Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c4ab35d6-64a1-3f65-85bb-f2baf487b44d.roa
File:                     c4ab35d6-64a1-3f65-85bb-f2baf487b44d.roa (raw, json)
Hash identifier:          m4+TwXCzD4+XessdAiiKOQnS0Q9wtFelxMetdpFT4v8=
Subject key identifier:   13:F4:1C:C6:C7:E7:5C:5C:A8:3E:9A:C3:92:E2:61:75:62:17:45:59
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E9547DDA0985379F6D513C264
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c4ab35d6-64a1-3f65-85bb-f2baf487b44d.roa
Signing time:             Wed 22 Jul 2026 12:08:45 +0000
ROA not before:           Wed 22 Jul 2026 12:08:45 +0000
ROA not after:            Tue 20 Oct 2026 12:08:45 +0000
asID:                     834
IP address blocks:        65.86.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:95:47:dd:a0:98:53:79:f6:d5:13:c2:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul 22 12:08:45 2026 GMT
            Not After : Oct 20 12:08:45 2026 GMT
        Subject: CN=ca745882-34d9-4bb6-a24b-eb78e412591c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5d:8d:ed:ab:38:9a:ea:2e:81:eb:4c:72:e8:
                    8b:b9:20:ef:3d:ce:11:ec:fa:ac:19:3a:dd:e9:e8:
                    5c:2f:95:29:45:64:52:22:0f:d5:f1:48:81:2c:42:
                    62:d0:8c:16:09:81:6d:f6:92:6c:59:fe:ce:1f:9e:
                    56:e4:c6:e7:79:c3:ac:f7:6d:b6:4f:57:38:26:85:
                    2b:d5:72:7c:68:f2:24:8d:99:53:63:10:68:3f:5a:
                    ba:56:f7:a5:05:a2:64:7d:9d:e7:52:85:ee:4d:f5:
                    c4:4b:56:a3:21:7f:63:bb:df:72:6c:51:9b:a1:b3:
                    2c:d5:ab:1b:37:39:f8:63:db:42:9c:24:2b:b2:59:
                    24:18:5e:61:71:e0:eb:77:12:ae:73:ae:9f:45:dc:
                    1c:bd:84:1d:b7:44:bf:0c:4b:b9:13:ea:70:de:02:
                    62:bf:5d:9a:4c:6f:02:7c:72:ea:30:26:75:df:68:
                    9f:51:a7:ff:b7:c0:0e:32:e6:d4:24:36:b3:6a:a5:
                    7f:f0:21:63:21:00:c5:eb:95:68:ef:7c:4e:d2:ae:
                    7f:d9:d9:4d:0f:0c:80:ee:5c:d9:14:0b:4f:e2:e7:
                    9d:4e:57:09:8e:ae:63:71:d6:75:6e:75:c6:60:52:
                    6c:07:58:71:1b:81:b6:87:15:8f:e1:2c:d6:9b:f6:
                    bc:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:F4:1C:C6:C7:E7:5C:5C:A8:3E:9A:C3:92:E2:61:75:62:17:45:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c4ab35d6-64a1-3f65-85bb-f2baf487b44d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.86.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:f7:a3:a2:9d:13:e9:16:ea:fc:05:3a:3f:f0:86:87:71:04:
         51:23:e6:76:a1:72:3c:55:62:4e:0d:a3:8d:3c:7e:8e:0e:4b:
         3e:1e:a0:07:23:cf:03:a3:55:38:75:9e:a3:2a:80:d0:ea:fa:
         51:13:90:4f:2b:50:6e:9d:b6:7e:bc:e0:aa:27:7f:0c:d1:75:
         64:8a:d2:18:fe:ca:0e:03:ca:24:bb:24:f0:46:d9:cf:e1:44:
         f6:56:25:b7:cd:57:98:5f:30:f6:c4:6a:38:fa:ac:df:f4:17:
         aa:53:8e:ad:2b:54:a5:da:19:2d:26:3b:26:98:61:a1:79:87:
         b8:77:de:48:8e:ad:cc:5d:1c:e3:9f:28:aa:5b:0f:9e:89:76:
         b3:97:c4:c9:10:01:5c:45:f5:4c:1d:33:70:99:f5:24:39:fb:
         bb:be:9d:a1:61:f9:ca:c7:44:34:12:bd:25:16:bb:b1:77:67:
         e6:f3:87:58:b2:a0:20:d2:19:79:a9:b3:5f:ee:ff:88:ba:40:
         a0:1f:7f:08:29:29:1b:2a:29:d3:10:c5:9f:4f:4e:86:3f:ba:
         f4:b8:7a:c3:f5:8c:7d:02:0c:2c:d8:36:c9:4e:16:c3:3d:43:
         1b:af:c2:88:cc:73:7c:49:c0:a1:10:87:6e:ce:28:87:51:68:
         da:ad:36:ab
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6VR92gmFN59tUTwmQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDcyMjEyMDg0NVoXDTI2MTAyMDEyMDg0NVowLzEtMCsGA1UEAxMk
Y2E3NDU4ODItMzRkOS00YmI2LWEyNGItZWI3OGU0MTI1OTFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnl2N7as4muougetMcuiLuSDvPc4R7PqsGTrd
6ehcL5UpRWRSIg/V8UiBLEJi0IwWCYFt9pJsWf7OH55W5MbnecOs9222T1c4JoUr
1XJ8aPIkjZlTYxBoP1q6VvelBaJkfZ3nUoXuTfXES1ajIX9ju99ybFGbobMs1asb
Nzn4Y9tCnCQrslkkGF5hceDrdxKuc66fRdwcvYQdt0S/DEu5E+pw3gJiv12aTG8C
fHLqMCZ132ifUaf/t8AOMubUJDazaqV/8CFjIQDF65Vo73xO0q5/2dlNDwyA7lzZ
FAtP4uedTlcJjq5jcdZ1bnXGYFJsB1hxG4G2hxWP4SzWm/a8+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBP0HMbH51xcqD6aw5LiYXViF0VZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYzRhYjM1ZDYtNjRhMS0z
ZjY1LTg1YmItZjJiYWY0ODdiNDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQVbHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIj3o6KdE+kW6vwFOj/whodxBFEj5nahcjxVYk4No408fo4OSz4eoAcj
zwOjVTh1nqMqgNDq+lETkE8rUG6dtn684KonfwzRdWSK0hj+yg4DyiS7JPBG2c/h
RPZWJbfNV5hfMPbEajj6rN/0F6pTjq0rVKXaGS0mOyaYYaF5h7h33kiOrcxdHOOf
KKpbD56JdrOXxMkQAVxF9UwdM3CZ9SQ5+7u+naFh+crHRDQSvSUWu7F3Z+bzh1iy
oCDSGXmps1/u/4i6QKAffwgpKRsqKdMQxZ9PToY/uvS4esP1jH0CDCzYNslOFsM9
QxuvwojMc3xJwKEQh27OKIdRaNqtNqs=
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:48:34 2026 by rpki-client