Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e2aff369-bb87-32e3-8a12-c2d6d0830793.roa
File:                     e2aff369-bb87-32e3-8a12-c2d6d0830793.roa (raw, json)
Hash identifier:          oYKmaX/TWqHYqkkUcTkZ91esQuMb7snwhOJdUdDfO/I=
Subject key identifier:   F4:52:6E:4A:7D:F5:17:BC:B9:C2:FE:72:DE:A9:8D:3C:FD:04:B7:B8
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F498C07256DF119B26CA19280
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e2aff369-bb87-32e3-8a12-c2d6d0830793.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     211415
IP address blocks:        64.204.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8c:07:25:6d:f1:19:b2:6c:a1:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=5824322f-0754-48af-baad-4819b9f280ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a8:ff:37:25:a5:51:f7:0a:6d:c7:1b:ca:19:
                    4a:fc:2a:b1:4d:46:e3:5d:e9:4e:3c:9b:c3:a9:47:
                    1d:0f:b7:2d:a9:14:f0:90:42:05:c9:7e:06:43:c2:
                    bf:98:3c:f2:14:6a:97:8d:ce:a8:44:66:5b:44:9c:
                    0c:ae:38:93:bc:e3:0e:e2:ca:7d:94:10:7f:02:91:
                    3a:08:39:f8:53:4a:80:47:be:42:23:62:91:4b:fa:
                    06:89:f0:ef:df:08:ab:c4:e5:3b:52:72:ac:6d:bc:
                    44:b7:a0:40:58:b5:41:11:96:51:b9:38:0c:1c:76:
                    a8:b0:0c:87:c6:18:23:86:70:cc:34:16:71:25:97:
                    39:55:a5:37:0f:39:2f:77:28:38:98:54:13:90:d1:
                    1a:f3:49:32:e9:61:09:10:68:1f:ff:ea:b9:50:6c:
                    71:bc:ba:26:43:fa:0e:0b:9b:ef:bc:0a:83:0f:c3:
                    97:be:4c:91:33:2a:ec:78:65:ec:4d:1f:a7:cf:36:
                    5a:f7:bd:41:00:33:a1:5d:fb:de:72:05:a8:0d:28:
                    d8:84:e1:fe:7f:cd:95:b2:f1:90:6c:06:66:ac:ce:
                    63:3e:89:27:1f:a3:f1:d3:e7:6e:9d:ef:a8:53:7d:
                    a8:ef:00:ac:b3:b8:4a:2e:73:2d:f0:f6:eb:04:11:
                    f8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:52:6E:4A:7D:F5:17:BC:B9:C2:FE:72:DE:A9:8D:3C:FD:04:B7:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e2aff369-bb87-32e3-8a12-c2d6d0830793.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.204.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:6a:5a:66:68:c7:85:1a:d3:0a:ca:bb:b7:39:a8:64:bb:b2:
         e1:9b:b9:a5:c5:35:b8:0c:4e:ae:49:62:01:f3:b7:cc:1e:ae:
         e2:04:04:0e:3e:d9:27:17:25:2a:83:f4:fd:24:ab:78:90:9e:
         54:fc:c0:e4:56:4e:26:b9:e0:82:0d:11:02:dc:cf:d4:d6:b1:
         71:62:60:38:a8:06:2d:e6:3b:2b:db:39:46:77:35:3a:47:69:
         8c:38:82:d3:ff:7f:bb:61:54:59:33:fc:1f:5e:08:bd:15:f6:
         03:d4:9b:15:58:ed:69:33:93:93:5c:8a:5b:57:d1:91:3b:d0:
         c2:1c:da:4c:c6:d9:ed:36:7e:db:da:bd:3f:ac:4a:c8:ce:ea:
         31:2e:75:dc:1d:da:9a:1a:cb:b1:c1:63:a8:3e:8f:c0:9a:a6:
         bf:74:3a:4c:c9:d8:95:e1:d3:f1:93:33:96:e4:9c:15:d1:11:
         19:76:71:46:2f:4a:55:49:23:73:5b:9b:7f:af:3f:c7:f9:e9:
         94:57:ab:cc:fb:80:1c:30:d7:95:67:1f:b4:9c:42:be:65:08:
         93:0a:4e:08:63:de:4d:84:c6:ae:fb:6b:63:80:43:de:55:36:
         dc:18:54:0e:65:96:08:04:69:cc:c9:82:e1:91:31:f2:ff:b4:
         7e:e6:07:b2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JjAclbfEZsmyhkoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NTgyNDMyMmYtMDc1NC00OGFmLWJhYWQtNDgxOWI5ZjI4MGFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6j/NyWlUfcKbccbyhlK/CqxTUbjXelOPJvD
qUcdD7ctqRTwkEIFyX4GQ8K/mDzyFGqXjc6oRGZbRJwMrjiTvOMO4sp9lBB/ApE6
CDn4U0qAR75CI2KRS/oGifDv3wirxOU7UnKsbbxEt6BAWLVBEZZRuTgMHHaosAyH
xhgjhnDMNBZxJZc5VaU3Dzkvdyg4mFQTkNEa80ky6WEJEGgf/+q5UGxxvLomQ/oO
C5vvvAqDD8OXvkyRMyrseGXsTR+nzzZa971BADOhXfvecgWoDSjYhOH+f82VsvGQ
bAZmrM5jPoknH6Px0+dune+oU32o7wCss7hKLnMt8PbrBBH4XwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPRSbkp99Re8ucL+ct6pjTz9BLe4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZTJhZmYzNjktYmI4Ny0z
MmUzLThhMTItYzJkNmQwODMwNzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMx/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABpqWmZox4Ua0wrKu7c5qGS7suGbuaXFNbgMTq5JYgHzt8weruIEBA4+
2ScXJSqD9P0kq3iQnlT8wORWTia54IINEQLcz9TWsXFiYDioBi3mOyvbOUZ3NTpH
aYw4gtP/f7thVFkz/B9eCL0V9gPUmxVY7Wkzk5NciltX0ZE70MIc2kzG2e02ftva
vT+sSsjO6jEuddwd2poay7HBY6g+j8Capr90OkzJ2JXh0/GTM5bknBXRERl2cUYv
SlVJI3Nbm3+vP8f56ZRXq8z7gBww15VnH7ScQr5lCJMKTghj3k2Exq77a2OAQ95V
NtwYVA5llggEaczJguGRMfL/tH7mB7I=
-----END CERTIFICATE-----
Generated at Tue Sep 29 20:19:16 2026 by rpki-client