Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/2eff86d5-4a1d-30f9-aea6-6fa923db9776.roa
File:                     2eff86d5-4a1d-30f9-aea6-6fa923db9776.roa (raw, json)
Hash identifier:          2wFam0MWzHZW0Z6dc4UCu1HEV3ax6VlFOsLtdETwZXs=
Subject key identifier:   CB:1D:BF:BB:DE:DB:64:2B:E1:71:B5:9C:99:4E:20:94:9E:AE:6C:F0
Certificate issuer:       /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
Certificate serial:       010D0C9F4328584D80FFF37EE000C039352DB9C0
Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/2eff86d5-4a1d-30f9-aea6-6fa923db9776.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     140952
IP address blocks:        64.145.90.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:80:ff:f3:7e:e0:00:c0:39:35:2d:b9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=f2f7e270-b1b2-48d2-824a-86aefa1fa628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:23:a5:9e:16:4f:6f:45:ea:58:6d:64:21:87:
                    55:f9:56:0f:71:c4:44:c8:3c:29:e4:ee:0a:53:0b:
                    07:1c:34:b8:97:34:b8:eb:2c:24:99:5a:2f:c0:83:
                    ed:14:01:bd:55:56:4a:55:40:b5:fb:44:51:8a:21:
                    15:20:7c:38:77:ef:55:38:e5:91:76:50:35:04:e5:
                    bc:8e:4e:e1:d1:e2:e5:1c:99:61:ef:72:dd:55:b0:
                    09:bd:f1:bf:4b:fe:78:b0:69:65:63:20:46:cc:62:
                    cb:a6:e8:3d:7b:9b:4f:c3:e3:8e:61:7f:a4:8b:b9:
                    c6:a2:0b:38:78:50:2f:3d:4e:f7:77:7f:2f:f2:56:
                    a9:e5:ee:74:25:02:99:e5:1e:d1:87:e3:7d:37:8a:
                    b4:aa:7a:5d:c7:09:0f:59:57:9c:65:07:24:ea:bc:
                    00:8e:87:1d:92:dd:3d:58:26:93:fa:da:b4:a4:6f:
                    e2:a3:01:e5:eb:9c:56:7c:39:c4:6d:ce:bc:f6:b5:
                    d2:32:c5:14:fa:cd:d4:0d:4b:e7:ee:28:82:45:8a:
                    e1:e2:55:ec:1a:9d:91:2a:a2:b5:5b:f8:0f:b3:d2:
                    2b:b0:b2:cd:b5:d8:1c:dd:47:eb:6d:55:d2:00:85:
                    a4:b8:0f:2a:40:cd:c1:07:d2:86:f2:21:7a:32:c6:
                    c6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:1D:BF:BB:DE:DB:64:2B:E1:71:B5:9C:99:4E:20:94:9E:AE:6C:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/2eff86d5-4a1d-30f9-aea6-6fa923db9776.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl

            X509v3 Authority Key Identifier:
                keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.145.90.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:72:2b:75:be:c2:81:88:c3:ac:a7:6f:53:dd:92:15:15:98:
         01:23:31:d7:ca:ba:40:4f:a9:53:0c:7e:19:83:8f:05:5a:35:
         7c:8a:ff:b8:0e:1c:9e:4c:4a:0f:23:a7:52:89:dd:9c:a5:69:
         9d:cc:d3:8c:24:59:fa:a5:bb:ad:df:37:db:34:d5:46:64:78:
         9f:00:f8:37:32:72:a9:d5:f4:48:d4:83:89:f9:f9:0f:3c:81:
         3c:b7:b3:51:64:de:c4:db:07:3c:23:a1:46:77:3f:62:75:b8:
         a0:8e:e9:e5:32:f7:9e:c0:2c:4f:3a:90:90:dd:b7:f6:8d:f3:
         0b:27:8d:4c:67:1f:e0:87:31:df:ec:3c:e0:b3:37:0a:a0:98:
         ba:fc:a1:ed:33:e7:ba:e3:35:ce:d8:75:7f:fc:83:3c:4e:53:
         1a:7f:05:3a:35:a6:74:af:13:ce:e8:14:83:31:19:58:bd:b2:
         84:cc:3f:ea:86:d4:80:75:15:6a:7d:fc:58:57:5f:28:87:53:
         26:06:66:b2:7a:da:c4:7f:db:bb:dd:bf:67:8d:26:d0:06:ba:
         48:a9:b5:f1:f2:c7:09:a1:eb:0b:08:ec:97:65:a5:8b:46:3b:
         da:33:7f:78:b8:9d:86:22:c9:fb:bf:5b:41:6c:90:96:8d:69:
         42:25:4a:9d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2A//N+4ADAOTUtucAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWQyZDFiOTgtNTEyMi00ZDAzLTg2ZjUtMGRjOGQ2MzIz
OGFhMB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk
ZjJmN2UyNzAtYjFiMi00OGQyLTgyNGEtODZhZWZhMWZhNjI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyOlnhZPb0XqWG1kIYdV+VYPccREyDwp5O4K
UwsHHDS4lzS46ywkmVovwIPtFAG9VVZKVUC1+0RRiiEVIHw4d+9VOOWRdlA1BOW8
jk7h0eLlHJlh73LdVbAJvfG/S/54sGllYyBGzGLLpug9e5tPw+OOYX+ki7nGogs4
eFAvPU73d38v8lap5e50JQKZ5R7Rh+N9N4q0qnpdxwkPWVecZQck6rwAjocdkt09
WCaT+tq0pG/iowHl65xWfDnEbc689rXSMsUU+s3UDUvn7iiCRYrh4lXsGp2RKqK1
W/gPs9IrsLLNtdgc3UfrbVXSAIWkuA8qQM3BB9KG8iF6MsbGUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMsdv7ve22Qr4XG1nJlOIJSermzwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJk
MWI5OC01MTIyLTRkMDMtODZmNS0wZGM4ZDYzMjM4YWEvMmVmZjg2ZDUtNGExZC0z
MGY5LWFlYTYtNmZhOTIzZGI5Nzc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyZDFiOTgtNTEyMi00ZDAzLTg2
ZjUtMGRjOGQ2MzIzOGFhLzFkMmQxYjk4LTUxMjItNGQwMy04NmY1LTBkYzhkNjMy
MzhhYS5jcmwwHwYDVR0jBBgwFoAUkS7TWanq9XfcNdgKY6T/wq3OaCMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJkMWI5OC01MTIyLTRkMDMtODZmNS0wZGM4
ZDYzMjM4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQJFaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJRyK3W+woGIw6ynb1PdkhUVmAEjMdfKukBPqVMMfhmDjwVaNXyK/7gO
HJ5MSg8jp1KJ3ZylaZ3M04wkWfqlu63fN9s01UZkeJ8A+DcycqnV9EjUg4n5+Q88
gTy3s1Fk3sTbBzwjoUZ3P2J1uKCO6eUy957ALE86kJDdt/aN8wsnjUxnH+CHMd/s
POCzNwqgmLr8oe0z57rjNc7YdX/8gzxOUxp/BTo1pnSvE87oFIMxGVi9soTMP+qG
1IB1FWp9/FhXXyiHUyYGZrJ62sR/27vdv2eNJtAGukiptfHyxwmh6wsI7JdlpYtG
O9ozf3i4nYYiyfu/W0FskJaNaUIlSp0=
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:17:17 2026 by rpki-client