Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/e197ad3e-9d7f-32e3-86da-e690ab035764.roa
File:                     e197ad3e-9d7f-32e3-86da-e690ab035764.roa (raw, json)
Hash identifier:          cpf0+ETeXzWZRTGlKQ/1c/VhrcOkaQfGLmNS0kZOj0o=
Subject key identifier:   38:28:D0:41:A0:64:C9:7E:E7:A2:34:45:03:25:0D:9E:7A:95:C0:FF
Certificate issuer:       /CN=11f590b6-eb6e-4969-824b-0df247220283
Certificate serial:       010D0C9F4328584E94EA59864092200D168AFB80
Authority key identifier: 82:E3:24:D8:BE:C6:85:DD:4F:6A:D5:26:93:6C:BE:0A:48:31:18:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/e197ad3e-9d7f-32e3-86da-e690ab035764.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     395301
IP address blocks:        64.190.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:59:86:40:92:20:0d:16:8a:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11f590b6-eb6e-4969-824b-0df247220283
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=820d5767-c656-4d86-ad6d-e8ab3eb210a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b4:e2:81:12:ae:69:b3:0c:4f:29:2b:9a:14:
                    be:ad:1b:d9:71:08:50:be:2c:b8:5e:04:9d:b8:c1:
                    93:e2:3b:2f:df:6e:b4:c6:fa:af:75:d0:92:52:d2:
                    2c:b8:b0:e7:16:88:4d:bd:45:0d:54:a2:68:ef:93:
                    9b:a1:f0:ff:f2:8d:4b:a2:40:b4:6e:31:0f:f8:8f:
                    ef:0d:a4:0b:5b:af:35:df:80:c6:a6:b1:ce:80:81:
                    ff:26:6a:1f:2e:e7:c5:6a:c8:c7:9d:8e:ed:37:74:
                    49:78:b7:ac:18:6e:a9:de:4b:c7:e8:32:92:c9:57:
                    0d:02:51:7a:9e:11:91:a9:2a:bc:cc:7c:93:ff:2d:
                    7d:1c:73:bb:e8:c2:13:7f:e6:e7:86:60:9c:63:44:
                    5d:ec:6c:04:e4:b1:ca:6e:36:bc:ae:30:02:4d:df:
                    1c:d2:ce:f6:8c:b2:42:9f:b0:3b:64:ca:34:be:c4:
                    d8:70:a6:3c:b1:1a:83:9b:5f:99:a0:07:8f:4c:69:
                    70:5f:4b:68:07:52:95:57:db:46:0c:39:02:58:83:
                    cc:dc:64:e7:99:bc:45:53:5b:7b:1b:1d:e5:10:9e:
                    96:17:49:56:ea:ee:de:99:07:06:5b:7e:7d:92:7c:
                    f1:a9:fc:61:37:a8:df:4d:d7:4e:9c:95:97:13:54:
                    94:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:28:D0:41:A0:64:C9:7E:E7:A2:34:45:03:25:0D:9E:7A:95:C0:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/e197ad3e-9d7f-32e3-86da-e690ab035764.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.crl

            X509v3 Authority Key Identifier:
                keyid:82:E3:24:D8:BE:C6:85:DD:4F:6A:D5:26:93:6C:BE:0A:48:31:18:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.190.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:29:d0:a2:65:af:ec:fb:76:bc:ef:70:4b:d3:52:c8:10:85:
         26:34:02:63:8f:5d:5b:8f:f3:0a:56:ee:78:b8:65:a1:06:79:
         b7:8f:a1:c7:ec:6c:92:70:3e:81:45:35:77:ef:30:63:6a:af:
         be:8e:45:35:05:07:d9:e5:1e:9c:f5:84:68:6d:e5:0a:28:0c:
         45:ac:86:10:ed:07:11:a8:da:b4:f5:21:83:e8:4f:02:07:03:
         00:79:75:e4:55:e4:89:af:a0:0a:5e:1b:80:db:cb:61:3b:b7:
         d5:fc:72:f0:00:8f:d1:7c:93:d2:94:cd:73:8b:5a:53:1f:d4:
         3d:71:b4:19:0a:9f:9d:59:b1:bb:e4:65:16:d3:11:9a:14:6b:
         8c:8b:b3:5e:11:78:79:7a:3d:fa:fe:04:d5:7e:02:ef:49:5d:
         b5:31:62:51:25:97:a7:fe:9f:66:94:67:a7:07:00:ee:79:f6:
         bc:43:ac:89:d9:de:d1:a7:36:b3:60:6b:cc:24:61:6a:4f:47:
         79:f3:19:90:b3:70:cc:3e:3d:24:bb:2d:8d:8d:81:7f:e5:47:
         24:35:14:fc:4b:cd:24:14:d5:95:10:b2:8e:f7:6c:a4:67:36:
         78:d7:42:90:db:ee:51:fc:e0:87:37:f2:c4:ef:69:c0:9a:34:
         e5:cf:57:f6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6U6lmGQJIgDRaK+4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFmNTkwYjYtZWI2ZS00OTY5LTgyNGItMGRmMjQ3MjIw
MjgzMB4XDTI2MDcyMjA5MDAxMVoXDTI2MTAyMDA5MDAxMVowLzEtMCsGA1UEAxMk
ODIwZDU3NjctYzY1Ni00ZDg2LWFkNmQtZThhYjNlYjIxMGE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLTigRKuabMMTykrmhS+rRvZcQhQviy4XgSd
uMGT4jsv3260xvqvddCSUtIsuLDnFohNvUUNVKJo75ObofD/8o1LokC0bjEP+I/v
DaQLW68134DGprHOgIH/JmofLufFasjHnY7tN3RJeLesGG6p3kvH6DKSyVcNAlF6
nhGRqSq8zHyT/y19HHO76MITf+bnhmCcY0Rd7GwE5LHKbja8rjACTd8c0s72jLJC
n7A7ZMo0vsTYcKY8sRqDm1+ZoAePTGlwX0toB1KVV9tGDDkCWIPM3GTnmbxFU1t7
Gx3lEJ6WF0lW6u7emQcGW359knzxqfxhN6jfTddOnJWXE1SU1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDgo0EGgZMl+56I0RQMlDZ56lcD/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xMWY1
OTBiNi1lYjZlLTQ5NjktODI0Yi0wZGYyNDcyMjAyODMvZTE5N2FkM2UtOWQ3Zi0z
MmUzLTg2ZGEtZTY5MGFiMDM1NzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTFmNTkwYjYtZWI2ZS00OTY5LTgy
NGItMGRmMjQ3MjIwMjgzLzExZjU5MGI2LWViNmUtNDk2OS04MjRiLTBkZjI0NzIy
MDI4My5jcmwwHwYDVR0jBBgwFoAUguMk2L7Ghd1PatUmk2y+CkgxGFMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xMWY1OTBiNi1lYjZlLTQ5NjktODI0Yi0wZGYy
NDcyMjAyODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQL5ZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJcp0KJlr+z7drzvcEvTUsgQhSY0AmOPXVuP8wpW7ni4ZaEGebePocfs
bJJwPoFFNXfvMGNqr76ORTUFB9nlHpz1hGht5QooDEWshhDtBxGo2rT1IYPoTwIH
AwB5deRV5ImvoApeG4Dby2E7t9X8cvAAj9F8k9KUzXOLWlMf1D1xtBkKn51Zsbvk
ZRbTEZoUa4yLs14ReHl6Pfr+BNV+Au9JXbUxYlEll6f+n2aUZ6cHAO559rxDrInZ
3tGnNrNga8wkYWpPR3nzGZCzcMw+PSS7LY2NgX/lRyQ1FPxLzSQU1ZUQso73bKRn
NnjXQpDb7lH84Ic38sTvacCaNOXPV/Y=
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:59:36 2026 by rpki-client