Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c/c4236269-3760-3460-9f4a-6da094bcc852.roa
File:                     c4236269-3760-3460-9f4a-6da094bcc852.roa (raw, json)
Hash identifier:          PO/Ey/3bNjYdD6Kz9NaS0YPjiZeDjvJyppdMsqZ/lNA=
Subject key identifier:   BA:B1:3A:E1:F1:53:28:14:4C:C6:2D:3E:A8:72:01:ED:78:43:6E:69
Certificate issuer:       /CN=785749fa-091c-4978-a918-3238e45d2a1c
Certificate serial:       010D0C9F4328584E730F66DA2412499E76DC6D50
Authority key identifier: 33:F0:9A:2E:39:C5:2F:69:00:C8:DB:6A:A8:D7:FF:36:1D:F8:31:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c/c4236269-3760-3460-9f4a-6da094bcc852.roa
Signing time:             Fri 10 Jul 2026 05:57:30 +0000
ROA not before:           Fri 10 Jul 2026 05:57:30 +0000
ROA not after:            Thu 08 Oct 2026 05:57:30 +0000
asID:                     20224
IP address blocks:        64.146.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c/785749fa-091c-4978-a918-3238e45d2a1c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c/785749fa-091c-4978-a918-3238e45d2a1c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:73:0f:66:da:24:12:49:9e:76:dc:6d:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=785749fa-091c-4978-a918-3238e45d2a1c
        Validity
            Not Before: Jul 10 05:57:30 2026 GMT
            Not After : Oct  8 05:57:30 2026 GMT
        Subject: CN=32154a31-2724-45cd-91c9-591511b69a58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:aa:37:81:35:a0:39:5f:fb:1a:d7:34:a5:57:
                    25:2b:21:bc:b0:35:a6:59:5d:6a:b5:64:54:1c:2e:
                    22:64:48:a7:20:6c:0f:f1:da:7d:42:2e:48:b5:08:
                    a7:7a:11:a5:49:a8:23:72:cf:4e:1d:25:c7:a9:99:
                    dc:a4:37:b2:a2:29:a9:3c:33:71:a3:8e:bd:19:3b:
                    4d:bd:93:ba:c9:07:c1:73:b1:25:09:98:b4:ff:ca:
                    c1:af:77:1e:75:61:8b:17:1f:d5:07:c5:fd:47:d8:
                    ad:ba:66:90:d5:15:ae:67:d1:a3:f9:33:92:80:e5:
                    8a:05:d5:ed:5a:07:c6:e4:8e:a9:d3:6f:01:da:b2:
                    a8:b6:5b:c6:74:3a:fb:2b:84:e0:86:eb:44:4f:18:
                    42:9b:0a:7e:d8:5b:1a:2c:34:f1:a9:f1:ae:9d:2b:
                    5d:7b:a5:12:44:2e:81:52:60:a1:19:4b:ca:0e:b2:
                    d3:91:28:72:0f:65:49:e1:38:9d:da:f4:b5:61:e0:
                    10:2d:66:c5:69:38:53:76:12:7c:fe:60:2e:7a:71:
                    d5:92:9e:59:02:df:2f:1a:12:c4:7c:0a:4f:87:7c:
                    aa:9a:4a:59:a2:0a:68:8d:4c:83:d2:0b:38:44:9f:
                    a3:d9:65:eb:0d:5e:d3:59:ec:ae:28:a4:68:10:1d:
                    f4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:B1:3A:E1:F1:53:28:14:4C:C6:2D:3E:A8:72:01:ED:78:43:6E:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c/c4236269-3760-3460-9f4a-6da094bcc852.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c/785749fa-091c-4978-a918-3238e45d2a1c.crl

            X509v3 Authority Key Identifier:
                keyid:33:F0:9A:2E:39:C5:2F:69:00:C8:DB:6A:A8:D7:FF:36:1D:F8:31:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.146.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:c2:f5:2c:92:03:28:34:83:45:86:1a:18:1c:d6:33:19:9e:
         d9:30:17:20:0c:01:ab:bb:d5:fd:0b:2c:72:f4:fe:e2:80:7f:
         7e:af:4c:8f:a9:89:23:97:f5:67:ae:e3:1c:08:89:2e:69:d3:
         6c:17:da:bb:53:39:e8:1b:55:7b:a5:08:36:fa:f2:11:fe:da:
         0d:1a:bb:62:0d:2c:66:c7:b9:8e:ed:ee:82:9b:b2:74:25:f5:
         a3:0b:d9:8c:69:e0:5f:e7:cd:d4:60:2c:d7:00:f4:bc:3a:9d:
         c2:2c:f6:4e:dc:95:1b:06:97:1d:90:a7:3e:53:65:67:80:d2:
         0b:e3:89:8c:09:f7:2a:8c:47:8f:96:38:cb:2d:11:50:7b:bb:
         56:a6:ed:0f:80:27:35:9a:c9:f4:64:49:d6:0c:6d:52:e8:63:
         85:0c:8a:fb:3c:9e:c3:3b:9a:9a:f1:a1:15:0c:3b:3e:ea:c9:
         f8:47:0d:29:79:04:64:40:53:4f:ba:15:c1:54:f8:68:65:92:
         d2:9f:c5:f7:eb:f9:dc:ab:de:93:4e:3e:69:26:06:75:e3:d7:
         7b:b8:9b:1b:d4:14:cf:44:77:4b:45:43:eb:0c:b5:d8:69:48:
         28:d6:49:ec:a1:3f:91:c1:07:44:55:4f:72:99:ec:1a:88:c3:
         6e:a0:80:f4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5zD2baJBJJnnbcbVAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzg1NzQ5ZmEtMDkxYy00OTc4LWE5MTgtMzIzOGU0NWQy
YTFjMB4XDTI2MDcxMDA1NTczMFoXDTI2MTAwODA1NTczMFowLzEtMCsGA1UEAxMk
MzIxNTRhMzEtMjcyNC00NWNkLTkxYzktNTkxNTExYjY5YTU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6o3gTWgOV/7Gtc0pVclKyG8sDWmWV1qtWRU
HC4iZEinIGwP8dp9Qi5ItQinehGlSagjcs9OHSXHqZncpDeyoimpPDNxo469GTtN
vZO6yQfBc7ElCZi0/8rBr3cedWGLFx/VB8X9R9itumaQ1RWuZ9Gj+TOSgOWKBdXt
WgfG5I6p028B2rKotlvGdDr7K4TghutETxhCmwp+2FsaLDTxqfGunStde6USRC6B
UmChGUvKDrLTkShyD2VJ4Tid2vS1YeAQLWbFaThTdhJ8/mAuenHVkp5ZAt8vGhLE
fApPh3yqmkpZogpojUyD0gs4RJ+j2WXrDV7TWeyuKKRoEB30AwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLqxOuHxUygUTMYtPqhyAe14Q25pMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83ODU3
NDlmYS0wOTFjLTQ5NzgtYTkxOC0zMjM4ZTQ1ZDJhMWMvYzQyMzYyNjktMzc2MC0z
NDYwLTlmNGEtNmRhMDk0YmNjODUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzg1NzQ5ZmEtMDkxYy00OTc4LWE5
MTgtMzIzOGU0NWQyYTFjLzc4NTc0OWZhLTA5MWMtNDk3OC1hOTE4LTMyMzhlNDVk
MmExYy5jcmwwHwYDVR0jBBgwFoAUM/CaLjnFL2kAyNtqqNf/Nh34MRMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83ODU3NDlmYS0wOTFjLTQ5NzgtYTkxOC0zMjM4
ZTQ1ZDJhMWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQJKwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGzC9SySAyg0g0WGGhgc1jMZntkwFyAMAau71f0LLHL0/uKAf36vTI+p
iSOX9Weu4xwIiS5p02wX2rtTOegbVXulCDb68hH+2g0au2INLGbHuY7t7oKbsnQl
9aML2Yxp4F/nzdRgLNcA9Lw6ncIs9k7clRsGlx2Qpz5TZWeA0gvjiYwJ9yqMR4+W
OMstEVB7u1am7Q+AJzWayfRkSdYMbVLoY4UMivs8nsM7mprxoRUMOz7qyfhHDSl5
BGRAU0+6FcFU+GhlktKfxffr+dyr3pNOPmkmBnXj13u4mxvUFM9Ed0tFQ+sMtdhp
SCjWSeyhP5HBB0RVT3KZ7BqIw26ggPQ=
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:48:16 2026 by rpki-client