Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ad4849ae-31a4-3f0d-a418-f7e4e06f46c7.roa
File:                     ad4849ae-31a4-3f0d-a418-f7e4e06f46c7.roa (raw, json)
Hash identifier:          szLMHRdunsd0WWBBoeeX4N/LraQuGzEkufV1eS/dI4U=
Subject key identifier:   C1:F4:CE:60:FC:C0:19:36:EC:70:06:08:E4:5B:B4:CE:77:D0:92:90
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F49745BE91FEAC30ACCC35E28
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ad4849ae-31a4-3f0d-a418-f7e4e06f46c7.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     834
IP address blocks:        64.93.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:5b:e9:1f:ea:c3:0a:cc:c3:5e:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=6cc323f1-eed2-423c-a8a9-022c66c6e809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a7:cf:81:94:e4:c3:88:dd:4d:bc:e7:2c:2b:
                    4c:97:77:aa:ff:b2:4c:b9:c8:81:ef:3a:ff:c7:f2:
                    c9:8b:1e:0b:2e:c2:0b:dc:06:81:1e:ed:7b:15:fc:
                    f7:16:07:99:d2:8c:35:5e:4a:24:3a:d4:81:04:4c:
                    58:b8:25:66:be:af:04:36:f4:2e:8f:9f:f1:36:6a:
                    0e:3a:8a:f5:cb:8b:8f:9f:6e:55:01:49:eb:e8:18:
                    60:7d:2d:ce:37:82:c8:84:f3:c3:a3:44:91:5d:af:
                    5f:6b:34:42:b5:3f:24:e8:a0:50:5a:6a:4f:41:2e:
                    c7:74:d3:50:2a:c0:99:9a:17:e4:f4:d6:a9:c4:88:
                    1e:1f:87:44:d1:b8:b1:b2:7c:d9:6e:49:af:e1:16:
                    1a:fa:41:58:08:22:af:ee:02:4f:dd:bd:40:b6:2d:
                    8d:60:e3:b2:35:e4:0d:07:89:6c:f3:ab:3d:a3:4d:
                    f2:74:99:f5:e1:f0:74:fc:c3:6c:77:59:fc:67:40:
                    4f:10:18:6c:b9:f1:71:cb:b3:b6:da:88:b2:12:bb:
                    57:4b:6b:93:e3:06:c0:01:9e:7b:1e:6b:2d:3d:93:
                    ed:4f:b0:57:f0:ae:e9:db:f0:25:2f:06:b1:d4:71:
                    6d:26:9e:a1:fe:7e:aa:e2:73:b0:69:ef:79:e3:84:
                    43:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:F4:CE:60:FC:C0:19:36:EC:70:06:08:E4:5B:B4:CE:77:D0:92:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ad4849ae-31a4-3f0d-a418-f7e4e06f46c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.93.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:15:da:9d:89:58:88:d9:c2:34:20:9f:92:c4:e5:1f:4b:5c:
         64:94:5e:49:dc:78:d4:b5:ec:66:7b:68:7a:4f:7d:1f:fe:86:
         93:b7:c9:d8:b6:5e:56:38:eb:d1:8b:0b:32:0b:af:5c:5e:a1:
         36:d5:55:bf:01:34:93:b9:30:39:84:2a:cb:01:7b:89:df:af:
         74:7f:a5:4d:fb:0b:e1:00:06:34:92:31:36:12:37:90:55:c1:
         89:8b:fc:e3:b1:d8:f1:d0:42:b8:88:a0:8f:47:0b:ee:61:d4:
         5e:af:fc:e6:37:02:33:88:f0:e6:71:ea:99:17:73:94:28:dd:
         86:eb:3a:3b:e6:1c:58:2c:b5:2e:72:b8:5f:d5:dc:3d:d9:3d:
         96:6c:0d:c2:7c:49:bb:27:ad:1f:e4:2d:0e:56:70:9c:f3:7c:
         cc:68:32:d1:20:93:cc:d3:97:06:92:0f:c6:14:c5:8d:92:44:
         24:33:68:f4:61:e0:fd:53:f3:0d:71:73:1c:de:13:d9:e8:a1:
         9b:d9:20:01:83:8d:23:0b:40:af:04:9e:22:ce:22:bd:c9:04:
         a0:ec:80:23:9a:30:52:c0:6c:32:63:00:f0:09:15:33:09:3a:
         7d:1a:20:0f:0e:56:38:bf:d6:ca:80:bf:a5:ec:cd:de:db:68:
         5c:c7:ad:83
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdFvpH+rDCszDXigwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NmNjMzIzZjEtZWVkMi00MjNjLWE4YTktMDIyYzY2YzZlODA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KfPgZTkw4jdTbznLCtMl3eq/7JMuciB7zr/
x/LJix4LLsIL3AaBHu17Ffz3FgeZ0ow1XkokOtSBBExYuCVmvq8ENvQuj5/xNmoO
Oor1y4uPn25VAUnr6BhgfS3ON4LIhPPDo0SRXa9fazRCtT8k6KBQWmpPQS7HdNNQ
KsCZmhfk9NapxIgeH4dE0bixsnzZbkmv4RYa+kFYCCKv7gJP3b1Ati2NYOOyNeQN
B4ls86s9o03ydJn14fB0/MNsd1n8Z0BPEBhsufFxy7O22oiyErtXS2uT4wbAAZ57
HmstPZPtT7BX8K7p2/AlLwax1HFtJp6h/n6q4nOwae9544RDKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMH0zmD8wBk27HAGCORbtM530JKQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYWQ0ODQ5YWUtMzFhNC0z
ZjBkLWE0MTgtZjdlNGUwNmY0NmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQF00MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF0V2p2JWIjZwjQgn5LE5R9LXGSUXknceNS17GZ7aHpPfR/+hpO3ydi2
XlY469GLCzILr1xeoTbVVb8BNJO5MDmEKssBe4nfr3R/pU37C+EABjSSMTYSN5BV
wYmL/OOx2PHQQriIoI9HC+5h1F6v/OY3AjOI8OZx6pkXc5Qo3YbrOjvmHFgstS5y
uF/V3D3ZPZZsDcJ8SbsnrR/kLQ5WcJzzfMxoMtEgk8zTlwaSD8YUxY2SRCQzaPRh
4P1T8w1xcxzeE9nooZvZIAGDjSMLQK8EniLOIr3JBKDsgCOaMFLAbDJjAPAJFTMJ
On0aIA8OVji/1sqAv6Xszd7baFzHrYM=
-----END CERTIFICATE-----
Generated at Sun Sep 27 03:11:11 2026 by rpki-client