Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5f7f27e5-a144-30d6-9980-7d3beaf6d902.roa
File:                     5f7f27e5-a144-30d6-9980-7d3beaf6d902.roa (raw, json)
Hash identifier:          B39kuZSZRXXjQdY+mdQyApGoOVFCyU9aEMMvEDjTm2U=
Subject key identifier:   27:40:F4:1D:E7:4F:89:3D:FA:8F:E7:94:5D:B4:8B:CB:3B:3E:CE:D5
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584D471FA47A079226B4EEBCA400
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5f7f27e5-a144-30d6-9980-7d3beaf6d902.roa
Signing time:             Tue 24 Mar 2026 19:27:43 +0000
ROA not before:           Tue 24 Mar 2026 19:27:43 +0000
ROA not after:            Mon 22 Jun 2026 19:27:43 +0000
asID:                     834
IP address blocks:        64.83.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:47:1f:a4:7a:07:92:26:b4:ee:bc:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar 24 19:27:43 2026 GMT
            Not After : Jun 22 19:27:43 2026 GMT
        Subject: CN=d435232b-d126-4c4f-9044-8c37b8e4169e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3d:0d:ee:9a:a4:da:55:fb:a8:40:88:09:6b:
                    47:ab:25:1d:81:64:47:9b:f4:c8:24:f5:68:d4:3e:
                    2b:3d:36:86:48:1f:68:9e:80:32:46:1a:02:b1:29:
                    c7:07:94:50:bc:29:d6:0c:d3:fe:ec:3e:f1:dd:98:
                    26:f6:11:11:c1:c2:e0:83:6d:57:02:3d:6d:03:07:
                    81:e6:31:cd:7e:f1:49:1a:15:a3:6a:e3:07:8b:1a:
                    2e:ef:9e:a8:8b:1f:db:70:a7:a5:82:c9:74:cc:48:
                    49:5a:96:70:02:1b:62:3d:f5:f6:78:d8:20:34:28:
                    4d:82:26:37:e2:63:91:22:4f:08:fa:23:e1:00:9b:
                    70:53:3e:c9:48:e0:7f:ef:a9:de:0c:f3:43:52:e5:
                    5c:e9:1c:79:99:b6:ff:2c:fe:16:18:1f:c2:21:29:
                    37:42:0a:61:01:17:2c:69:52:5f:a1:47:e0:e7:8c:
                    29:90:82:c0:fe:fe:7c:99:1d:f3:70:11:9c:30:69:
                    a2:68:e5:f7:8f:dc:23:8e:d6:9d:cb:e0:b5:86:24:
                    82:0e:71:f1:85:c0:d6:bf:21:fe:c8:45:ff:5c:1c:
                    bf:80:51:0a:00:91:e7:6a:99:c6:eb:53:c1:f2:1d:
                    fe:69:be:5a:04:bd:ac:cd:e0:09:f2:28:d9:00:c2:
                    1c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:40:F4:1D:E7:4F:89:3D:FA:8F:E7:94:5D:B4:8B:CB:3B:3E:CE:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5f7f27e5-a144-30d6-9980-7d3beaf6d902.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.83.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:f5:77:28:3f:54:2e:40:5a:0c:c6:4e:af:0f:e9:18:5d:ec:
         a9:04:df:09:01:d4:a0:ef:09:a4:04:63:82:d5:95:26:a2:5d:
         83:19:44:3a:10:e6:29:12:3b:ff:b5:dd:39:ce:98:83:43:e3:
         f1:e4:c4:bf:dc:4e:03:ed:76:f7:aa:d1:63:6f:29:47:28:cf:
         b3:9c:5d:ad:7e:f8:7d:1e:f6:70:df:02:68:1e:62:28:39:ca:
         63:44:e5:16:a3:c0:9c:34:a8:ed:53:e2:83:63:7e:1f:2b:84:
         df:b7:9f:e7:1c:da:62:07:3a:48:19:d3:d7:9a:21:b7:7f:6d:
         60:ad:65:92:c7:7f:2e:dd:e3:a6:08:5b:41:cb:5e:6e:03:0a:
         32:05:3e:d6:3d:7c:52:8b:bb:fb:e1:3d:cf:b5:92:ab:98:6a:
         ef:b4:ea:11:1f:62:b9:71:34:e4:87:cc:af:63:46:62:c5:bc:
         e4:93:52:54:c3:e6:4a:2b:13:ab:af:0b:2e:73:c6:30:6e:85:
         a7:5c:9b:59:ee:93:1b:9e:6a:cc:ae:6d:11:29:d0:51:00:52:
         f9:a4:be:ce:83:e4:37:f9:29:15:05:e6:ae:cb:5d:59:3c:3b:
         0b:ee:a9:0f:a9:95:53:47:14:4b:97:40:c8:24:4d:a9:36:00:
         26:09:6c:f6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HH6R6B5ImtO68pAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI2MDMyNDE5Mjc0M1oXDTI2MDYyMjE5Mjc0M1owLzEtMCsGA1UEAxMk
ZDQzNTIzMmItZDEyNi00YzRmLTkwNDQtOGMzN2I4ZTQxNjllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmj0N7pqk2lX7qECICWtHqyUdgWRHm/TIJPVo
1D4rPTaGSB9onoAyRhoCsSnHB5RQvCnWDNP+7D7x3Zgm9hERwcLgg21XAj1tAweB
5jHNfvFJGhWjauMHixou756oix/bcKelgsl0zEhJWpZwAhtiPfX2eNggNChNgiY3
4mORIk8I+iPhAJtwUz7JSOB/76neDPNDUuVc6Rx5mbb/LP4WGB/CISk3QgphARcs
aVJfoUfg54wpkILA/v58mR3zcBGcMGmiaOX3j9wjjtady+C1hiSCDnHxhcDWvyH+
yEX/XBy/gFEKAJHnapnG61PB8h3+ab5aBL2szeAJ8ijZAMIccQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCdA9B3nT4k9+o/nlF20i8s7Ps7VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvNWY3ZjI3ZTUtYTE0NC0z
MGQ2LTk5ODAtN2QzYmVhZjZkOTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQFNPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKr1dyg/VC5AWgzGTq8P6Rhd7KkE3wkB1KDvCaQEY4LVlSaiXYMZRDoQ
5ikSO/+13TnOmIND4/HkxL/cTgPtdveq0WNvKUcoz7OcXa1++H0e9nDfAmgeYig5
ymNE5RajwJw0qO1T4oNjfh8rhN+3n+cc2mIHOkgZ09eaIbd/bWCtZZLHfy7d46YI
W0HLXm4DCjIFPtY9fFKLu/vhPc+1kquYau+06hEfYrlxNOSHzK9jRmLFvOSTUlTD
5korE6uvCy5zxjBuhadcm1nukxueasyubREp0FEAUvmkvs6D5Df5KRUF5q7LXVk8
OwvuqQ+plVNHFEuXQMgkTak2ACYJbPY=
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:34 2026 by rpki-client