Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/f0f14ca5-fb96-31bb-811e-2f0220140ce7.roa
File:                     f0f14ca5-fb96-31bb-811e-2f0220140ce7.roa (raw, json)
Hash identifier:          GZ33E78N3BbystiL6QDh1yOPpnqMRAX10DQcKe6IYYc=
Subject key identifier:   4F:07:94:9F:14:85:FB:61:45:BB:3C:A0:34:5A:76:0D:6B:8E:A8:CE
Certificate issuer:       /CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61
Certificate serial:       010D0C9F4328584E921F9C5252D2A5A00616B940
Authority key identifier: F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/f0f14ca5-fb96-31bb-811e-2f0220140ce7.roa
Signing time:             Tue 21 Jul 2026 09:00:12 +0000
ROA not before:           Tue 21 Jul 2026 09:00:12 +0000
ROA not after:            Mon 19 Oct 2026 09:00:12 +0000
asID:                     14090
IP address blocks:        64.21.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:92:1f:9c:52:52:d2:a5:a0:06:16:b9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61
        Validity
            Not Before: Jul 21 09:00:12 2026 GMT
            Not After : Oct 19 09:00:12 2026 GMT
        Subject: CN=06e7a969-728f-4715-a3e1-cbd805a82029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:01:82:92:eb:b7:ea:db:42:66:7d:4a:82:0f:
                    a1:8a:d3:28:65:cc:88:37:3a:e4:d5:f4:b8:9d:03:
                    37:e5:6a:fe:ba:17:e3:a5:ba:01:28:b5:2b:87:0f:
                    b9:1e:ee:9a:be:eb:be:40:b2:e9:7f:7f:66:ad:8d:
                    42:14:07:09:73:58:34:ca:1d:76:86:4f:bb:24:1d:
                    1e:57:5c:a1:0b:09:29:3f:14:0e:f4:90:76:34:3d:
                    f5:f3:04:20:b5:b0:e6:b5:2a:7c:99:64:d4:1d:1e:
                    be:11:0f:ab:bc:18:c9:ed:33:08:53:82:77:4f:ac:
                    52:fa:a2:08:9e:9a:36:7a:9b:a6:98:99:c7:f9:2e:
                    13:3a:68:40:b2:c6:dd:2c:c2:7a:b0:60:c1:4c:81:
                    b1:6a:34:8a:f5:ad:dc:63:9d:d8:06:52:61:91:0f:
                    79:ea:a5:b7:03:65:c1:4e:a3:21:12:fe:95:ad:7b:
                    39:61:f0:7e:d6:2a:44:fd:7f:54:21:c4:4f:bd:d2:
                    d5:f0:f3:b1:a6:96:8e:ad:8f:52:3d:a4:c6:59:e5:
                    f1:9d:de:31:83:a4:46:db:5d:d8:b1:46:fd:fb:7e:
                    25:4d:14:f4:d4:5d:c0:1d:8d:37:00:c6:a5:3a:ca:
                    8d:2c:79:20:1a:06:94:8d:06:de:67:6b:79:1c:2b:
                    54:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:07:94:9F:14:85:FB:61:45:BB:3C:A0:34:5A:76:0D:6B:8E:A8:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/f0f14ca5-fb96-31bb-811e-2f0220140ce7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl

            X509v3 Authority Key Identifier:
                keyid:F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.21.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:35:1f:68:24:5a:b5:bf:dd:be:88:3f:37:6e:78:46:cb:04:
         b9:61:46:52:1c:b5:43:cb:88:07:ed:80:1c:af:c8:f2:1b:3b:
         67:7c:b8:76:18:f1:a4:76:fb:00:92:6a:c6:13:47:fc:ef:87:
         96:b0:43:11:8a:eb:f0:0f:8c:17:d5:96:39:28:b5:03:ed:82:
         0a:04:46:4e:08:99:6a:e5:a8:03:76:1f:d5:84:50:f3:78:7d:
         cd:2f:8a:e4:a1:12:8e:f6:a7:62:ea:53:6c:b3:56:72:bf:84:
         14:19:7f:09:21:af:3e:24:39:c0:f7:b2:68:66:1c:66:79:91:
         7b:f2:02:f7:aa:b9:db:73:1d:12:22:64:c1:ab:3b:87:27:53:
         25:82:a3:29:06:ef:25:2a:8c:35:e5:c4:69:55:87:41:1e:db:
         95:54:26:e8:42:93:3d:09:92:5c:56:b2:79:66:ff:2e:3a:b0:
         2e:fe:53:8c:64:af:91:e8:b0:f0:8d:65:6f:42:4a:65:3e:f2:
         01:dc:99:7a:da:fc:83:b4:bb:1d:67:d1:0e:b0:4b:eb:0c:d9:
         3a:82:5f:2c:13:47:08:0a:a7:70:60:3f:c2:a3:e3:fb:b2:6e:
         3f:24:96:74:a2:36:6e:95:b8:5d:8c:ec:6a:f3:47:91:be:6e:
         7c:e7:66:c8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6SH5xSUtKloAYWuUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWRhN2Q1YzAtZWVjOS00MjVjLWE1NzQtNmViOWRkNGVk
ZTYxMB4XDTI2MDcyMTA5MDAxMloXDTI2MTAxOTA5MDAxMlowLzEtMCsGA1UEAxMk
MDZlN2E5NjktNzI4Zi00NzE1LWEzZTEtY2JkODA1YTgyMDI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwGCkuu36ttCZn1Kgg+hitMoZcyINzrk1fS4
nQM35Wr+uhfjpboBKLUrhw+5Hu6avuu+QLLpf39mrY1CFAcJc1g0yh12hk+7JB0e
V1yhCwkpPxQO9JB2ND318wQgtbDmtSp8mWTUHR6+EQ+rvBjJ7TMIU4J3T6xS+qII
npo2epummJnH+S4TOmhAssbdLMJ6sGDBTIGxajSK9a3cY53YBlJhkQ956qW3A2XB
TqMhEv6VrXs5YfB+1ipE/X9UIcRPvdLV8POxppaOrY9SPaTGWeXxnd4xg6RG213Y
sUb9+34lTRT01F3AHY03AMalOsqNLHkgGgaUjQbeZ2t5HCtUJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE8HlJ8UhfthRbs8oDRadg1rjqjOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81ZGE3
ZDVjMC1lZWM5LTQyNWMtYTU3NC02ZWI5ZGQ0ZWRlNjEvZjBmMTRjYTUtZmI5Ni0z
MWJiLTgxMWUtMmYwMjIwMTQwY2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWRhN2Q1YzAtZWVjOS00MjVjLWE1
NzQtNmViOWRkNGVkZTYxLzVkYTdkNWMwLWVlYzktNDI1Yy1hNTc0LTZlYjlkZDRl
ZGU2MS5jcmwwHwYDVR0jBBgwFoAU8QWcju/aWUH6JtOjabaF+gQ8dhswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy81ZGE3ZDVjMC1lZWM5LTQyNWMtYTU3NC02ZWI5
ZGQ0ZWRlNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQBX8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGw1H2gkWrW/3b6IPzdueEbLBLlhRlIctUPLiAftgByvyPIbO2d8uHYY
8aR2+wCSasYTR/zvh5awQxGK6/APjBfVljkotQPtggoERk4ImWrlqAN2H9WEUPN4
fc0viuShEo72p2LqU2yzVnK/hBQZfwkhrz4kOcD3smhmHGZ5kXvyAvequdtzHRIi
ZMGrO4cnUyWCoykG7yUqjDXlxGlVh0Ee25VUJuhCkz0JklxWsnlm/y46sC7+U4xk
r5HosPCNZW9CSmU+8gHcmXra/IO0ux1n0Q6wS+sM2TqCXywTRwgKp3BgP8Kj4/uy
bj8klnSiNm6VuF2M7GrzR5G+bnznZsg=
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:54:23 2026 by rpki-client