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/911afcc4-db22-4282-acca-e1e676a5ae20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a2:df:bc:14:8c:9d:12:36:27:ed:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=911afcc4-db22-4282-acca-e1e676a5ae20
        Validity
            Not Before: Jul 27 09:00:12 2026 GMT
            Not After : Oct 25 09:00:12 2026 GMT
        Subject: CN=8a365dd8-5258-4281-8047-c12d4dddcaf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:67:72:d2:1a:ed:cd:7a:3d:ed:db:38:68:bd:
                    42:99:9c:3c:c2:c7:82:33:7f:64:1a:0b:8a:ad:e9:
                    cf:e5:69:89:e9:fe:51:0c:c8:5f:56:1b:e9:d6:7f:
                    f3:ab:44:f4:45:99:da:c9:7e:20:74:65:76:72:11:
                    bc:57:76:d3:2c:6f:9f:e4:1b:ed:3d:5b:f9:85:54:
                    24:fa:af:6a:18:65:13:de:87:08:31:be:ff:c2:97:
                    43:12:0d:b7:74:f2:bf:39:fd:53:50:f8:30:bb:e4:
                    55:6f:f3:16:f9:2e:37:84:ba:78:49:97:6d:ed:10:
                    58:c2:01:0b:14:93:e8:14:19:0c:91:a2:6a:a3:32:
                    b3:3f:3f:ff:3b:84:cd:63:95:7e:23:d0:24:84:2e:
                    36:44:9a:44:31:35:ac:01:97:77:5c:0d:0a:ea:ed:
                    42:37:2e:7b:04:79:f7:3c:c7:cf:24:bd:d0:1f:c9:
                    06:2b:2d:5b:f8:c8:07:8a:99:1c:a3:d4:af:e6:a2:
                    58:9d:f3:be:59:56:37:7a:f4:d9:10:be:1f:8c:12:
                    ce:2c:da:4f:cf:08:df:49:5c:4b:54:ba:1d:27:ab:
                    15:28:8b:67:ea:a3:0d:d0:e3:f7:ca:b8:77:a2:08:
                    89:6f:10:1b:fa:ae:55:ed:b5:ae:4d:66:e1:55:ea:
                    f4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:E6:5D:B1:62:A1:CF:C0:56:BF:19:5C:0D:A6:DB:A2:00:17:64:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/3cbd2192-dd50-3039-9b40-d591803b93fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/911afcc4-db22-4282-acca-e1e676a5ae20.crl

            X509v3 Authority Key Identifier:
                keyid:69:1A:B6:E8:3E:67:94:46:39:E2:EF:D1:4C:D5:E4:75:69:36:90:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.7.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:ba:e0:88:ac:34:c5:ed:6f:56:48:ba:95:40:ac:af:90:5d:
         55:e0:8f:d8:63:ea:76:1f:77:1b:c1:f7:3c:74:28:eb:4f:f7:
         03:2f:d5:bf:60:42:08:63:f6:40:69:b5:69:77:e4:ef:65:de:
         11:d6:fe:ef:2a:fa:09:d0:63:f5:ed:a9:37:fe:d1:73:20:df:
         16:01:1c:bf:59:3d:5d:91:b4:f9:5e:59:b5:f6:a5:67:1f:0f:
         ca:be:e2:bb:44:81:98:36:4f:84:e8:0d:54:0d:f8:55:57:0d:
         cd:bc:f9:d0:9d:af:d3:95:c7:f2:47:4c:4f:ac:11:a8:b3:49:
         c7:b6:85:e5:46:a7:29:ff:90:1f:a4:fe:fa:ec:d4:7e:f8:3d:
         a2:35:45:0e:bc:f2:79:ea:8f:15:fc:90:25:a0:91:cd:35:45:
         8b:ce:99:1e:0a:aa:5a:97:e6:ee:15:5b:00:cc:c3:6d:09:0e:
         d2:2b:ba:de:45:33:3e:34:1d:9f:8f:44:1b:1c:7d:6b:b3:69:
         01:67:30:e1:3e:eb:bb:c0:a1:83:e5:44:35:7c:96:d6:ea:5d:
         37:72:a1:21:66:cd:24:c2:03:d3:87:ed:7a:a7:a9:80:a6:66:
         0b:62:bd:5f:12:54:70:eb:a6:03:0b:c9:a9:31:a1:da:7e:5b:
         b4:b1:27:8b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6i37wUjJ0SNiftEgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTExYWZjYzQtZGIyMi00MjgyLWFjY2EtZTFlNjc2YTVh
ZTIwMB4XDTI2MDcyNzA5MDAxMloXDTI2MTAyNTA5MDAxMlowLzEtMCsGA1UEAxMk
OGEzNjVkZDgtNTI1OC00MjgxLTgwNDctYzEyZDRkZGRjYWYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Gdy0hrtzXo97ds4aL1CmZw8wseCM39kGguK
renP5WmJ6f5RDMhfVhvp1n/zq0T0RZnayX4gdGV2chG8V3bTLG+f5BvtPVv5hVQk
+q9qGGUT3ocIMb7/wpdDEg23dPK/Of1TUPgwu+RVb/MW+S43hLp4SZdt7RBYwgEL
FJPoFBkMkaJqozKzPz//O4TNY5V+I9AkhC42RJpEMTWsAZd3XA0K6u1CNy57BHn3
PMfPJL3QH8kGKy1b+MgHipkco9Sv5qJYnfO+WVY3evTZEL4fjBLOLNpPzwjfSVxL
VLodJ6sVKItn6qMN0OP3yrh3ogiJbxAb+q5V7bWuTWbhVer06wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGDmXbFioc/AVr8ZXA2m26IAF2RAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85MTFh
ZmNjNC1kYjIyLTQyODItYWNjYS1lMWU2NzZhNWFlMjAvM2NiZDIxOTItZGQ1MC0z
MDM5LTliNDAtZDU5MTgwM2I5M2ZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTExYWZjYzQtZGIyMi00MjgyLWFj
Y2EtZTFlNjc2YTVhZTIwLzkxMWFmY2M0LWRiMjItNDI4Mi1hY2NhLWUxZTY3NmE1
YWUyMC5jcmwwHwYDVR0jBBgwFoAUaRq26D5nlEY54u/RTNXkdWk2kOswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85MTFhZmNjNC1kYjIyLTQyODItYWNjYS1lMWU2
NzZhNWFlMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARQeKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMu64IisNMXtb1ZIupVArK+QXVXgj9hj6nYfdxvB9zx0KOtP9wMv1b9g
Qghj9kBptWl35O9l3hHW/u8q+gnQY/XtqTf+0XMg3xYBHL9ZPV2RtPleWbX2pWcf
D8q+4rtEgZg2T4ToDVQN+FVXDc28+dCdr9OVx/JHTE+sEaizSce2heVGpyn/kB+k
/vrs1H74PaI1RQ688nnqjxX8kCWgkc01RYvOmR4KqlqX5u4VWwDMw20JDtIrut5F
Mz40HZ+PRBscfWuzaQFnMOE+67vAoYPlRDV8ltbqXTdyoSFmzSTCA9OH7XqnqYCm
ZgtivV8SVHDrpgMLyakxodp+W7SxJ4s=
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:36:46 2026 by rpki-client