Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/022dee98-3c5e-3384-a9cf-18457c19ae94.roa
File:                     022dee98-3c5e-3384-a9cf-18457c19ae94.roa (raw, json)
Hash identifier:          hHjvQfwBDOOLwjYzewy+Q8E4sqRtq+AQUAmgjl97syU=
Subject key identifier:   B7:C7:53:43:D7:F0:1F:37:C6:53:73:81:F7:65:A1:14:FC:D2:E3:9F
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F55F412A21EF9363EEE53EC40
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/022dee98-3c5e-3384-a9cf-18457c19ae94.roa
Signing time:             Tue 29 Sep 2026 12:30:56 +0000
ROA not before:           Tue 29 Sep 2026 12:30:56 +0000
ROA not after:            Mon 28 Dec 2026 13:30:56 +0000
asID:                     834
IP address blocks:        69.33.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:55:f4:12:a2:1e:f9:36:3e:ee:53:ec:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 29 12:30:56 2026 GMT
            Not After : Dec 28 13:30:56 2026 GMT
        Subject: CN=c8c35104-999f-47c5-8a09-07d5178589c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:62:e6:a7:d6:84:12:4d:de:87:cf:71:d0:8a:
                    07:34:f4:29:08:7c:20:d0:6e:96:e1:c7:55:cd:0c:
                    91:f7:14:b0:54:21:c7:4c:8c:28:f9:bd:61:82:61:
                    c9:65:6d:d2:e3:93:c7:82:4d:d1:28:aa:e1:56:fd:
                    f9:32:78:00:20:66:c0:ba:b9:24:4f:90:29:08:d5:
                    90:5b:d2:46:8c:52:8a:bd:f1:13:4f:52:26:66:95:
                    24:3f:15:8b:4c:41:f8:f7:33:c3:0b:30:37:52:ab:
                    0f:aa:20:b4:96:8c:7c:42:d5:e9:60:e8:29:6f:73:
                    5e:b0:32:7b:e3:95:9e:80:03:03:11:c2:08:49:09:
                    56:11:67:e5:d2:9c:af:21:c1:b5:c9:bd:fe:74:d9:
                    b1:2b:78:1e:e6:5d:56:58:83:eb:1e:48:b5:ac:e0:
                    ae:25:3c:ff:01:fe:8a:7b:a1:9e:86:9c:72:36:cd:
                    06:79:31:2d:0b:21:37:25:3b:ca:de:00:d4:94:5a:
                    cb:93:fa:45:08:18:b7:04:5b:42:68:f9:d9:4e:ae:
                    16:7a:25:a1:11:39:14:9c:1f:d5:ef:5a:cf:7e:ee:
                    13:56:b3:04:25:67:99:97:0d:03:bb:bf:90:6d:62:
                    aa:ee:90:83:51:70:74:33:ee:2d:fc:36:68:02:bb:
                    15:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:C7:53:43:D7:F0:1F:37:C6:53:73:81:F7:65:A1:14:FC:D2:E3:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/022dee98-3c5e-3384-a9cf-18457c19ae94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.33.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:d9:c8:a4:d7:6f:a1:80:f9:c2:60:c5:99:6c:a4:09:00:e9:
         a2:c1:2f:a8:0a:fd:72:51:95:a9:d4:6a:f4:29:ea:52:67:ab:
         c3:b2:18:39:5f:d9:95:72:20:81:af:cb:e9:cf:e0:1c:4c:6d:
         2c:86:ca:ee:d0:6c:c6:dc:60:2b:8f:2c:45:6a:5f:81:29:0a:
         b8:46:98:38:00:7c:d9:7a:39:c4:f8:79:2a:19:97:b1:5f:8e:
         25:50:94:01:34:5f:7f:61:8e:73:5e:5e:cd:0f:fa:2b:cc:a0:
         00:15:bf:d4:12:7d:43:b7:3e:f9:0a:2e:32:a5:19:44:76:be:
         cd:c2:63:82:37:b9:de:36:22:53:a0:73:7d:13:ce:91:26:cf:
         55:13:03:96:7d:86:0b:ad:1b:f6:ec:27:7d:9a:e3:1a:94:fb:
         19:eb:1b:36:8c:e6:cd:52:02:ed:4d:b3:1f:3f:32:8f:be:8d:
         32:7f:73:5f:d5:a0:5b:a9:55:8a:f4:68:6d:ee:18:c7:9c:72:
         11:9e:b9:0d:d9:27:54:dc:af:00:e6:eb:eb:2f:06:f0:20:d7:
         a0:0b:fb:cf:46:81:ce:9c:30:80:16:de:b7:f1:25:54:b8:26:
         5e:92:47:c1:e5:ce:6e:fe:09:0c:81:c7:24:9b:79:d2:bb:e5:
         18:f3:d9:3c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9V9BKiHvk2Pu5T7EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDkyOTEyMzA1NloXDTI2MTIyODEzMzA1NlowLzEtMCsGA1UEAxMk
YzhjMzUxMDQtOTk5Zi00N2M1LThhMDktMDdkNTE3ODU4OWM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2Lmp9aEEk3eh89x0IoHNPQpCHwg0G6W4cdV
zQyR9xSwVCHHTIwo+b1hgmHJZW3S45PHgk3RKKrhVv35MngAIGbAurkkT5ApCNWQ
W9JGjFKKvfETT1ImZpUkPxWLTEH49zPDCzA3UqsPqiC0lox8QtXpYOgpb3NesDJ7
45WegAMDEcIISQlWEWfl0pyvIcG1yb3+dNmxK3ge5l1WWIPrHki1rOCuJTz/Af6K
e6GehpxyNs0GeTEtCyE3JTvK3gDUlFrLk/pFCBi3BFtCaPnZTq4WeiWhETkUnB/V
71rPfu4TVrMEJWeZlw0Du7+QbWKq7pCDUXB0M+4t/DZoArsViwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLfHU0PX8B83xlNzgfdloRT80uOfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMDIyZGVlOTgtM2M1ZS0z
Mzg0LWE5Y2YtMTg0NTdjMTlhZTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARSHCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKLZyKTXb6GA+cJgxZlspAkA6aLBL6gK/XJRlanUavQp6lJnq8OyGDlf
2ZVyIIGvy+nP4BxMbSyGyu7QbMbcYCuPLEVqX4EpCrhGmDgAfNl6OcT4eSoZl7Ff
jiVQlAE0X39hjnNeXs0P+ivMoAAVv9QSfUO3PvkKLjKlGUR2vs3CY4I3ud42IlOg
c30TzpEmz1UTA5Z9hgutG/bsJ32a4xqU+xnrGzaM5s1SAu1Nsx8/Mo++jTJ/c1/V
oFupVYr0aG3uGMecchGeuQ3ZJ1TcrwDm6+svBvAg16AL+89Ggc6cMIAW3rfxJVS4
Jl6SR8Hlzm7+CQyBxySbedK75Rjz2Tw=
-----END CERTIFICATE-----
Generated at Sat Oct 10 21:26:18 2026 by rpki-client