Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/4d322805-0935-3b42-94e4-936037e13342.roa
File:                     4d322805-0935-3b42-94e4-936037e13342.roa (raw, json)
Hash identifier:          8Zb2UgvGi8fWF9IU5DAbCK3wQ6Ejo9y4hifv3UrrWFQ=
Subject key identifier:   E1:D1:61:F4:7A:C2:03:EB:DC:36:CE:B9:42:C9:9A:86:EF:19:1A:BB
Certificate issuer:       /CN=c6228f86-bf54-49fc-835c-588cd2aadb49
Certificate serial:       010D0C9F4328584F119CDB367715AAAD8405BD28
Authority key identifier: D3:6C:AC:E6:33:A2:EE:D4:AF:82:1E:F5:97:60:89:BE:D8:47:3C:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/4d322805-0935-3b42-94e4-936037e13342.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     1416
IP address blocks:        64.150.0.0/23 maxlen: 23
                          64.150.2.0/23 maxlen: 23
                          64.150.4.0/23 maxlen: 23
                          64.150.6.0/23 maxlen: 23
                          64.150.6.0/24 maxlen: 24
                          64.150.8.0/23 maxlen: 23
                          64.150.10.0/23 maxlen: 23
                          64.150.12.0/23 maxlen: 23
                          64.150.14.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c6228f86-bf54-49fc-835c-588cd2aadb49.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c6228f86-bf54-49fc-835c-588cd2aadb49.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9c:db:36:77:15:aa:ad:84:05:bd:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6228f86-bf54-49fc-835c-588cd2aadb49
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=35ea2fee-9840-4873-8b70-c956287884a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:73:50:d5:7a:12:47:e2:bf:2f:fb:c9:8e:af:
                    5c:53:4f:cd:50:af:e5:1d:12:c9:db:d1:9f:62:4b:
                    b6:28:85:8b:64:d2:d4:e5:c0:b3:e9:33:f7:cb:a2:
                    2b:8a:16:d7:cd:18:91:65:03:bc:7c:28:16:5c:e5:
                    14:2d:bc:ea:9f:53:6a:34:c8:5c:c2:df:54:6e:83:
                    86:ca:7c:fc:2c:45:c1:09:7a:47:4c:a3:71:ff:dd:
                    ff:04:1f:cc:4c:5c:7d:c7:88:6d:b9:1e:63:55:bd:
                    c1:18:1e:df:1d:3b:ae:26:48:4b:78:b1:07:fc:cd:
                    a4:b7:49:11:fe:12:cb:7e:3e:3e:6a:3f:62:a9:4a:
                    eb:91:6d:ed:c2:a2:d5:a0:25:73:6e:27:05:e0:e7:
                    a5:18:93:f5:6e:04:3d:97:80:e3:12:be:ff:0b:f4:
                    4f:1b:dd:67:27:01:3f:48:b0:28:bc:07:a2:6f:e9:
                    9b:0d:17:40:32:eb:ec:50:56:24:02:93:5e:05:b8:
                    a4:a7:ab:95:a6:4a:64:51:07:40:ed:7b:32:bb:1f:
                    16:18:a7:a6:48:52:32:64:a2:51:69:62:91:df:16:
                    cc:fd:4b:ae:06:61:e4:2a:18:31:5d:f7:d0:89:17:
                    3e:69:b1:d2:71:24:f9:64:6e:f5:ab:e5:bf:b0:6d:
                    3f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:D1:61:F4:7A:C2:03:EB:DC:36:CE:B9:42:C9:9A:86:EF:19:1A:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/4d322805-0935-3b42-94e4-936037e13342.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c6228f86-bf54-49fc-835c-588cd2aadb49.crl

            X509v3 Authority Key Identifier:
                keyid:D3:6C:AC:E6:33:A2:EE:D4:AF:82:1E:F5:97:60:89:BE:D8:47:3C:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.150.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:33:73:49:5a:80:c7:ff:6c:02:5e:7d:38:76:bb:b0:d9:84:
         5e:56:b4:14:6d:ee:bd:bd:b8:07:3d:6b:13:37:b4:ac:28:67:
         00:04:d3:2b:5a:23:36:76:91:b5:5b:51:c3:2a:d7:54:ce:52:
         e6:a6:43:95:54:03:d6:71:74:45:a7:c8:02:d8:0f:56:4d:35:
         82:91:f6:c9:29:7a:bd:62:78:d5:c8:b8:4a:a7:c3:91:54:de:
         33:7a:27:ae:3a:73:5a:a7:5b:e0:93:fc:00:76:73:9b:c3:46:
         60:5f:7a:d1:71:25:ff:7c:9e:e1:e4:0e:a2:a2:a9:16:78:bc:
         35:28:07:1f:fb:a4:85:85:c3:5f:32:f6:0c:c3:f0:51:d6:3c:
         d5:5f:53:40:41:72:5d:e0:07:f7:7c:ec:ba:9d:a2:48:4f:a5:
         6e:69:56:44:c2:c1:75:6d:93:cf:91:e0:dc:07:ca:93:b6:c8:
         ae:01:55:41:d0:43:09:94:b4:b9:22:c3:2e:26:34:d1:29:d5:
         2d:19:e7:eb:46:08:31:77:df:00:5f:cf:9e:96:c2:aa:ba:62:
         9f:1f:fc:ad:ae:34:51:06:e3:04:e0:1d:67:2f:5b:6e:97:c9:
         48:c0:d0:a1:20:47:45:80:ee:0a:2b:f4:61:f9:4f:46:34:e5:
         ae:d3:1d:b6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnNs2dxWqrYQFvSgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzYyMjhmODYtYmY1NC00OWZjLTgzNWMtNTg4Y2QyYWFk
YjQ5MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk
MzVlYTJmZWUtOTg0MC00ODczLThiNzAtYzk1NjI4Nzg4NGEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHNQ1XoSR+K/L/vJjq9cU0/NUK/lHRLJ29Gf
Yku2KIWLZNLU5cCz6TP3y6IrihbXzRiRZQO8fCgWXOUULbzqn1NqNMhcwt9UboOG
ynz8LEXBCXpHTKNx/93/BB/MTFx9x4htuR5jVb3BGB7fHTuuJkhLeLEH/M2kt0kR
/hLLfj4+aj9iqUrrkW3twqLVoCVzbicF4OelGJP1bgQ9l4DjEr7/C/RPG91nJwE/
SLAovAeib+mbDRdAMuvsUFYkApNeBbikp6uVpkpkUQdA7Xsyux8WGKemSFIyZKJR
aWKR3xbM/UuuBmHkKhgxXffQiRc+abHScST5ZG71q+W/sG0/oQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOHRYfR6wgPr3DbOuULJmobvGRq7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9jNjIy
OGY4Ni1iZjU0LTQ5ZmMtODM1Yy01ODhjZDJhYWRiNDkvNGQzMjI4MDUtMDkzNS0z
YjQyLTk0ZTQtOTM2MDM3ZTEzMzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYzYyMjhmODYtYmY1NC00OWZjLTgz
NWMtNTg4Y2QyYWFkYjQ5L2M2MjI4Zjg2LWJmNTQtNDlmYy04MzVjLTU4OGNkMmFh
ZGI0OS5jcmwwHwYDVR0jBBgwFoAU02ys5jOi7tSvgh71l2CJvthHPJkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi9jNjIyOGY4Ni1iZjU0LTQ5ZmMtODM1Yy01ODhj
ZDJhYWRiNDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQJYAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADYzc0lagMf/bAJefTh2u7DZhF5WtBRt7r29uAc9axM3tKwoZwAE0yta
IzZ2kbVbUcMq11TOUuamQ5VUA9ZxdEWnyALYD1ZNNYKR9skper1ieNXIuEqnw5FU
3jN6J646c1qnW+CT/AB2c5vDRmBfetFxJf98nuHkDqKiqRZ4vDUoBx/7pIWFw18y
9gzD8FHWPNVfU0BBcl3gB/d87LqdokhPpW5pVkTCwXVtk8+R4NwHypO2yK4BVUHQ
QwmUtLkiwy4mNNEp1S0Z5+tGCDF33wBfz56Wwqq6Yp8f/K2uNFEG4wTgHWcvW26X
yUjA0KEgR0WA7gor9GH5T0Y05a7THbY=
-----END CERTIFICATE-----
Generated at Sat Sep 26 15:32:17 2026 by rpki-client