Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/65588ce4-be96-30c9-8d36-95bf6b465fe7.roa
File:                     65588ce4-be96-30c9-8d36-95bf6b465fe7.roa (raw, json)
Hash identifier:          sj2tH/Ha3vBxYpb+njbbOWWh6B71L0hURyGfihbzp04=
Subject key identifier:   4E:47:B4:C6:73:8C:5A:4F:48:F7:1E:FC:90:E8:EC:9A:A2:BA:69:A3
Certificate issuer:       /CN=81565da9-aab9-45ca-b99c-0684053daa09
Certificate serial:       010D0C9F4328584EA79A58B6940B5956B0DFC600
Authority key identifier: D7:5C:90:A0:F6:CD:17:C6:44:68:A9:C4:16:61:D5:7E:64:23:2D:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/65588ce4-be96-30c9-8d36-95bf6b465fe7.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     188
IP address blocks:        149.64.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:58:b6:94:0b:59:56:b0:df:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81565da9-aab9-45ca-b99c-0684053daa09
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=f8457759-5fca-4bc5-a9e4-5a31701cdbbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:9f:cd:57:2f:58:da:0b:b0:d4:3c:72:7b:4b:
                    e7:d2:da:c6:32:4d:e2:c7:37:ef:7a:17:e0:f3:96:
                    39:04:b6:3b:2c:36:aa:f1:81:36:ee:1f:2f:3c:be:
                    3b:6b:ff:3b:d6:34:8b:c4:f2:08:b7:d0:07:a6:78:
                    d0:67:63:5c:ee:95:5d:6d:6b:8c:8b:f3:24:48:9a:
                    7f:0e:c6:cf:83:90:9b:da:68:e9:35:47:77:72:f1:
                    c7:c5:0d:dc:63:35:ce:fc:48:30:6f:5c:4b:32:d3:
                    d5:c5:3d:49:4c:1e:59:3a:b6:36:d1:7b:f6:45:7b:
                    64:7f:10:e2:0e:0f:af:3e:3a:61:0f:ac:6e:2f:54:
                    39:35:15:44:50:a1:fa:98:7a:ff:04:97:96:11:0e:
                    dc:b8:5e:b5:6f:f0:db:e6:59:d1:38:bd:49:8e:65:
                    69:29:19:11:6f:e6:ee:66:1f:1f:6c:f5:5b:14:4c:
                    ab:d8:75:d6:fc:be:b3:5f:54:f2:f9:c1:d9:fe:f8:
                    d7:26:06:de:1d:fb:b9:81:70:ca:c5:a8:a0:8e:57:
                    81:37:b1:c6:b3:c1:26:3e:8c:32:7f:0a:cd:5a:f3:
                    fd:6b:d8:89:7d:46:ef:4b:c2:4c:a9:a2:e7:1d:ff:
                    45:58:de:61:fe:e3:df:5d:ea:d4:d2:ef:88:47:31:
                    59:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:47:B4:C6:73:8C:5A:4F:48:F7:1E:FC:90:E8:EC:9A:A2:BA:69:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/65588ce4-be96-30c9-8d36-95bf6b465fe7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.crl

            X509v3 Authority Key Identifier:
                keyid:D7:5C:90:A0:F6:CD:17:C6:44:68:A9:C4:16:61:D5:7E:64:23:2D:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.64.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:06:9d:4d:72:cd:f0:ae:79:cf:30:e5:0c:c0:05:da:96:4e:
         d8:1f:b6:b3:b0:f6:8a:14:ce:e1:49:be:58:c8:33:e7:dd:0e:
         8e:01:00:8b:a4:3f:ae:3d:8c:00:5a:84:f3:14:2d:4f:5e:99:
         21:6b:10:63:19:8c:0e:fc:5f:93:03:56:4e:3c:7b:b4:53:92:
         ca:a4:74:ff:09:e2:9a:80:05:ec:26:a4:2e:ed:0b:c4:8a:4e:
         27:d5:db:ef:74:4d:b2:b1:46:a4:14:15:c6:cf:d4:39:46:42:
         de:93:1c:c6:6e:3f:de:7d:28:45:14:dd:42:9d:84:8d:05:c5:
         0e:09:0a:41:2c:c3:c5:70:68:e8:fa:35:33:d1:8a:bf:4c:5a:
         f0:d7:ac:91:11:b3:14:b0:5f:4e:be:e3:f4:77:82:fd:fb:2d:
         38:8d:c6:dd:b7:2e:2f:4d:b9:4a:20:2f:a9:f0:dc:d7:13:b6:
         97:59:7c:64:7a:a3:5f:25:f7:cc:99:2f:7c:e6:d3:3b:e9:5e:
         a0:73:44:18:70:f2:0a:0d:f9:ea:fc:e0:44:5c:f5:83:1e:b5:
         e2:d9:b4:e8:f9:40:28:3c:3b:ba:f3:f1:29:a0:2f:5f:6f:ca:
         30:08:2d:f8:1d:b9:27:54:bf:d9:9b:9b:2f:e7:09:14:a8:c5:
         3a:b0:d2:5e
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE6nmli2lAtZVrDfxgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODE1NjVkYTktYWFiOS00NWNhLWI5OWMtMDY4NDA1M2Rh
YTA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
Zjg0NTc3NTktNWZjYS00YmM1LWE5ZTQtNWEzMTcwMWNkYmJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJ/NVy9Y2guw1Dxye0vn0trGMk3ixzfvehfg
85Y5BLY7LDaq8YE27h8vPL47a/871jSLxPIIt9AHpnjQZ2Nc7pVdbWuMi/MkSJp/
DsbPg5Cb2mjpNUd3cvHHxQ3cYzXO/Egwb1xLMtPVxT1JTB5ZOrY20Xv2RXtkfxDi
Dg+vPjphD6xuL1Q5NRVEUKH6mHr/BJeWEQ7cuF61b/Db5lnROL1JjmVpKRkRb+bu
Zh8fbPVbFEyr2HXW/L6zX1Ty+cHZ/vjXJgbeHfu5gXDKxaigjleBN7HGs8EmPowy
fwrNWvP9a9iJfUbvS8JMqaLnHf9FWN5h/uPfXerU0u+IRzFZ7wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFE5HtMZzjFpPSPce/JDo7JqiummjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84MTU2
NWRhOS1hYWI5LTQ1Y2EtYjk5Yy0wNjg0MDUzZGFhMDkvNjU1ODhjZTQtYmU5Ni0z
MGM5LThkMzYtOTViZjZiNDY1ZmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODE1NjVkYTktYWFiOS00NWNhLWI5
OWMtMDY4NDA1M2RhYTA5LzgxNTY1ZGE5LWFhYjktNDVjYS1iOTljLTA2ODQwNTNk
YWEwOS5jcmwwHwYDVR0jBBgwFoAU11yQoPbNF8ZEaKnEFmHVfmQjLcgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS84MTU2NWRhOS1hYWI5LTQ1Y2EtYjk5Yy0wNjg0
MDUzZGFhMDkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAlUAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEATgadTXLN8K55zzDlDMAF2pZO2B+2s7D2ihTO4Um+WMgz590OjgEAi6Q/
rj2MAFqE8xQtT16ZIWsQYxmMDvxfkwNWTjx7tFOSyqR0/wnimoAF7CakLu0LxIpO
J9Xb73RNsrFGpBQVxs/UOUZC3pMcxm4/3n0oRRTdQp2EjQXFDgkKQSzDxXBo6Po1
M9GKv0xa8NeskRGzFLBfTr7j9HeC/fstOI3G3bcuL025SiAvqfDc1xO2l1l8ZHqj
XyX3zJkvfObTO+leoHNEGHDyCg356vzgRFz1gx614tm06PlAKDw7uvPxKaAvX2/K
MAgt+B25J1S/2ZubL+cJFKjFOrDSXg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:31:27 2026 by rpki-client