Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/805a6386-9e3a-3c39-9838-a4f1d371b171.roa
File:                     805a6386-9e3a-3c39-9838-a4f1d371b171.roa (raw, json)
Hash identifier:          kIok3V99lFicYFMEeoicyCTCUJQ5zgwVqgrj6RGcWY8=
Subject key identifier:   06:40:E8:68:A9:A7:24:68:7E:20:BE:F4:7C:77:DB:B1:48:25:61:FE
Certificate issuer:       /CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2
Certificate serial:       010D0C9F4328584D3F64D056F3CB67EC29DD5680
Authority key identifier: AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/805a6386-9e3a-3c39-9838-a4f1d371b171.roa
Signing time:             Sun 22 Mar 2026 01:00:32 +0000
ROA not before:           Sun 22 Mar 2026 01:00:32 +0000
ROA not after:            Sat 20 Jun 2026 01:00:32 +0000
asID:                     62943
IP address blocks:        64.111.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3f:64:d0:56:f3:cb:67:ec:29:dd:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2
        Validity
            Not Before: Mar 22 01:00:32 2026 GMT
            Not After : Jun 20 01:00:32 2026 GMT
        Subject: CN=f1320f88-e5d7-4223-9e64-d9c0addaec35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ce:3f:86:e7:8e:27:e9:ec:8f:5a:97:8e:dd:
                    e2:ba:c9:3a:ac:bb:40:ec:0e:e3:1d:93:a0:4e:49:
                    89:5d:af:c3:62:35:fe:b7:35:41:fc:46:2e:12:8b:
                    01:6f:6b:5d:50:f9:27:3b:89:86:4e:ec:6c:36:07:
                    0e:ac:79:2b:a6:a9:a0:60:29:75:4b:7c:13:a7:86:
                    95:ac:31:bd:e0:b1:6a:39:6a:f6:7a:27:3d:55:6d:
                    37:40:d1:ba:b1:c8:0c:0b:cf:d0:29:d7:b8:40:14:
                    0d:dd:27:92:c7:83:c6:e3:2a:7e:b4:d6:c2:2d:fd:
                    b8:56:ec:f2:f8:cc:a8:c3:55:f0:a7:58:58:04:ab:
                    f2:27:3f:30:4a:46:01:2b:7e:aa:8e:db:cb:a8:ed:
                    e7:d2:63:a5:32:fe:4f:c8:8f:06:ae:1d:88:c9:0c:
                    78:b6:84:19:e9:bd:62:07:07:81:41:53:70:52:90:
                    2f:9a:31:4e:47:08:7f:ff:82:e1:b3:a9:8e:87:35:
                    83:20:8a:6a:82:c3:b1:18:5f:f3:7d:26:0c:fe:c9:
                    d2:a2:af:16:d7:47:7f:4d:e5:d6:27:7e:f7:06:5d:
                    d6:82:9b:4e:7f:17:8a:34:43:d1:cc:b4:c4:dd:68:
                    f4:5d:30:e2:f3:15:7b:37:cd:bb:6e:7c:b8:04:5c:
                    4b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:40:E8:68:A9:A7:24:68:7E:20:BE:F4:7C:77:DB:B1:48:25:61:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/805a6386-9e3a-3c39-9838-a4f1d371b171.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl

            X509v3 Authority Key Identifier:
                keyid:AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.111.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:d0:39:27:d4:ee:cd:42:15:07:de:df:45:c3:3b:e0:d7:57:
         d9:89:6d:00:0f:09:1a:39:7b:02:cb:3a:82:17:2c:f2:0a:a7:
         f7:b6:98:a7:f1:7e:8d:41:74:45:f8:59:20:c4:0d:88:f8:06:
         87:5f:a9:c3:1c:22:c0:52:eb:35:61:e3:b6:72:c2:bd:d4:33:
         d6:9e:a8:2a:85:b7:77:7c:fa:a6:48:2c:85:75:0d:70:1a:26:
         d9:09:a8:5b:63:b5:e1:54:e5:7d:21:5f:16:f7:c0:61:48:54:
         ee:56:83:7f:7f:09:98:0a:14:43:cb:a2:dc:d1:c2:00:07:62:
         91:d0:ae:57:2d:88:cd:3e:79:0c:e3:69:93:b2:f6:46:b8:03:
         80:93:1f:27:46:1d:39:31:6e:41:90:d9:2b:59:98:b7:ce:8f:
         bb:82:7e:87:db:73:e2:36:97:c4:ec:e5:fc:43:6d:bd:b1:35:
         0a:1a:8e:09:61:06:8c:37:cb:99:cc:d6:b4:8b:fc:da:f1:62:
         3a:66:de:2a:b3:fb:14:34:20:61:65:66:a9:74:ed:c7:04:35:
         b2:ad:91:47:70:b9:c3:8d:3a:27:ff:a7:93:19:e4:c0:0c:26:
         d6:fd:b5:50:f0:39:05:cf:51:2d:f9:e8:68:9c:1a:3b:95:d7:
         e4:14:5d:a2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZNBW88tn7CndVoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjdlNDM1N2UtMTcwZi00ZmI5LTg4NDktM2M4NDI1N2Yy
YWQyMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk
ZjEzMjBmODgtZTVkNy00MjIzLTllNjQtZDljMGFkZGFlYzM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2M4/hueOJ+nsj1qXjt3iusk6rLtA7A7jHZOg
TkmJXa/DYjX+tzVB/EYuEosBb2tdUPknO4mGTuxsNgcOrHkrpqmgYCl1S3wTp4aV
rDG94LFqOWr2eic9VW03QNG6scgMC8/QKde4QBQN3SeSx4PG4yp+tNbCLf24Vuzy
+Myow1Xwp1hYBKvyJz8wSkYBK36qjtvLqO3n0mOlMv5PyI8Grh2IyQx4toQZ6b1i
BweBQVNwUpAvmjFORwh//4Lhs6mOhzWDIIpqgsOxGF/zfSYM/snSoq8W10d/TeXW
J373Bl3WgptOfxeKNEPRzLTE3Wj0XTDi8xV7N827bny4BFxLYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAZA6GippyRofiC+9Hx327FIJWH+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0
MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0MjU3ZjJhZDIvODA1YTYzODYtOWUzYS0z
YzM5LTk4MzgtYTRmMWQzNzFiMTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYjdlNDM1N2UtMTcwZi00ZmI5LTg4
NDktM2M4NDI1N2YyYWQyL2I3ZTQzNTdlLTE3MGYtNGZiOS04ODQ5LTNjODQyNTdm
MmFkMi5jcmwwHwYDVR0jBBgwFoAUqvQvX1cKAqH2YCqWDn5tkZT8Nh4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0
MjU3ZjJhZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQG8oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFLQOSfU7s1CFQfe30XDO+DXV9mJbQAPCRo5ewLLOoIXLPIKp/e2mKfx
fo1BdEX4WSDEDYj4BodfqcMcIsBS6zVh47Zywr3UM9aeqCqFt3d8+qZILIV1DXAa
JtkJqFtjteFU5X0hXxb3wGFIVO5Wg39/CZgKFEPLotzRwgAHYpHQrlctiM0+eQzj
aZOy9ka4A4CTHydGHTkxbkGQ2StZmLfOj7uCfofbc+I2l8Ts5fxDbb2xNQoajglh
Bow3y5nM1rSL/NrxYjpm3iqz+xQ0IGFlZql07ccENbKtkUdwucONOif/p5MZ5MAM
Jtb9tVDwOQXPUS356GicGjuV1+QUXaI=
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:44:33 2026 by rpki-client