Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bf335f74-94ba-3973-8541-955843bf86c1.roa
File:                     bf335f74-94ba-3973-8541-955843bf86c1.roa (raw, json)
Hash identifier:          RVvWhWmoEpCRYHkiZgWBxu0J1JFOkhnf1kMWE25V3l0=
Subject key identifier:   24:66:96:87:A9:83:50:31:5A:3B:FB:E8:93:A0:36:37:34:D4:22:48
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584EA788220E1B844A893B3F7F40
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bf335f74-94ba-3973-8541-955843bf86c1.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     9304
IP address blocks:        69.17.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:22:0e:1b:84:4a:89:3b:3f:7f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=57fca410-d77f-428e-b03a-47a95f6d7ef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3a:94:ea:10:63:88:09:7c:ec:8a:f5:09:b9:
                    bd:66:d3:85:65:53:d0:bb:f5:d8:90:79:87:4a:08:
                    c7:c4:9e:a8:7f:b4:46:8c:44:3e:32:5f:68:14:69:
                    b6:72:28:6d:c3:d3:3c:e8:d5:7c:91:90:a8:52:d3:
                    7a:22:f2:7f:de:ed:ae:80:df:40:ed:97:a2:0d:8e:
                    66:b4:47:d6:10:98:d3:4e:f5:c8:14:cc:18:a2:0c:
                    42:7b:28:96:63:f3:e7:52:5f:4f:a9:75:6d:ca:0c:
                    6e:15:95:9e:09:1a:d1:2d:2b:84:52:93:2d:9e:7f:
                    6c:75:fa:17:dd:92:a8:f4:f5:b2:80:05:fa:9e:6f:
                    7a:01:7b:f6:5c:8e:f3:cf:61:05:ec:6f:df:3e:6d:
                    26:a5:de:a2:c3:c2:a8:98:79:a8:98:6a:cb:1c:85:
                    c7:11:55:42:17:87:ad:4e:a3:e7:4c:2d:44:26:9f:
                    ed:9a:52:ae:79:7c:7f:7c:d6:c6:0b:5b:3f:bd:70:
                    47:f2:f9:b8:b7:f8:47:6f:55:88:57:38:92:cf:a7:
                    36:c9:16:44:70:ac:57:30:96:af:c9:b9:b7:fc:a0:
                    6e:85:5d:12:65:8d:d1:0a:00:4c:c1:c5:61:33:d8:
                    8f:16:04:ba:ee:d3:17:03:de:68:de:ab:4f:11:28:
                    69:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:66:96:87:A9:83:50:31:5A:3B:FB:E8:93:A0:36:37:34:D4:22:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bf335f74-94ba-3973-8541-955843bf86c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.17.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:8c:ff:b2:7a:4b:f5:7e:87:56:71:9f:e6:81:d9:7a:c9:7c:
         85:98:86:ab:f9:63:1a:5a:a0:17:e9:c8:28:7d:bc:3b:bc:c8:
         2e:db:c7:ad:5d:30:17:5f:d7:e8:db:25:20:63:28:d5:f6:82:
         3e:d3:6b:36:f3:01:c3:f5:6f:4d:44:3b:a8:dd:d7:e0:e1:36:
         f3:a7:b4:c3:2e:e9:b7:2c:6c:d6:93:23:08:5f:72:e3:0c:ce:
         91:1c:6f:ff:52:29:93:04:fb:16:f9:87:a8:05:fd:e2:7d:06:
         5e:b4:1a:26:ec:dc:4b:5e:2e:2b:15:1c:f7:da:32:a8:0a:ea:
         a6:c9:fe:12:bb:7b:d1:c1:83:d0:9d:f1:c7:bf:b6:bd:2e:66:
         a2:3c:99:2b:50:8f:e8:b4:24:b2:5e:3f:eb:de:e9:15:9f:41:
         77:a8:59:8b:d8:0f:28:c6:cd:29:08:8e:82:e4:81:b1:21:11:
         90:01:b4:28:71:3b:59:bd:b2:62:b1:f0:e4:f4:b0:62:a6:be:
         ed:a3:08:85:f9:f3:d3:ed:da:11:54:58:3c:43:31:5e:d7:a4:
         93:f9:19:e0:d7:87:cb:24:6e:fd:e5:a9:ad:ec:af:66:f1:86:
         eb:71:86:28:fa:a9:ea:6a:bc:62:91:10:ab:c1:5f:29:37:7c:
         0c:c6:10:6c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niCIOG4RKiTs/f0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NTdmY2E0MTAtZDc3Zi00MjhlLWIwM2EtNDdhOTVmNmQ3ZWYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjqU6hBjiAl87Ir1Cbm9ZtOFZVPQu/XYkHmH
SgjHxJ6of7RGjEQ+Ml9oFGm2cihtw9M86NV8kZCoUtN6IvJ/3u2ugN9A7ZeiDY5m
tEfWEJjTTvXIFMwYogxCeyiWY/PnUl9PqXVtygxuFZWeCRrRLSuEUpMtnn9sdfoX
3ZKo9PWygAX6nm96AXv2XI7zz2EF7G/fPm0mpd6iw8KomHmomGrLHIXHEVVCF4et
TqPnTC1EJp/tmlKueXx/fNbGC1s/vXBH8vm4t/hHb1WIVziSz6c2yRZEcKxXMJav
ybm3/KBuhV0SZY3RCgBMwcVhM9iPFgS67tMXA95o3qtPEShplQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCRmloepg1AxWjv76JOgNjc01CJIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYmYzMzVmNzQtOTRiYS0z
OTczLTg1NDEtOTU1ODQzYmY4NmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARREAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIyM/7J6S/V+h1Zxn+aB2XrJfIWYhqv5YxpaoBfpyCh9vDu8yC7bx61d
MBdf1+jbJSBjKNX2gj7TazbzAcP1b01EO6jd1+DhNvOntMMu6bcsbNaTIwhfcuMM
zpEcb/9SKZME+xb5h6gF/eJ9Bl60Gibs3EteLisVHPfaMqgK6qbJ/hK7e9HBg9Cd
8ce/tr0uZqI8mStQj+i0JLJeP+ve6RWfQXeoWYvYDyjGzSkIjoLkgbEhEZABtChx
O1m9smKx8OT0sGKmvu2jCIX589Pt2hFUWDxDMV7XpJP5GeDXh8skbv3lqa3sr2bx
hutxhij6qepqvGKREKvBXyk3fAzGEGw=
-----END CERTIFICATE-----
Generated at Wed Jul 29 11:02:49 2026 by rpki-client