Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/0274591a-deef-333c-9018-be812240b7be.roa
File:                     0274591a-deef-333c-9018-be812240b7be.roa (raw, json)
Hash identifier:          MoAsSpZYYuIaCie/iE3VXcoYUSgA2WHXa9IYIPJP5KI=
Subject key identifier:   CA:FC:38:3D:51:A4:EB:C0:4A:1A:B0:FA:94:7D:5F:F4:55:D9:49:4F
Certificate issuer:       /CN=09440a93-986f-41da-8723-7b67f81bdbce
Certificate serial:       010D0C9F4328584E721AE7D4C20D981A3743F880
Authority key identifier: 48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/0274591a-deef-333c-9018-be812240b7be.roa
Signing time:             Thu 09 Jul 2026 21:44:53 +0000
ROA not before:           Thu 09 Jul 2026 21:44:53 +0000
ROA not after:            Wed 07 Oct 2026 21:44:53 +0000
asID:                     19901
IP address blocks:        65.12.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:72:1a:e7:d4:c2:0d:98:1a:37:43:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09440a93-986f-41da-8723-7b67f81bdbce
        Validity
            Not Before: Jul  9 21:44:53 2026 GMT
            Not After : Oct  7 21:44:53 2026 GMT
        Subject: CN=920adc3d-f88c-40a4-9b84-c463711680d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a8:6a:38:7c:9b:ff:69:40:20:ad:20:4d:c3:
                    2f:f9:9a:b4:a8:d0:f8:14:7b:4b:e8:8c:a6:c4:a7:
                    c2:88:5c:5e:9c:6e:6a:7d:20:f0:1d:1b:03:f4:83:
                    33:b3:af:bd:33:b1:a6:f6:f6:c0:2b:a4:2a:4e:69:
                    8a:9e:8b:d4:05:08:e2:81:88:4b:9c:d3:39:36:7a:
                    9c:0a:c3:18:b1:2a:3f:6a:43:19:99:4f:60:8f:22:
                    10:33:7b:12:75:d6:c5:14:b3:ee:00:46:94:db:c5:
                    66:5d:9c:14:b0:b5:46:61:2f:92:5a:be:a2:73:eb:
                    e7:ad:42:0e:0a:87:07:5f:a1:f5:01:b6:b2:23:3d:
                    8d:19:c4:cb:64:6d:2e:a8:f1:df:12:c5:12:d6:32:
                    31:0e:f0:1a:71:6a:6e:9f:3b:18:ef:a9:e7:1b:cb:
                    03:dd:79:65:ad:5a:35:f8:80:e6:45:18:f0:af:48:
                    05:f1:49:b9:09:33:ca:4f:4b:68:7a:d9:7a:e2:1c:
                    19:17:f0:ff:a9:8e:4a:69:7b:67:52:6e:9b:46:31:
                    f0:89:04:f8:8f:ba:7d:0e:08:23:ec:5c:49:13:55:
                    ca:2b:11:88:0a:25:01:90:73:6e:77:8c:98:1e:c6:
                    1c:d0:3e:30:ef:4c:36:fc:7f:fa:b8:fc:49:fe:22:
                    63:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:FC:38:3D:51:A4:EB:C0:4A:1A:B0:FA:94:7D:5F:F4:55:D9:49:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/0274591a-deef-333c-9018-be812240b7be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl

            X509v3 Authority Key Identifier:
                keyid:48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.12.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:b9:8b:79:e8:9c:14:86:d7:06:0b:b2:eb:7a:99:be:af:19:
         00:62:44:bf:5f:54:f7:f8:62:ee:da:28:12:28:bc:08:bf:77:
         21:44:91:b7:af:e4:e1:d0:6c:e8:d5:f2:ca:c8:59:f3:39:0b:
         70:b7:51:6c:f7:f1:1d:a4:9f:c7:df:62:2f:18:c1:da:56:7f:
         2c:a9:3c:1d:3b:bc:76:54:89:5b:38:bc:0a:e2:1b:52:f3:bb:
         09:32:3b:d2:f9:3d:3a:71:1b:ef:2a:23:eb:94:ba:19:42:eb:
         12:6a:9c:f5:8c:37:2e:79:fb:96:40:0f:b3:de:65:12:1a:ec:
         1b:bc:97:f6:5c:3d:0a:ed:ec:7b:99:b4:b4:14:73:ee:c7:b9:
         17:08:8b:8e:e8:12:0c:12:6b:aa:1b:6f:a4:91:be:09:b7:3b:
         89:24:f0:e3:f4:39:9d:a0:88:94:45:fd:8a:e8:8d:26:12:8c:
         f0:fb:c0:ab:38:d6:24:c6:e0:21:b9:a9:8f:31:d1:c2:f5:76:
         af:37:11:5b:86:e7:66:28:e2:fc:62:81:a3:97:6e:75:bf:10:
         fd:50:a1:64:6b:eb:14:62:85:f8:9c:c5:4e:67:1f:59:e3:a9:
         8f:22:c5:25:19:e1:fc:94:ee:73:2e:fc:dd:f5:8a:f7:3e:18:
         f4:62:48:5b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5yGufUwg2YGjdD+IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDk0NDBhOTMtOTg2Zi00MWRhLTg3MjMtN2I2N2Y4MWJk
YmNlMB4XDTI2MDcwOTIxNDQ1M1oXDTI2MTAwNzIxNDQ1M1owLzEtMCsGA1UEAxMk
OTIwYWRjM2QtZjg4Yy00MGE0LTliODQtYzQ2MzcxMTY4MGQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKhqOHyb/2lAIK0gTcMv+Zq0qND4FHtL6Iym
xKfCiFxenG5qfSDwHRsD9IMzs6+9M7Gm9vbAK6QqTmmKnovUBQjigYhLnNM5Nnqc
CsMYsSo/akMZmU9gjyIQM3sSddbFFLPuAEaU28VmXZwUsLVGYS+SWr6ic+vnrUIO
CocHX6H1AbayIz2NGcTLZG0uqPHfEsUS1jIxDvAacWpunzsY76nnG8sD3XllrVo1
+IDmRRjwr0gF8Um5CTPKT0toetl64hwZF/D/qY5KaXtnUm6bRjHwiQT4j7p9Dggj
7FxJE1XKKxGICiUBkHNud4yYHsYc0D4w70w2/H/6uPxJ/iJjywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMr8OD1RpOvAShqw+pR9X/RV2UlPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wOTQ0
MGE5My05ODZmLTQxZGEtODcyMy03YjY3ZjgxYmRiY2UvMDI3NDU5MWEtZGVlZi0z
MzNjLTkwMTgtYmU4MTIyNDBiN2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMDk0NDBhOTMtOTg2Zi00MWRhLTg3
MjMtN2I2N2Y4MWJkYmNlLzA5NDQwYTkzLTk4NmYtNDFkYS04NzIzLTdiNjdmODFi
ZGJjZS5jcmwwHwYDVR0jBBgwFoAUSEuB66mWlz+y3uneit7pXEIwQ4MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8wOTQ0MGE5My05ODZmLTQxZGEtODcyMy03YjY3
ZjgxYmRiY2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQQxAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACy5i3nonBSG1wYLsut6mb6vGQBiRL9fVPf4Yu7aKBIovAi/dyFEkbev
5OHQbOjV8srIWfM5C3C3UWz38R2kn8ffYi8YwdpWfyypPB07vHZUiVs4vAriG1Lz
uwkyO9L5PTpxG+8qI+uUuhlC6xJqnPWMNy55+5ZAD7PeZRIa7Bu8l/ZcPQrt7HuZ
tLQUc+7HuRcIi47oEgwSa6obb6SRvgm3O4kk8OP0OZ2giJRF/YrojSYSjPD7wKs4
1iTG4CG5qY8x0cL1dq83EVuG52Yo4vxigaOXbnW/EP1QoWRr6xRihficxU5nH1nj
qY8ixSUZ4fyU7nMu/N31ivc+GPRiSFs=
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:15:23 2026 by rpki-client