Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/0327aa02-52d2-3d16-9336-4e4047d5dc35.roa
File:                     0327aa02-52d2-3d16-9336-4e4047d5dc35.roa (raw, json)
Hash identifier:          HUxwf+xu7NDVgn3Y2X8ma5Jm2TIA6iZ9n1UYTInz7XA=
Subject key identifier:   E9:A4:7C:E7:DA:53:3D:49:DF:D1:F0:4D:B5:28:EE:9A:6C:E4:48:D9
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584B970CED7F754C9A6987F35EC0
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/0327aa02-52d2-3d16-9336-4e4047d5dc35.roa
Signing time:             Tue 21 Oct 2025 01:00:31 +0000
ROA not before:           Tue 21 Oct 2025 01:00:31 +0000
ROA not after:            Mon 19 Jan 2026 02:00:31 +0000
asID:                     262287
IP address blocks:        64.64.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:97:0c:ed:7f:75:4c:9a:69:87:f3:5e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Oct 21 01:00:31 2025 GMT
            Not After : Jan 19 02:00:31 2026 GMT
        Subject: CN=c3975c8a-a3ea-47bc-8aab-f4da1c68ff9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:bb:26:df:da:95:b0:3f:a2:e1:f2:cd:09:b9:
                    eb:e5:c1:97:e4:e4:4d:b3:8c:52:91:d7:0d:3b:19:
                    24:22:44:41:55:44:ea:40:f2:5c:cf:f7:7a:65:2c:
                    b0:dc:20:f3:47:dc:6a:c0:82:3b:39:f4:3d:ef:51:
                    bc:17:d4:36:bd:fb:13:4e:81:cc:6f:4f:ee:3f:82:
                    05:e1:d0:43:c9:fa:7c:9d:dd:17:64:2a:89:6e:27:
                    17:3d:d5:0c:79:31:36:c3:a3:25:07:2f:64:4d:24:
                    68:48:79:7b:61:75:8c:10:35:8d:37:50:d1:88:8a:
                    56:10:2e:f1:de:c3:26:64:67:21:35:fd:00:7d:e9:
                    30:bd:3d:55:3d:89:f7:09:df:18:17:54:41:6e:0b:
                    f7:76:fe:6d:74:23:73:b7:8c:21:5b:85:f9:f7:74:
                    f7:35:03:a0:80:5c:4f:fa:f5:83:03:b1:ca:1b:d6:
                    69:0c:bd:55:43:be:ae:ba:a9:cc:09:90:a8:29:dd:
                    68:d9:7b:b1:39:a3:a7:bb:81:1b:00:5b:ed:fe:97:
                    a9:71:db:15:e3:16:41:18:62:78:d7:3b:62:06:ab:
                    62:d3:67:b9:38:5a:1a:3c:1f:a2:0c:fb:2f:c4:fc:
                    a5:6a:56:61:ef:46:eb:69:09:bd:ed:67:f9:be:63:
                    f5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:A4:7C:E7:DA:53:3D:49:DF:D1:F0:4D:B5:28:EE:9A:6C:E4:48:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/0327aa02-52d2-3d16-9336-4e4047d5dc35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.64.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:f8:c3:51:4a:4b:05:27:3c:bc:cb:1b:69:e5:83:01:df:3f:
         ee:7d:ea:96:51:b3:24:70:39:16:26:12:ad:6e:71:cb:f2:10:
         35:f2:fa:f4:46:ea:fd:6a:0e:4d:0f:da:ab:1f:2f:bf:23:84:
         80:4a:17:d7:6b:09:8e:54:de:fb:b1:41:be:49:b8:bb:b2:d4:
         fd:2d:27:0b:1f:dc:98:0a:dd:16:87:bc:a0:89:b4:6f:11:8d:
         a4:81:9c:d7:6b:68:4b:90:fa:8b:36:5e:e6:81:8f:69:86:61:
         70:47:fc:7f:57:58:71:da:08:c4:44:4c:b1:7b:70:59:37:e2:
         89:50:fc:b1:53:00:32:69:e3:9a:82:b9:1a:9d:91:ca:f3:1f:
         57:54:2a:0b:fe:7b:57:1f:52:77:73:6f:81:1e:2d:11:3c:49:
         4a:b7:69:15:32:90:ba:a3:b6:ec:5c:af:10:00:dc:15:b7:d3:
         68:9e:f1:b0:95:11:31:e3:e7:55:09:35:e8:6a:26:f4:ec:93:
         71:11:1f:15:99:26:0a:3b:17:68:6c:bb:67:63:d5:d2:df:f8:
         e6:c5:f0:7e:57:04:3d:5e:42:bf:e8:ad:3c:de:31:7a:e9:05:
         e4:ae:e9:59:79:bc:3a:55:3b:cf:b9:d5:3d:9e:dc:2b:f5:6e:
         7e:a1:2b:c7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDO1/dUyaaYfzXsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx
NzNhMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk
YzM5NzVjOGEtYTNlYS00N2JjLThhYWItZjRkYTFjNjhmZjllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbsm39qVsD+i4fLNCbnr5cGX5ORNs4xSkdcN
OxkkIkRBVUTqQPJcz/d6ZSyw3CDzR9xqwII7OfQ971G8F9Q2vfsTToHMb0/uP4IF
4dBDyfp8nd0XZCqJbicXPdUMeTE2w6MlBy9kTSRoSHl7YXWMEDWNN1DRiIpWEC7x
3sMmZGchNf0AfekwvT1VPYn3Cd8YF1RBbgv3dv5tdCNzt4whW4X593T3NQOggFxP
+vWDA7HKG9ZpDL1VQ76uuqnMCZCoKd1o2XuxOaOnu4EbAFvt/pepcdsV4xZBGGJ4
1ztiBqti02e5OFoaPB+iDPsvxPylalZh70braQm97Wf5vmP1CwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOmkfOfaUz1J39HwTbUo7pps5EjZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx
ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvMDMyN2FhMDItNTJkMi0z
ZDE2LTkzMzYtNGU0MDQ3ZDVkYzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh
M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm
MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk
MDFlZjE3M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQEB0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALH4w1FKSwUnPLzLG2nlgwHfP+596pZRsyRwORYmEq1uccvyEDXy+vRG
6v1qDk0P2qsfL78jhIBKF9drCY5U3vuxQb5JuLuy1P0tJwsf3JgK3RaHvKCJtG8R
jaSBnNdraEuQ+os2XuaBj2mGYXBH/H9XWHHaCMRETLF7cFk34olQ/LFTADJp45qC
uRqdkcrzH1dUKgv+e1cfUndzb4EeLRE8SUq3aRUykLqjtuxcrxAA3BW302ie8bCV
ETHj51UJNehqJvTsk3ERHxWZJgo7F2hsu2dj1dLf+ObF8H5XBD1eQr/orTzeMXrp
BeSu6Vl5vDpVO8+51T2e3Cv1bn6hK8c=
-----END CERTIFICATE-----
Generated at Tue Nov 4 12:38:28 2025 by rpki-client