Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/fd1faffe-95c0-36c2-a662-424685f19387.roa
File:                     fd1faffe-95c0-36c2-a662-424685f19387.roa (raw, json)
Hash identifier:          V0JKVSUA3E2sy1J0YTHAErxTY/xGsfeVpaNQnrXfSvA=
Subject key identifier:   CA:67:70:B0:26:FB:3E:5B:AA:FE:C3:33:D6:77:6D:B2:5F:05:56:4A
Certificate issuer:       /CN=d6d708e8-5964-4587-8db1-e22545ec38a3
Certificate serial:       010D0C9F4328584CBF17530386FF1687CB96C700
Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/fd1faffe-95c0-36c2-a662-424685f19387.roa
Signing time:             Wed 04 Feb 2026 02:00:31 +0000
ROA not before:           Wed 04 Feb 2026 02:00:31 +0000
ROA not after:            Tue 05 May 2026 01:00:31 +0000
asID:                     15331
IP address blocks:        69.51.70.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bf:17:53:03:86:ff:16:87:cb:96:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3
        Validity
            Not Before: Feb  4 02:00:31 2026 GMT
            Not After : May  5 01:00:31 2026 GMT
        Subject: CN=23cafb1d-e469-48fd-a8ee-e84009bce142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:46:82:dc:80:2c:82:12:56:27:8c:3f:e6:2e:
                    4a:d9:90:38:e6:81:3d:06:10:ae:42:52:fd:20:2d:
                    5b:06:25:92:d8:ca:35:63:7e:a5:02:e7:35:e7:11:
                    0a:00:7c:61:6b:36:ad:ce:e8:31:46:e4:3d:a1:4d:
                    17:28:62:0b:6c:2e:d1:43:a9:40:3a:88:28:30:c3:
                    9d:79:9f:4a:53:35:2e:1c:c1:d8:49:e8:a1:dc:cb:
                    41:c8:02:f1:8a:37:3b:c2:79:6b:32:15:a0:14:79:
                    75:78:7a:39:26:9d:10:21:89:5f:85:ff:3f:b5:17:
                    fa:44:fa:7a:29:8f:7c:d8:f5:77:44:15:05:b3:63:
                    d6:83:42:f7:25:fb:01:93:37:d9:03:d2:ca:79:4f:
                    48:b6:9f:20:91:e1:f6:9a:16:71:85:83:a3:9c:30:
                    b1:8b:21:2a:8c:fe:2e:40:65:8c:c3:0e:b0:78:81:
                    1c:97:23:81:06:ee:4c:50:f8:f1:82:44:59:87:2c:
                    ec:9d:a6:16:6b:b9:fc:10:97:5a:95:76:f9:59:72:
                    d4:a6:70:3e:84:72:b4:f3:22:6f:14:3b:1c:ff:ed:
                    02:48:ea:c8:16:cd:c2:b4:e1:c2:2a:db:63:3d:68:
                    fb:f8:90:0b:44:fc:21:d3:5d:c1:b1:81:5f:4c:c1:
                    1d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:67:70:B0:26:FB:3E:5B:AA:FE:C3:33:D6:77:6D:B2:5F:05:56:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/fd1faffe-95c0-36c2-a662-424685f19387.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl

            X509v3 Authority Key Identifier:
                keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.51.70.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:f7:03:7c:31:16:f1:45:74:95:63:45:31:f3:7d:5c:ab:f1:
         3c:39:83:89:23:0b:fe:b4:97:3b:67:0b:bd:6a:8e:f6:6d:a7:
         01:86:75:41:3a:aa:e5:c2:38:62:36:e7:ce:47:35:2b:b9:a6:
         2a:da:62:8a:24:49:d9:b9:8a:ab:27:0a:df:09:4d:49:49:eb:
         ba:08:8a:6f:a1:8c:4f:53:43:6a:fe:59:10:73:77:73:65:25:
         25:01:d1:dd:17:a6:d8:9d:53:29:5b:5a:ae:59:45:a4:c7:c2:
         b7:0b:22:9b:be:79:a5:27:36:a3:c8:9b:b6:51:72:2f:9a:00:
         ee:f7:6e:0b:91:97:ca:91:d6:ed:ec:75:eb:76:4e:d8:34:13:
         c7:3c:dd:a8:3b:c6:25:e9:2f:90:5e:54:d7:d9:bd:86:06:83:
         0c:aa:4f:91:71:7c:a5:92:ea:ba:9a:d7:80:2d:a0:21:8b:e5:
         9a:8d:73:94:83:b3:ae:c8:c2:c6:fe:60:1b:4d:2f:d4:f6:a3:
         23:6d:cf:10:fb:89:4a:f9:ee:80:f5:c9:1e:b3:0d:71:4c:d4:
         14:9a:36:30:54:12:ac:17:96:6b:b8:bc:15:44:8a:ac:ac:a1:
         2b:f9:b3:3c:28:61:cb:9f:3b:b0:2e:03:e7:a5:7f:9e:dd:5a:
         ea:b3:9b:b3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy/F1MDhv8Wh8uWxwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDZkNzA4ZTgtNTk2NC00NTg3LThkYjEtZTIyNTQ1ZWMz
OGEzMB4XDTI2MDIwNDAyMDAzMVoXDTI2MDUwNTAxMDAzMVowLzEtMCsGA1UEAxMk
MjNjYWZiMWQtZTQ2OS00OGZkLWE4ZWUtZTg0MDA5YmNlMTQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkaC3IAsghJWJ4w/5i5K2ZA45oE9BhCuQlL9
IC1bBiWS2Mo1Y36lAuc15xEKAHxhazatzugxRuQ9oU0XKGILbC7RQ6lAOogoMMOd
eZ9KUzUuHMHYSeih3MtByALxijc7wnlrMhWgFHl1eHo5Jp0QIYlfhf8/tRf6RPp6
KY982PV3RBUFs2PWg0L3JfsBkzfZA9LKeU9Itp8gkeH2mhZxhYOjnDCxiyEqjP4u
QGWMww6weIEclyOBBu5MUPjxgkRZhyzsnaYWa7n8EJdalXb5WXLUpnA+hHK08yJv
FDsc/+0CSOrIFs3CtOHCKttjPWj7+JALRPwh013BsYFfTMEddQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMpncLAm+z5bqv7DM9Z3bbJfBVZKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3
MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1NDVlYzM4YTMvZmQxZmFmZmUtOTVjMC0z
NmMyLWE2NjItNDI0Njg1ZjE5Mzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDZkNzA4ZTgtNTk2NC00NTg3LThk
YjEtZTIyNTQ1ZWMzOGEzL2Q2ZDcwOGU4LTU5NjQtNDU4Ny04ZGIxLWUyMjU0NWVj
MzhhMy5jcmwwHwYDVR0jBBgwFoAUlk9xUziI2saVrlqCb+yvOhpfLHQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1
NDVlYzM4YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRTNGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFb3A3wxFvFFdJVjRTHzfVyr8Tw5g4kjC/60lztnC71qjvZtpwGGdUE6
quXCOGI2585HNSu5piraYookSdm5iqsnCt8JTUlJ67oIim+hjE9TQ2r+WRBzd3Nl
JSUB0d0XptidUylbWq5ZRaTHwrcLIpu+eaUnNqPIm7ZRci+aAO73bguRl8qR1u3s
det2Ttg0E8c83ag7xiXpL5BeVNfZvYYGgwyqT5FxfKWS6rqa14AtoCGL5ZqNc5SD
s67Iwsb+YBtNL9T2oyNtzxD7iUr57oD1yR6zDXFM1BSaNjBUEqwXlmu4vBVEiqys
oSv5szwoYcufO7AuA+elf57dWuqzm7M=
-----END CERTIFICATE-----
Generated at Tue Mar 3 07:06:45 2026 by rpki-client