Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266/671ea125-1a5d-3d6e-9b5e-e4014944b66f.roa
File:                     671ea125-1a5d-3d6e-9b5e-e4014944b66f.roa (raw, json)
Hash identifier:          7aXhnl7Kam5nA0mvzTcfFcoKbLgSvzcVFMwkYrTMrH0=
Subject key identifier:   50:C6:75:63:E4:FE:EB:4F:51:8A:F6:CB:F9:1F:F2:06:FF:6B:7A:74
Certificate issuer:       /CN=0b883aa7-bd4f-4703-b044-59552058f266
Certificate serial:       010D0C9F4328584DA3E55AAACB6C05F3DC263C80
Authority key identifier: 83:A9:D3:49:01:EB:18:49:AF:28:59:BC:2C:FE:2D:7B:B4:A3:1F:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266/671ea125-1a5d-3d6e-9b5e-e4014944b66f.roa
Signing time:             Mon 27 Apr 2026 01:00:24 +0000
ROA not before:           Mon 27 Apr 2026 01:00:24 +0000
ROA not after:            Sun 26 Jul 2026 01:00:24 +0000
asID:                     33659
IP address blocks:        64.112.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266/0b883aa7-bd4f-4703-b044-59552058f266.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266/0b883aa7-bd4f-4703-b044-59552058f266.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a3:e5:5a:aa:cb:6c:05:f3:dc:26:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b883aa7-bd4f-4703-b044-59552058f266
        Validity
            Not Before: Apr 27 01:00:24 2026 GMT
            Not After : Jul 26 01:00:24 2026 GMT
        Subject: CN=8e8a4ddc-bd81-48a3-a9ae-74b1dd0c345d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c0:b6:b1:ca:4e:c2:a7:38:93:97:0c:42:7a:
                    6e:3b:55:1f:64:06:e8:bc:3b:b7:a9:c1:57:ab:b5:
                    ab:b0:ae:58:ce:19:47:c7:73:21:12:50:b7:88:85:
                    df:3d:38:28:1b:01:e5:0b:40:69:3b:ed:70:31:13:
                    f5:4b:ce:d3:48:03:cc:66:3d:9e:a3:d4:a1:2e:70:
                    78:96:d8:70:09:8a:20:5b:cd:4a:a0:38:26:38:c0:
                    97:0c:3a:03:8f:29:24:23:11:ea:92:38:8d:ca:f9:
                    be:c9:9f:57:ef:f1:48:69:02:7c:2d:7a:58:74:f8:
                    ad:90:fb:ab:01:21:2e:6d:32:96:19:9c:95:5a:67:
                    79:d2:ce:cb:8b:49:20:43:99:8a:67:ab:b2:15:21:
                    bd:41:05:01:dc:2a:7f:60:9e:fc:34:40:27:6c:46:
                    43:eb:3f:84:e5:f8:1a:fd:48:74:86:0b:3a:83:0b:
                    21:c6:a9:11:82:19:20:5c:79:41:21:87:16:12:e6:
                    2d:d1:85:e7:27:d9:41:18:89:65:1e:61:e1:21:fb:
                    6b:04:d8:bd:2b:4c:45:81:96:23:36:6a:e3:03:58:
                    bd:5c:1c:df:a6:fc:41:47:ce:41:71:48:d3:d7:40:
                    46:39:61:8c:33:be:01:94:5d:cd:02:58:a1:72:b0:
                    44:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:C6:75:63:E4:FE:EB:4F:51:8A:F6:CB:F9:1F:F2:06:FF:6B:7A:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266/671ea125-1a5d-3d6e-9b5e-e4014944b66f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266/0b883aa7-bd4f-4703-b044-59552058f266.crl

            X509v3 Authority Key Identifier:
                keyid:83:A9:D3:49:01:EB:18:49:AF:28:59:BC:2C:FE:2D:7B:B4:A3:1F:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:78:14:cf:c2:85:e9:e4:31:9e:f6:75:47:76:db:86:1c:3e:
         15:1b:e0:48:7c:f8:eb:f8:b5:df:90:83:2f:e7:af:ac:8e:03:
         5c:14:45:d8:f4:23:c9:3e:db:ba:c5:bb:29:b9:af:7f:bf:b6:
         a0:34:01:07:5b:59:00:b7:fc:c2:b5:26:0d:24:4f:90:b3:27:
         eb:57:bd:c5:6d:16:b5:bc:db:c8:59:ce:c2:8f:9a:8f:03:c9:
         8a:5d:9f:ea:d2:17:ac:1d:07:33:5c:32:61:19:95:36:f9:3d:
         f2:bd:4d:bb:e3:6b:0a:3d:22:3f:9b:2b:ea:23:05:bd:03:52:
         5b:78:cc:2e:27:c8:60:bf:d5:84:ee:c0:17:6b:66:f1:66:8d:
         d5:02:87:9f:44:18:57:43:3a:03:2b:5c:06:97:de:6f:58:ec:
         fe:a3:8d:ac:43:91:5e:1e:02:df:93:0f:b8:cf:08:8c:0b:8d:
         71:e3:cf:20:42:cf:52:3a:3f:69:75:b4:04:a8:ba:b1:f1:f0:
         38:82:d1:8d:df:a3:28:95:59:9a:b8:95:18:fc:db:aa:8a:c7:
         3e:3c:7b:28:d3:3c:64:fe:a9:83:df:e3:08:b4:a5:18:47:c9:
         1c:59:11:72:1b:c6:20:f6:09:b4:ac:95:64:95:11:60:bb:2b:
         0d:19:be:1a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2j5Vqqy2wF89wmPIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGI4ODNhYTctYmQ0Zi00NzAzLWIwNDQtNTk1NTIwNThm
MjY2MB4XDTI2MDQyNzAxMDAyNFoXDTI2MDcyNjAxMDAyNFowLzEtMCsGA1UEAxMk
OGU4YTRkZGMtYmQ4MS00OGEzLWE5YWUtNzRiMWRkMGMzNDVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsC2scpOwqc4k5cMQnpuO1UfZAbovDu3qcFX
q7WrsK5YzhlHx3MhElC3iIXfPTgoGwHlC0BpO+1wMRP1S87TSAPMZj2eo9ShLnB4
lthwCYogW81KoDgmOMCXDDoDjykkIxHqkjiNyvm+yZ9X7/FIaQJ8LXpYdPitkPur
ASEubTKWGZyVWmd50s7Li0kgQ5mKZ6uyFSG9QQUB3Cp/YJ78NEAnbEZD6z+E5fga
/Uh0hgs6gwshxqkRghkgXHlBIYcWEuYt0YXnJ9lBGIllHmHhIftrBNi9K0xFgZYj
NmrjA1i9XBzfpvxBR85BcUjT10BGOWGMM74BlF3NAlihcrBEaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFDGdWPk/utPUYr2y/kf8gb/a3p0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYjg4
M2FhNy1iZDRmLTQ3MDMtYjA0NC01OTU1MjA1OGYyNjYvNjcxZWExMjUtMWE1ZC0z
ZDZlLTliNWUtZTQwMTQ5NDRiNjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGI4ODNhYTctYmQ0Zi00NzAzLWIw
NDQtNTk1NTIwNThmMjY2LzBiODgzYWE3LWJkNGYtNDcwMy1iMDQ0LTU5NTUyMDU4
ZjI2Ni5jcmwwHwYDVR0jBBgwFoAUg6nTSQHrGEmvKFm8LP4te7SjH40wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8wYjg4M2FhNy1iZDRmLTQ3MDMtYjA0NC01OTU1
MjA1OGYyNjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQHAIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADB4FM/ChenkMZ72dUd224YcPhUb4Eh8+Ov4td+Qgy/nr6yOA1wURdj0
I8k+27rFuym5r3+/tqA0AQdbWQC3/MK1Jg0kT5CzJ+tXvcVtFrW828hZzsKPmo8D
yYpdn+rSF6wdBzNcMmEZlTb5PfK9Tbvjawo9Ij+bK+ojBb0DUlt4zC4nyGC/1YTu
wBdrZvFmjdUCh59EGFdDOgMrXAaX3m9Y7P6jjaxDkV4eAt+TD7jPCIwLjXHjzyBC
z1I6P2l1tASourHx8DiC0Y3foyiVWZq4lRj826qKxz48eyjTPGT+qYPf4wi0pRhH
yRxZEXIbxiD2CbSslWSVEWC7Kw0Zvho=
-----END CERTIFICATE-----
Generated at Wed May 13 10:47:04 2026 by rpki-client