Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9dd3dbe4-e875-37c0-9d7e-c990301757b3.roa
File:                     9dd3dbe4-e875-37c0-9d7e-c990301757b3.roa (raw, json)
Hash identifier:          5dKeiUtctYwaREE0U/LX+ayWxHrujX+zATyc+ZoJffU=
Subject key identifier:   3C:C2:67:EB:5D:4A:D8:59:6E:6E:49:D1:35:B8:94:53:1D:16:4C:B9
Certificate issuer:       /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
Certificate serial:       010D0C9F4328584E7634CE9AB3A3A0077BB7D800
Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9dd3dbe4-e875-37c0-9d7e-c990301757b3.roa
Signing time:             Sat 11 Jul 2026 09:00:12 +0000
ROA not before:           Sat 11 Jul 2026 09:00:12 +0000
ROA not after:            Fri 09 Oct 2026 09:00:12 +0000
asID:                     31898
IP address blocks:        64.39.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:76:34:ce:9a:b3:a3:a0:07:7b:b7:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
        Validity
            Not Before: Jul 11 09:00:12 2026 GMT
            Not After : Oct  9 09:00:12 2026 GMT
        Subject: CN=c65bdb95-b69f-49af-abc2-08e165841e4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:23:1f:a9:8c:74:a0:b3:c6:8b:b8:71:b3:71:
                    5a:4b:42:45:f8:78:8f:03:8b:65:2f:05:42:60:70:
                    ec:97:31:8d:54:63:13:c2:46:b8:18:1e:94:e5:0a:
                    57:41:15:2b:8d:c5:1c:da:a7:74:d5:06:a2:9d:44:
                    3f:da:f3:d6:34:76:2a:1c:cf:db:e5:e7:1d:6f:31:
                    f8:dd:1b:3e:6b:4c:d9:c8:09:6d:01:b6:21:19:8c:
                    a5:11:b0:d1:14:8d:a1:6f:d4:15:b1:4c:e9:c1:1d:
                    16:4e:5f:74:7c:16:8a:95:ba:4c:94:1a:2b:ef:03:
                    de:07:34:e7:3a:dc:35:cc:49:f8:d5:95:86:85:c5:
                    ae:4b:8a:c0:92:61:92:37:ce:6a:70:a5:f9:63:fe:
                    64:be:92:5c:b2:69:77:ff:b5:6b:41:8e:f9:f4:87:
                    a5:79:54:2e:7e:d6:6d:25:14:01:5a:70:5d:be:56:
                    66:f1:b3:98:e5:7e:bc:bf:eb:9f:5e:ec:ed:b7:38:
                    63:b0:10:5e:1e:0a:b1:39:71:d2:91:e9:52:79:34:
                    6e:02:08:4d:95:ef:57:a9:ff:5a:e7:b8:ea:c7:5f:
                    25:98:7e:f0:19:08:d3:7b:f4:71:bf:25:99:36:18:
                    60:dd:e6:0d:80:b5:c9:21:e3:93:50:e3:98:8b:1e:
                    a9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:C2:67:EB:5D:4A:D8:59:6E:6E:49:D1:35:B8:94:53:1D:16:4C:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9dd3dbe4-e875-37c0-9d7e-c990301757b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl

            X509v3 Authority Key Identifier:
                keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.39.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:bf:46:05:12:2d:32:82:6d:2e:5e:8b:d8:2f:2b:9a:67:e5:
         29:29:2a:1c:3a:5d:0d:4b:80:a8:69:7a:c1:6d:f0:7c:0c:54:
         dc:36:c2:98:28:83:f8:5b:0a:95:0c:10:e3:ea:5a:bf:ee:3b:
         42:a4:15:d6:77:64:54:c2:13:22:cf:1b:98:55:10:e2:fe:57:
         3e:50:12:5f:7c:51:3b:1b:a7:ef:dd:e8:0c:82:89:3e:5c:50:
         1f:c6:3c:c1:2c:89:bb:be:38:97:7a:31:ff:ef:d1:cf:ee:56:
         4a:41:a2:39:ab:f6:bc:74:a9:55:cd:78:53:04:19:8a:67:83:
         c9:b1:8b:45:e2:31:54:ce:3e:94:bf:f9:27:f3:5f:2e:46:5f:
         92:0a:15:9f:16:4d:1f:c9:06:dd:07:ff:42:d1:83:2b:be:b1:
         46:83:36:3a:f3:c8:d9:30:ae:0d:f0:b2:d1:6d:a8:84:5d:61:
         3a:16:eb:9c:61:91:a6:63:83:45:82:92:52:5d:d7:1a:3f:be:
         8b:46:0b:51:fe:f6:e8:34:34:2a:5d:14:1e:9e:bd:7e:01:33:
         32:de:26:45:c8:1f:a9:45:97:b7:a4:35:f5:48:5a:35:30:4d:
         44:3a:f2:f7:28:62:13:f4:46:6b:b3:73:bd:53:41:9d:55:0f:
         c5:ec:80:c2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE52NM6as6OgB3u32AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWQwNmVkNjYtOWZkZC00MDQ4LTg2NDUtZTMzZThjZWMx
ZDQxMB4XDTI2MDcxMTA5MDAxMloXDTI2MTAwOTA5MDAxMlowLzEtMCsGA1UEAxMk
YzY1YmRiOTUtYjY5Zi00OWFmLWFiYzItMDhlMTY1ODQxZTRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyMfqYx0oLPGi7hxs3FaS0JF+HiPA4tlLwVC
YHDslzGNVGMTwka4GB6U5QpXQRUrjcUc2qd01QainUQ/2vPWNHYqHM/b5ecdbzH4
3Rs+a0zZyAltAbYhGYylEbDRFI2hb9QVsUzpwR0WTl90fBaKlbpMlBor7wPeBzTn
Otw1zEn41ZWGhcWuS4rAkmGSN85qcKX5Y/5kvpJcsml3/7VrQY759IeleVQuftZt
JRQBWnBdvlZm8bOY5X68v+ufXuzttzhjsBBeHgqxOXHSkelSeTRuAghNle9Xqf9a
57jqx18lmH7wGQjTe/RxvyWZNhhg3eYNgLXJIeOTUOOYix6p2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDzCZ+tdSthZbm5J0TW4lFMdFky5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85ZDA2
ZWQ2Ni05ZmRkLTQwNDgtODY0NS1lMzNlOGNlYzFkNDEvOWRkM2RiZTQtZTg3NS0z
N2MwLTlkN2UtYzk5MDMwMTc1N2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWQwNmVkNjYtOWZkZC00MDQ4LTg2
NDUtZTMzZThjZWMxZDQxLzlkMDZlZDY2LTlmZGQtNDA0OC04NjQ1LWUzM2U4Y2Vj
MWQ0MS5jcmwwHwYDVR0jBBgwFoAUAkRNXm0Knu393PU01zFjuct6wgwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS85ZDA2ZWQ2Ni05ZmRkLTQwNDgtODY0NS1lMzNl
OGNlYzFkNDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCdqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHq/RgUSLTKCbS5ei9gvK5pn5SkpKhw6XQ1LgKhpesFt8HwMVNw2wpgo
g/hbCpUMEOPqWr/uO0KkFdZ3ZFTCEyLPG5hVEOL+Vz5QEl98UTsbp+/d6AyCiT5c
UB/GPMEsibu+OJd6Mf/v0c/uVkpBojmr9rx0qVXNeFMEGYpng8mxi0XiMVTOPpS/
+SfzXy5GX5IKFZ8WTR/JBt0H/0LRgyu+sUaDNjrzyNkwrg3wstFtqIRdYToW65xh
kaZjg0WCklJd1xo/votGC1H+9ug0NCpdFB6evX4BMzLeJkXIH6lFl7ekNfVIWjUw
TUQ68vcoYhP0Rmuzc71TQZ1VD8XsgMI=
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:58:16 2026 by rpki-client