Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8447e9a8-7678-3a1e-a3a3-3a54069017aa.roa
File:                     8447e9a8-7678-3a1e-a3a3-3a54069017aa.roa (raw, json)
Hash identifier:          Z+479E90pDwENxEYAV0DMSf2DpNTLC/6FO5fDG+7yZw=
Subject key identifier:   5E:60:5A:61:25:CF:8E:0E:E8:93:70:BB:76:D6:9E:72:C1:51:2A:1A
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584EFE121DAFDCC2511642B93930
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8447e9a8-7678-3a1e-a3a3-3a54069017aa.roa
Signing time:             Sat 29 Aug 2026 01:00:12 +0000
ROA not before:           Sat 29 Aug 2026 01:00:12 +0000
ROA not after:            Fri 27 Nov 2026 02:00:12 +0000
asID:                     400017
IP address blocks:        64.184.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fe:12:1d:af:dc:c2:51:16:42:b9:39:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Aug 29 01:00:12 2026 GMT
            Not After : Nov 27 02:00:12 2026 GMT
        Subject: CN=069b3b90-97fe-4af4-a165-e2eb27607fba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:58:ae:6e:92:a4:5b:07:04:98:bf:9d:80:52:
                    3f:3a:be:af:2a:63:4b:e6:11:15:7f:d2:85:79:52:
                    5a:25:dc:ae:62:1f:66:0d:52:05:d3:b3:9e:39:5f:
                    51:6b:4c:3b:b8:4f:87:75:ba:29:f0:1c:05:7c:14:
                    01:50:2c:c4:d3:1c:19:16:e0:46:9a:2f:f8:7f:1e:
                    91:98:91:3f:03:7d:93:73:f4:ec:e8:42:40:9b:33:
                    ee:45:8d:8c:33:76:74:dd:72:f5:86:85:6b:51:89:
                    06:08:61:da:1c:1a:e2:57:10:b8:51:e7:bd:bb:48:
                    a8:02:c2:17:f0:9d:82:c8:77:4c:2c:8a:f8:93:0d:
                    5a:95:55:17:a5:a1:7f:1f:e6:02:e9:da:d0:28:5f:
                    98:81:f4:6c:22:6d:39:ad:4c:88:f5:04:a4:7e:57:
                    5d:96:39:f2:34:69:50:34:ce:43:04:35:a9:47:46:
                    bb:1b:0c:64:44:4b:d3:c0:1e:0a:48:98:01:bb:75:
                    ce:f9:33:7d:29:5d:e6:fb:d0:30:f8:bc:54:f6:0f:
                    b0:13:a3:91:b7:ae:5d:17:1d:86:b3:16:9b:0d:1c:
                    0b:38:71:ef:51:b0:fa:72:f7:16:2c:a2:55:eb:1c:
                    61:83:80:4e:f5:7b:aa:65:8a:8d:62:ba:c5:17:d4:
                    49:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:60:5A:61:25:CF:8E:0E:E8:93:70:BB:76:D6:9E:72:C1:51:2A:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8447e9a8-7678-3a1e-a3a3-3a54069017aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.184.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:4a:94:63:c5:9b:bb:3b:c2:5c:67:3b:f3:c6:6b:37:38:a7:
         eb:25:f7:79:8c:9a:5f:2c:27:b7:8d:33:2e:d9:0d:02:e6:4a:
         2e:98:1b:c3:98:60:a4:e5:76:fa:5a:8b:73:66:e5:99:45:6a:
         81:b9:ba:b7:97:09:0f:23:a2:ed:62:ab:25:ea:37:58:d2:a6:
         91:c1:e5:55:d0:64:ab:26:9c:f1:59:9e:3f:fe:27:0f:ca:ef:
         36:a0:da:49:81:06:43:b8:72:90:5a:67:9c:78:ba:94:7c:d0:
         e3:3d:28:e6:9c:2c:4e:ac:4c:c9:d4:b0:be:d1:8e:c4:01:8d:
         f8:2f:4a:f2:27:21:d9:36:75:ec:56:6b:68:09:a1:e9:f2:3c:
         e6:dc:14:14:9b:78:7d:d3:45:98:19:31:58:a1:00:d8:65:7f:
         be:a3:39:4a:5d:19:81:6a:df:39:67:a9:4e:38:02:56:b0:e2:
         78:39:d6:50:d4:81:e9:05:47:d0:b2:35:0a:4a:3a:66:c6:20:
         27:80:2e:63:e5:30:df:ec:55:bc:30:41:56:ef:5f:e0:06:83:
         38:d8:77:c8:dd:80:b3:ae:b7:b1:c0:bc:0b:69:37:b4:1a:64:
         12:fb:a5:1e:32:1e:23:66:f6:15:cc:93:4d:6d:f9:46:85:5a:
         1d:0c:65:f8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7+Eh2v3MJRFkK5OTAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI2MDgyOTAxMDAxMloXDTI2MTEyNzAyMDAxMlowLzEtMCsGA1UEAxMk
MDY5YjNiOTAtOTdmZS00YWY0LWExNjUtZTJlYjI3NjA3ZmJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1iubpKkWwcEmL+dgFI/Or6vKmNL5hEVf9KF
eVJaJdyuYh9mDVIF07OeOV9Ra0w7uE+Hdbop8BwFfBQBUCzE0xwZFuBGmi/4fx6R
mJE/A32Tc/Ts6EJAmzPuRY2MM3Z03XL1hoVrUYkGCGHaHBriVxC4Uee9u0ioAsIX
8J2CyHdMLIr4kw1alVUXpaF/H+YC6drQKF+YgfRsIm05rUyI9QSkflddljnyNGlQ
NM5DBDWpR0a7GwxkREvTwB4KSJgBu3XO+TN9KV3m+9Aw+LxU9g+wE6ORt65dFx2G
sxabDRwLOHHvUbD6cvcWLKJV6xxhg4BO9XuqZYqNYrrFF9RJDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF5gWmElz44O6JNwu3bWnnLBUSoaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvODQ0N2U5YTgtNzY3OC0z
YTFlLWEzYTMtM2E1NDA2OTAxN2FhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQLhKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALBKlGPFm7s7wlxnO/PGazc4p+sl93mMml8sJ7eNMy7ZDQLmSi6YG8OY
YKTldvpai3Nm5ZlFaoG5ureXCQ8jou1iqyXqN1jSppHB5VXQZKsmnPFZnj/+Jw/K
7zag2kmBBkO4cpBaZ5x4upR80OM9KOacLE6sTMnUsL7RjsQBjfgvSvInIdk2dexW
a2gJoenyPObcFBSbeH3TRZgZMVihANhlf76jOUpdGYFq3zlnqU44Alaw4ng51lDU
gekFR9CyNQpKOmbGICeALmPlMN/sVbwwQVbvX+AGgzjYd8jdgLOut7HAvAtpN7Qa
ZBL7pR4yHiNm9hXMk01t+UaFWh0MZfg=
-----END CERTIFICATE-----
Generated at Thu Sep 24 06:32:08 2026 by rpki-client