Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d/3eee5b9e-c50f-37c6-9119-e5e776b39605.roa
File:                     3eee5b9e-c50f-37c6-9119-e5e776b39605.roa (raw, json)
Hash identifier:          BEQUn5PyIp99RokBEiXVk75Xb1k6P2g6joxdazgpWFA=
Subject key identifier:   C3:EC:3B:FA:72:E3:54:8F:5C:7B:1B:F0:5B:1A:74:AC:00:81:FB:DF
Certificate issuer:       /CN=92db335e-640b-4ae2-9650-c420af83089d
Certificate serial:       010D0C9F4328584F201DDB488031A01CB8937000
Authority key identifier: 9B:40:34:1F:25:09:26:BA:B6:19:D2:13:62:66:CE:A9:15:AA:29:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d/3eee5b9e-c50f-37c6-9119-e5e776b39605.roa
Signing time:             Thu 10 Sep 2026 05:41:28 +0000
ROA not before:           Thu 10 Sep 2026 05:41:28 +0000
ROA not after:            Wed 09 Dec 2026 06:41:28 +0000
asID:                     40702
IP address blocks:        64.203.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d/92db335e-640b-4ae2-9650-c420af83089d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d/92db335e-640b-4ae2-9650-c420af83089d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:20:1d:db:48:80:31:a0:1c:b8:93:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92db335e-640b-4ae2-9650-c420af83089d
        Validity
            Not Before: Sep 10 05:41:28 2026 GMT
            Not After : Dec  9 06:41:28 2026 GMT
        Subject: CN=73ca3ee5-33cf-4365-9adc-1631fc2bb8ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:17:6b:db:f9:a3:e6:7e:23:59:f9:fb:6d:6f:
                    b8:6f:af:9e:4b:f6:84:15:f2:f4:f3:04:e2:ca:3f:
                    a6:eb:2c:eb:90:f3:37:09:99:1c:47:79:67:c2:19:
                    17:8e:d1:4f:42:98:da:1e:c6:b1:22:b4:e4:1b:7f:
                    d7:ca:cd:1d:1a:fe:5d:e0:c9:4b:6e:43:14:71:ed:
                    0c:b9:56:17:49:44:9f:d1:74:8d:1a:60:8f:0b:65:
                    a3:8a:1f:dc:2a:85:86:d4:3d:2d:e5:47:f2:c8:19:
                    ee:6a:27:a5:64:4e:e5:02:ba:b6:ec:11:07:af:c2:
                    2d:f4:3f:6b:10:0e:36:90:3f:77:5a:28:1a:8f:d2:
                    cd:51:8b:ce:f8:f7:b3:05:36:cc:9a:15:c2:d3:24:
                    a5:97:4d:cc:31:7f:ff:ea:31:35:f9:64:d0:9e:da:
                    a6:9d:4a:a7:5d:26:9f:6d:d9:73:c8:25:97:f3:08:
                    c1:28:23:77:3c:a3:0a:1f:1d:ff:46:0d:ab:7c:e5:
                    66:7c:8c:14:86:99:3f:e3:fb:f2:14:8e:fe:6f:ca:
                    9c:f1:98:ab:8b:ef:65:0e:0a:87:a8:ef:ed:e0:42:
                    11:d1:03:05:ae:28:7a:c6:db:5a:67:11:96:b2:69:
                    a7:ce:78:84:4c:97:c7:29:8d:a8:e8:d9:42:54:2e:
                    f2:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:EC:3B:FA:72:E3:54:8F:5C:7B:1B:F0:5B:1A:74:AC:00:81:FB:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d/3eee5b9e-c50f-37c6-9119-e5e776b39605.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d/92db335e-640b-4ae2-9650-c420af83089d.crl

            X509v3 Authority Key Identifier:
                keyid:9B:40:34:1F:25:09:26:BA:B6:19:D2:13:62:66:CE:A9:15:AA:29:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.203.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:49:c4:50:10:c4:25:0d:c3:64:d0:7c:57:17:25:ce:7a:6f:
         0e:13:09:cc:96:86:31:f8:c3:d9:5d:c0:5a:a6:75:b3:2a:38:
         40:7a:3f:13:6b:60:97:34:d3:b4:0c:42:d3:87:2d:0e:ff:db:
         c6:9f:ee:a8:98:78:5e:e5:fe:91:66:96:bb:55:32:10:63:51:
         a7:39:2d:81:5d:36:ee:2a:eb:c4:6d:45:fb:ab:93:49:c5:b8:
         d8:79:57:87:bc:c5:9c:91:de:9b:14:60:0a:a3:f7:1c:c8:3d:
         fd:0a:27:50:2f:e8:75:99:25:2a:3a:6e:78:cf:e9:54:d5:96:
         08:d7:3f:6c:f5:0f:d4:79:26:56:c5:4e:82:3c:9d:ba:e6:d7:
         6b:f4:d6:dd:d7:00:b7:03:31:b6:c5:40:6a:2b:92:54:33:6c:
         1f:34:77:be:35:62:be:a1:06:ea:f5:6b:50:77:b7:5e:f0:93:
         36:28:98:41:27:2f:05:91:5f:4e:92:f1:cd:2d:55:50:81:bb:
         40:48:5e:8a:d7:37:77:db:c9:e9:88:6b:ac:a0:c8:f4:1a:1e:
         9c:48:ef:9f:d3:b4:bf:3b:53:10:3b:3c:94:c3:46:ff:db:82:
         6e:7e:5a:5b:73:16:a0:10:68:a5:08:74:f5:e8:4f:8f:1c:df:
         5c:04:9d:26
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8gHdtIgDGgHLiTcAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTJkYjMzNWUtNjQwYi00YWUyLTk2NTAtYzQyMGFmODMw
ODlkMB4XDTI2MDkxMDA1NDEyOFoXDTI2MTIwOTA2NDEyOFowLzEtMCsGA1UEAxMk
NzNjYTNlZTUtMzNjZi00MzY1LTlhZGMtMTYzMWZjMmJiOGFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Bdr2/mj5n4jWfn7bW+4b6+eS/aEFfL08wTi
yj+m6yzrkPM3CZkcR3lnwhkXjtFPQpjaHsaxIrTkG3/Xys0dGv5d4MlLbkMUce0M
uVYXSUSf0XSNGmCPC2Wjih/cKoWG1D0t5UfyyBnuaielZE7lArq27BEHr8It9D9r
EA42kD93Wigaj9LNUYvO+PezBTbMmhXC0ySll03MMX//6jE1+WTQntqmnUqnXSaf
bdlzyCWX8wjBKCN3PKMKHx3/Rg2rfOVmfIwUhpk/4/vyFI7+b8qc8Ziri+9lDgqH
qO/t4EIR0QMFrih6xttaZxGWsmmnzniETJfHKY2o6NlCVC7yrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMPsO/py41SPXHsb8FsadKwAgfvfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85MmRi
MzM1ZS02NDBiLTRhZTItOTY1MC1jNDIwYWY4MzA4OWQvM2VlZTViOWUtYzUwZi0z
N2M2LTkxMTktZTVlNzc2YjM5NjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOTJkYjMzNWUtNjQwYi00YWUyLTk2
NTAtYzQyMGFmODMwODlkLzkyZGIzMzVlLTY0MGItNGFlMi05NjUwLWM0MjBhZjgz
MDg5ZC5jcmwwHwYDVR0jBBgwFoAUm0A0HyUJJrq2GdITYmbOqRWqKfcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC85MmRiMzM1ZS02NDBiLTRhZTItOTY1MC1jNDIw
YWY4MzA4OWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMvpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE5JxFAQxCUNw2TQfFcXJc56bw4TCcyWhjH4w9ldwFqmdbMqOEB6PxNr
YJc007QMQtOHLQ7/28af7qiYeF7l/pFmlrtVMhBjUac5LYFdNu4q68RtRfurk0nF
uNh5V4e8xZyR3psUYAqj9xzIPf0KJ1Av6HWZJSo6bnjP6VTVlgjXP2z1D9R5JlbF
ToI8nbrm12v01t3XALcDMbbFQGorklQzbB80d741Yr6hBur1a1B3t17wkzYomEEn
LwWRX06S8c0tVVCBu0BIXorXN3fbyemIa6ygyPQaHpxI75/TtL87UxA7PJTDRv/b
gm5+WltzFqAQaKUIdPXoT48c31wEnSY=
-----END CERTIFICATE-----
Generated at Mon Sep 28 14:18:22 2026 by rpki-client