Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/64cac640-968f-3a36-88bc-dc722036df58.roa
File:                     64cac640-968f-3a36-88bc-dc722036df58.roa (raw, json)
Hash identifier:          TRomt/K6A5vD1IHKCx8oizkAeyZreVYWq00z1QZ0Hp0=
Subject key identifier:   02:6D:0B:3D:E2:FA:11:96:80:FC:52:92:82:13:45:08:B9:C9:B8:D7
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F4328584DCAFB0AA76A6FC3FE5B23C540
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/64cac640-968f-3a36-88bc-dc722036df58.roa
Signing time:             Mon 11 May 2026 01:00:24 +0000
ROA not before:           Mon 11 May 2026 01:00:24 +0000
ROA not after:            Sun 09 Aug 2026 01:00:24 +0000
asID:                     237
IP address blocks:        35.33.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ca:fb:0a:a7:6a:6f:c3:fe:5b:23:c5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: May 11 01:00:24 2026 GMT
            Not After : Aug  9 01:00:24 2026 GMT
        Subject: CN=3679c664-6da4-4028-9a82-cd840fec0b22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e3:14:6f:b0:17:b9:6c:1c:63:ab:f1:2f:1a:
                    21:fe:5e:28:77:66:7b:12:dc:d6:b4:f4:e4:59:50:
                    a5:d2:68:0b:fa:54:b9:aa:13:9c:f1:d9:3c:59:e4:
                    56:b7:6f:9d:5b:0e:70:16:b1:ba:4c:98:fb:d0:5b:
                    3f:88:13:11:65:d4:83:40:c2:9e:9d:7f:d8:26:b4:
                    5f:da:d9:d0:b5:13:72:c0:c1:99:87:c3:2a:45:04:
                    ff:e5:9b:a2:b1:d5:47:be:42:f5:f7:b3:90:c6:49:
                    17:38:95:b2:2e:11:7e:e2:ad:77:f2:c2:8b:51:bf:
                    24:55:77:f7:7c:8c:6f:1e:db:e2:85:bc:59:c5:0d:
                    b2:43:57:6a:d6:90:ef:a7:54:ca:54:a5:67:40:e0:
                    7a:85:06:fe:85:12:f7:87:ff:4b:69:44:54:1e:bd:
                    81:cd:7b:3a:c1:31:26:e6:00:d0:ac:83:da:80:a2:
                    c4:b7:2e:80:37:3f:0f:12:ba:b2:0f:90:fd:44:0c:
                    86:c4:3c:a0:3a:c3:dd:c0:53:73:5b:0c:8f:d3:67:
                    f0:af:fd:83:15:af:95:e4:5c:52:14:e8:6f:de:0f:
                    86:45:36:a2:45:04:3f:2f:bf:43:17:c6:a3:d0:45:
                    b0:69:18:f3:7f:81:b8:9f:d4:05:33:30:0c:10:fb:
                    e4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:6D:0B:3D:E2:FA:11:96:80:FC:52:92:82:13:45:08:B9:C9:B8:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/64cac640-968f-3a36-88bc-dc722036df58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.33.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:e3:bb:90:95:82:a8:5c:8c:3b:94:89:d9:01:7f:6f:fc:c7:
         8e:a2:31:51:41:43:ed:de:f3:bd:c8:01:88:82:36:17:d1:92:
         fe:b2:21:c4:50:9a:7e:99:82:f7:63:5b:81:2f:de:86:cf:9b:
         c9:58:f3:42:19:7c:f1:c4:e4:b2:90:ef:cb:57:44:aa:35:23:
         49:75:80:29:ff:1d:2f:85:15:6f:f3:1a:58:22:9d:6f:00:91:
         98:dd:9a:63:c1:a4:17:58:40:e0:64:11:37:a3:b0:9c:f1:06:
         9a:76:fd:a6:1b:6f:7f:6f:8f:f4:19:54:21:30:28:10:f7:13:
         c0:b0:06:af:1f:3b:13:91:80:fe:d8:b0:cd:66:b6:09:f7:c0:
         58:25:0b:e7:d8:11:71:a5:ab:c2:ca:2a:cb:31:a1:d2:98:73:
         42:0e:2a:2f:61:02:71:8a:d7:67:db:d4:3a:a9:a4:5d:cd:03:
         9f:e3:24:29:32:e2:f5:29:a1:67:29:8e:f6:bd:3a:ac:16:b1:
         66:51:fa:79:e5:9c:4e:64:f3:95:c5:55:30:6c:e3:ae:99:74:
         7e:d3:e8:c9:09:a9:22:15:07:59:ee:2d:4d:f6:d4:6f:13:86:
         fb:9b:a4:0c:2e:cb:51:44:55:32:c4:cc:89:31:98:9f:0a:03:
         87:ba:33:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3K+wqnam/D/lsjxUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGVkMzA1MGEtNDYwNS00MDk0LWIzMzEtYmIwZjg3NThk
ZWZlMB4XDTI2MDUxMTAxMDAyNFoXDTI2MDgwOTAxMDAyNFowLzEtMCsGA1UEAxMk
MzY3OWM2NjQtNmRhNC00MDI4LTlhODItY2Q4NDBmZWMwYjIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOMUb7AXuWwcY6vxLxoh/l4od2Z7EtzWtPTk
WVCl0mgL+lS5qhOc8dk8WeRWt2+dWw5wFrG6TJj70Fs/iBMRZdSDQMKenX/YJrRf
2tnQtRNywMGZh8MqRQT/5ZuisdVHvkL197OQxkkXOJWyLhF+4q138sKLUb8kVXf3
fIxvHtvihbxZxQ2yQ1dq1pDvp1TKVKVnQOB6hQb+hRL3h/9LaURUHr2BzXs6wTEm
5gDQrIPagKLEty6ANz8PErqyD5D9RAyGxDygOsPdwFNzWwyP02fwr/2DFa+V5FxS
FOhv3g+GRTaiRQQ/L79DF8aj0EWwaRjzf4G4n9QFMzAMEPvkCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAJtCz3i+hGWgPxSkoITRQi5ybjXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWQz
MDUwYS00NjA1LTQwOTQtYjMzMS1iYjBmODc1OGRlZmUvNjRjYWM2NDAtOTY4Zi0z
YTM2LTg4YmMtZGM3MjIwMzZkZjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGVkMzA1MGEtNDYwNS00MDk0LWIz
MzEtYmIwZjg3NThkZWZlLzhlZDMwNTBhLTQ2MDUtNDA5NC1iMzMxLWJiMGY4NzU4
ZGVmZS5jcmwwHwYDVR0jBBgwFoAUcZ91nrny/TeyT/mL72NxjsBOTA8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWQzMDUwYS00NjA1LTQwOTQtYjMzMS1iYjBm
ODc1OGRlZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFIyFgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJfju5CVgqhcjDuUidkBf2/8x46iMVFBQ+3e873IAYiCNhfRkv6yIcRQ
mn6ZgvdjW4Ev3obPm8lY80IZfPHE5LKQ78tXRKo1I0l1gCn/HS+FFW/zGlginW8A
kZjdmmPBpBdYQOBkETejsJzxBpp2/aYbb39vj/QZVCEwKBD3E8CwBq8fOxORgP7Y
sM1mtgn3wFglC+fYEXGlq8LKKssxodKYc0IOKi9hAnGK12fb1DqppF3NA5/jJCky
4vUpoWcpjva9OqwWsWZR+nnlnE5k85XFVTBs466ZdH7T6MkJqSIVB1nuLU321G8T
hvubpAwuy1FEVTLEzIkxmJ8KA4e6M90=
-----END CERTIFICATE-----
Generated at Wed May 13 14:28:57 2026 by rpki-client