Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/3c531f86-93ab-3895-9a5b-924845a382d9.roa
File:                     3c531f86-93ab-3895-9a5b-924845a382d9.roa (raw, json)
Hash identifier:          zUw/Q3CdsEylsWHPWZq40XKZziJVt7paQ75tmgAp5ZU=
Subject key identifier:   06:9D:A5:FC:42:E1:83:94:18:B8:25:61:5A:6C:03:D7:28:DB:9C:52
Certificate issuer:       /CN=954c01ba-d9ad-44e8-b48c-1a48f20d8b7d
Certificate serial:       010D0C9F4328584D1DE492AFA049E6FAEFDBAB80
Authority key identifier: 72:A8:3D:57:8C:66:88:34:8C:9E:2B:8E:F0:43:BD:E2:7C:A5:90:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/3c531f86-93ab-3895-9a5b-924845a382d9.roa
Signing time:             Tue 10 Mar 2026 01:00:31 +0000
ROA not before:           Tue 10 Mar 2026 01:00:31 +0000
ROA not after:            Mon 08 Jun 2026 01:00:31 +0000
asID:                     63073
IP address blocks:        64.186.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1d:e4:92:af:a0:49:e6:fa:ef:db:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=954c01ba-d9ad-44e8-b48c-1a48f20d8b7d
        Validity
            Not Before: Mar 10 01:00:31 2026 GMT
            Not After : Jun  8 01:00:31 2026 GMT
        Subject: CN=f8b83fb4-49a4-44d2-b174-0c090f3961fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:27:37:ab:42:52:83:4f:ec:d5:3a:3e:be:a0:
                    0e:f3:3f:92:47:f7:d0:3e:b2:da:c7:1f:38:63:c1:
                    99:63:94:94:dd:00:f8:b9:dd:ac:0c:a5:09:e7:67:
                    ae:ef:68:3a:40:be:35:12:d4:6e:8c:a4:6c:98:35:
                    1a:55:11:15:26:c0:3f:20:b7:bb:2c:20:75:e5:b0:
                    6c:9e:d0:73:3d:42:4c:e1:a0:fb:ad:0c:58:3b:5f:
                    59:52:78:f7:b8:cc:56:97:c3:28:6e:00:b1:2f:b7:
                    c9:3b:86:7e:aa:eb:9b:6e:ba:af:c6:8a:88:99:0a:
                    14:66:8f:44:27:71:3e:49:ab:53:86:a7:0a:0c:ff:
                    d6:8f:a0:70:1e:28:4f:ea:da:9f:2c:e3:81:8e:83:
                    fa:47:97:d5:de:8c:55:3b:74:ce:38:f7:3d:43:cc:
                    84:cd:37:3f:03:1f:d9:58:bd:7a:12:88:05:b9:c2:
                    f8:ac:a2:a2:c9:eb:d6:3c:f8:41:f7:87:c7:5d:42:
                    27:79:08:40:77:ea:f4:00:8a:b8:4e:95:d3:ec:eb:
                    af:58:e7:64:ea:4a:64:a5:f9:24:be:3d:b1:12:33:
                    b4:36:97:b8:b0:90:fe:5c:3c:a3:e2:7f:9d:20:1e:
                    6b:8b:e7:0c:24:45:2c:c9:47:f8:bf:0c:98:74:78:
                    b2:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:9D:A5:FC:42:E1:83:94:18:B8:25:61:5A:6C:03:D7:28:DB:9C:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/3c531f86-93ab-3895-9a5b-924845a382d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.crl

            X509v3 Authority Key Identifier:
                keyid:72:A8:3D:57:8C:66:88:34:8C:9E:2B:8E:F0:43:BD:E2:7C:A5:90:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.186.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:ab:4c:d8:0c:d2:5e:2d:4d:cc:81:9a:58:23:8d:ae:d8:73:
         95:dc:8a:81:46:cf:37:07:18:77:8b:aa:95:8c:5c:79:5d:ba:
         16:4b:56:f1:bb:42:b3:38:b8:a2:35:c0:83:c6:59:64:66:0f:
         63:7a:98:3c:83:37:75:9e:e6:20:1d:34:be:86:ff:a2:40:93:
         81:ff:ae:29:81:29:ab:9b:f9:a7:af:eb:bb:0b:fb:28:53:e8:
         9a:3e:53:5a:ff:de:bf:55:b5:38:22:e0:a1:36:34:4f:47:ed:
         a6:99:69:ae:9b:83:6e:28:65:de:f5:08:10:7a:3b:51:82:d3:
         b1:62:20:64:b1:67:77:c2:98:11:e5:bc:f6:4f:65:a3:7a:88:
         07:b9:5e:82:f5:9b:39:66:9e:b5:50:f6:3b:a6:92:d8:3c:39:
         46:52:c2:a3:37:ba:12:84:ee:ac:6b:72:72:27:3e:8b:30:c9:
         2d:0b:c5:90:f7:63:82:fc:f9:e0:bb:34:06:ec:e7:81:40:39:
         10:66:25:d5:75:b6:68:69:a2:65:09:d9:27:04:57:26:92:fc:
         78:ec:1b:d2:48:12:ce:ba:4f:b9:1c:b4:cc:ec:e2:74:4b:3c:
         06:13:33:40:03:d2:db:7d:e4:a8:0e:af:45:97:bd:6e:a8:65:
         1d:ac:2f:f0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0d5JKvoEnm+u/bq4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTU0YzAxYmEtZDlhZC00NGU4LWI0OGMtMWE0OGYyMGQ4
YjdkMB4XDTI2MDMxMDAxMDAzMVoXDTI2MDYwODAxMDAzMVowLzEtMCsGA1UEAxMk
ZjhiODNmYjQtNDlhNC00NGQyLWIxNzQtMGMwOTBmMzk2MWZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyc3q0JSg0/s1To+vqAO8z+SR/fQPrLaxx84
Y8GZY5SU3QD4ud2sDKUJ52eu72g6QL41EtRujKRsmDUaVREVJsA/ILe7LCB15bBs
ntBzPUJM4aD7rQxYO19ZUnj3uMxWl8MobgCxL7fJO4Z+quubbrqvxoqImQoUZo9E
J3E+SatThqcKDP/Wj6BwHihP6tqfLOOBjoP6R5fV3oxVO3TOOPc9Q8yEzTc/Ax/Z
WL16EogFucL4rKKiyevWPPhB94fHXUIneQhAd+r0AIq4TpXT7OuvWOdk6kpkpfkk
vj2xEjO0Npe4sJD+XDyj4n+dIB5ri+cMJEUsyUf4vwyYdHiyFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAadpfxC4YOUGLglYVpsA9co25xSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85NTRj
MDFiYS1kOWFkLTQ0ZTgtYjQ4Yy0xYTQ4ZjIwZDhiN2QvM2M1MzFmODYtOTNhYi0z
ODk1LTlhNWItOTI0ODQ1YTM4MmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOTU0YzAxYmEtZDlhZC00NGU4LWI0
OGMtMWE0OGYyMGQ4YjdkLzk1NGMwMWJhLWQ5YWQtNDRlOC1iNDhjLTFhNDhmMjBk
OGI3ZC5jcmwwHwYDVR0jBBgwFoAUcqg9V4xmiDSMniuO8EO94nylkNwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi85NTRjMDFiYS1kOWFkLTQ0ZTgtYjQ4Yy0xYTQ4
ZjIwZDhiN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQLqHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGarTNgM0l4tTcyBmlgjja7Yc5XcioFGzzcHGHeLqpWMXHlduhZLVvG7
QrM4uKI1wIPGWWRmD2N6mDyDN3We5iAdNL6G/6JAk4H/rimBKaub+aev67sL+yhT
6Jo+U1r/3r9VtTgi4KE2NE9H7aaZaa6bg24oZd71CBB6O1GC07FiIGSxZ3fCmBHl
vPZPZaN6iAe5XoL1mzlmnrVQ9jumktg8OUZSwqM3uhKE7qxrcnInPoswyS0LxZD3
Y4L8+eC7NAbs54FAORBmJdV1tmhpomUJ2ScEVyaS/HjsG9JIEs66T7kctMzs4nRL
PAYTM0AD0tt95KgOr0WXvW6oZR2sL/A=
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:15:23 2026 by rpki-client