Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/333ad0f6-f5c1-322a-b03d-8071b5d9e9c5.roa
File:                     333ad0f6-f5c1-322a-b03d-8071b5d9e9c5.roa (raw, json)
Hash identifier:          IcoZ1YXFmJ3AwaE4xZp/8bnhT+Fx3IIN7amVGVp0wZk=
Subject key identifier:   3A:EC:D2:89:21:F7:02:D6:9D:30:D6:7F:B2:CB:8B:E0:48:EF:67:61
Certificate issuer:       /CN=b2fad91b-4146-4274-9411-fc471c444156
Certificate serial:       010D0C9F4328584F686B780B666FC916CEC7A880
Authority key identifier: ED:A0:AF:16:9F:95:8F:17:B2:29:A2:69:70:14:46:B1:B0:3B:EB:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/333ad0f6-f5c1-322a-b03d-8071b5d9e9c5.roa
Signing time:             Tue 06 Oct 2026 03:16:03 +0000
ROA not before:           Tue 06 Oct 2026 03:16:03 +0000
ROA not after:            Mon 04 Jan 2027 04:16:03 +0000
asID:                     11696
IP address blocks:        64.190.104.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:68:6b:78:0b:66:6f:c9:16:ce:c7:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2fad91b-4146-4274-9411-fc471c444156
        Validity
            Not Before: Oct  6 03:16:03 2026 GMT
            Not After : Jan  4 04:16:03 2027 GMT
        Subject: CN=5b5d5b47-8673-445e-8ff1-c6c5d5c8cf1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:99:19:5a:aa:df:34:dc:ff:08:bf:dd:42:13:
                    28:8f:a5:c0:e2:9a:56:2d:77:ae:87:7b:99:cf:80:
                    18:34:ac:a5:25:50:92:ef:68:56:5f:04:26:a1:4d:
                    13:65:6e:5e:52:eb:84:eb:49:9d:72:04:42:0e:28:
                    5d:5b:44:c5:ff:05:32:29:aa:2c:0f:ad:b1:a2:10:
                    02:fd:9f:67:5d:1f:2e:d2:70:d4:d7:71:76:dc:29:
                    48:b4:f0:42:75:fa:e0:3f:a3:18:bc:98:61:33:7b:
                    24:4e:14:cf:ee:1a:94:e8:80:7b:18:9e:9e:ca:6f:
                    82:71:ea:60:d1:e6:e4:50:15:a0:66:df:b2:8b:2c:
                    20:74:6c:d5:c4:fc:53:b7:60:d8:c4:85:16:52:80:
                    86:b2:d1:37:b3:f0:16:d0:74:43:d5:de:50:36:ee:
                    ce:ff:cd:89:14:6a:95:23:0d:65:e5:87:86:29:1b:
                    56:93:f9:36:99:36:3d:b2:00:22:68:d3:da:c8:56:
                    42:18:7b:fb:c2:3a:d2:03:91:68:cc:4b:fc:92:67:
                    a1:92:33:88:8e:21:02:10:0f:7f:fc:94:a5:22:8d:
                    44:1f:be:68:ae:f2:de:21:f0:c5:fb:37:cf:9f:1c:
                    b6:e0:90:da:cb:b5:14:a1:0c:6b:12:68:79:0a:3c:
                    60:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:EC:D2:89:21:F7:02:D6:9D:30:D6:7F:B2:CB:8B:E0:48:EF:67:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/333ad0f6-f5c1-322a-b03d-8071b5d9e9c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.crl

            X509v3 Authority Key Identifier:
                keyid:ED:A0:AF:16:9F:95:8F:17:B2:29:A2:69:70:14:46:B1:B0:3B:EB:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.190.104.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:e7:4b:ec:f4:8b:74:46:9b:4b:56:69:11:3c:d3:bd:8d:90:
         92:a4:13:fe:ed:be:f0:1f:47:42:54:dd:b1:f0:b4:02:0c:ba:
         b4:e4:3a:18:d7:28:9f:30:18:6c:b1:12:0c:68:83:2f:ac:c0:
         a5:32:c2:15:c3:9d:ac:a8:c1:56:11:45:d1:d2:1c:a8:80:77:
         a4:65:6d:a2:6b:54:34:d9:5c:59:5c:4f:b1:26:9c:91:9b:31:
         11:18:e2:2e:25:f5:d5:8c:1d:aa:90:94:78:58:22:c9:44:02:
         0b:ce:ed:d9:3f:80:4d:d8:3f:23:3e:29:ca:f7:bb:54:ac:4e:
         b6:0c:0e:eb:23:ea:8a:3b:46:fa:27:78:63:85:c6:69:96:fc:
         11:9f:aa:b9:41:e0:cf:29:e5:e3:2e:30:f4:dc:26:a2:7d:17:
         72:70:2d:1d:0e:0a:a1:d3:b1:4d:ad:6c:c0:96:d3:b5:54:8c:
         dd:39:76:a2:96:4b:1a:72:ee:f8:a3:6c:bc:7f:70:4b:18:28:
         6a:06:69:d9:bb:f4:7e:c9:33:9f:b8:a5:a5:a6:1e:cc:f8:d6:
         1f:15:89:b9:8c:db:2e:fd:70:0e:b1:47:45:32:9d:4d:f4:0a:
         99:35:f5:6a:fa:9d:ae:23:de:a2:95:24:5a:42:0d:c9:a5:3e:
         f4:93:39:0b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9oa3gLZm/JFs7HqIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmYWQ5MWItNDE0Ni00Mjc0LTk0MTEtZmM0NzFjNDQ0
MTU2MB4XDTI2MTAwNjAzMTYwM1oXDTI3MDEwNDA0MTYwM1owLzEtMCsGA1UEAxMk
NWI1ZDViNDctODY3My00NDVlLThmZjEtYzZjNWQ1YzhjZjFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZkZWqrfNNz/CL/dQhMoj6XA4ppWLXeuh3uZ
z4AYNKylJVCS72hWXwQmoU0TZW5eUuuE60mdcgRCDihdW0TF/wUyKaosD62xohAC
/Z9nXR8u0nDU13F23ClItPBCdfrgP6MYvJhhM3skThTP7hqU6IB7GJ6eym+Ccepg
0ebkUBWgZt+yiywgdGzVxPxTt2DYxIUWUoCGstE3s/AW0HRD1d5QNu7O/82JFGqV
Iw1l5YeGKRtWk/k2mTY9sgAiaNPayFZCGHv7wjrSA5FozEv8kmehkjOIjiECEA9/
/JSlIo1EH75orvLeIfDF+zfPnxy24JDay7UUoQxrEmh5CjxgmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDrs0okh9wLWnTDWf7LLi+BI72dhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9iMmZh
ZDkxYi00MTQ2LTQyNzQtOTQxMS1mYzQ3MWM0NDQxNTYvMzMzYWQwZjYtZjVjMS0z
MjJhLWIwM2QtODA3MWI1ZDllOWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYjJmYWQ5MWItNDE0Ni00Mjc0LTk0
MTEtZmM0NzFjNDQ0MTU2L2IyZmFkOTFiLTQxNDYtNDI3NC05NDExLWZjNDcxYzQ0
NDE1Ni5jcmwwHwYDVR0jBBgwFoAU7aCvFp+VjxeyKaJpcBRGsbA76wgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi9iMmZhZDkxYi00MTQ2LTQyNzQtOTQxMS1mYzQ3
MWM0NDQxNTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQL5oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFHnS+z0i3RGm0tWaRE8072NkJKkE/7tvvAfR0JU3bHwtAIMurTkOhjX
KJ8wGGyxEgxogy+swKUywhXDnayowVYRRdHSHKiAd6RlbaJrVDTZXFlcT7EmnJGb
MREY4i4l9dWMHaqQlHhYIslEAgvO7dk/gE3YPyM+Kcr3u1SsTrYMDusj6oo7Rvon
eGOFxmmW/BGfqrlB4M8p5eMuMPTcJqJ9F3JwLR0OCqHTsU2tbMCW07VUjN05dqKW
Sxpy7vijbLx/cEsYKGoGadm79H7JM5+4paWmHsz41h8VibmM2y79cA6xR0UynU30
Cpk19Wr6na4j3qKVJFpCDcmlPvSTOQs=
-----END CERTIFICATE-----
Generated at Tue Oct 13 23:43:32 2026 by rpki-client