Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/24b6be5f-fd40-3f9c-8e6b-22433d4d72d2.roa
File:                     24b6be5f-fd40-3f9c-8e6b-22433d4d72d2.roa (raw, json)
Hash identifier:          bLtsBPsksOo5VD8yswFqXc3or5K9p2/+umcBjNNX54Q=
Subject key identifier:   4C:87:3C:B2:02:CD:60:67:8E:23:40:E4:63:4F:7B:44:D1:1B:FB:BE
Certificate issuer:       /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff
Certificate serial:       010D0C9F4328584F35E7CB69DF02F4834DC96900
Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/24b6be5f-fd40-3f9c-8e6b-22433d4d72d2.roa
Signing time:             Fri 18 Sep 2026 01:00:12 +0000
ROA not before:           Fri 18 Sep 2026 01:00:12 +0000
ROA not after:            Thu 17 Dec 2026 02:00:12 +0000
asID:                     397423
IP address blocks:        68.233.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:35:e7:cb:69:df:02:f4:83:4d:c9:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff
        Validity
            Not Before: Sep 18 01:00:12 2026 GMT
            Not After : Dec 17 02:00:12 2026 GMT
        Subject: CN=b01c6236-2a15-4e07-b534-4a19d86f0ea1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0e:fe:f9:fd:75:67:21:13:34:35:be:5e:10:
                    87:dd:ac:fb:6f:9b:e8:5b:08:80:72:02:58:7a:a8:
                    c0:df:c3:e7:1f:6c:91:fa:ec:4b:2d:f9:65:f3:56:
                    0b:d4:a1:26:b8:a7:48:d3:6b:2b:a1:7b:96:e1:7d:
                    c5:d0:1a:a0:65:3a:8a:93:73:f4:20:5f:10:99:3f:
                    b2:51:94:ef:dd:ec:29:4b:f8:97:3b:03:63:c7:ac:
                    d3:30:aa:05:37:1b:88:bd:8b:88:58:fd:4d:22:a2:
                    d8:d8:ac:35:52:ab:ad:3b:0f:05:90:f6:71:f3:ef:
                    b2:5a:8b:6f:d5:1c:f6:44:59:bc:5a:1d:c4:eb:ff:
                    0f:02:ae:7e:f9:ce:d9:1d:35:14:71:6b:64:f5:0b:
                    03:74:ad:2e:5f:ea:06:fd:56:1a:d7:f6:00:40:30:
                    2d:2f:ae:fe:6c:eb:d5:23:c6:8b:15:f0:5e:7b:25:
                    2d:c1:81:c9:33:2c:5c:98:de:28:57:6b:83:58:cd:
                    3d:d9:3c:f1:42:02:46:5a:f2:33:43:d6:42:45:36:
                    9e:1e:95:2f:1a:96:c7:0d:c9:a1:25:79:5b:93:5e:
                    77:80:af:84:d8:aa:92:7e:eb:02:f3:25:96:e8:6b:
                    e1:a4:15:7e:54:1f:37:32:cc:df:91:8e:e1:64:f8:
                    cc:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:87:3C:B2:02:CD:60:67:8E:23:40:E4:63:4F:7B:44:D1:1B:FB:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/24b6be5f-fd40-3f9c-8e6b-22433d4d72d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl

            X509v3 Authority Key Identifier:
                keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.233.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:42:a6:ad:dc:8d:e6:85:33:19:87:fa:a5:85:f5:c4:18:94:
         90:df:99:b3:bc:84:8f:e2:79:3f:79:0c:a5:55:9c:a8:4c:29:
         aa:e7:3c:9d:8d:5c:c6:67:ee:9b:45:07:92:fe:df:47:8c:89:
         77:f8:11:98:fd:50:55:2a:93:c2:8a:84:4d:5c:94:9d:66:a4:
         84:81:19:be:f7:13:64:05:d2:50:05:e8:f4:ab:58:11:f2:51:
         f8:fb:56:3d:b7:14:6c:41:b1:dc:28:1b:53:9c:ca:cf:a5:47:
         a8:48:c9:14:3e:4d:1b:17:5b:40:71:e5:93:fc:38:d5:5a:9b:
         95:fa:d7:0e:e3:09:df:67:1f:1e:13:01:4e:69:62:51:7b:2f:
         f7:02:f3:e9:71:4c:ad:ba:af:06:a1:86:5e:0a:d8:15:22:04:
         a0:01:48:b2:6e:cd:45:e6:11:42:25:e6:01:81:8c:c9:74:9b:
         5a:fb:9a:18:3a:42:55:42:08:28:aa:76:15:ea:bb:14:8a:3c:
         06:1f:28:c4:c6:82:7a:1d:a7:3a:df:4d:08:fa:cf:c6:0e:6f:
         57:c0:99:8a:4c:d9:02:42:81:e9:1b:d1:69:4b:7d:f8:07:75:
         c5:95:e9:02:b3:18:9b:cf:ed:24:93:7f:c0:78:50:20:af:52:
         4c:4e:98:e8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8158tp3wL0g03JaQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGJkNWJjMWEtNWY0OC00Y2U3LWI5NTItYjk0YjhlY2U4
N2ZmMB4XDTI2MDkxODAxMDAxMloXDTI2MTIxNzAyMDAxMlowLzEtMCsGA1UEAxMk
YjAxYzYyMzYtMmExNS00ZTA3LWI1MzQtNGExOWQ4NmYwZWExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3g7++f11ZyETNDW+XhCH3az7b5voWwiAcgJY
eqjA38PnH2yR+uxLLfll81YL1KEmuKdI02sroXuW4X3F0BqgZTqKk3P0IF8QmT+y
UZTv3ewpS/iXOwNjx6zTMKoFNxuIvYuIWP1NIqLY2Kw1UqutOw8FkPZx8++yWotv
1Rz2RFm8Wh3E6/8PAq5++c7ZHTUUcWtk9QsDdK0uX+oG/VYa1/YAQDAtL67+bOvV
I8aLFfBeeyUtwYHJMyxcmN4oV2uDWM092TzxQgJGWvIzQ9ZCRTaeHpUvGpbHDcmh
JXlbk153gK+E2KqSfusC8yWW6GvhpBV+VB83MszfkY7hZPjMYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEyHPLICzWBnjiNA5GNPe0TRG/u+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1
YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRiOGVjZTg3ZmYvMjRiNmJlNWYtZmQ0MC0z
ZjljLThlNmItMjI0MzNkNGQ3MmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGJkNWJjMWEtNWY0OC00Y2U3LWI5
NTItYjk0YjhlY2U4N2ZmLzhiZDViYzFhLTVmNDgtNGNlNy1iOTUyLWI5NGI4ZWNl
ODdmZi5jcmwwHwYDVR0jBBgwFoAUYaLNU5TNbnVpVnI59gs0FWwcdYcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRi
OGVjZTg3ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROkiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJdCpq3cjeaFMxmH+qWF9cQYlJDfmbO8hI/ieT95DKVVnKhMKarnPJ2N
XMZn7ptFB5L+30eMiXf4EZj9UFUqk8KKhE1clJ1mpISBGb73E2QF0lAF6PSrWBHy
Ufj7Vj23FGxBsdwoG1Ocys+lR6hIyRQ+TRsXW0Bx5ZP8ONVam5X61w7jCd9nHx4T
AU5pYlF7L/cC8+lxTK26rwahhl4K2BUiBKABSLJuzUXmEUIl5gGBjMl0m1r7mhg6
QlVCCCiqdhXquxSKPAYfKMTGgnodpzrfTQj6z8YOb1fAmYpM2QJCgekb0WlLffgH
dcWV6QKzGJvP7SSTf8B4UCCvUkxOmOg=
-----END CERTIFICATE-----
Generated at Wed Sep 23 01:35:35 2026 by rpki-client