Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/e319bb79-6d14-32cb-b3ab-63f3be9589a7.roa
File:                     e319bb79-6d14-32cb-b3ab-63f3be9589a7.roa (raw, json)
Hash identifier:          K+UvgIznvLafOROFkTDcLlMczatEZVqfqgSl+rUkMHA=
Subject key identifier:   F1:57:AC:07:45:70:96:42:6F:CF:28:70:B8:A1:32:89:04:A9:5C:5A
Certificate issuer:       /CN=24f82d36-633a-44e0-9b31-a523e1609720
Certificate serial:       010D0C9F4328584F20F7B1794B7D4F6692DC0D80
Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/e319bb79-6d14-32cb-b3ab-63f3be9589a7.roa
Signing time:             Thu 10 Sep 2026 13:00:12 +0000
ROA not before:           Thu 10 Sep 2026 13:00:12 +0000
ROA not after:            Wed 09 Dec 2026 14:00:12 +0000
asID:                     7029
IP address blocks:        64.16.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:20:f7:b1:79:4b:7d:4f:66:92:dc:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720
        Validity
            Not Before: Sep 10 13:00:12 2026 GMT
            Not After : Dec  9 14:00:12 2026 GMT
        Subject: CN=d1adb5a8-38b8-4fea-bc7c-713b461032fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:81:87:c9:91:28:50:ef:ff:c1:4c:e3:d0:0c:
                    1e:91:06:b0:c9:70:38:91:c9:1f:df:dd:90:94:ef:
                    ad:44:5f:c2:4f:3c:4b:d7:e4:7c:9f:74:01:3b:ac:
                    f0:15:19:dc:cd:fd:9d:e5:48:04:e7:b4:31:be:ea:
                    88:7c:03:95:e5:43:da:20:77:d6:66:ab:1a:a7:3f:
                    0a:29:31:9a:46:02:79:21:52:21:8a:58:6c:71:11:
                    2d:45:58:c1:50:14:c3:f4:58:f6:39:d0:c8:97:21:
                    13:04:3a:94:66:ae:ea:cc:ed:80:ae:7f:08:ff:20:
                    ec:8c:fe:dc:a1:63:ff:e7:97:57:8c:67:1a:ec:34:
                    54:08:e6:6d:db:c3:a0:3c:94:92:e5:44:f1:f6:8a:
                    c7:15:aa:68:81:f0:ef:6b:f5:df:cd:68:c3:81:64:
                    fd:ba:e3:be:8a:1e:4e:a3:cf:2b:30:ff:76:bb:a7:
                    77:a0:f2:d1:23:03:b6:36:e2:48:ff:3b:8a:dd:a4:
                    1a:b1:76:28:d5:da:4d:47:17:b6:d4:da:9f:e0:52:
                    f4:d1:3c:c2:20:26:17:31:e4:1b:a0:8f:33:b0:f8:
                    f2:76:47:ff:35:36:b7:7a:e5:e7:49:f4:16:69:ef:
                    50:4a:f0:5d:0f:dc:b5:f2:bf:af:21:89:e6:cc:50:
                    e2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:57:AC:07:45:70:96:42:6F:CF:28:70:B8:A1:32:89:04:A9:5C:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/e319bb79-6d14-32cb-b3ab-63f3be9589a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl

            X509v3 Authority Key Identifier:
                keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.16.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:25:f2:50:67:f0:12:14:38:17:a5:fe:cd:45:41:48:91:23:
         50:96:90:fa:91:90:d4:76:52:4f:85:93:ee:33:fa:f8:13:cc:
         37:88:28:70:91:45:44:70:60:ca:ce:b8:5a:26:9e:c4:6c:18:
         77:4d:28:e8:c7:94:a6:42:18:92:1a:12:45:19:fa:c3:85:bc:
         dd:0c:c1:cd:17:3e:bd:36:ab:3a:40:d5:fd:4e:b6:92:66:bc:
         a3:5a:f7:37:9b:32:cc:06:bf:b0:28:5e:7d:d5:db:ca:e5:17:
         11:c5:d6:54:e1:ed:c1:36:c6:9b:d3:26:6e:a7:f4:0a:cc:ca:
         5e:6e:85:3e:a1:65:5b:de:07:40:8d:0d:1d:73:a4:e0:45:05:
         0e:78:87:88:99:63:3c:70:8e:6b:4d:4b:53:72:81:ce:30:99:
         1f:ea:38:0d:12:6d:d1:e9:e0:b5:c6:7b:f9:e6:43:0b:c6:27:
         b1:e8:39:aa:86:f5:31:ee:87:7e:a2:bd:c3:0a:4e:14:98:6e:
         53:88:52:10:63:f9:92:83:fe:ec:87:c9:07:bc:1b:3b:22:df:
         42:48:ed:dd:00:93:73:83:33:d8:0d:c8:ad:39:95:4a:7d:bd:
         0f:e6:2f:fd:0b:1e:68:4a:29:69:40:d2:5c:8e:fe:17:75:f2:
         e5:b8:76:e1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g97F5S31PZpLcDYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5
NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk
ZDFhZGI1YTgtMzhiOC00ZmVhLWJjN2MtNzEzYjQ2MTAzMmZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIGHyZEoUO//wUzj0AwekQawyXA4kckf392Q
lO+tRF/CTzxL1+R8n3QBO6zwFRnczf2d5UgE57QxvuqIfAOV5UPaIHfWZqsapz8K
KTGaRgJ5IVIhilhscREtRVjBUBTD9Fj2OdDIlyETBDqUZq7qzO2Arn8I/yDsjP7c
oWP/55dXjGca7DRUCOZt28OgPJSS5UTx9orHFapogfDva/XfzWjDgWT9uuO+ih5O
o88rMP92u6d3oPLRIwO2NuJI/zuK3aQasXYo1dpNRxe21Nqf4FL00TzCICYXMeQb
oI8zsPjydkf/NTa3euXnSfQWae9QSvBdD9y18r+vIYnmzFDiGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPFXrAdFcJZCb88ocLihMokEqVxaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4
MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvZTMxOWJiNzktNmQxNC0z
MmNiLWIzYWItNjNmM2JlOTU4OWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli
MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw
OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz
ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBC9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF8l8lBn8BIUOBel/s1FQUiRI1CWkPqRkNR2Uk+Fk+4z+vgTzDeIKHCR
RURwYMrOuFomnsRsGHdNKOjHlKZCGJIaEkUZ+sOFvN0Mwc0XPr02qzpA1f1OtpJm
vKNa9zebMswGv7AoXn3V28rlFxHF1lTh7cE2xpvTJm6n9ArMyl5uhT6hZVveB0CN
DR1zpOBFBQ54h4iZYzxwjmtNS1Nygc4wmR/qOA0SbdHp4LXGe/nmQwvGJ7HoOaqG
9THuh36ivcMKThSYblOIUhBj+ZKD/uyHyQe8Gzsi30JI7d0Ak3ODM9gNyK05lUp9
vQ/mL/0LHmhKKWlA0lyO/hd18uW4duE=
-----END CERTIFICATE-----
Generated at Sun Sep 20 19:14:54 2026 by rpki-client