Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/18694b08-334c-3a5e-85a0-a91e8346761b.roa
File:                     18694b08-334c-3a5e-85a0-a91e8346761b.roa (raw, json)
Hash identifier:          jFsvFAnddQjWtJcYPB46gF4zSxXgD4lyEjcq3U6wrG4=
Subject key identifier:   0B:56:39:ED:2C:89:CE:5C:A7:A1:E5:DD:62:FF:A1:BA:DB:CE:9A:0A
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F4AD446C82AF67F8B896EC600
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/18694b08-334c-3a5e-85a0-a91e8346761b.roa
Signing time:             Fri 25 Sep 2026 12:52:59 +0000
ROA not before:           Fri 25 Sep 2026 12:52:59 +0000
ROA not after:            Thu 24 Dec 2026 13:52:59 +0000
asID:                     6079
IP address blocks:        64.105.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4a:d4:46:c8:2a:f6:7f:8b:89:6e:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 25 12:52:59 2026 GMT
            Not After : Dec 24 13:52:59 2026 GMT
        Subject: CN=afe53ebf-61b3-4fd8-af00-7dd7ecda43b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:47:2c:2c:bc:b9:8d:70:30:0c:8f:be:7f:91:
                    c3:68:e9:74:d8:8a:8e:35:28:fe:69:e3:c6:16:54:
                    2c:8f:a5:50:1a:ff:52:70:2e:7f:39:d7:4a:53:02:
                    6c:b1:34:60:c4:57:47:6c:5c:4b:5d:31:bc:e8:f0:
                    44:f4:22:2e:b4:35:3f:a9:f4:fd:be:0a:19:78:89:
                    66:40:cf:35:a7:0e:44:a4:23:5a:4b:5c:48:d8:a9:
                    53:22:f4:41:8a:54:f7:89:e2:b1:15:55:86:48:1f:
                    a2:e2:f3:3f:d5:0d:47:bd:e4:c6:14:ea:13:b9:e9:
                    48:e9:1f:5d:1d:8c:19:dc:a8:00:ee:be:7f:87:e2:
                    90:92:86:ee:23:20:bb:81:5c:06:32:cb:90:1c:fd:
                    03:0e:0e:05:d5:b4:87:34:55:17:b9:71:0c:e8:06:
                    b6:80:ed:3e:95:cf:cb:a6:02:78:8c:de:b2:bb:2b:
                    ec:ce:f3:7e:62:4b:85:77:58:bd:a2:12:fb:2b:a5:
                    f1:8e:4f:c4:82:bc:6b:f3:be:09:8b:af:36:84:cc:
                    1a:05:b2:90:87:c7:94:5e:81:3c:76:f7:22:dc:3e:
                    de:b0:ca:44:d0:33:13:35:37:1f:d8:7e:5f:44:57:
                    9c:68:af:0e:59:26:00:4b:27:c7:58:a0:ec:27:2f:
                    c6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:56:39:ED:2C:89:CE:5C:A7:A1:E5:DD:62:FF:A1:BA:DB:CE:9A:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/18694b08-334c-3a5e-85a0-a91e8346761b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.105.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:98:a9:38:a6:7d:70:51:0e:93:22:65:70:86:bb:51:e9:b3:
         9b:96:cc:e7:24:89:e3:83:8c:44:23:a4:53:4d:77:77:4e:1a:
         b5:c1:f6:c5:93:77:32:39:21:d9:17:29:11:05:2f:0c:ad:92:
         06:d8:10:52:ba:ea:00:f9:3a:0f:aa:25:57:cc:32:01:6a:bb:
         0b:07:fd:76:3f:f1:8a:e5:41:2f:3f:74:ac:98:36:97:12:e4:
         cb:f7:83:ac:3c:2e:ff:8c:35:cf:fc:b0:99:b4:3b:8e:5c:43:
         3d:bb:3e:9a:95:31:3f:44:80:d1:a0:66:92:d3:7c:b0:cf:89:
         11:82:63:ef:c6:e7:a6:c7:77:1a:a1:34:71:0d:03:40:37:ac:
         de:87:2b:28:c5:15:68:8f:5b:65:b0:8b:ba:78:41:6d:78:2b:
         c0:31:f0:2c:38:ad:8a:06:41:dc:a6:ae:7d:65:58:40:9f:3a:
         5c:69:2b:4a:8a:2a:c7:c1:69:d2:9c:94:d5:8a:73:c7:54:64:
         54:15:39:fa:36:48:18:7b:d5:50:17:fb:fe:7b:6f:c9:14:b7:
         91:86:5a:4f:cc:e5:e6:e7:d8:64:67:44:69:94:6a:0d:9e:21:
         c8:4b:f7:2f:a8:4f:2b:f6:31:cc:0d:65:1c:11:2d:a5:e0:75:
         f8:35:77:5e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9K1EbIKvZ/i4luxgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDkyNTEyNTI1OVoXDTI2MTIyNDEzNTI1OVowLzEtMCsGA1UEAxMk
YWZlNTNlYmYtNjFiMy00ZmQ4LWFmMDAtN2RkN2VjZGE0M2IyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkcsLLy5jXAwDI++f5HDaOl02IqONSj+aePG
FlQsj6VQGv9ScC5/OddKUwJssTRgxFdHbFxLXTG86PBE9CIutDU/qfT9vgoZeIlm
QM81pw5EpCNaS1xI2KlTIvRBilT3ieKxFVWGSB+i4vM/1Q1HveTGFOoTuelI6R9d
HYwZ3KgA7r5/h+KQkobuIyC7gVwGMsuQHP0DDg4F1bSHNFUXuXEM6Aa2gO0+lc/L
pgJ4jN6yuyvszvN+YkuFd1i9ohL7K6Xxjk/Egrxr874Ji682hMwaBbKQh8eUXoE8
dvci3D7esMpE0DMTNTcf2H5fRFecaK8OWSYASyfHWKDsJy/GTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAtWOe0sic5cp6Hl3WL/obrbzpoKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMTg2OTRiMDgtMzM0Yy0z
YTVlLTg1YTAtYTkxZTgzNDY3NjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQGkAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJWYqTimfXBRDpMiZXCGu1Hps5uWzOckieODjEQjpFNNd3dOGrXB9sWT
dzI5IdkXKREFLwytkgbYEFK66gD5Og+qJVfMMgFquwsH/XY/8YrlQS8/dKyYNpcS
5Mv3g6w8Lv+MNc/8sJm0O45cQz27PpqVMT9EgNGgZpLTfLDPiRGCY+/G56bHdxqh
NHENA0A3rN6HKyjFFWiPW2Wwi7p4QW14K8Ax8Cw4rYoGQdymrn1lWECfOlxpK0qK
KsfBadKclNWKc8dUZFQVOfo2SBh71VAX+/57b8kUt5GGWk/M5ebn2GRnRGmUag2e
IchL9y+oTyv2McwNZRwRLaXgdfg1d14=
-----END CERTIFICATE-----
Generated at Thu Oct 8 13:51:54 2026 by rpki-client