Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/36bdb659-b032-3ab4-a45c-642e8d4de1b5.roa
File:                     36bdb659-b032-3ab4-a45c-642e8d4de1b5.roa (raw, json)
Hash identifier:          f8jSdyKI7TTdh4pcf/u49CNQSfc6CDKg5oEVdCAATM4=
Subject key identifier:   68:74:15:09:EC:F6:F4:BC:91:06:E2:05:9C:B1:13:D1:40:55:64:2F
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F4328584E2D9F292A3517FD1423290580
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/36bdb659-b032-3ab4-a45c-642e8d4de1b5.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     16696
IP address blocks:        64.255.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:29:2a:35:17:fd:14:23:29:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=d2949056-6702-4c1a-b89a-1c1c7feffea1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6c:0c:d6:f1:24:dc:8e:fd:37:56:be:bf:95:
                    67:d3:fd:c6:6f:a6:45:62:5c:d7:ea:fc:62:6f:13:
                    32:9b:43:b8:aa:08:0d:1c:4a:a2:92:d0:bd:e4:f4:
                    61:ea:1a:5a:28:a8:8d:75:08:e1:5f:5f:d6:ac:27:
                    18:5e:40:75:d0:45:d9:54:30:16:2e:d4:2d:6d:05:
                    1b:2a:44:ff:77:b3:f1:5d:98:65:46:98:5f:3d:19:
                    46:03:2a:d3:e7:c2:fa:21:21:e9:fd:0f:db:c3:c5:
                    59:1a:c5:41:ff:d8:67:b6:fd:67:55:12:04:e8:8c:
                    8c:6d:a1:54:dd:1b:78:3e:f9:39:00:64:50:c7:7f:
                    6b:7d:9e:03:fe:e8:29:b6:22:fa:e1:3c:51:dd:f7:
                    0e:91:9c:4e:7e:f0:12:10:74:ec:24:8c:37:44:cb:
                    fc:34:43:f8:c0:fc:b7:e1:90:7a:2d:89:94:90:e2:
                    a2:2f:37:f1:f6:12:e9:e1:3a:b5:ed:75:76:a5:f2:
                    1a:c0:25:8b:a5:0e:cf:20:dc:f1:0b:e8:48:aa:b0:
                    b6:14:ae:13:0b:90:d9:c3:ce:fa:39:5c:8a:68:c6:
                    cf:b4:73:2e:c4:83:52:af:d0:d2:04:48:5e:7f:39:
                    e5:7d:be:a3:d5:02:43:1b:9e:d5:c2:cb:bd:23:5f:
                    53:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:74:15:09:EC:F6:F4:BC:91:06:E2:05:9C:B1:13:D1:40:55:64:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/36bdb659-b032-3ab4-a45c-642e8d4de1b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.255.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:c1:fe:81:e7:cd:2e:2a:32:e1:5d:1f:ed:1b:ac:02:1e:a0:
         bd:3f:5c:06:72:24:e0:75:00:7b:e2:c3:50:d1:4a:1e:45:46:
         d5:88:cf:16:6d:da:30:b8:a0:54:e3:2f:9f:04:85:78:c3:e2:
         8c:04:b9:fc:ea:f6:e9:3f:52:4b:91:50:37:64:47:e1:03:2b:
         06:f8:4e:aa:47:d0:ec:0e:4d:c2:d8:1d:f9:91:08:a7:37:fd:
         0b:4d:62:ef:c6:97:b7:aa:e0:7c:fd:76:01:d2:8d:b8:16:4b:
         a1:23:3a:7b:d5:64:d2:40:48:eb:d0:18:08:9b:89:e4:55:a6:
         5e:31:43:88:96:2c:0b:1d:76:bb:89:19:97:a2:82:c9:ee:ce:
         b0:ea:ec:75:39:2f:bd:bd:af:a2:9b:29:29:d7:6b:b1:70:0a:
         6d:04:8c:b0:59:f5:77:7b:bb:fe:ca:b6:89:d7:33:af:01:70:
         5b:87:28:33:ba:ad:d8:de:8c:f9:b0:df:09:55:23:20:d8:d4:
         22:e0:de:8e:ee:b7:cf:66:81:2a:2c:38:98:6c:e9:10:5b:24:
         35:74:db:e7:27:fa:3a:74:c0:65:9a:41:09:73:3e:57:a4:73:
         ae:c2:0b:14:01:9b:b9:78:c3:f5:ac:49:71:b8:2c:24:cf:8b:
         4b:90:ae:b9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4tnykqNRf9FCMpBYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm
YzYwMB4XDTI2MDYxNTA5MDAxMloXDTI2MDkxMzA5MDAxMlowLzEtMCsGA1UEAxMk
ZDI5NDkwNTYtNjcwMi00YzFhLWI4OWEtMWMxYzdmZWZmZWExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2wM1vEk3I79N1a+v5Vn0/3Gb6ZFYlzX6vxi
bxMym0O4qggNHEqiktC95PRh6hpaKKiNdQjhX1/WrCcYXkB10EXZVDAWLtQtbQUb
KkT/d7PxXZhlRphfPRlGAyrT58L6ISHp/Q/bw8VZGsVB/9hntv1nVRIE6IyMbaFU
3Rt4Pvk5AGRQx39rfZ4D/ugptiL64TxR3fcOkZxOfvASEHTsJIw3RMv8NEP4wPy3
4ZB6LYmUkOKiLzfx9hLp4Tq17XV2pfIawCWLpQ7PINzxC+hIqrC2FK4TC5DZw876
OVyKaMbPtHMuxINSr9DSBEhefznlfb6j1QJDG57Vwsu9I19TwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGh0FQns9vS8kQbiBZyxE9FAVWQvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl
OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvMzZiZGI2NTktYjAzMi0z
YWI0LWE0NWMtNjQyZThkNGRlMWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz
YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh
ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1
YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQP/nMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACLB/oHnzS4qMuFdH+0brAIeoL0/XAZyJOB1AHviw1DRSh5FRtWIzxZt
2jC4oFTjL58EhXjD4owEufzq9uk/UkuRUDdkR+EDKwb4TqpH0OwOTcLYHfmRCKc3
/QtNYu/Gl7eq4Hz9dgHSjbgWS6EjOnvVZNJASOvQGAibieRVpl4xQ4iWLAsddruJ
GZeigsnuzrDq7HU5L729r6KbKSnXa7FwCm0EjLBZ9Xd7u/7KtonXM68BcFuHKDO6
rdjejPmw3wlVIyDY1CLg3o7ut89mgSosOJhs6RBbJDV02+cn+jp0wGWaQQlzPlek
c67CCxQBm7l4w/WsSXG4LCTPi0uQrrk=
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:19:02 2026 by rpki-client