Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/95b95446-035a-3b2b-aefd-734f3fb5f220.roa
File:                     95b95446-035a-3b2b-aefd-734f3fb5f220.roa (raw, json)
Hash identifier:          TLet8HGCCdGNxoiQ1R+WxkiTF8F4FQhyKJ/Qy31tDis=
Subject key identifier:   CB:15:2C:77:DD:99:2B:08:01:8F:34:FF:6D:9B:B1:AB:F9:23:10:FF
Certificate issuer:       /CN=d47a94a4-ac39-4383-91f3-389070353c6d
Certificate serial:       010D0C9F4328584E253F0564DD8B1AF8530765C0
Authority key identifier: 3E:0C:D4:A2:7F:33:8F:7F:84:15:BB:CA:33:D1:2E:95:B9:EA:73:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/95b95446-035a-3b2b-aefd-734f3fb5f220.roa
Signing time:             Fri 12 Jun 2026 09:00:11 +0000
ROA not before:           Fri 12 Jun 2026 09:00:11 +0000
ROA not after:            Thu 10 Sep 2026 09:00:11 +0000
asID:                     397293
IP address blocks:        68.69.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/d47a94a4-ac39-4383-91f3-389070353c6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/d47a94a4-ac39-4383-91f3-389070353c6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:3f:05:64:dd:8b:1a:f8:53:07:65:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d47a94a4-ac39-4383-91f3-389070353c6d
        Validity
            Not Before: Jun 12 09:00:11 2026 GMT
            Not After : Sep 10 09:00:11 2026 GMT
        Subject: CN=34ba2933-50db-45e4-9771-3c41cc2fcdce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9e:4e:0d:d5:d6:d0:ad:1c:55:7b:b8:41:10:
                    33:b9:6d:f0:e8:1f:d4:0a:ee:30:db:fb:a9:93:e0:
                    af:d1:c7:e4:61:e7:8c:b9:ea:0e:55:2c:20:e4:8b:
                    6f:bc:b3:75:fd:b3:f8:91:9f:7d:34:f9:3e:91:9c:
                    f1:3f:a8:59:33:5f:d3:b0:cc:b1:84:67:db:38:65:
                    21:6e:24:6e:72:a2:e0:4e:9c:fa:17:20:a7:07:f0:
                    de:ab:fd:2f:05:5e:33:d7:86:70:b1:93:96:ff:f6:
                    7b:76:a0:d8:6f:07:c7:f2:2b:e4:d9:13:a6:6c:cf:
                    70:36:10:91:db:3f:27:0a:8b:5f:70:36:34:f4:5a:
                    a9:ce:2e:ef:23:2e:51:79:d8:45:99:b2:85:53:5e:
                    f6:04:d4:6d:de:a7:3c:aa:35:fc:39:10:68:f5:41:
                    fa:f4:19:98:d2:de:93:f4:d9:65:a8:f3:ca:20:11:
                    51:2a:48:9a:74:97:16:00:b2:45:c2:7e:dc:2c:92:
                    bd:b5:8a:cb:d7:cc:cf:c7:bf:ef:0d:93:8d:1d:aa:
                    bf:20:c3:f2:50:80:ff:f3:36:5e:84:c3:c0:ed:33:
                    c8:b8:06:9c:a7:34:94:cc:83:19:56:a2:35:bf:ba:
                    84:48:67:9a:57:81:9e:f4:cb:5f:68:97:57:f4:67:
                    a2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:15:2C:77:DD:99:2B:08:01:8F:34:FF:6D:9B:B1:AB:F9:23:10:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/95b95446-035a-3b2b-aefd-734f3fb5f220.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/d47a94a4-ac39-4383-91f3-389070353c6d.crl

            X509v3 Authority Key Identifier:
                keyid:3E:0C:D4:A2:7F:33:8F:7F:84:15:BB:CA:33:D1:2E:95:B9:EA:73:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.69.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:6b:84:32:3e:ce:8f:0a:a6:66:e2:54:31:b1:ad:6b:1d:70:
         95:44:d5:7b:db:09:88:6a:36:49:1c:f2:75:48:a6:32:aa:4e:
         29:e6:87:bc:73:e4:74:bc:13:4a:03:c7:2b:0a:ea:2d:5f:eb:
         49:b3:5d:81:9c:e4:2d:39:25:0b:5b:bb:3f:fe:e1:33:bc:d0:
         e7:e4:79:5a:ef:c0:67:5e:40:09:a2:6b:dd:0c:02:94:8a:44:
         6a:33:d8:a5:b2:78:eb:4d:0c:32:ea:a5:91:f5:79:4b:7c:5b:
         e7:9a:f2:02:b9:c4:4a:0c:95:61:e0:65:e9:9f:c6:0b:0a:19:
         bb:d9:fb:65:a1:f9:91:4d:15:cd:59:b4:3a:9c:3e:93:a1:2c:
         67:54:1c:3d:d3:2c:2f:06:c6:cd:60:92:f0:74:f1:d5:9e:db:
         61:f5:25:72:c8:12:72:48:4f:d4:e7:39:ba:70:4a:3b:15:87:
         7e:8c:38:07:3f:a2:a0:44:3a:7e:4c:85:ee:85:96:2a:50:54:
         c2:53:80:be:a1:2b:b4:a5:80:8b:59:1f:e5:3c:15:2f:d6:a6:
         f9:23:76:4e:61:cb:e5:2e:1a:9a:ad:72:e1:62:04:b1:77:c7:
         72:48:e7:c2:02:1b:c9:71:63:c6:d6:fa:fe:99:28:a6:52:26:
         11:f0:c7:a0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4lPwVk3Ysa+FMHZcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDQ3YTk0YTQtYWMzOS00MzgzLTkxZjMtMzg5MDcwMzUz
YzZkMB4XDTI2MDYxMjA5MDAxMVoXDTI2MDkxMDA5MDAxMVowLzEtMCsGA1UEAxMk
MzRiYTI5MzMtNTBkYi00NWU0LTk3NzEtM2M0MWNjMmZjZGNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJ5ODdXW0K0cVXu4QRAzuW3w6B/UCu4w2/up
k+Cv0cfkYeeMueoOVSwg5ItvvLN1/bP4kZ99NPk+kZzxP6hZM1/TsMyxhGfbOGUh
biRucqLgTpz6FyCnB/Deq/0vBV4z14ZwsZOW//Z7dqDYbwfH8ivk2ROmbM9wNhCR
2z8nCotfcDY09Fqpzi7vIy5RedhFmbKFU172BNRt3qc8qjX8ORBo9UH69BmY0t6T
9NllqPPKIBFRKkiadJcWALJFwn7cLJK9tYrL18zPx7/vDZONHaq/IMPyUID/8zZe
hMPA7TPIuAacpzSUzIMZVqI1v7qESGeaV4Ge9MtfaJdX9GeiXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMsVLHfdmSsIAY80/22bsav5IxD/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kNDdh
OTRhNC1hYzM5LTQzODMtOTFmMy0zODkwNzAzNTNjNmQvOTViOTU0NDYtMDM1YS0z
YjJiLWFlZmQtNzM0ZjNmYjVmMjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDQ3YTk0YTQtYWMzOS00MzgzLTkx
ZjMtMzg5MDcwMzUzYzZkL2Q0N2E5NGE0LWFjMzktNDM4My05MWYzLTM4OTA3MDM1
M2M2ZC5jcmwwHwYDVR0jBBgwFoAUPgzUon8zj3+EFbvKM9Eulbnqc40wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9kNDdhOTRhNC1hYzM5LTQzODMtOTFmMy0zODkw
NzAzNTNjNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCREUIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIRrhDI+zo8KpmbiVDGxrWsdcJVE1XvbCYhqNkkc8nVIpjKqTinmh7xz
5HS8E0oDxysK6i1f60mzXYGc5C05JQtbuz/+4TO80OfkeVrvwGdeQAmia90MApSK
RGoz2KWyeOtNDDLqpZH1eUt8W+ea8gK5xEoMlWHgZemfxgsKGbvZ+2Wh+ZFNFc1Z
tDqcPpOhLGdUHD3TLC8Gxs1gkvB08dWe22H1JXLIEnJIT9TnObpwSjsVh36MOAc/
oqBEOn5Mhe6FlipQVMJTgL6hK7SlgItZH+U8FS/Wpvkjdk5hy+UuGpqtcuFiBLF3
x3JI58ICG8lxY8bW+v6ZKKZSJhHwx6A=
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:54:04 2026 by rpki-client