Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/5c8bb3ec-7ad3-3e62-9215-499c7751fbfd.roa
File:                     5c8bb3ec-7ad3-3e62-9215-499c7751fbfd.roa (raw, json)
Hash identifier:          zFylMA6YcMLGes499Ebbu2GeR+XHESGreI9ZJXxJ6dE=
Subject key identifier:   A2:32:29:FC:D5:77:31:9A:45:27:49:6D:EC:37:45:6D:58:B8:7E:6B
Certificate issuer:       /CN=24f82d36-633a-44e0-9b31-a523e1609720
Certificate serial:       010D0C9F4328584D9E200790DB73D6204916B1C0
Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/5c8bb3ec-7ad3-3e62-9215-499c7751fbfd.roa
Signing time:             Fri 24 Apr 2026 23:23:50 +0000
ROA not before:           Fri 24 Apr 2026 23:23:50 +0000
ROA not after:            Thu 23 Jul 2026 23:23:50 +0000
asID:                     397630
IP address blocks:        64.16.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9e:20:07:90:db:73:d6:20:49:16:b1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720
        Validity
            Not Before: Apr 24 23:23:50 2026 GMT
            Not After : Jul 23 23:23:50 2026 GMT
        Subject: CN=b75580ae-9174-4122-b115-39ea5f80dfad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:96:ed:09:16:79:b3:05:53:1b:dc:a2:8b:39:
                    9f:73:72:68:bf:b5:0b:3d:99:13:ac:b8:eb:5a:cf:
                    ee:e1:40:27:82:47:48:bd:52:0b:78:d0:65:2c:01:
                    94:8d:13:30:f0:89:45:26:de:79:bc:aa:f9:59:3b:
                    ab:49:93:36:36:d8:7e:77:2b:86:10:3f:c1:38:90:
                    49:73:b3:77:e8:9d:2b:e6:ba:15:5d:38:b2:97:25:
                    e0:b9:93:99:89:0a:ab:10:87:18:4c:3f:4d:6a:23:
                    85:88:28:48:54:6a:0f:1b:33:76:b6:ae:87:4c:bc:
                    a6:9a:52:6a:a2:97:e1:94:06:9c:ba:4b:ce:19:73:
                    8e:0a:7a:b5:24:85:42:cb:f5:ac:24:1e:f2:d5:09:
                    6d:cf:15:04:23:73:f5:83:da:8e:d4:16:c8:8d:cf:
                    33:1b:4c:39:1c:dd:5e:ee:c8:53:49:33:57:ea:bd:
                    71:e2:3d:ff:34:dc:d9:38:fc:b2:ff:ca:3f:6b:4d:
                    89:8c:58:79:b9:28:f7:37:7f:e0:27:32:2d:fa:e8:
                    12:96:36:26:cb:bc:4b:ae:e3:40:61:1f:af:fc:42:
                    79:fe:f1:90:dd:ac:dd:de:79:44:3a:55:42:9c:a5:
                    f7:53:8c:b1:f5:f2:f1:e8:88:a3:4d:91:47:fa:8d:
                    02:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:32:29:FC:D5:77:31:9A:45:27:49:6D:EC:37:45:6D:58:B8:7E:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/5c8bb3ec-7ad3-3e62-9215-499c7751fbfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl

            X509v3 Authority Key Identifier:
                keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.16.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:a2:9c:61:79:39:f1:11:f5:2c:9e:3a:24:10:6c:1d:de:7a:
         c0:c2:0e:72:c9:80:4b:43:79:07:8c:21:1f:28:b3:7a:ea:c9:
         0d:3f:3f:6a:f0:93:36:5e:d1:f4:d5:b4:a8:99:76:2b:bb:6b:
         3d:1c:e8:c0:c0:27:7f:e1:db:ae:da:aa:3e:d3:94:38:e8:cf:
         2d:06:31:26:e4:11:79:0a:ac:6f:b6:e6:c9:07:91:c2:bc:6d:
         53:4a:aa:7e:0d:22:f4:ed:cf:15:1e:d4:a3:b9:f8:c6:90:d9:
         a7:a8:eb:64:b7:11:87:0e:4a:2f:3f:d1:50:bb:73:a8:b7:a5:
         6d:b5:da:94:b4:7c:7f:62:a3:80:b9:ae:e6:79:42:37:dc:9e:
         9c:4c:2f:9b:ce:b7:34:ae:9e:d7:a3:5a:9d:b6:94:0a:01:4d:
         3e:82:54:75:31:51:7c:c6:96:16:aa:e7:71:14:f2:13:09:1c:
         0c:cd:32:0f:80:3a:47:4f:89:31:d3:71:7b:e9:ce:17:77:65:
         a3:57:36:14:ed:96:9b:7d:ce:f2:91:aa:44:00:cb:24:ed:a4:
         d8:96:ac:77:f2:df:2d:18:74:62:17:10:da:29:31:31:46:e9:
         2c:ea:3d:8b:be:7e:23:88:79:36:5f:bb:73:9c:6f:3a:31:79:
         72:2f:4e:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eIAeQ23PWIEkWscAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5
NzIwMB4XDTI2MDQyNDIzMjM1MFoXDTI2MDcyMzIzMjM1MFowLzEtMCsGA1UEAxMk
Yjc1NTgwYWUtOTE3NC00MTIyLWIxMTUtMzllYTVmODBkZmFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZbtCRZ5swVTG9yiizmfc3Jov7ULPZkTrLjr
Ws/u4UAngkdIvVILeNBlLAGUjRMw8IlFJt55vKr5WTurSZM2Nth+dyuGED/BOJBJ
c7N36J0r5roVXTiylyXguZOZiQqrEIcYTD9NaiOFiChIVGoPGzN2tq6HTLymmlJq
opfhlAacukvOGXOOCnq1JIVCy/WsJB7y1QltzxUEI3P1g9qO1BbIjc8zG0w5HN1e
7shTSTNX6r1x4j3/NNzZOPyy/8o/a02JjFh5uSj3N3/gJzIt+ugSljYmy7xLruNA
YR+v/EJ5/vGQ3azd3nlEOlVCnKX3U4yx9fLx6IijTZFH+o0ChQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKIyKfzVdzGaRSdJbew3RW1YuH5rMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4
MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvNWM4YmIzZWMtN2FkMy0z
ZTYyLTkyMTUtNDk5Yzc3NTFmYmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli
MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw
OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz
ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFGinGF5OfER9SyeOiQQbB3eesDCDnLJgEtDeQeMIR8os3rqyQ0/P2rw
kzZe0fTVtKiZdiu7az0c6MDAJ3/h267aqj7TlDjozy0GMSbkEXkKrG+25skHkcK8
bVNKqn4NIvTtzxUe1KO5+MaQ2aeo62S3EYcOSi8/0VC7c6i3pW212pS0fH9io4C5
ruZ5QjfcnpxML5vOtzSuntejWp22lAoBTT6CVHUxUXzGlhaq53EU8hMJHAzNMg+A
OkdPiTHTcXvpzhd3ZaNXNhTtlpt9zvKRqkQAyyTtpNiWrHfy3y0YdGIXENopMTFG
6SzqPYu+fiOIeTZfu3OcbzoxeXIvTjQ=
-----END CERTIFICATE-----
Generated at Wed May 13 11:35:52 2026 by rpki-client