Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/c477d60d-a0ed-3063-9bc0-a2c23851e6bb.roa
File:                     c477d60d-a0ed-3063-9bc0-a2c23851e6bb.roa (raw, json)
Hash identifier:          2S+1ArU24ymT11U7Ex2Qi9nUro+ITCg3FKYXGJQ16ag=
Subject key identifier:   96:19:40:93:10:C6:39:94:6F:67:FE:BC:B2:05:5A:E7:09:6C:FB:51
Certificate issuer:       /CN=f16b1ed2-491f-4ed7-be99-59b20310c475
Certificate serial:       010D0C9F4328584E50849A80AEB9ECB8C8902A60
Authority key identifier: 10:63:9B:2C:4A:02:6A:D8:33:C9:71:22:24:52:5C:80:BE:6C:AB:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/c477d60d-a0ed-3063-9bc0-a2c23851e6bb.roa
Signing time:             Sat 27 Jun 2026 21:00:12 +0000
ROA not before:           Sat 27 Jun 2026 21:00:12 +0000
ROA not after:            Fri 25 Sep 2026 21:00:12 +0000
asID:                     11924
IP address blocks:        64.79.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/f16b1ed2-491f-4ed7-be99-59b20310c475.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/f16b1ed2-491f-4ed7-be99-59b20310c475.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:50:84:9a:80:ae:b9:ec:b8:c8:90:2a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f16b1ed2-491f-4ed7-be99-59b20310c475
        Validity
            Not Before: Jun 27 21:00:12 2026 GMT
            Not After : Sep 25 21:00:12 2026 GMT
        Subject: CN=0f0763fd-7933-4450-bc96-c6fd69e3d539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2e:f0:ad:71:9d:96:e6:2a:16:2c:a1:1a:f5:
                    db:de:c1:bb:10:1f:a5:b2:62:2f:33:ad:87:d6:9b:
                    06:b2:87:12:7f:28:5b:bb:f3:0d:34:9f:1f:99:ba:
                    f4:ba:9a:1b:ed:f6:35:43:b5:ec:2c:53:7b:72:60:
                    7b:2a:f7:01:73:14:6b:7d:21:de:aa:df:9f:5b:de:
                    5e:10:d9:0a:3e:a9:c1:9d:1b:22:b4:5c:28:03:03:
                    ed:44:49:5c:0a:65:12:93:1d:19:6b:6b:46:30:94:
                    07:c6:87:db:95:b8:a1:9c:e1:20:be:cb:f2:ef:75:
                    24:3a:e0:4e:5d:fc:5e:aa:61:70:08:d7:2a:4a:bc:
                    db:79:23:10:61:23:c6:2f:7e:02:79:9c:51:54:2a:
                    5b:f3:4e:a2:65:4e:66:68:6b:a3:89:10:ce:cd:f6:
                    e9:78:c3:b2:8f:82:33:cb:a7:06:f9:45:10:51:83:
                    9e:cc:e8:57:d7:d0:85:9b:3b:3c:1d:07:f5:83:bf:
                    ab:88:66:68:a9:3f:fc:4b:be:f6:20:da:dc:0b:e1:
                    3f:84:5e:a6:8b:2d:4f:9a:72:9a:06:1f:1f:37:5a:
                    03:96:3b:22:c2:c4:b6:9e:bd:ae:fa:81:8d:1b:d7:
                    c5:88:c2:b1:73:d3:78:22:10:7f:f2:99:99:48:34:
                    a2:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:19:40:93:10:C6:39:94:6F:67:FE:BC:B2:05:5A:E7:09:6C:FB:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/c477d60d-a0ed-3063-9bc0-a2c23851e6bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/f16b1ed2-491f-4ed7-be99-59b20310c475.crl

            X509v3 Authority Key Identifier:
                keyid:10:63:9B:2C:4A:02:6A:D8:33:C9:71:22:24:52:5C:80:BE:6C:AB:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.79.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:a5:6f:bf:fa:ad:2e:c4:7a:f3:8e:ae:7a:59:35:c6:69:e2:
         5a:dc:5c:ce:ff:6f:2e:76:fd:51:95:75:7d:0e:12:5b:fd:d6:
         84:fd:04:ae:95:aa:f5:db:ab:3b:57:c0:72:db:e7:6c:f3:ae:
         93:0e:6a:04:45:6a:5d:8a:79:3b:89:cb:46:28:24:3e:33:47:
         80:54:ef:2d:05:c3:1c:2d:84:68:bf:60:4b:29:20:87:d3:0f:
         8b:09:8c:78:0c:6e:a8:57:56:3f:6f:d5:6d:eb:c4:a1:b8:73:
         a0:04:aa:68:de:b1:b0:f5:bd:03:1b:12:e2:6a:2b:90:94:12:
         04:d9:bd:18:24:82:cf:c1:c4:cd:a5:d6:16:ef:45:5f:3d:54:
         7e:27:c6:87:90:8f:f5:69:d8:fd:ae:c8:66:ce:6d:24:08:0c:
         80:cd:8b:0b:85:99:f0:70:25:c7:ce:99:2a:91:3b:20:8b:b2:
         7a:92:84:9d:07:a7:07:8f:a0:3c:e1:bb:94:7f:f7:fe:36:a2:
         cb:90:e2:bb:6e:21:8f:d8:12:dd:e8:16:7a:ea:59:58:63:44:
         32:68:20:a7:d0:6e:ec:26:fe:fe:a0:ac:b7:d4:40:14:d7:b0:
         53:70:62:88:52:b6:ed:af:82:27:43:2a:7d:19:d1:b3:db:e8:
         3d:d4:fe:59
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5QhJqArrnsuMiQKmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjE2YjFlZDItNDkxZi00ZWQ3LWJlOTktNTliMjAzMTBj
NDc1MB4XDTI2MDYyNzIxMDAxMloXDTI2MDkyNTIxMDAxMlowLzEtMCsGA1UEAxMk
MGYwNzYzZmQtNzkzMy00NDUwLWJjOTYtYzZmZDY5ZTNkNTM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAly7wrXGdluYqFiyhGvXb3sG7EB+lsmIvM62H
1psGsocSfyhbu/MNNJ8fmbr0upob7fY1Q7XsLFN7cmB7KvcBcxRrfSHeqt+fW95e
ENkKPqnBnRsitFwoAwPtRElcCmUSkx0Za2tGMJQHxofblbihnOEgvsvy73UkOuBO
XfxeqmFwCNcqSrzbeSMQYSPGL34CeZxRVCpb806iZU5maGujiRDOzfbpeMOyj4Iz
y6cG+UUQUYOezOhX19CFmzs8HQf1g7+riGZoqT/8S772INrcC+E/hF6miy1PmnKa
Bh8fN1oDljsiwsS2nr2u+oGNG9fFiMKxc9N4IhB/8pmZSDSiPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJYZQJMQxjmUb2f+vLIFWucJbPtRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mMTZi
MWVkMi00OTFmLTRlZDctYmU5OS01OWIyMDMxMGM0NzUvYzQ3N2Q2MGQtYTBlZC0z
MDYzLTliYzAtYTJjMjM4NTFlNmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjE2YjFlZDItNDkxZi00ZWQ3LWJl
OTktNTliMjAzMTBjNDc1L2YxNmIxZWQyLTQ5MWYtNGVkNy1iZTk5LTU5YjIwMzEw
YzQ3NS5jcmwwHwYDVR0jBBgwFoAUEGObLEoCatgzyXEiJFJcgL5sq9YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9mMTZiMWVkMi00OTFmLTRlZDctYmU5OS01OWIy
MDMxMGM0NzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQE8gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEGlb7/6rS7EevOOrnpZNcZp4lrcXM7/by52/VGVdX0OElv91oT9BK6V
qvXbqztXwHLb52zzrpMOagRFal2KeTuJy0YoJD4zR4BU7y0FwxwthGi/YEspIIfT
D4sJjHgMbqhXVj9v1W3rxKG4c6AEqmjesbD1vQMbEuJqK5CUEgTZvRgkgs/BxM2l
1hbvRV89VH4nxoeQj/Vp2P2uyGbObSQIDIDNiwuFmfBwJcfOmSqROyCLsnqShJ0H
pwePoDzhu5R/9/42osuQ4rtuIY/YEt3oFnrqWVhjRDJoIKfQbuwm/v6grLfUQBTX
sFNwYohStu2vgidDKn0Z0bPb6D3U/lk=
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:46:42 2026 by rpki-client