Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/dd4850d9-75a7-3dad-b668-45a0826fe731.roa
File:                     dd4850d9-75a7-3dad-b668-45a0826fe731.roa (raw, json)
Hash identifier:          I37V9aVGG75nxo8WpaB+5UXoaYAd06ilQbdHUeOHyE4=
Subject key identifier:   E4:A7:AD:C1:08:82:9E:9F:1A:C0:61:24:3C:FB:A4:76:4B:55:EE:17
Certificate issuer:       /CN=d6d708e8-5964-4587-8db1-e22545ec38a3
Certificate serial:       010D0C9F4328584CD2A1EB1FBBCD479B61FE1200
Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/dd4850d9-75a7-3dad-b668-45a0826fe731.roa
Signing time:             Wed 11 Feb 2026 02:00:32 +0000
ROA not before:           Wed 11 Feb 2026 02:00:32 +0000
ROA not after:            Tue 12 May 2026 01:00:32 +0000
asID:                     21947
IP address blocks:        69.51.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d2:a1:eb:1f:bb:cd:47:9b:61:fe:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3
        Validity
            Not Before: Feb 11 02:00:32 2026 GMT
            Not After : May 12 01:00:32 2026 GMT
        Subject: CN=5028b8b3-7e5a-4dc8-ae48-7a38a05cbfeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:17:c9:45:6d:46:c9:73:34:60:29:b8:b0:1c:
                    cf:3e:a9:e6:42:a7:4c:65:e6:ec:0a:19:ad:1e:2d:
                    57:f5:62:45:dc:58:05:9c:72:3b:97:90:53:2a:15:
                    94:32:78:96:7b:2a:79:e7:e7:03:fc:b8:67:d7:43:
                    8b:5c:a6:78:c6:19:48:c1:a0:1a:ce:40:1b:b0:8e:
                    b1:7a:e4:f1:4f:ac:a5:d9:79:d4:66:03:3a:d1:16:
                    f7:4c:a5:4f:c3:10:24:d4:ba:3a:a7:07:29:d1:c7:
                    43:2a:57:1d:7b:15:06:c2:eb:33:83:4f:54:91:8f:
                    df:2f:45:99:a3:81:1f:d2:a3:23:f4:2d:72:1d:b6:
                    1a:f5:c1:14:41:6c:5b:53:8a:c0:76:cf:10:96:de:
                    07:1f:f5:b3:1c:92:73:8b:bb:29:a2:d9:6e:42:89:
                    7a:f7:4b:0e:43:c7:de:e8:c8:cb:48:5e:0c:27:72:
                    6c:b2:75:75:57:c0:49:04:b1:68:ce:eb:bd:40:ed:
                    47:09:24:76:a4:8c:7f:05:cb:60:7c:37:0a:a3:0b:
                    25:58:a5:10:95:bc:03:e6:73:0a:fb:23:5b:75:29:
                    00:88:85:07:18:a3:32:54:1c:4a:72:cd:3a:40:93:
                    1c:43:94:9e:40:9c:02:5a:e5:68:d3:91:a1:ac:f4:
                    1d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:A7:AD:C1:08:82:9E:9F:1A:C0:61:24:3C:FB:A4:76:4B:55:EE:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/dd4850d9-75a7-3dad-b668-45a0826fe731.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl

            X509v3 Authority Key Identifier:
                keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.51.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:22:ec:32:57:42:41:d6:a3:35:fe:9e:e8:22:18:c0:a5:98:
         6a:c5:77:cc:21:50:3f:a2:3f:35:32:3f:fd:03:1e:c8:91:ea:
         1b:2a:a0:42:a1:67:5b:4f:a0:bb:6d:07:ce:3d:b7:26:60:a2:
         52:10:65:71:e1:36:98:ff:a5:1a:81:a7:da:fa:5d:f5:91:69:
         f3:98:09:29:54:d2:60:00:d6:31:08:4b:f6:e4:b5:9a:f7:96:
         8f:f7:07:10:42:f6:28:5d:64:de:37:c8:0c:00:b9:36:29:e0:
         97:04:9a:01:e1:fc:fa:50:d2:e6:63:00:0d:03:5f:35:1a:01:
         46:54:7c:18:65:fe:0a:2e:bd:a2:15:c2:85:f4:bc:84:a7:d5:
         c7:37:df:10:9d:1e:f8:5f:6d:75:c8:40:8a:9f:98:ff:da:25:
         f7:0a:60:db:26:de:1b:6d:a9:d4:67:cf:f6:95:aa:d1:41:9d:
         4d:dc:92:69:3e:ca:51:fc:34:d9:18:c6:68:50:77:7a:89:8e:
         c5:eb:c1:62:ec:4d:bf:30:dd:95:b0:39:5e:fa:4c:8f:76:84:
         b2:f0:20:cc:8c:25:4d:cf:6d:b1:e4:8d:20:15:6c:2a:21:87:
         02:d7:3b:4b:75:c1:bc:8c:be:77:a2:08:4f:3f:09:a4:63:eb:
         7b:8f:a1:79
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzSoesfu81Hm2H+EgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDZkNzA4ZTgtNTk2NC00NTg3LThkYjEtZTIyNTQ1ZWMz
OGEzMB4XDTI2MDIxMTAyMDAzMloXDTI2MDUxMjAxMDAzMlowLzEtMCsGA1UEAxMk
NTAyOGI4YjMtN2U1YS00ZGM4LWFlNDgtN2EzOGEwNWNiZmViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hfJRW1GyXM0YCm4sBzPPqnmQqdMZebsChmt
Hi1X9WJF3FgFnHI7l5BTKhWUMniWeyp55+cD/Lhn10OLXKZ4xhlIwaAazkAbsI6x
euTxT6yl2XnUZgM60Rb3TKVPwxAk1Lo6pwcp0cdDKlcdexUGwuszg09UkY/fL0WZ
o4Ef0qMj9C1yHbYa9cEUQWxbU4rAds8Qlt4HH/WzHJJzi7spotluQol690sOQ8fe
6MjLSF4MJ3JssnV1V8BJBLFozuu9QO1HCSR2pIx/BctgfDcKowslWKUQlbwD5nMK
+yNbdSkAiIUHGKMyVBxKcs06QJMcQ5SeQJwCWuVo05GhrPQdCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOSnrcEIgp6fGsBhJDz7pHZLVe4XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3
MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1NDVlYzM4YTMvZGQ0ODUwZDktNzVhNy0z
ZGFkLWI2NjgtNDVhMDgyNmZlNzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDZkNzA4ZTgtNTk2NC00NTg3LThk
YjEtZTIyNTQ1ZWMzOGEzL2Q2ZDcwOGU4LTU5NjQtNDU4Ny04ZGIxLWUyMjU0NWVj
MzhhMy5jcmwwHwYDVR0jBBgwFoAUlk9xUziI2saVrlqCb+yvOhpfLHQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1
NDVlYzM4YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGRTNAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF4i7DJXQkHWozX+nugiGMClmGrFd8whUD+iPzUyP/0DHsiR6hsqoEKh
Z1tPoLttB849tyZgolIQZXHhNpj/pRqBp9r6XfWRafOYCSlU0mAA1jEIS/bktZr3
lo/3BxBC9ihdZN43yAwAuTYp4JcEmgHh/PpQ0uZjAA0DXzUaAUZUfBhl/gouvaIV
woX0vISn1cc33xCdHvhfbXXIQIqfmP/aJfcKYNsm3httqdRnz/aVqtFBnU3ckmk+
ylH8NNkYxmhQd3qJjsXrwWLsTb8w3ZWwOV76TI92hLLwIMyMJU3PbbHkjSAVbCoh
hwLXO0t1wbyMvneiCE8/CaRj63uPoXk=
-----END CERTIFICATE-----
Generated at Tue Mar 3 05:29:01 2026 by rpki-client