Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ca0f18ca-4189-45e1-9c58-09f2daa808fa/27622481-583a-3bf7-9a8b-7ffbe7bbebef.roa
File:                     27622481-583a-3bf7-9a8b-7ffbe7bbebef.roa (raw, json)
Hash identifier:          eOzVwFEfwjOy2iKkHrj/DCTqQHme0i+NPhhlaycvUDo=
Subject key identifier:   4C:58:6D:9C:E0:99:CA:E0:90:D0:86:AE:DC:14:17:FF:4F:C9:39:2E
Certificate issuer:       /CN=ca0f18ca-4189-45e1-9c58-09f2daa808fa
Certificate serial:       010D0C9F4328584DC135B249493693F522775C00
Authority key identifier: 9F:3F:D8:F6:54:55:42:C4:0F:23:03:9F:C0:84:40:6C:D6:01:DF:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ca0f18ca-4189-45e1-9c58-09f2daa808fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ca0f18ca-4189-45e1-9c58-09f2daa808fa/27622481-583a-3bf7-9a8b-7ffbe7bbebef.roa
Signing time:             Thu 07 May 2026 13:00:31 +0000
ROA not before:           Thu 07 May 2026 13:00:31 +0000
ROA not after:            Wed 05 Aug 2026 13:00:31 +0000
asID:                     398211
IP address blocks:        64.239.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ca0f18ca-4189-45e1-9c58-09f2daa808fa/ca0f18ca-4189-45e1-9c58-09f2daa808fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ca0f18ca-4189-45e1-9c58-09f2daa808fa/ca0f18ca-4189-45e1-9c58-09f2daa808fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ca0f18ca-4189-45e1-9c58-09f2daa808fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c1:35:b2:49:49:36:93:f5:22:77:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca0f18ca-4189-45e1-9c58-09f2daa808fa
        Validity
            Not Before: May  7 13:00:31 2026 GMT
            Not After : Aug  5 13:00:31 2026 GMT
        Subject: CN=5e51425c-acc2-4eb2-9efe-23a4c679c1f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ed:b3:0b:2a:ef:a5:e0:ba:fa:09:e1:a5:2c:
                    87:a8:fd:1e:98:bd:42:ab:bd:c8:bc:05:1c:0a:f8:
                    92:02:7e:ac:59:aa:f6:96:4e:63:4b:1d:0c:7c:ee:
                    54:98:86:07:b1:d0:9c:21:6b:a0:14:dc:7b:79:88:
                    e9:d7:f9:58:5f:6b:39:02:fa:e5:81:75:cb:b5:2c:
                    31:dd:8f:c5:c5:4f:43:fd:a0:6a:91:2f:fb:ab:79:
                    7c:48:5f:98:77:7a:50:50:72:57:1d:51:86:6d:53:
                    fc:f0:54:ee:af:9b:1a:2a:bf:96:c2:98:56:a8:15:
                    c6:ff:59:c4:c5:3b:39:a8:75:60:92:a1:bc:26:ca:
                    9c:e5:16:92:ad:67:e8:e0:4c:17:48:d7:6b:2c:13:
                    67:06:c9:d1:ab:5b:a1:e1:14:bb:1d:ed:b2:1e:5d:
                    03:db:5b:69:ea:07:ab:82:3d:31:18:6d:3f:fd:3a:
                    43:00:6a:cd:84:d2:ab:c7:b1:1d:e0:4d:73:ab:97:
                    2e:bb:a3:bc:9a:39:8d:ea:56:44:40:2e:0c:79:10:
                    90:6f:a4:6f:ef:1c:10:d9:5c:41:44:aa:36:a9:10:
                    56:b6:b1:80:dc:79:84:bd:24:82:d2:2f:43:80:71:
                    43:b5:4d:c7:cd:69:66:9e:ce:c7:6d:b6:e4:3f:7d:
                    86:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:58:6D:9C:E0:99:CA:E0:90:D0:86:AE:DC:14:17:FF:4F:C9:39:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ca0f18ca-4189-45e1-9c58-09f2daa808fa/27622481-583a-3bf7-9a8b-7ffbe7bbebef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ca0f18ca-4189-45e1-9c58-09f2daa808fa/ca0f18ca-4189-45e1-9c58-09f2daa808fa.crl

            X509v3 Authority Key Identifier:
                keyid:9F:3F:D8:F6:54:55:42:C4:0F:23:03:9F:C0:84:40:6C:D6:01:DF:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ca0f18ca-4189-45e1-9c58-09f2daa808fa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.239.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:d0:1d:5d:f1:a7:e9:f7:1b:00:ec:e5:22:12:a2:f2:58:1e:
         61:9c:2b:6a:0b:27:b2:f0:4a:3b:a4:e5:c3:74:7a:93:d6:5b:
         9c:a1:61:86:93:c6:8b:5d:86:11:27:f3:e7:50:74:e7:cd:ac:
         2f:22:b1:7e:e5:03:63:10:ab:9c:db:22:0c:65:05:08:0c:65:
         44:a0:d9:21:46:ad:d6:d6:df:39:38:e0:95:4e:24:ca:f8:02:
         2a:22:2b:16:89:d4:1c:c6:fe:7a:36:47:7f:08:b0:9e:70:c9:
         58:51:16:cd:6b:41:b7:78:db:d1:9c:ef:28:79:5e:31:78:59:
         bc:7b:6f:ba:78:f2:af:2c:ee:82:77:a5:e8:28:a7:72:e1:09:
         68:9e:15:f9:0a:60:d4:0d:1f:85:9b:3c:fa:59:7a:2a:57:0e:
         89:2a:86:05:fa:36:e4:3a:a4:3a:34:a5:a4:69:6e:5b:54:b1:
         e9:f2:b8:d1:c8:52:f2:5b:ac:be:1d:2a:9d:2e:17:45:1e:57:
         ec:b5:ed:5b:a4:8e:7d:d3:42:fa:e4:06:1b:a9:40:be:f7:c1:
         e0:b3:c4:48:07:8f:ff:6d:47:27:0c:fb:32:78:c5:2f:61:56:
         4b:8a:7a:e5:3f:06:22:ec:ea:b8:43:28:b9:19:b0:02:92:37:
         95:01:93:89
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3BNbJJSTaT9SJ3XAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2EwZjE4Y2EtNDE4OS00NWUxLTljNTgtMDlmMmRhYTgw
OGZhMB4XDTI2MDUwNzEzMDAzMVoXDTI2MDgwNTEzMDAzMVowLzEtMCsGA1UEAxMk
NWU1MTQyNWMtYWNjMi00ZWIyLTllZmUtMjNhNGM2NzljMWYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3u2zCyrvpeC6+gnhpSyHqP0emL1Cq73IvAUc
CviSAn6sWar2lk5jSx0MfO5UmIYHsdCcIWugFNx7eYjp1/lYX2s5AvrlgXXLtSwx
3Y/FxU9D/aBqkS/7q3l8SF+Yd3pQUHJXHVGGbVP88FTur5saKr+WwphWqBXG/1nE
xTs5qHVgkqG8Jsqc5RaSrWfo4EwXSNdrLBNnBsnRq1uh4RS7He2yHl0D21tp6ger
gj0xGG0//TpDAGrNhNKrx7Ed4E1zq5cuu6O8mjmN6lZEQC4MeRCQb6Rv7xwQ2VxB
RKo2qRBWtrGA3HmEvSSC0i9DgHFDtU3HzWlmns7HbbbkP32GeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFExYbZzgmcrgkNCGrtwUF/9PyTkuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jYTBm
MThjYS00MTg5LTQ1ZTEtOWM1OC0wOWYyZGFhODA4ZmEvMjc2MjI0ODEtNTgzYS0z
YmY3LTlhOGItN2ZmYmU3YmJlYmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvY2EwZjE4Y2EtNDE4OS00NWUxLTlj
NTgtMDlmMmRhYTgwOGZhL2NhMGYxOGNhLTQxODktNDVlMS05YzU4LTA5ZjJkYWE4
MDhmYS5jcmwwHwYDVR0jBBgwFoAUnz/Y9lRVQsQPIwOfwIRAbNYB38YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jYTBmMThjYS00MTg5LTQ1ZTEtOWM1OC0wOWYy
ZGFhODA4ZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQO8QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADbQHV3xp+n3GwDs5SISovJYHmGcK2oLJ7LwSjuk5cN0epPWW5yhYYaT
xotdhhEn8+dQdOfNrC8isX7lA2MQq5zbIgxlBQgMZUSg2SFGrdbW3zk44JVOJMr4
AioiKxaJ1BzG/no2R38IsJ5wyVhRFs1rQbd429Gc7yh5XjF4Wbx7b7p48q8s7oJ3
pegop3LhCWieFfkKYNQNH4WbPPpZeipXDokqhgX6NuQ6pDo0paRpbltUsenyuNHI
UvJbrL4dKp0uF0UeV+y17Vukjn3TQvrkBhupQL73weCzxEgHj/9tRycM+zJ4xS9h
VkuKeuU/BiLs6rhDKLkZsAKSN5UBk4k=
-----END CERTIFICATE-----
Generated at Wed May 13 06:07:58 2026 by rpki-client