Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/963d3839-4015-35a7-b38b-b1c31b4a4e68.roa
File:                     963d3839-4015-35a7-b38b-b1c31b4a4e68.roa (raw, json)
Hash identifier:          jH2knobreVvZD8ElqQ0EVZHkpoYVSMcSFe7erutvN4c=
Subject key identifier:   4C:5C:66:D4:14:C7:E6:52:43:40:FF:3A:2E:C2:FB:E0:D1:DF:C0:72
Certificate issuer:       /CN=ad3f6620-0576-46d8-b05d-3e2cdd06afa3
Certificate serial:       010D0C9F4328584E94EA5D993FC581585A8B3600
Authority key identifier: 88:DF:DB:98:30:C1:D1:4C:D5:B7:31:84:EC:A7:FC:60:F4:5F:F2:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/963d3839-4015-35a7-b38b-b1c31b4a4e68.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     16509
IP address blocks:        64.57.33.0/24 maxlen: 24
                          64.57.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:5d:99:3f:c5:81:58:5a:8b:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad3f6620-0576-46d8-b05d-3e2cdd06afa3
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=17f1e5a9-3abd-4ed9-ba95-42e2531d5a02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a0:ba:f4:13:9d:19:79:3a:11:55:18:11:ff:
                    80:cf:e6:82:0c:40:c9:b0:38:c6:35:58:93:8f:cd:
                    ce:04:68:10:7a:1e:5c:40:a2:b7:af:84:cd:71:57:
                    50:99:a5:a7:06:a7:f5:b3:82:6d:eb:a9:7f:c1:c6:
                    eb:43:7b:27:fa:4d:ce:44:12:17:ee:83:7a:9c:74:
                    12:97:81:f7:de:ac:61:fc:1a:67:81:9b:0f:bb:18:
                    2b:af:a3:43:03:d0:36:7e:8b:3a:01:0c:19:5e:35:
                    b6:43:c8:8a:ec:ec:0a:37:0a:16:98:19:19:b3:45:
                    9d:f7:b6:af:38:b8:11:0f:b8:76:2d:8c:97:46:e9:
                    85:8e:14:43:0c:63:88:86:16:cf:eb:a9:ee:ed:45:
                    d7:ed:53:a8:12:b9:c7:64:74:52:da:f4:dc:1f:ca:
                    fb:a7:86:c6:7a:63:ab:ac:a3:44:16:8d:c9:9f:7f:
                    d3:56:3f:33:e5:64:e3:34:95:30:d4:20:c0:3a:62:
                    28:45:cc:c9:88:96:64:30:31:e9:ae:b2:50:ff:07:
                    8c:56:80:57:c7:1c:e2:85:d5:24:ad:a0:fa:73:29:
                    da:2c:66:9d:12:0a:b4:21:07:73:53:7d:52:8f:26:
                    fc:81:e7:0b:a9:b0:9e:02:b9:c1:b3:ff:ec:71:a2:
                    ac:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:5C:66:D4:14:C7:E6:52:43:40:FF:3A:2E:C2:FB:E0:D1:DF:C0:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/963d3839-4015-35a7-b38b-b1c31b4a4e68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.crl

            X509v3 Authority Key Identifier:
                keyid:88:DF:DB:98:30:C1:D1:4C:D5:B7:31:84:EC:A7:FC:60:F4:5F:F2:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.33.0-64.57.34.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:bb:02:3a:50:0b:5f:03:71:7b:ba:61:16:8e:af:ed:9f:ba:
         e0:92:bb:f5:6b:c9:56:7a:c8:a3:3a:a2:c8:e5:66:f1:24:48:
         3e:89:6f:46:49:e0:f9:bb:34:35:d8:ab:41:ff:a6:6d:b6:dd:
         5e:14:6a:1b:f8:a9:7e:53:59:aa:75:21:c9:c9:a7:5c:94:ba:
         87:14:a7:0d:8e:69:ce:8c:23:8d:cf:a8:86:59:1d:74:60:1e:
         64:76:4d:82:d3:b7:f7:6c:89:11:3d:05:48:f5:08:d7:90:fd:
         d5:65:c6:2e:5f:bc:d9:65:6e:5b:58:93:55:98:49:87:86:55:
         06:ee:0b:da:77:5f:af:b3:9e:3e:34:90:1a:50:00:81:24:09:
         09:82:3e:52:08:3b:aa:c3:f3:51:6d:3b:d5:73:70:c1:c8:63:
         9f:9c:26:55:f3:da:89:dd:ec:29:06:b6:6d:6d:fc:05:74:94:
         13:98:ed:3c:ed:47:49:f0:56:7f:17:ff:98:fa:16:05:90:f5:
         0e:22:e9:2b:5a:a0:7d:d7:eb:14:ab:07:18:73:f2:c2:88:a6:
         1f:c5:bc:2b:1e:5c:23:76:99:78:df:9d:f9:5f:7d:52:fd:c4:
         84:e3:5b:fb:42:78:36:c7:46:d0:0c:bc:f5:2b:31:12:6c:4f:
         85:99:e6:45
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE6U6l2ZP8WBWFqLNgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWQzZjY2MjAtMDU3Ni00NmQ4LWIwNWQtM2UyY2RkMDZh
ZmEzMB4XDTI2MDcyMjA5MDAxMVoXDTI2MTAyMDA5MDAxMVowLzEtMCsGA1UEAxMk
MTdmMWU1YTktM2FiZC00ZWQ5LWJhOTUtNDJlMjUzMWQ1YTAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6C69BOdGXk6EVUYEf+Az+aCDEDJsDjGNViT
j83OBGgQeh5cQKK3r4TNcVdQmaWnBqf1s4Jt66l/wcbrQ3sn+k3ORBIX7oN6nHQS
l4H33qxh/BpngZsPuxgrr6NDA9A2fos6AQwZXjW2Q8iK7OwKNwoWmBkZs0Wd97av
OLgRD7h2LYyXRumFjhRDDGOIhhbP66nu7UXX7VOoErnHZHRS2vTcH8r7p4bGemOr
rKNEFo3Jn3/TVj8z5WTjNJUw1CDAOmIoRczJiJZkMDHprrJQ/weMVoBXxxzihdUk
raD6cynaLGadEgq0IQdzU31Sjyb8gecLqbCeArnBs//scaKsRQIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFExcZtQUx+ZSQ0D/Oi7C++DR38ByMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hZDNm
NjYyMC0wNTc2LTQ2ZDgtYjA1ZC0zZTJjZGQwNmFmYTMvOTYzZDM4MzktNDAxNS0z
NWE3LWIzOGItYjFjMzFiNGE0ZTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWQzZjY2MjAtMDU3Ni00NmQ4LWIw
NWQtM2UyY2RkMDZhZmEzL2FkM2Y2NjIwLTA1NzYtNDZkOC1iMDVkLTNlMmNkZDA2
YWZhMy5jcmwwHwYDVR0jBBgwFoAUiN/bmDDB0UzVtzGE7Kf8YPRf8tMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9hZDNmNjYyMC0wNTc2LTQ2ZDgtYjA1ZC0zZTJj
ZGQwNmFmYTMuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABAOSED
BABAOSIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAHrsCOlALXwNxe7phFo6v7Z+64JK79WvJVnrIozqiyOVm
8SRIPolvRkng+bs0NdirQf+mbbbdXhRqG/ipflNZqnUhycmnXJS6hxSnDY5pzowj
jc+ohlkddGAeZHZNgtO392yJET0FSPUI15D91WXGLl+82WVuW1iTVZhJh4ZVBu4L
2ndfr7OePjSQGlAAgSQJCYI+Ugg7qsPzUW071XNwwchjn5wmVfPaid3sKQa2bW38
BXSUE5jtPO1HSfBWfxf/mPoWBZD1DiLpK1qgfdfrFKsHGHPywoimH8W8Kx5cI3aZ
eN+d+V99Uv3EhONb+0J4NsdG0Ay89SsxEmxPhZnmRQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:55:03 2026 by rpki-client