Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/b3e29749-003c-3bd0-8e1a-4316204b37eb.roa
File:                     b3e29749-003c-3bd0-8e1a-4316204b37eb.roa (raw, json)
Hash identifier:          c4a0WwXbH3qxjkgQ7AY8ZoselTp9hFQ9wrLq0aY7NOI=
Subject key identifier:   26:4C:CA:3A:A7:3A:38:8A:A1:D8:A7:04:40:50:33:E4:47:2E:FA:74
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       010D0C9F4328584F497487CA01A03D8638A2C070
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/b3e29749-003c-3bd0-8e1a-4316204b37eb.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     32491
IP address blocks:        64.98.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:87:ca:01:a0:3d:86:38:a2:c0:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=d69c39e8-96d4-4c81-b75b-ab4bf77f6499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:47:a3:af:7c:7c:98:0b:f8:41:51:93:00:ae:
                    7e:20:d0:1d:31:6f:3b:b5:40:d2:d4:e0:ef:18:cd:
                    00:bc:e0:f8:fc:e4:19:79:56:04:70:eb:e0:ed:6a:
                    b2:4d:3d:dd:65:0f:2a:ba:45:59:ab:75:3b:7c:41:
                    a5:29:53:7f:95:b4:4d:45:84:6d:8e:80:5f:e4:0e:
                    cc:f9:fe:ee:ac:bd:9a:75:60:a6:e3:60:77:a0:f1:
                    7b:98:84:69:f3:28:02:ba:a2:d6:3e:02:65:17:ff:
                    f7:b3:08:d4:b2:bc:4b:75:ea:1c:48:3c:cf:08:d7:
                    8a:95:d8:c2:80:06:36:8f:e1:90:fd:bf:88:d5:ab:
                    b7:e8:b1:1e:0c:77:1f:15:a6:ca:3e:5f:b9:6f:53:
                    51:54:ec:59:d9:b3:41:67:99:f0:dc:00:a4:ab:97:
                    56:aa:56:4c:82:46:a9:ba:d8:57:f3:ac:90:a1:15:
                    e2:84:47:ea:c1:e0:1a:87:5d:da:10:1b:72:9d:71:
                    25:87:d8:60:11:de:41:8f:01:87:22:77:43:7d:3f:
                    c2:55:bc:df:30:ae:86:f6:97:60:f6:82:96:e7:2b:
                    93:46:df:5c:23:ea:46:06:3e:7b:f3:a1:eb:3a:d8:
                    53:58:19:ad:b2:64:3b:97:48:fe:4f:cc:5e:0a:65:
                    10:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:4C:CA:3A:A7:3A:38:8A:A1:D8:A7:04:40:50:33:E4:47:2E:FA:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/b3e29749-003c-3bd0-8e1a-4316204b37eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.98.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:1d:ad:18:22:f6:63:3b:81:05:fd:15:15:d2:fd:c7:86:57:
         19:0f:35:24:af:e7:2a:1d:2f:77:47:c5:d3:ec:50:e1:66:13:
         7b:68:21:64:1b:13:bf:0e:4e:df:7e:04:00:e1:7b:9d:74:b4:
         35:b3:2c:35:d6:22:ab:9c:17:8b:6a:1d:5f:e3:e0:70:e8:c4:
         88:ea:75:79:bc:be:78:ad:c5:3c:a2:b5:b6:ec:fd:a2:b7:ae:
         4a:59:fe:54:d6:d1:bd:05:c3:c6:75:6e:1e:08:ab:77:50:0c:
         c4:68:8b:69:b9:0a:e2:9b:1e:b2:a9:5c:eb:7a:1c:d4:5c:c5:
         8d:26:0f:d0:c5:3f:9d:13:c0:8e:43:47:66:bc:39:19:11:94:
         80:66:87:9c:7f:1a:c5:0b:ac:3d:46:84:09:f9:52:1e:4c:04:
         ec:ff:d3:59:f4:9e:2f:b4:ef:ac:7c:5f:22:4c:03:8d:3f:85:
         96:e0:52:23:13:3a:db:8e:82:fb:6c:47:d2:ac:44:ee:1f:15:
         06:96:ce:9e:1c:c8:13:b8:5e:a9:e4:81:3f:f9:51:7a:83:06:
         ec:b7:70:bf:29:4b:6c:30:11:c5:d4:e8:a2:8c:c8:a3:df:56:
         6d:d5:42:74:37:07:19:b4:72:77:6e:10:d4:48:18:6c:10:49:
         f1:80:ad:6d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdIfKAaA9hjiiwHAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzA3OTM2ODMtYWEwNy00OTM1LWEyYzItZWM0MjNlYTdk
ZDBiMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZDY5YzM5ZTgtOTZkNC00YzgxLWI3NWItYWI0YmY3N2Y2NDk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUejr3x8mAv4QVGTAK5+INAdMW87tUDS1ODv
GM0AvOD4/OQZeVYEcOvg7WqyTT3dZQ8qukVZq3U7fEGlKVN/lbRNRYRtjoBf5A7M
+f7urL2adWCm42B3oPF7mIRp8ygCuqLWPgJlF//3swjUsrxLdeocSDzPCNeKldjC
gAY2j+GQ/b+I1au36LEeDHcfFabKPl+5b1NRVOxZ2bNBZ5nw3ACkq5dWqlZMgkap
uthX86yQoRXihEfqweAah13aEBtynXElh9hgEd5BjwGHIndDfT/CVbzfMK6G9pdg
9oKW5yuTRt9cI+pGBj5786HrOthTWBmtsmQ7l0j+T8xeCmUQ5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCZMyjqnOjiKodinBEBQM+RHLvp0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMDc5
MzY4My1hYTA3LTQ5MzUtYTJjMi1lYzQyM2VhN2RkMGIvYjNlMjk3NDktMDAzYy0z
YmQwLThlMWEtNDMxNjIwNGIzN2ViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzA3OTM2ODMtYWEwNy00OTM1LWEy
YzItZWM0MjNlYTdkZDBiL2MwNzkzNjgzLWFhMDctNDkzNS1hMmMyLWVjNDIzZWE3
ZGQwYi5jcmwwHwYDVR0jBBgwFoAUOdwqnqE5xltso0hvdvSX3QTCyKowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMDc5MzY4My1hYTA3LTQ5MzUtYTJjMi1lYzQy
M2VhN2RkMGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQGKFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACsdrRgi9mM7gQX9FRXS/ceGVxkPNSSv5yodL3dHxdPsUOFmE3toIWQb
E78OTt9+BADhe510tDWzLDXWIqucF4tqHV/j4HDoxIjqdXm8vnitxTyitbbs/aK3
rkpZ/lTW0b0Fw8Z1bh4Iq3dQDMRoi2m5CuKbHrKpXOt6HNRcxY0mD9DFP50TwI5D
R2a8ORkRlIBmh5x/GsULrD1GhAn5Uh5MBOz/01n0ni+076x8XyJMA40/hZbgUiMT
OtuOgvtsR9KsRO4fFQaWzp4cyBO4XqnkgT/5UXqDBuy3cL8pS2wwEcXU6KKMyKPf
Vm3VQnQ3Bxm0cnduENRIGGwQSfGArW0=
-----END CERTIFICATE-----
Generated at Sat Oct 3 19:52:00 2026 by rpki-client