Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9f473396-3958-39ad-8347-00413e951173.roa
File:                     9f473396-3958-39ad-8347-00413e951173.roa (raw, json)
Hash identifier:          xz64cvV3otVsGxEXBpdGskMSYSA6YJSjQw81qp8Ksxs=
Subject key identifier:   7B:7E:F1:59:EC:3C:09:A0:00:60:7A:AB:8C:CF:00:AF:B5:15:8B:70
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584CEBC2245D273EBF82F970B140
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9f473396-3958-39ad-8347-00413e951173.roa
Signing time:             Fri 20 Feb 2026 02:00:32 +0000
ROA not before:           Fri 20 Feb 2026 02:00:32 +0000
ROA not after:            Thu 21 May 2026 01:00:32 +0000
asID:                     399073
IP address blocks:        69.17.6.0/24 maxlen: 24
                          69.17.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:eb:c2:24:5d:27:3e:bf:82:f9:70:b1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Feb 20 02:00:32 2026 GMT
            Not After : May 21 01:00:32 2026 GMT
        Subject: CN=e014875c-d055-46ac-9c70-78f086208990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:63:30:6c:60:2a:c9:62:35:74:5c:95:54:61:
                    f4:9d:12:74:02:e9:65:76:00:5b:b3:36:63:e6:c3:
                    93:25:d6:fe:5d:5a:f3:41:6d:05:a2:b5:3a:de:6e:
                    d4:fc:8b:39:22:5c:dd:47:4f:42:49:23:f3:d0:28:
                    b3:77:10:a6:f2:97:39:22:63:90:d4:9f:9c:56:9b:
                    3f:19:47:84:1d:92:0e:7e:3c:08:91:af:b8:77:b1:
                    34:2f:ec:bb:36:5c:43:4e:09:6e:2d:5b:17:b5:5b:
                    00:03:95:7c:ed:39:77:d5:e3:55:27:21:35:ae:e5:
                    87:e3:62:a3:79:c5:14:00:70:b4:c7:f4:a1:aa:3e:
                    ff:a9:08:d7:3b:9a:9c:d7:a8:44:1b:3b:fe:50:b3:
                    69:77:89:a0:fb:eb:6a:d9:75:11:15:1f:1d:cc:2a:
                    aa:b7:3a:2f:6c:be:3f:f0:b9:78:10:f9:77:b8:5d:
                    c2:78:0d:70:90:43:a9:8c:a8:37:4f:77:81:4c:8e:
                    cc:bc:e3:4c:5e:ee:b8:48:f7:32:e0:38:e6:c4:87:
                    da:4a:a7:ba:1d:b2:c5:2b:79:53:be:4c:06:37:0f:
                    82:29:08:d0:91:aa:9a:52:3a:29:b2:95:9a:5e:0b:
                    1f:e4:25:d6:a7:02:9e:04:ce:22:d7:2f:90:9f:c8:
                    1b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:7E:F1:59:EC:3C:09:A0:00:60:7A:AB:8C:CF:00:AF:B5:15:8B:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9f473396-3958-39ad-8347-00413e951173.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.17.6.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:ba:3b:c2:5d:40:29:f6:2d:71:1a:0a:09:d7:da:6b:d6:f0:
         1c:25:dc:0e:e7:34:7f:0d:63:3b:4a:f6:63:98:e9:01:4f:d4:
         e6:0e:e5:72:eb:d8:31:d0:71:5a:61:8e:8c:f4:9c:73:09:f1:
         72:48:13:2e:df:c2:f8:f8:1f:d9:d2:07:5b:88:9c:1a:8e:c7:
         a7:98:e6:eb:4d:a9:49:0b:28:3a:09:ea:6a:03:db:f5:87:4e:
         26:71:f0:9f:27:9c:7c:cf:2f:f6:14:df:4c:11:fd:d5:5d:9d:
         dc:fb:d7:05:95:e2:de:24:27:14:fe:1c:65:95:c8:b8:fb:9d:
         f8:11:d3:76:2f:15:b5:33:1a:97:38:1c:a0:8a:de:2d:4a:99:
         63:57:9d:7d:06:4e:42:5b:ae:70:3e:4e:ff:cb:86:b0:7f:f0:
         a7:21:0e:73:4d:89:46:4f:5d:6d:31:59:e4:48:b6:4e:d4:45:
         0c:79:cd:d6:6e:2a:17:cb:e8:9d:57:fb:1f:16:da:9a:ad:a4:
         46:db:2b:b9:55:ed:21:fb:c8:95:95:20:cc:55:4e:f4:3d:d7:
         74:79:aa:d7:32:bd:07:46:88:94:71:1f:a0:b0:75:3c:d1:63:
         9a:0a:4c:df:89:9b:2b:be:c2:c4:fb:9f:de:4b:da:16:01:f9:
         eb:10:26:30
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzrwiRdJz6/gvlwsUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDIyMDAyMDAzMloXDTI2MDUyMTAxMDAzMlowLzEtMCsGA1UEAxMk
ZTAxNDg3NWMtZDA1NS00NmFjLTljNzAtNzhmMDg2MjA4OTkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4GMwbGAqyWI1dFyVVGH0nRJ0AulldgBbszZj
5sOTJdb+XVrzQW0ForU63m7U/Is5IlzdR09CSSPz0CizdxCm8pc5ImOQ1J+cVps/
GUeEHZIOfjwIka+4d7E0L+y7NlxDTgluLVsXtVsAA5V87Tl31eNVJyE1ruWH42Kj
ecUUAHC0x/Shqj7/qQjXO5qc16hEGzv+ULNpd4mg++tq2XURFR8dzCqqtzovbL4/
8Ll4EPl3uF3CeA1wkEOpjKg3T3eBTI7MvONMXu64SPcy4DjmxIfaSqe6HbLFK3lT
vkwGNw+CKQjQkaqaUjopspWaXgsf5CXWpwKeBM4i1y+Qn8gbPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHt+8VnsPAmgAGB6q4zPAK+1FYtwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOWY0NzMzOTYtMzk1OC0z
OWFkLTgzNDctMDA0MTNlOTUxMTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRREGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGi6O8JdQCn2LXEaCgnX2mvW8Bwl3A7nNH8NYztK9mOY6QFP1OYO5XLr
2DHQcVphjoz0nHMJ8XJIEy7fwvj4H9nSB1uInBqOx6eY5utNqUkLKDoJ6moD2/WH
TiZx8J8nnHzPL/YU30wR/dVdndz71wWV4t4kJxT+HGWVyLj7nfgR03YvFbUzGpc4
HKCK3i1KmWNXnX0GTkJbrnA+Tv/LhrB/8KchDnNNiUZPXW0xWeRItk7URQx5zdZu
KhfL6J1X+x8W2pqtpEbbK7lV7SH7yJWVIMxVTvQ913R5qtcyvQdGiJRxH6CwdTzR
Y5oKTN+Jmyu+wsT7n95L2hYB+esQJjA=
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:13:14 2026 by rpki-client