Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/064102c9-be66-3170-abfb-53bd401a99ff.roa
File:                     064102c9-be66-3170-abfb-53bd401a99ff.roa (raw, json)
Hash identifier:          8bnh8cU3zggOL2PmP7lKCA+oV252KItK2cInRCdJbbc=
Subject key identifier:   93:4B:FA:B0:67:85:0B:E8:DB:00:DD:44:0E:02:AB:72:CF:80:5D:4A
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CAEAE7F7C8BC8A37935600
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/064102c9-be66-3170-abfb-53bd401a99ff.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        97.87.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:ea:e7:f7:c8:bc:8a:37:93:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=a09bc791-8d31-4730-a4cb-42ef06b073be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:15:43:ff:89:7b:02:56:6b:9c:b2:02:42:37:
                    3a:7b:c5:06:09:04:13:ba:3c:71:e4:64:00:0e:73:
                    b2:dd:7b:c9:1c:08:2e:e6:8e:72:67:04:b9:d6:49:
                    79:3d:6f:a8:0f:a3:c2:2a:e2:29:78:9c:c6:91:e6:
                    c0:15:b2:fa:78:06:c9:33:ce:de:66:cd:49:90:25:
                    d1:e4:47:92:b1:84:db:63:df:8a:a4:d1:90:d5:aa:
                    ec:be:33:38:79:80:b5:47:bd:3a:97:bb:9e:6c:8a:
                    a5:52:0c:f4:46:b3:ae:9e:80:98:97:6b:a5:e6:83:
                    24:5e:02:c3:fa:4b:d0:e3:b4:80:46:02:f1:45:df:
                    ef:30:57:81:1d:7c:b6:6e:64:7a:a9:ee:41:15:2f:
                    e5:dd:87:d3:c7:f1:7e:d3:e8:88:1d:cc:f8:df:f7:
                    7e:21:d3:d3:8d:b6:20:3e:33:39:e6:6a:d3:ff:67:
                    25:f4:9d:02:88:27:e8:97:35:da:04:4e:77:10:c4:
                    9f:c4:45:3c:66:8f:7e:09:c3:2c:4f:ee:e3:7b:c1:
                    76:a6:29:ef:c3:d0:d6:83:20:38:d0:42:91:ac:6c:
                    b9:23:02:ac:99:6b:87:25:90:9b:c5:a8:68:9d:9f:
                    3b:ba:1b:43:06:31:c3:08:4f:4b:12:38:56:34:f8:
                    d5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:4B:FA:B0:67:85:0B:E8:DB:00:DD:44:0E:02:AB:72:CF:80:5D:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/064102c9-be66-3170-abfb-53bd401a99ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.87.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:58:1c:09:a3:cf:e8:23:b5:f0:03:8e:0c:b8:1b:6e:67:8f:
         63:09:70:cf:b9:39:65:6d:78:e5:35:2c:18:f0:33:c9:b9:41:
         bd:7c:58:d5:1c:82:d9:23:25:9e:9d:ae:b5:bb:b3:58:c6:10:
         28:db:58:93:c8:32:b3:c5:a2:5e:a8:a5:ee:b2:87:68:03:8d:
         4d:db:f7:9d:5c:6a:0e:3c:b3:45:3d:ef:b8:ea:38:d9:a8:0e:
         1e:22:90:ac:51:6a:bb:2b:3b:3a:3c:ea:5d:19:a1:34:41:43:
         df:29:0a:3f:31:5c:5d:6a:2c:18:90:03:ca:39:d3:cd:e8:a8:
         ac:81:f4:42:f4:4c:00:f7:7c:91:4c:5e:01:80:33:19:ed:35:
         0e:f4:49:47:d8:88:66:6f:6a:4d:49:71:7c:76:07:c1:27:3f:
         c3:5b:ce:9e:e3:90:47:63:1b:83:39:f5:3b:da:79:c0:de:57:
         08:8a:ff:07:ac:19:ce:b2:0c:17:e3:bb:2d:a6:2a:06:62:9c:
         db:03:6b:50:4e:a9:80:08:58:c9:ef:0f:34:80:3c:f1:e5:c0:
         2d:9f:57:1b:bf:02:f3:a3:f1:60:1b:f5:e2:cb:d3:7c:29:bc:
         89:c2:9d:b7:06:f8:36:f8:4b:b0:df:ff:54:70:a5:94:a3:7e:
         fd:33:b9:27
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ayurn98i8ijeTVgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk
YTA5YmM3OTEtOGQzMS00NzMwLWE0Y2ItNDJlZjA2YjA3M2JlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhVD/4l7AlZrnLICQjc6e8UGCQQTujxx5GQA
DnOy3XvJHAgu5o5yZwS51kl5PW+oD6PCKuIpeJzGkebAFbL6eAbJM87eZs1JkCXR
5EeSsYTbY9+KpNGQ1arsvjM4eYC1R706l7uebIqlUgz0RrOunoCYl2ul5oMkXgLD
+kvQ47SARgLxRd/vMFeBHXy2bmR6qe5BFS/l3YfTx/F+0+iIHcz43/d+IdPTjbYg
PjM55mrT/2cl9J0CiCfolzXaBE53EMSfxEU8Zo9+CcMsT+7je8F2pinvw9DWgyA4
0EKRrGy5IwKsmWuHJZCbxahonZ87uhtDBjHDCE9LEjhWNPjV6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJNL+rBnhQvo2wDdRA4Cq3LPgF1KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMDY0MTAyYzktYmU2Ni0z
MTcwLWFiZmItNTNiZDQwMWE5OWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYVfeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD9YHAmjz+gjtfADjgy4G25nj2MJcM+5OWVteOU1LBjwM8m5Qb18WNUc
gtkjJZ6drrW7s1jGECjbWJPIMrPFol6ope6yh2gDjU3b951cag48s0U977jqONmo
Dh4ikKxRarsrOzo86l0ZoTRBQ98pCj8xXF1qLBiQA8o5083oqKyB9EL0TAD3fJFM
XgGAMxntNQ70SUfYiGZvak1JcXx2B8EnP8Nbzp7jkEdjG4M59TvaecDeVwiK/wes
Gc6yDBfjuy2mKgZinNsDa1BOqYAIWMnvDzSAPPHlwC2fVxu/AvOj8WAb9eLL03wp
vInCnbcG+Db4S7Df/1RwpZSjfv0zuSc=
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:52:04 2026 by rpki-client