Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/f2e4bfb3-503c-36f2-b545-77ba57c691a0.roa
File:                     f2e4bfb3-503c-36f2-b545-77ba57c691a0.roa (raw, json)
Hash identifier:          WIA4Yjhp2d19xRLfcGArrUKkcnASyXUDpw9Jr8P4gNs=
Subject key identifier:   A7:C1:7D:5F:EA:08:1A:FE:AF:7A:07:6E:04:41:18:63:21:38:AB:5E
Certificate issuer:       /CN=c6228f86-bf54-49fc-835c-588cd2aadb49
Certificate serial:       010D0C9F4328584F1037A89910D7F1B2E1635500
Authority key identifier: D3:6C:AC:E6:33:A2:EE:D4:AF:82:1E:F5:97:60:89:BE:D8:47:3C:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/f2e4bfb3-503c-36f2-b545-77ba57c691a0.roa
Signing time:             Fri 04 Sep 2026 13:00:12 +0000
ROA not before:           Fri 04 Sep 2026 13:00:12 +0000
ROA not after:            Thu 03 Dec 2026 14:00:12 +0000
asID:                     6325
IP address blocks:        64.107.0.0/16 maxlen: 16
                          64.107.0.0/17 maxlen: 17
                          64.107.0.0/18 maxlen: 18
                          64.107.64.0/18 maxlen: 18
                          64.107.128.0/17 maxlen: 17
                          64.107.128.0/18 maxlen: 18
                          64.107.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c6228f86-bf54-49fc-835c-588cd2aadb49.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c6228f86-bf54-49fc-835c-588cd2aadb49.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:10:37:a8:99:10:d7:f1:b2:e1:63:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6228f86-bf54-49fc-835c-588cd2aadb49
        Validity
            Not Before: Sep  4 13:00:12 2026 GMT
            Not After : Dec  3 14:00:12 2026 GMT
        Subject: CN=5f95b2d6-9cb2-422d-9ee1-30358cf8065d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2b:9d:37:f4:a2:e3:f3:31:2e:ab:b8:7d:2c:
                    1e:03:0a:f7:5a:39:44:af:a8:0e:03:14:4a:f3:34:
                    03:12:d5:92:3f:12:ba:5f:40:e7:db:e8:39:2f:36:
                    1b:ad:98:2c:56:5f:ce:80:91:7f:2c:1b:11:0f:aa:
                    13:b0:c4:dd:f4:e2:9a:eb:f8:0a:cc:8f:96:92:4b:
                    71:ca:ac:7a:8c:fe:9f:14:ee:cf:20:70:00:87:94:
                    87:d1:0c:92:2a:db:55:93:fc:3e:b5:10:15:c6:2f:
                    9e:42:bd:21:12:2a:10:fb:85:bb:a5:3c:1e:dc:7c:
                    e0:71:43:04:eb:7b:cc:76:d0:94:29:11:44:f7:21:
                    cb:21:b8:2c:14:d5:d2:19:78:7b:21:b6:12:54:c3:
                    0a:94:d3:cf:9e:39:78:ff:59:d0:12:e6:6e:28:3f:
                    13:54:b0:69:e7:e9:13:7f:ba:84:be:ab:12:f1:48:
                    55:cc:ec:5e:6b:1f:71:a4:b4:ce:6b:53:25:15:23:
                    bb:ba:04:96:e9:c3:c9:4e:e1:70:37:68:9b:34:be:
                    36:d6:73:97:33:fd:c3:5c:3c:b1:39:54:a8:0e:d3:
                    38:95:52:9d:8f:d6:89:e0:ba:bf:b5:0c:50:0e:fe:
                    93:f0:74:08:4a:c6:f5:71:d7:d0:0d:70:1e:d0:f3:
                    6e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:C1:7D:5F:EA:08:1A:FE:AF:7A:07:6E:04:41:18:63:21:38:AB:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/f2e4bfb3-503c-36f2-b545-77ba57c691a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c6228f86-bf54-49fc-835c-588cd2aadb49.crl

            X509v3 Authority Key Identifier:
                keyid:D3:6C:AC:E6:33:A2:EE:D4:AF:82:1E:F5:97:60:89:BE:D8:47:3C:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.107.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:a4:84:0c:f1:cc:67:f6:1f:5a:4d:fc:50:b4:2e:d8:e8:6b:
         7f:9e:3c:5c:be:8e:e2:8d:2a:f3:4a:85:59:d5:4e:0b:df:51:
         59:80:83:2a:3c:ca:c9:af:5b:ef:c8:a9:02:a3:a9:66:4e:50:
         12:f0:b4:df:20:e9:a3:6b:4e:4a:14:b9:3f:ce:84:11:a8:cc:
         cc:04:94:fb:9d:d3:cf:68:41:e6:7d:61:16:1e:0b:6f:55:27:
         b5:24:cf:7a:30:10:69:b4:60:81:d8:36:d5:19:cc:90:2d:e0:
         b6:45:c4:80:e8:88:0f:7c:a8:ce:56:b0:f1:24:59:dd:f3:19:
         20:89:6e:31:0d:c0:22:4c:92:bb:af:02:69:a6:df:9f:82:5c:
         95:6c:f1:d6:12:2e:28:13:d4:85:b9:5f:fd:21:83:d7:61:16:
         cd:a7:42:e2:2a:f5:22:f7:66:ec:e9:f6:80:3a:f4:68:b2:a3:
         63:18:69:1d:13:2a:fa:33:12:b8:7f:24:a8:8b:99:12:7c:eb:
         e7:c9:00:cf:c7:79:9b:93:fb:a2:0f:48:80:ae:51:d5:e6:e2:
         e2:ab:b5:f0:09:4d:77:77:84:01:91:e4:47:d4:e1:70:a8:3d:
         e2:8b:6c:f8:36:8f:bc:c5:fe:00:fd:e4:b6:67:ec:49:56:ed:
         6c:ec:e9:13
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE8QN6iZENfxsuFjVQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzYyMjhmODYtYmY1NC00OWZjLTgzNWMtNTg4Y2QyYWFk
YjQ5MB4XDTI2MDkwNDEzMDAxMloXDTI2MTIwMzE0MDAxMlowLzEtMCsGA1UEAxMk
NWY5NWIyZDYtOWNiMi00MjJkLTllZTEtMzAzNThjZjgwNjVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCudN/Si4/MxLqu4fSweAwr3WjlEr6gOAxRK
8zQDEtWSPxK6X0Dn2+g5LzYbrZgsVl/OgJF/LBsRD6oTsMTd9OKa6/gKzI+Wkktx
yqx6jP6fFO7PIHAAh5SH0QySKttVk/w+tRAVxi+eQr0hEioQ+4W7pTwe3HzgcUME
63vMdtCUKRFE9yHLIbgsFNXSGXh7IbYSVMMKlNPPnjl4/1nQEuZuKD8TVLBp5+kT
f7qEvqsS8UhVzOxeax9xpLTOa1MlFSO7ugSW6cPJTuFwN2ibNL421nOXM/3DXDyx
OVSoDtM4lVKdj9aJ4Lq/tQxQDv6T8HQISsb1cdfQDXAe0PNuUwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFKfBfV/qCBr+r3oHbgRBGGMhOKteMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9jNjIy
OGY4Ni1iZjU0LTQ5ZmMtODM1Yy01ODhjZDJhYWRiNDkvZjJlNGJmYjMtNTAzYy0z
NmYyLWI1NDUtNzdiYTU3YzY5MWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYzYyMjhmODYtYmY1NC00OWZjLTgz
NWMtNTg4Y2QyYWFkYjQ5L2M2MjI4Zjg2LWJmNTQtNDlmYy04MzVjLTU4OGNkMmFh
ZGI0OS5jcmwwHwYDVR0jBBgwFoAU02ys5jOi7tSvgh71l2CJvthHPJkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi9jNjIyOGY4Ni1iZjU0LTQ5ZmMtODM1Yy01ODhj
ZDJhYWRiNDkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAQGswVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAZaSEDPHMZ/YfWk38ULQu2Ohrf548XL6O4o0q80qFWdVOC99RWYCDKjzK
ya9b78ipAqOpZk5QEvC03yDpo2tOShS5P86EEajMzASU+53Tz2hB5n1hFh4Lb1Un
tSTPejAQabRggdg21RnMkC3gtkXEgOiID3yozlaw8SRZ3fMZIIluMQ3AIkySu68C
aabfn4JclWzx1hIuKBPUhblf/SGD12EWzadC4ir1Ivdm7On2gDr0aLKjYxhpHRMq
+jMSuH8kqIuZEnzr58kAz8d5m5P7og9IgK5R1ebi4qu18AlNd3eEAZHkR9ThcKg9
4ots+DaPvMX+AP3ktmfsSVbtbOzpEw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 08:00:31 2026 by rpki-client