Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/4e937af9-cc59-3389-8b4d-c93bfdbaa9c8.roa
File:                     4e937af9-cc59-3389-8b4d-c93bfdbaa9c8.roa (raw, json)
Hash identifier:          nk1dn0AN7oVRrv57lcSlXfa30Ni5mt7HzM4bZj6HW+M=
Subject key identifier:   F4:24:60:70:5E:EA:C3:0C:7F:7C:9F:94:F6:E9:6C:8F:90:40:3D:63
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328584EA79339058625B84AF5BDC100
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/4e937af9-cc59-3389-8b4d-c93bfdbaa9c8.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     31898
IP address blocks:        67.217.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:93:39:05:86:25:b8:4a:f5:bd:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=9b1b7a28-8a9d-4008-89fd-af0a066082f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:64:9e:cf:3b:d3:6e:de:5e:43:37:f7:97:94:
                    af:bf:b4:b3:de:d2:8c:d8:a7:95:35:f2:02:cb:8d:
                    df:7f:aa:3a:c8:b5:50:9a:2d:5a:ac:82:75:e3:95:
                    3f:3b:e8:3a:d9:5b:aa:31:d0:3f:59:a3:41:43:32:
                    62:ae:a2:3c:b1:d0:0c:22:50:3b:da:9a:af:6a:c6:
                    02:90:b1:10:92:66:f4:cb:8c:65:6e:1e:34:d7:50:
                    d2:5e:3d:43:33:ec:f3:56:ac:3e:19:22:9e:61:79:
                    0f:47:4e:ba:1b:cd:a4:9a:db:22:f8:da:3f:8a:10:
                    21:74:7e:39:8f:6e:bb:04:7a:68:b8:f9:f4:45:93:
                    db:4c:f6:8d:a5:4d:fe:70:a9:82:48:59:5b:31:e7:
                    0a:f9:09:4b:a1:ab:2e:15:00:21:79:ec:e6:24:79:
                    ce:c6:02:3e:51:9b:fa:9d:e2:bc:b3:37:1d:a5:37:
                    c6:5f:f6:58:65:ef:cf:25:03:d6:70:13:ef:59:b1:
                    06:c6:08:d7:f8:31:3b:c7:5d:8f:c9:15:26:45:6d:
                    6b:9d:14:47:d0:0f:3c:ee:68:23:11:01:55:f0:15:
                    0a:8e:bb:61:da:5c:40:d8:e1:f1:b8:52:13:08:e7:
                    ae:d4:1e:c8:ec:28:ab:28:f4:96:52:90:08:14:d0:
                    58:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:24:60:70:5E:EA:C3:0C:7F:7C:9F:94:F6:E9:6C:8F:90:40:3D:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/4e937af9-cc59-3389-8b4d-c93bfdbaa9c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.217.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:09:35:82:4f:39:29:d6:08:99:20:1d:8c:35:fd:d0:e2:5b:
         b6:72:73:39:95:3a:3b:03:92:20:e0:eb:25:71:0e:c5:25:26:
         7b:d0:76:32:72:aa:a7:c1:25:81:c2:4d:91:32:fc:9d:68:b8:
         53:15:91:f7:2e:01:48:6e:13:79:1c:02:a2:25:10:82:b8:85:
         42:53:5f:da:73:21:df:12:d3:ba:9d:33:74:a4:62:f7:7d:80:
         4f:9a:4e:b3:50:5e:c8:31:11:43:66:a4:6b:58:e3:c6:3a:fe:
         99:8b:da:e5:3e:f5:81:03:ec:e8:f1:f0:9c:1b:9f:98:ec:a2:
         c4:24:0f:a2:62:5e:93:d6:cf:eb:d9:d5:e9:76:2f:01:5c:7e:
         21:29:a7:85:4b:3a:cf:82:4d:e9:33:19:84:0f:df:3d:06:85:
         0b:6c:f2:71:71:01:65:9b:dc:fe:72:6c:a5:38:f0:69:77:62:
         62:32:2d:a1:da:68:98:dc:c7:4a:05:62:c8:94:55:4c:49:f0:
         31:53:02:55:e0:62:f5:9d:58:ec:04:25:ed:c8:5a:f8:0d:90:
         05:c0:19:3e:b0:99:e7:98:51:d4:c2:21:cc:cb:91:91:f4:39:
         e0:39:6e:f1:3c:27:50:12:9e:60:f2:28:69:c5:54:4c:83:b0:
         c3:c8:c2:e3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkzkFhiW4SvW9wQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy
OWJmMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
OWIxYjdhMjgtOGE5ZC00MDA4LTg5ZmQtYWYwYTA2NjA4MmY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmSezzvTbt5eQzf3l5Svv7Sz3tKM2KeVNfIC
y43ff6o6yLVQmi1arIJ145U/O+g62VuqMdA/WaNBQzJirqI8sdAMIlA72pqvasYC
kLEQkmb0y4xlbh4011DSXj1DM+zzVqw+GSKeYXkPR066G82kmtsi+No/ihAhdH45
j267BHpouPn0RZPbTPaNpU3+cKmCSFlbMecK+QlLoasuFQAheezmJHnOxgI+UZv6
neK8szcdpTfGX/ZYZe/PJQPWcBPvWbEGxgjX+DE7x12PyRUmRW1rnRRH0A887mgj
EQFV8BUKjrth2lxA2OHxuFITCOeu1B7I7CirKPSWUpAIFNBY1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPQkYHBe6sMMf3yflPbpbI+QQD1jMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2
ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNGU5MzdhZjktY2M1OS0z
Mzg5LThiNGQtYzkzYmZkYmFhOWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx
NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4
MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx
YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9lGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANkJNYJPOSnWCJkgHYw1/dDiW7ZyczmVOjsDkiDg6yVxDsUlJnvQdjJy
qqfBJYHCTZEy/J1ouFMVkfcuAUhuE3kcAqIlEIK4hUJTX9pzId8S07qdM3SkYvd9
gE+aTrNQXsgxEUNmpGtY48Y6/pmL2uU+9YED7Ojx8Jwbn5jsosQkD6JiXpPWz+vZ
1el2LwFcfiEpp4VLOs+CTekzGYQP3z0GhQts8nFxAWWb3P5ybKU48Gl3YmIyLaHa
aJjcx0oFYsiUVUxJ8DFTAlXgYvWdWOwEJe3IWvgNkAXAGT6wmeeYUdTCIczLkZH0
OeA5bvE8J1ASnmDyKGnFVEyDsMPIwuM=
-----END CERTIFICATE-----
Generated at Wed Jul 29 11:22:38 2026 by rpki-client