Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/f3571422-bfd8-331f-9639-140fe4daa371.roa
File:                     f3571422-bfd8-331f-9639-140fe4daa371.roa (raw, json)
Hash identifier:          Jp8DCO/6zkn15pngzTwVK3cs+ZUy4MlTeY0GH/bO4lo=
Subject key identifier:   9D:9A:9C:6F:E0:6D:C9:20:87:7C:25:3F:D7:2F:32:43:CC:A0:60:90
Certificate issuer:       /CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
Certificate serial:       010D0C9F4328584CDC678551A908899294850B00
Authority key identifier: 3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/f3571422-bfd8-331f-9639-140fe4daa371.roa
Signing time:             Sat 14 Feb 2026 14:00:41 +0000
ROA not before:           Sat 14 Feb 2026 14:00:41 +0000
ROA not after:            Fri 15 May 2026 13:00:41 +0000
asID:                     14618
IP address blocks:        64.95.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:67:85:51:a9:08:89:92:94:85:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
        Validity
            Not Before: Feb 14 14:00:41 2026 GMT
            Not After : May 15 13:00:41 2026 GMT
        Subject: CN=6de48bfd-4f1b-438f-ab3d-db1fde3cf6d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:31:a2:de:35:22:5e:1c:4b:95:55:ec:4e:12:
                    da:05:38:f9:c3:e0:c3:59:5f:fa:bb:63:24:1a:95:
                    d6:22:cf:c9:47:fc:1d:39:fc:61:1f:d3:b2:d7:ac:
                    a8:d0:41:a0:b1:90:4c:01:21:3e:12:3b:93:cb:cb:
                    1d:c3:bb:b6:9f:99:7d:27:f9:3a:1c:36:2d:d4:5f:
                    7e:f2:62:ba:16:c7:03:b7:9d:fb:9c:67:19:07:e5:
                    ba:13:e5:ed:6b:d9:04:a9:f3:c3:1d:1b:66:b3:59:
                    ec:b0:d1:54:f0:8a:61:dc:15:a9:1a:b1:49:d1:c9:
                    d3:0a:0e:68:27:95:93:48:53:12:8a:b9:52:4f:ca:
                    ac:4b:5c:b2:01:a3:bd:ea:c2:8e:29:a3:2f:4e:9b:
                    76:d5:38:4d:4f:4d:e7:12:5f:32:8c:0c:fe:6d:31:
                    c8:69:bd:7d:1d:37:8e:04:4c:02:c8:76:93:86:6f:
                    7e:db:39:8f:8b:65:0f:13:34:e3:94:4b:0c:e3:3a:
                    6f:8f:ea:2b:e8:b7:2a:33:7e:12:1d:ba:13:5e:01:
                    cb:ca:47:ea:4e:20:47:10:f3:bc:ea:f1:4f:4d:19:
                    78:37:7b:33:da:02:cd:75:40:8e:d1:65:5e:bf:83:
                    1f:8c:4b:c1:39:bd:7f:ab:59:ca:ab:2c:32:06:8c:
                    8a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:9A:9C:6F:E0:6D:C9:20:87:7C:25:3F:D7:2F:32:43:CC:A0:60:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/f3571422-bfd8-331f-9639-140fe4daa371.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl

            X509v3 Authority Key Identifier:
                keyid:3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.95.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:41:91:29:ad:8f:1e:c8:43:79:76:12:9a:ff:b8:45:79:92:
         32:af:cb:6d:a4:6a:77:28:6c:6a:b3:96:ee:ff:12:54:dc:f7:
         53:69:c0:65:ec:60:69:58:f1:bb:fa:8b:5c:df:03:06:d4:b5:
         83:ae:72:fa:12:f1:97:04:23:13:33:1b:90:5a:59:b5:86:0c:
         63:18:96:01:26:cd:74:7e:56:1d:bf:ac:92:50:c8:2e:48:06:
         42:d9:20:64:00:3a:56:64:25:83:42:c9:8f:08:8f:95:8f:99:
         54:dd:24:89:b7:65:63:c2:22:7a:56:36:cf:14:a0:20:6d:ab:
         7d:a4:fa:2f:17:78:d3:f8:ab:b6:4a:e0:45:7f:8b:8d:79:6f:
         7f:3d:28:2a:7d:a8:c3:f1:fe:c4:ad:9b:75:20:55:6f:df:1d:
         eb:58:cc:7c:9f:dc:9f:68:54:ab:b6:24:00:e6:b0:87:ee:ed:
         c9:29:f6:5e:df:37:c1:ce:93:a1:07:95:18:7d:6b:c0:ed:22:
         8d:3b:52:e8:19:b6:38:a6:77:46:40:51:2c:a4:9d:e7:e4:9b:
         5f:5f:e2:f5:1b:9d:ae:15:12:19:64:9c:5d:48:ce:c2:2d:f7:
         af:6f:5e:aa:86:7e:74:c4:3b:4c:e9:14:f3:76:50:39:73:de:
         6c:50:84:46
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzcZ4VRqQiJkpSFCwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjdjOGUxYTItNjk1NS00NWFhLWJkNTgtYzJlYzI2ZThl
NWVjMB4XDTI2MDIxNDE0MDA0MVoXDTI2MDUxNTEzMDA0MVowLzEtMCsGA1UEAxMk
NmRlNDhiZmQtNGYxYi00MzhmLWFiM2QtZGIxZmRlM2NmNmQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzGi3jUiXhxLlVXsThLaBTj5w+DDWV/6u2Mk
GpXWIs/JR/wdOfxhH9Oy16yo0EGgsZBMASE+EjuTy8sdw7u2n5l9J/k6HDYt1F9+
8mK6FscDt537nGcZB+W6E+Xta9kEqfPDHRtms1nssNFU8Iph3BWpGrFJ0cnTCg5o
J5WTSFMSirlST8qsS1yyAaO96sKOKaMvTpt21ThNT03nEl8yjAz+bTHIab19HTeO
BEwCyHaThm9+2zmPi2UPEzTjlEsM4zpvj+or6LcqM34SHboTXgHLykfqTiBHEPO8
6vFPTRl4N3sz2gLNdUCO0WVev4MfjEvBOb1/q1nKqywyBoyK5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ2anG/gbckgh3wlP9cvMkPMoGCQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82N2M4
ZTFhMi02OTU1LTQ1YWEtYmQ1OC1jMmVjMjZlOGU1ZWMvZjM1NzE0MjItYmZkOC0z
MzFmLTk2MzktMTQwZmU0ZGFhMzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjdjOGUxYTItNjk1NS00NWFhLWJk
NTgtYzJlYzI2ZThlNWVjLzY3YzhlMWEyLTY5NTUtNDVhYS1iZDU4LWMyZWMyNmU4
ZTVlYy5jcmwwHwYDVR0jBBgwFoAUPNX2nFOg47bXPQIwtOEtAyhsMGgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi82N2M4ZTFhMi02OTU1LTQ1YWEtYmQ1OC1jMmVj
MjZlOGU1ZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQF+dMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADFBkSmtjx7IQ3l2Epr/uEV5kjKvy22kancobGqzlu7/ElTc91NpwGXs
YGlY8bv6i1zfAwbUtYOucvoS8ZcEIxMzG5BaWbWGDGMYlgEmzXR+Vh2/rJJQyC5I
BkLZIGQAOlZkJYNCyY8Ij5WPmVTdJIm3ZWPCInpWNs8UoCBtq32k+i8XeNP4q7ZK
4EV/i415b389KCp9qMPx/sStm3UgVW/fHetYzHyf3J9oVKu2JADmsIfu7ckp9l7f
N8HOk6EHlRh9a8DtIo07UugZtjimd0ZAUSyknefkm19f4vUbna4VEhlknF1IzsIt
969vXqqGfnTEO0zpFPN2UDlz3mxQhEY=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:28:04 2026 by rpki-client