Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/c688ff94-2f59-3583-a886-3a3f2a9c0df6.roa
File:                     c688ff94-2f59-3583-a886-3a3f2a9c0df6.roa (raw, json)
Hash identifier:          9WKA1klxzLNUvBxfoqbQs3b1lc1w4RPeb7mess5cEvw=
Subject key identifier:   3D:B1:8B:C6:A7:75:EB:2F:7C:97:F2:F6:DD:81:A0:18:20:4D:ED:BB
Certificate issuer:       /CN=0be9634a-0674-471a-bb54-7866e12ded7a
Certificate serial:       010D0C9F4328584E54B4A21F3DA920B4AD3D1780
Authority key identifier: 99:C2:73:13:67:C3:46:38:B7:EB:0A:6F:DD:5E:E9:B8:81:48:F7:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/c688ff94-2f59-3583-a886-3a3f2a9c0df6.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     14618
IP address blocks:        64.42.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/0be9634a-0674-471a-bb54-7866e12ded7a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/0be9634a-0674-471a-bb54-7866e12ded7a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:a2:1f:3d:a9:20:b4:ad:3d:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0be9634a-0674-471a-bb54-7866e12ded7a
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=d855f123-29fb-4e4e-9774-a69c098fcaef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1d:73:05:18:88:4d:6e:21:26:3f:bf:d9:76:
                    11:be:2a:e4:eb:70:a4:2d:ee:72:d8:0f:77:0a:2d:
                    3a:dc:cd:24:4a:6b:bd:86:f0:df:79:c2:69:a7:87:
                    11:a1:6d:17:fd:cd:97:76:96:de:e4:42:ee:81:81:
                    4d:fa:03:17:e1:30:b6:83:18:5d:fa:29:a3:5d:60:
                    cc:92:97:61:fd:f6:22:29:b3:8c:3d:43:dc:a7:f0:
                    ff:2a:97:a5:90:88:3a:e9:10:ac:bb:cb:76:c9:b6:
                    ee:25:16:34:0b:73:f2:0c:dd:ef:c7:a5:c4:fc:00:
                    77:8a:93:4d:21:a1:82:e1:9b:53:82:11:60:6b:bd:
                    59:05:ba:9f:eb:d0:b5:72:16:d0:11:4d:a6:0a:d5:
                    96:9f:39:de:e1:31:2b:cc:c1:0f:8e:04:fa:80:c2:
                    58:ca:4c:73:78:25:f0:c3:e6:f0:ef:f1:e1:f0:1f:
                    0e:22:d6:d3:3c:40:36:8c:d6:ff:10:f0:6e:d6:1a:
                    e6:c6:02:15:26:b7:8c:09:7b:92:73:04:93:15:c8:
                    a1:9a:73:0d:22:b3:bf:d8:5a:5c:76:08:48:3e:0a:
                    70:a6:c0:ad:4b:96:3a:9a:b4:a5:42:25:90:c1:b2:
                    69:7f:aa:e3:c3:9e:94:a5:33:4d:e4:85:a7:e7:a6:
                    97:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B1:8B:C6:A7:75:EB:2F:7C:97:F2:F6:DD:81:A0:18:20:4D:ED:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/c688ff94-2f59-3583-a886-3a3f2a9c0df6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/0be9634a-0674-471a-bb54-7866e12ded7a.crl

            X509v3 Authority Key Identifier:
                keyid:99:C2:73:13:67:C3:46:38:B7:EB:0A:6F:DD:5E:E9:B8:81:48:F7:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.42.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:20:44:fe:f0:c1:1f:15:41:a2:c2:2b:ec:c7:a5:f2:61:c9:
         f8:99:24:d2:67:ec:fa:d7:91:dd:3d:71:94:4a:2e:1f:89:7e:
         60:a5:7a:ad:2c:aa:88:7c:8b:76:4c:1c:18:c2:7e:76:90:4a:
         24:d1:a6:89:3d:ac:c0:70:8d:60:8c:49:05:3b:e9:81:bc:d1:
         d4:ed:06:e7:b4:6b:7e:8d:fc:fa:8a:ca:b1:83:12:27:29:20:
         43:64:32:b8:b1:a4:e7:f5:1d:87:44:88:91:82:98:4a:fc:aa:
         1f:f1:94:88:df:bb:9d:32:2d:27:04:66:fb:bb:82:2b:f8:c8:
         56:ef:b0:4c:33:2f:81:7b:2b:71:e7:12:74:35:0c:35:67:2a:
         4d:bd:61:3e:7e:43:0c:36:b0:b6:cf:f3:d0:ea:13:5e:c9:f3:
         bb:b4:93:35:52:19:2a:19:eb:7a:ba:f3:0c:e0:f0:14:0f:13:
         9c:52:25:34:8e:34:6c:d3:4e:31:43:f0:57:d0:c3:09:f0:cb:
         61:9f:49:02:5d:18:a4:d1:a5:d7:82:c8:5c:e1:ea:b6:cf:37:
         e7:87:c1:ba:60:08:fb:68:15:f9:04:ca:99:0e:25:63:23:22:
         67:18:bc:0e:d3:09:17:03:e7:7d:ee:9c:de:bb:cd:38:04:1d:
         dd:de:a9:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5UtKIfPakgtK09F4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGJlOTYzNGEtMDY3NC00NzFhLWJiNTQtNzg2NmUxMmRl
ZDdhMB4XDTI2MDYyOTA5MDAxMloXDTI2MDkyNzA5MDAxMlowLzEtMCsGA1UEAxMk
ZDg1NWYxMjMtMjlmYi00ZTRlLTk3NzQtYTY5YzA5OGZjYWVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtB1zBRiITW4hJj+/2XYRvirk63CkLe5y2A93
Ci063M0kSmu9hvDfecJpp4cRoW0X/c2Xdpbe5ELugYFN+gMX4TC2gxhd+imjXWDM
kpdh/fYiKbOMPUPcp/D/KpelkIg66RCsu8t2ybbuJRY0C3PyDN3vx6XE/AB3ipNN
IaGC4ZtTghFga71ZBbqf69C1chbQEU2mCtWWnzne4TErzMEPjgT6gMJYykxzeCXw
w+bw7/Hh8B8OItbTPEA2jNb/EPBu1hrmxgIVJreMCXuScwSTFcihmnMNIrO/2Fpc
dghIPgpwpsCtS5Y6mrSlQiWQwbJpf6rjw56UpTNN5IWn56aXJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD2xi8andesvfJfy9t2BoBggTe27MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wYmU5
NjM0YS0wNjc0LTQ3MWEtYmI1NC03ODY2ZTEyZGVkN2EvYzY4OGZmOTQtMmY1OS0z
NTgzLWE4ODYtM2EzZjJhOWMwZGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGJlOTYzNGEtMDY3NC00NzFhLWJi
NTQtNzg2NmUxMmRlZDdhLzBiZTk2MzRhLTA2NzQtNDcxYS1iYjU0LTc4NjZlMTJk
ZWQ3YS5jcmwwHwYDVR0jBBgwFoAUmcJzE2fDRji36wpv3V7puIFI97EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wYmU5NjM0YS0wNjc0LTQ3MWEtYmI1NC03ODY2
ZTEyZGVkN2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCq+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACUgRP7wwR8VQaLCK+zHpfJhyfiZJNJn7PrXkd09cZRKLh+JfmCleq0s
qoh8i3ZMHBjCfnaQSiTRpok9rMBwjWCMSQU76YG80dTtBue0a36N/PqKyrGDEicp
IENkMrixpOf1HYdEiJGCmEr8qh/xlIjfu50yLScEZvu7giv4yFbvsEwzL4F7K3Hn
EnQ1DDVnKk29YT5+Qww2sLbP89DqE17J87u0kzVSGSoZ63q68wzg8BQPE5xSJTSO
NGzTTjFD8FfQwwnwy2GfSQJdGKTRpdeCyFzh6rbPN+eHwbpgCPtoFfkEypkOJWMj
ImcYvA7TCRcD533unN67zTgEHd3eqTg=
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:47:16 2026 by rpki-client