Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/c7d6eb8f-44cd-3bae-86c7-1e26d3d650be.roa
File:                     c7d6eb8f-44cd-3bae-86c7-1e26d3d650be.roa (raw, json)
Hash identifier:          b0WA7+9yEDRC5fpu37aP0+AndaZ8PCsSc+8+mBkhAdQ=
Subject key identifier:   18:22:DA:E2:0B:9F:2E:2E:4B:02:00:BC:B9:2B:B3:D1:85:23:35:7E
Certificate issuer:       /CN=560b4c54-bd35-46e1-8698-aff50195e1b4
Certificate serial:       010D0C9F4328584DC6CB0F767B421ACC3CA1AB00
Authority key identifier: E1:F3:2C:DE:1C:5F:ED:4C:95:9A:78:0D:DE:FA:69:73:DE:95:2F:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/c7d6eb8f-44cd-3bae-86c7-1e26d3d650be.roa
Signing time:             Sat 09 May 2026 13:00:31 +0000
ROA not before:           Sat 09 May 2026 13:00:31 +0000
ROA not after:            Fri 07 Aug 2026 13:00:31 +0000
asID:                     16509
IP address blocks:        64.58.110.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/560b4c54-bd35-46e1-8698-aff50195e1b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/560b4c54-bd35-46e1-8698-aff50195e1b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c6:cb:0f:76:7b:42:1a:cc:3c:a1:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=560b4c54-bd35-46e1-8698-aff50195e1b4
        Validity
            Not Before: May  9 13:00:31 2026 GMT
            Not After : Aug  7 13:00:31 2026 GMT
        Subject: CN=986be05d-2c41-4e34-a640-20f3adbb8ca5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:8f:cc:ee:96:05:72:7e:72:9e:27:2d:cb:93:
                    07:24:d8:d8:85:ae:c5:0e:6a:b3:b4:6b:ba:ad:a5:
                    64:05:9c:1b:8b:83:af:ba:c9:72:c8:70:e4:63:6f:
                    54:8e:d9:57:60:d4:fc:98:05:1d:aa:9c:13:fd:cc:
                    56:f8:f9:64:7a:e3:87:6a:87:e4:1d:f1:d1:e7:f9:
                    37:fe:b2:f3:df:2a:54:d6:e3:32:49:ec:f1:30:fb:
                    0a:27:9f:bb:87:3b:0b:1e:9c:84:10:28:34:da:b7:
                    0d:d2:75:38:b5:49:ac:cc:26:5e:3a:48:da:3e:d1:
                    0f:97:60:2b:c1:17:f2:bf:26:69:90:80:88:41:e9:
                    91:01:eb:a3:36:d7:21:48:3c:88:90:93:2b:6c:46:
                    67:9e:fe:9a:ec:ae:b2:aa:89:1e:d5:0a:7c:0d:c9:
                    40:e7:67:ee:90:54:ff:7e:06:eb:10:6f:4a:7d:a4:
                    b3:d6:c3:04:c7:f8:9d:4a:51:00:83:6f:3a:c9:c4:
                    36:64:0b:de:e3:47:25:c6:e3:7d:2b:cc:f9:ae:d3:
                    c3:3f:28:85:3e:00:51:8d:9c:30:50:5d:5d:58:08:
                    7b:10:c4:37:c4:f4:3c:37:b7:f0:01:b6:d3:d7:d9:
                    9f:b6:d7:db:55:19:fe:bd:75:0e:2d:7d:26:fa:17:
                    16:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:22:DA:E2:0B:9F:2E:2E:4B:02:00:BC:B9:2B:B3:D1:85:23:35:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/c7d6eb8f-44cd-3bae-86c7-1e26d3d650be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/560b4c54-bd35-46e1-8698-aff50195e1b4.crl

            X509v3 Authority Key Identifier:
                keyid:E1:F3:2C:DE:1C:5F:ED:4C:95:9A:78:0D:DE:FA:69:73:DE:95:2F:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.58.110.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:97:3d:8b:c1:aa:2d:16:f9:94:f9:1d:2d:90:e4:d5:ab:57:
         cd:c7:22:3f:bc:20:a0:9a:b5:e6:48:52:45:5b:e6:df:38:e4:
         11:96:31:74:a8:6b:b6:5e:3f:61:e6:d6:12:93:0d:37:dd:51:
         a0:0f:5a:d9:12:f8:a0:01:ba:b4:f9:74:21:5b:91:fe:87:ea:
         4f:0b:41:80:5d:12:6f:d6:81:3b:d0:61:33:70:a8:27:6f:2c:
         eb:3c:b9:20:48:e2:84:59:42:0d:ee:a4:fb:e7:87:e0:2e:47:
         f1:da:03:d7:44:59:82:01:6f:ba:42:da:73:67:94:b8:86:73:
         9e:71:3e:5b:2a:7e:12:e2:dd:79:02:14:d4:c0:cf:0c:49:7d:
         47:c4:ae:61:8f:97:1d:48:6e:17:91:99:47:08:42:7c:bc:a6:
         98:49:87:be:4d:1a:61:86:d2:53:7f:ed:7b:72:3e:92:f5:f0:
         f2:11:e7:72:99:cc:ee:55:0a:09:69:09:61:8b:ea:f5:b8:2e:
         7e:5d:7b:60:0b:76:d6:4d:3b:e3:9f:9b:bb:7d:1c:0d:45:38:
         62:3b:a3:36:86:b2:b0:d7:93:f1:fd:32:a7:77:c5:95:ce:22:
         a3:da:0e:39:cf:18:50:6d:0e:58:68:c9:b9:70:29:86:6d:b4:
         72:6d:ef:5e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Gyw92e0IazDyhqwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTYwYjRjNTQtYmQzNS00NmUxLTg2OTgtYWZmNTAxOTVl
MWI0MB4XDTI2MDUwOTEzMDAzMVoXDTI2MDgwNzEzMDAzMVowLzEtMCsGA1UEAxMk
OTg2YmUwNWQtMmM0MS00ZTM0LWE2NDAtMjBmM2FkYmI4Y2E1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4o/M7pYFcn5ynicty5MHJNjYha7FDmqztGu6
raVkBZwbi4OvuslyyHDkY29UjtlXYNT8mAUdqpwT/cxW+PlkeuOHaofkHfHR5/k3
/rLz3ypU1uMySezxMPsKJ5+7hzsLHpyEECg02rcN0nU4tUmszCZeOkjaPtEPl2Ar
wRfyvyZpkICIQemRAeujNtchSDyIkJMrbEZnnv6a7K6yqoke1Qp8DclA52fukFT/
fgbrEG9KfaSz1sMEx/idSlEAg286ycQ2ZAve40clxuN9K8z5rtPDPyiFPgBRjZww
UF1dWAh7EMQ3xPQ8N7fwAbbT19mfttfbVRn+vXUOLX0m+hcWAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBgi2uILny4uSwIAvLkrs9GFIzV+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81NjBi
NGM1NC1iZDM1LTQ2ZTEtODY5OC1hZmY1MDE5NWUxYjQvYzdkNmViOGYtNDRjZC0z
YmFlLTg2YzctMWUyNmQzZDY1MGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTYwYjRjNTQtYmQzNS00NmUxLTg2
OTgtYWZmNTAxOTVlMWI0LzU2MGI0YzU0LWJkMzUtNDZlMS04Njk4LWFmZjUwMTk1
ZTFiNC5jcmwwHwYDVR0jBBgwFoAU4fMs3hxf7UyVmngN3vppc96VL8gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy81NjBiNGM1NC1iZDM1LTQ2ZTEtODY5OC1hZmY1
MDE5NWUxYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQDpuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC6XPYvBqi0W+ZT5HS2Q5NWrV83HIj+8IKCateZIUkVb5t845BGWMXSo
a7ZeP2Hm1hKTDTfdUaAPWtkS+KABurT5dCFbkf6H6k8LQYBdEm/WgTvQYTNwqCdv
LOs8uSBI4oRZQg3upPvnh+AuR/HaA9dEWYIBb7pC2nNnlLiGc55xPlsqfhLi3XkC
FNTAzwxJfUfErmGPlx1IbheRmUcIQny8pphJh75NGmGG0lN/7XtyPpL18PIR53KZ
zO5VCglpCWGL6vW4Ln5de2ALdtZNO+Ofm7t9HA1FOGI7ozaGsrDXk/H9Mqd3xZXO
IqPaDjnPGFBtDlhoyblwKYZttHJt714=
-----END CERTIFICATE-----
Generated at Wed May 13 17:02:14 2026 by rpki-client