Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/239c7b2a-d138-33cf-be7d-13d8071140a8.roa
File:                     239c7b2a-d138-33cf-be7d-13d8071140a8.roa (raw, json)
Hash identifier:          uVb+6BAyhUt1mWRl74rA0Fpqqy+2Sgl+6Rpm+OnAcx8=
Subject key identifier:   F6:6B:38:8A:58:9B:71:E9:BB:D9:4F:C0:60:80:46:FA:AE:D0:2E:14
Certificate issuer:       /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
Certificate serial:       010D0C9F4328584D5243479AAE8E792897FD5580
Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/239c7b2a-d138-33cf-be7d-13d8071140a8.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     18563
IP address blocks:        64.86.140.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:47:9a:ae:8e:79:28:97:fd:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=0fa531fa-c9d1-409c-a75f-c7493575ad56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f2:f3:57:0e:96:4d:ac:4f:4d:13:63:f2:8a:
                    7a:79:2d:00:a2:c5:2b:50:92:7e:8f:59:8f:ff:47:
                    2d:09:84:90:08:27:f6:3e:95:53:ee:62:42:34:74:
                    f9:64:cf:98:91:12:f0:ba:b1:40:83:aa:e5:7f:78:
                    bc:5a:66:e6:c4:ae:d6:aa:48:48:2f:3b:f7:a1:6d:
                    e1:b3:74:8e:c8:f9:09:ad:6a:98:ac:26:95:86:b0:
                    b5:98:1a:11:ac:bd:27:ae:42:55:5d:e9:65:18:d7:
                    8b:71:34:dc:d7:cd:a0:e2:37:fa:ef:e0:6c:e8:c3:
                    d5:86:bc:f2:44:77:4a:b0:a0:b5:05:2b:6d:57:05:
                    99:42:ba:a2:69:6a:5e:68:61:d0:51:21:7f:03:9a:
                    79:d9:11:2a:1a:37:fe:a9:00:9b:2d:ae:b9:9f:f3:
                    2e:10:5a:a4:60:01:32:f2:35:b3:a4:7b:0b:42:ae:
                    c8:e6:8c:d0:44:15:89:85:f7:8c:28:98:99:05:dd:
                    9a:62:87:bf:a4:01:f3:b0:c4:4a:83:70:47:79:76:
                    3e:8b:cf:df:ab:91:f7:2b:cc:13:fc:01:fc:96:67:
                    a8:71:9e:34:12:8f:75:16:bf:71:4f:2e:51:90:eb:
                    90:2c:b8:24:8a:46:2f:95:e0:a8:53:f6:02:9d:9e:
                    24:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:6B:38:8A:58:9B:71:E9:BB:D9:4F:C0:60:80:46:FA:AE:D0:2E:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/239c7b2a-d138-33cf-be7d-13d8071140a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl

            X509v3 Authority Key Identifier:
                keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.86.140.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:ed:1f:d8:88:14:d6:6a:c5:a0:ff:cd:d4:cb:72:3b:d5:53:
         12:a0:f8:11:ca:90:18:39:81:80:bf:6b:fb:6b:63:c8:b8:95:
         a3:12:b9:75:3a:68:3e:2f:e8:83:d5:ba:b8:d0:47:64:70:40:
         6b:f5:ef:30:21:d3:b5:ec:f4:53:73:5f:35:d5:6d:a8:90:89:
         57:bd:2b:1d:7b:7c:ba:3d:9c:a1:8b:d2:2c:15:3d:b2:14:5d:
         df:e9:8f:8c:f8:75:4c:44:ab:78:58:9b:9d:24:ec:34:16:1a:
         5d:23:4f:74:10:11:83:17:d5:db:08:ee:27:67:e1:fb:92:85:
         e0:b3:9b:5c:c1:5e:10:8d:87:54:ca:f4:a3:6a:6b:2b:d9:00:
         c6:a9:f0:5d:51:ae:a9:cd:18:56:41:db:e7:1e:7f:d4:9a:67:
         1b:ce:ea:37:fe:e8:81:a5:5f:3e:0c:42:4e:8f:b9:c5:c0:c6:
         72:a1:1d:00:15:55:2e:c3:4d:bf:d1:7c:a3:ac:a9:76:ed:23:
         26:42:a9:cb:e1:7c:a9:96:5b:25:6d:0a:cc:97:2e:13:19:52:
         ed:b2:c9:3e:27:87:08:14:a0:ae:2e:1e:6a:c4:e7:c8:a0:0d:
         62:a8:0c:f2:a2:b1:c8:64:a9:43:ed:24:a1:9d:40:4a:64:4b:
         c4:df:b9:d5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ0earo55KJf9VYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjg2NjM5ZmMtOTRjNC00ZDZhLTlkZTEtZjFiM2ViYjVm
NzU4MB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk
MGZhNTMxZmEtYzlkMS00MDljLWE3NWYtYzc0OTM1NzVhZDU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/LzVw6WTaxPTRNj8op6eS0AosUrUJJ+j1mP
/0ctCYSQCCf2PpVT7mJCNHT5ZM+YkRLwurFAg6rlf3i8WmbmxK7WqkhILzv3oW3h
s3SOyPkJrWqYrCaVhrC1mBoRrL0nrkJVXellGNeLcTTc182g4jf67+Bs6MPVhrzy
RHdKsKC1BSttVwWZQrqiaWpeaGHQUSF/A5p52REqGjf+qQCbLa65n/MuEFqkYAEy
8jWzpHsLQq7I5ozQRBWJhfeMKJiZBd2aYoe/pAHzsMRKg3BHeXY+i8/fq5H3K8wT
/AH8lmeocZ40Eo91Fr9xTy5RkOuQLLgkikYvleCoU/YCnZ4kKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPZrOIpYm3Hpu9lPwGCARvqu0C4UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2
MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIzZWJiNWY3NTgvMjM5YzdiMmEtZDEzOC0z
M2NmLWJlN2QtMTNkODA3MTE0MGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjg2NjM5ZmMtOTRjNC00ZDZhLTlk
ZTEtZjFiM2ViYjVmNzU4LzI4NjYzOWZjLTk0YzQtNGQ2YS05ZGUxLWYxYjNlYmI1
Zjc1OC5jcmwwHwYDVR0jBBgwFoAUY8cRIojpCzgE5Vgg7EVtim+WwAEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIz
ZWJiNWY3NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQFaMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADXtH9iIFNZqxaD/zdTLcjvVUxKg+BHKkBg5gYC/a/trY8i4laMSuXU6
aD4v6IPVurjQR2RwQGv17zAh07Xs9FNzXzXVbaiQiVe9Kx17fLo9nKGL0iwVPbIU
Xd/pj4z4dUxEq3hYm50k7DQWGl0jT3QQEYMX1dsI7idn4fuSheCzm1zBXhCNh1TK
9KNqayvZAMap8F1RrqnNGFZB2+cef9SaZxvO6jf+6IGlXz4MQk6PucXAxnKhHQAV
VS7DTb/RfKOsqXbtIyZCqcvhfKmWWyVtCsyXLhMZUu2yyT4nhwgUoK4uHmrE58ig
DWKoDPKischkqUPtJKGdQEpkS8TfudU=
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:08:10 2026 by rpki-client