Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/a240ff02-4873-31e9-967b-37de1d19329a.roa
File:                     a240ff02-4873-31e9-967b-37de1d19329a.roa (raw, json)
Hash identifier:          SYR7ne3g0c/F8C897YSnt9Z1vjhblC+cc/Iu7uJHCP0=
Subject key identifier:   81:B9:C3:D9:1F:7C:E4:45:FD:C8:36:9C:1C:E8:E7:75:15:3C:83:0F
Certificate issuer:       /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
Certificate serial:       010D0C9F4328584DC6CAF292032432D94B24AE30
Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/a240ff02-4873-31e9-967b-37de1d19329a.roa
Signing time:             Sat 09 May 2026 13:00:31 +0000
ROA not before:           Sat 09 May 2026 13:00:31 +0000
ROA not after:            Fri 07 Aug 2026 13:00:31 +0000
asID:                     209854
IP address blocks:        64.79.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c6:ca:f2:92:03:24:32:d9:4b:24:ae:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
        Validity
            Not Before: May  9 13:00:31 2026 GMT
            Not After : Aug  7 13:00:31 2026 GMT
        Subject: CN=9d00aaef-7223-4fe5-8777-05e3d26cedfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:1f:61:77:90:b0:a3:90:99:08:51:32:33:11:
                    f0:c4:57:e3:25:1c:87:66:37:ef:96:9d:d5:4e:db:
                    77:b6:d5:89:2f:55:f4:3d:2d:d1:0e:97:89:f0:eb:
                    72:5c:ff:da:f0:8e:86:e9:b7:0f:f0:64:ee:6c:f1:
                    44:2a:06:2d:a5:23:a5:a5:c3:05:1e:3d:f4:4d:9a:
                    8c:27:dc:87:26:3d:90:22:97:ae:58:da:90:8f:73:
                    d8:f6:62:50:21:44:1f:c9:e4:4f:ea:b3:1b:6d:83:
                    96:81:58:8c:49:24:34:75:b1:ed:0f:5b:c2:ae:e1:
                    9a:a2:2a:6a:de:9f:ca:8c:83:fe:9e:a5:49:46:70:
                    b9:a3:8a:f1:fc:5d:6c:c2:3c:2c:fb:18:1d:d5:ce:
                    5c:14:a0:03:ed:b3:33:92:f5:5a:9e:51:ae:0d:54:
                    04:ee:39:47:2f:28:51:6e:36:37:2b:43:6b:8d:8b:
                    72:d0:d4:95:2a:a1:8f:1d:4c:fa:d0:ba:05:c5:47:
                    2d:a3:f5:fc:76:18:72:83:d2:0c:0c:bb:90:ef:15:
                    ca:1b:19:45:e8:df:b3:f0:5f:f1:fa:94:de:4e:3c:
                    60:67:59:c6:80:a0:72:b3:b0:a0:f6:63:f9:2e:05:
                    47:66:e2:aa:4e:18:4c:47:0a:cf:56:d7:24:39:fe:
                    f8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:B9:C3:D9:1F:7C:E4:45:FD:C8:36:9C:1C:E8:E7:75:15:3C:83:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/a240ff02-4873-31e9-967b-37de1d19329a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl

            X509v3 Authority Key Identifier:
                keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.79.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:d1:5f:c0:b7:a0:52:58:3e:27:48:70:4f:7e:f7:9d:34:88:
         bb:ae:58:30:5b:25:6f:8d:07:73:98:df:12:46:3a:10:f7:2b:
         c5:4d:03:4c:c1:4b:28:cc:78:10:0e:e4:b9:76:bd:8e:6d:b5:
         37:17:ff:b5:5a:44:c4:45:8d:f3:9c:44:09:e3:69:90:50:4f:
         ab:33:19:de:89:b0:ed:60:12:a8:a5:53:30:5b:0f:7e:86:54:
         95:28:69:92:3d:3a:da:04:61:cf:25:cc:70:d6:3a:41:b2:69:
         8c:4b:37:46:e9:7b:a8:cd:29:b9:9e:92:ee:cb:71:8f:1d:e2:
         95:ad:dd:37:7e:17:37:d6:d9:98:57:49:95:6a:06:7f:cb:86:
         3f:7b:2c:bc:61:29:9e:31:40:5c:3d:ef:53:74:ef:e1:44:b6:
         c7:02:0b:2b:3a:e0:50:cf:7a:88:a5:34:33:28:5e:cd:48:d9:
         06:6c:a3:01:d1:e1:8b:de:dc:2f:3f:e2:0b:80:d8:12:36:07:
         52:1e:92:37:01:a3:d0:ad:69:8c:9d:d8:11:16:ec:2b:77:f1:
         e6:5d:28:38:35:8b:1b:26:de:32:29:d9:06:1a:d9:42:23:5c:
         4d:67:0f:92:fe:8d:cc:a6:4a:48:b4:87:cd:2f:63:6c:25:e4:
         99:6d:8a:61
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3GyvKSAyQy2UskrjAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDVkNDljOWItNDY2YS00MGU2LWFlMDAtNDg1ZGMzYTUw
ZDcwMB4XDTI2MDUwOTEzMDAzMVoXDTI2MDgwNzEzMDAzMVowLzEtMCsGA1UEAxMk
OWQwMGFhZWYtNzIyMy00ZmU1LTg3NzctMDVlM2QyNmNlZGZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+x9hd5Cwo5CZCFEyMxHwxFfjJRyHZjfvlp3V
Ttt3ttWJL1X0PS3RDpeJ8OtyXP/a8I6G6bcP8GTubPFEKgYtpSOlpcMFHj30TZqM
J9yHJj2QIpeuWNqQj3PY9mJQIUQfyeRP6rMbbYOWgViMSSQ0dbHtD1vCruGaoipq
3p/KjIP+nqVJRnC5o4rx/F1swjws+xgd1c5cFKAD7bMzkvVanlGuDVQE7jlHLyhR
bjY3K0NrjYty0NSVKqGPHUz60LoFxUcto/X8dhhyg9IMDLuQ7xXKGxlF6N+z8F/x
+pTeTjxgZ1nGgKBys7Cg9mP5LgVHZuKqThhMRwrPVtckOf74jQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIG5w9kffORF/cg2nBzo53UVPIMPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kNWQ0
OWM5Yi00NjZhLTQwZTYtYWUwMC00ODVkYzNhNTBkNzAvYTI0MGZmMDItNDg3My0z
MWU5LTk2N2ItMzdkZTFkMTkzMjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDVkNDljOWItNDY2YS00MGU2LWFl
MDAtNDg1ZGMzYTUwZDcwL2Q1ZDQ5YzliLTQ2NmEtNDBlNi1hZTAwLTQ4NWRjM2E1
MGQ3MC5jcmwwHwYDVR0jBBgwFoAUniCRnrpQO3ZgokiWL2yRM6ygJzEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9kNWQ0OWM5Yi00NjZhLTQwZTYtYWUwMC00ODVk
YzNhNTBkNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQE/oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGDRX8C3oFJYPidIcE9+9500iLuuWDBbJW+NB3OY3xJGOhD3K8VNA0zB
SyjMeBAO5Ll2vY5ttTcX/7VaRMRFjfOcRAnjaZBQT6szGd6JsO1gEqilUzBbD36G
VJUoaZI9OtoEYc8lzHDWOkGyaYxLN0bpe6jNKbmeku7LcY8d4pWt3Td+FzfW2ZhX
SZVqBn/Lhj97LLxhKZ4xQFw971N07+FEtscCCys64FDPeoilNDMoXs1I2QZsowHR
4Yve3C8/4guA2BI2B1IekjcBo9CtaYyd2BEW7Ct38eZdKDg1ixsm3jIp2QYa2UIj
XE1nD5L+jcymSki0h80vY2wl5JltimE=
-----END CERTIFICATE-----
Generated at Wed May 13 15:50:08 2026 by rpki-client