Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/53a1e44f-5c92-3f2d-95bb-6078f9c5d55c.roa
File:                     53a1e44f-5c92-3f2d-95bb-6078f9c5d55c.roa (raw, json)
Hash identifier:          yuqO2PSruIXVY6yt/CdVFgKvqVOTjbq3he3SFhH5Dps=
Subject key identifier:   A1:F8:04:C3:D9:2B:06:F8:A5:DE:4C:DC:BB:FA:3E:3E:A2:2C:57:E0
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584E08662165790B6926CCAD8070
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/53a1e44f-5c92-3f2d-95bb-6078f9c5d55c.roa
Signing time:             Tue 02 Jun 2026 01:00:10 +0000
ROA not before:           Tue 02 Jun 2026 01:00:10 +0000
ROA not after:            Mon 31 Aug 2026 01:00:10 +0000
asID:                     36492
IP address blocks:        64.9.254.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:08:66:21:65:79:0b:69:26:cc:ad:80:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jun  2 01:00:10 2026 GMT
            Not After : Aug 31 01:00:10 2026 GMT
        Subject: CN=b48d9059-9b27-43fd-9f0f-601dca274325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:69:70:5e:22:54:f8:07:84:3d:db:5c:4d:4e:
                    74:60:44:da:f8:23:9f:3f:d0:2c:b3:f6:47:94:35:
                    36:6b:60:d8:b6:d2:b4:41:01:05:30:7f:2e:71:02:
                    9a:fa:e3:b9:15:52:ee:96:88:4a:65:7e:2e:55:c5:
                    ba:3f:88:e4:09:3e:c0:d0:43:37:85:b2:f3:4f:2c:
                    be:a0:91:31:02:be:10:bf:d5:09:bc:26:4b:f1:67:
                    ef:e2:69:3e:9c:56:9c:90:99:a8:6f:e9:16:d7:03:
                    ad:16:d9:0c:39:50:16:2b:3b:32:84:96:58:7d:b6:
                    ba:ed:a7:d2:e9:1e:fe:bf:3f:65:6b:14:10:4d:e0:
                    37:6b:1e:8b:2c:01:7b:12:2d:0d:a2:39:84:ee:3a:
                    5c:12:a7:d8:8f:a9:78:ee:24:81:12:42:f8:71:ae:
                    69:13:ec:8b:6d:c4:fc:b9:dd:f1:7e:9d:0f:2a:15:
                    a3:5e:ea:31:c1:8b:89:30:e2:e3:b0:13:18:b9:b4:
                    c0:15:01:aa:2c:ab:71:f2:2b:ab:e5:6a:5b:e4:68:
                    6a:c9:46:7f:0b:20:10:8a:4a:91:a6:9a:3b:41:7f:
                    eb:c2:8e:ab:5a:29:4f:71:e4:c3:88:bb:a0:5a:39:
                    25:9d:33:cb:62:69:d2:88:53:27:fc:cf:7b:93:2d:
                    2b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:F8:04:C3:D9:2B:06:F8:A5:DE:4C:DC:BB:FA:3E:3E:A2:2C:57:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/53a1e44f-5c92-3f2d-95bb-6078f9c5d55c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:e0:03:7d:4d:40:38:e6:ea:2a:a5:c2:a9:5a:21:e9:e6:47:
         0c:77:7f:bf:ff:7a:7b:37:31:70:8f:60:15:24:6d:ff:6f:23:
         14:57:bf:4c:e7:1d:07:4e:b6:ce:36:c9:e5:76:3d:cf:f7:09:
         d9:f5:b3:78:ca:b5:67:34:92:ca:00:7b:49:06:33:e0:9c:8e:
         88:af:75:e8:24:a4:5f:b8:22:1b:8e:e2:93:7f:81:2c:35:73:
         66:57:2b:20:92:68:37:99:2a:d6:6e:a8:a5:21:f5:dc:fe:1a:
         48:10:20:2a:2e:c4:a7:7e:a3:3f:52:e0:78:25:9e:4b:1c:16:
         99:88:d2:d2:7f:13:ed:28:ba:da:b8:3d:11:f5:1f:a4:d3:ff:
         de:e3:49:6a:dc:f5:49:7a:a3:51:ac:59:eb:5f:84:5e:c7:49:
         54:80:c1:50:2c:b5:12:b1:de:89:a8:e3:c5:c2:15:36:b5:a2:
         a7:16:e0:21:30:ab:7f:80:44:ba:d1:51:55:af:80:50:cc:dc:
         e7:fe:b1:f9:3d:ab:e3:c5:6d:a6:e0:7d:7e:7c:a9:09:86:19:
         4d:4a:43:8c:72:90:ce:b7:ae:18:27:4a:77:3e:e3:c7:35:7f:
         d0:d6:42:68:18:7d:00:ac:f0:37:88:f4:9b:80:96:09:79:dd:
         8e:e1:97:f8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4IZiFleQtpJsytgHAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI2MDYwMjAxMDAxMFoXDTI2MDgzMTAxMDAxMFowLzEtMCsGA1UEAxMk
YjQ4ZDkwNTktOWIyNy00M2ZkLTlmMGYtNjAxZGNhMjc0MzI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2lwXiJU+AeEPdtcTU50YETa+COfP9Ass/ZH
lDU2a2DYttK0QQEFMH8ucQKa+uO5FVLulohKZX4uVcW6P4jkCT7A0EM3hbLzTyy+
oJExAr4Qv9UJvCZL8Wfv4mk+nFackJmob+kW1wOtFtkMOVAWKzsyhJZYfba67afS
6R7+vz9laxQQTeA3ax6LLAF7Ei0NojmE7jpcEqfYj6l47iSBEkL4ca5pE+yLbcT8
ud3xfp0PKhWjXuoxwYuJMOLjsBMYubTAFQGqLKtx8iur5Wpb5GhqyUZ/CyAQikqR
ppo7QX/rwo6rWilPceTDiLugWjklnTPLYmnSiFMn/M97ky0ryQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKH4BMPZKwb4pd5M3Lv6Pj6iLFfgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvNTNhMWU0NGYtNWM5Mi0z
ZjJkLTk1YmItNjA3OGY5YzVkNTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQAn+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADvgA31NQDjm6iqlwqlaIenmRwx3f7//ens3MXCPYBUkbf9vIxRXv0zn
HQdOts42yeV2Pc/3Cdn1s3jKtWc0ksoAe0kGM+CcjoivdegkpF+4IhuO4pN/gSw1
c2ZXKyCSaDeZKtZuqKUh9dz+GkgQICouxKd+oz9S4HglnkscFpmI0tJ/E+0outq4
PRH1H6TT/97jSWrc9Ul6o1GsWetfhF7HSVSAwVAstRKx3omo48XCFTa1oqcW4CEw
q3+ARLrRUVWvgFDM3Of+sfk9q+PFbabgfX58qQmGGU1KQ4xykM63rhgnSnc+48c1
f9DWQmgYfQCs8DeI9JuAlgl53Y7hl/g=
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:57:07 2026 by rpki-client