Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/bfd3961a-a871-3f89-902e-5f5403f87c57.roa
File:                     bfd3961a-a871-3f89-902e-5f5403f87c57.roa (raw, json)
Hash identifier:          PQU0+tWT9c+FFxZPDqlePoqrwdfEYvlYlr+lhYaGU+c=
Subject key identifier:   45:5D:9C:D3:D7:3B:49:5E:0A:8F:E9:B3:EB:A4:FF:78:31:96:0B:FF
Certificate issuer:       /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Certificate serial:       010D0C9F4328584CC7774297B0A0F366FFAD0600
Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/bfd3961a-a871-3f89-902e-5f5403f87c57.roa
Signing time:             Sat 07 Feb 2026 02:00:31 +0000
ROA not before:           Sat 07 Feb 2026 02:00:31 +0000
ROA not after:            Fri 08 May 2026 01:00:31 +0000
asID:                     393878
IP address blocks:        64.18.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c7:77:42:97:b0:a0:f3:66:ff:ad:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
        Validity
            Not Before: Feb  7 02:00:31 2026 GMT
            Not After : May  8 01:00:31 2026 GMT
        Subject: CN=26394e17-8639-4b53-bd50-7c785b495ab1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:26:9c:4d:29:17:d9:b4:01:30:2b:5e:bd:23:
                    3b:09:7f:0f:22:f2:28:05:b5:88:b2:7d:6e:48:a9:
                    70:3e:7a:c7:01:3b:36:61:1b:75:19:48:4a:e4:53:
                    c0:cc:55:47:1f:a4:c5:35:ea:5a:70:cf:6b:47:72:
                    09:64:d9:9c:05:1f:bb:6f:d3:d9:b4:86:82:62:66:
                    af:6b:96:d2:dd:21:45:23:70:d7:71:bd:34:84:03:
                    8a:88:24:9b:25:41:83:52:51:18:2d:14:b9:82:fa:
                    d4:3f:0c:3f:47:7f:9b:5c:17:05:6e:a3:3f:d6:61:
                    29:ab:e1:f3:f7:d4:9c:d0:d8:3e:c8:a4:bd:57:e1:
                    4e:09:0e:09:ce:3b:97:f6:d4:47:d2:df:56:49:c5:
                    b2:e1:82:1a:e0:c7:15:c8:2d:42:ae:0c:75:08:00:
                    98:b8:17:be:b0:4f:fc:4e:81:65:bc:32:06:09:6b:
                    53:b8:dc:5a:42:bc:e9:44:84:f2:3e:b4:1b:70:55:
                    67:06:6b:6a:81:5b:07:cd:f1:91:ea:92:c1:0c:8b:
                    67:97:d2:89:a1:4e:a9:22:de:eb:0d:3d:59:e2:58:
                    30:17:be:55:5c:19:8f:74:ab:5c:67:5b:6a:18:19:
                    f2:e6:c5:32:b0:bf:06:ce:35:b0:a5:f6:c9:df:8c:
                    11:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:5D:9C:D3:D7:3B:49:5E:0A:8F:E9:B3:EB:A4:FF:78:31:96:0B:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/bfd3961a-a871-3f89-902e-5f5403f87c57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.18.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:09:6c:4f:cb:b9:76:cf:9e:31:42:99:3b:e1:96:c0:72:a0:
         56:4c:4a:bc:c0:df:0a:1b:d1:5b:19:ea:3a:90:aa:49:2e:a0:
         2d:74:a5:82:87:c1:ef:fa:09:fe:f1:ef:64:8d:d0:70:9f:42:
         68:d9:d5:48:bf:cd:c6:b8:12:64:83:fa:c7:56:94:3d:d7:bd:
         ed:3d:ad:d6:bb:00:3c:69:34:b8:76:50:2c:90:92:60:80:ab:
         e5:18:c7:af:37:4b:40:28:f7:af:a5:2f:d0:4b:35:fe:50:27:
         a7:e7:57:b0:6e:f6:3d:28:cd:b0:84:8c:13:7f:7a:61:45:9b:
         ff:2d:79:93:68:4f:dd:41:bb:db:af:81:b2:56:a0:5b:42:7a:
         b1:ca:1e:8a:22:72:45:63:45:93:d6:19:e8:ec:6e:c6:1b:68:
         12:19:d7:65:a5:cd:c9:ba:3e:e4:54:20:bf:68:56:eb:95:7d:
         d8:b4:0d:84:ab:00:00:c3:20:e4:6c:aa:52:ce:1c:d4:06:b7:
         ed:da:ff:f1:8e:9a:d9:2b:12:4b:77:ce:d4:09:21:f4:d9:84:
         5e:94:b6:c2:11:b1:91:9f:a0:f0:9e:3a:ef:d8:ca:90:e2:b8:
         3a:4d:d3:a5:66:f3:1a:46:b8:91:ab:be:5f:7a:9a:a2:52:72:
         d4:d9:5e:fd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzHd0KXsKDzZv+tBgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTcxZmYzOTItZGQzMy00ZWE4LTljMWItOGFmZGQ0Mjk5
NzdmMB4XDTI2MDIwNzAyMDAzMVoXDTI2MDUwODAxMDAzMVowLzEtMCsGA1UEAxMk
MjYzOTRlMTctODYzOS00YjUzLWJkNTAtN2M3ODViNDk1YWIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyacTSkX2bQBMCtevSM7CX8PIvIoBbWIsn1u
SKlwPnrHATs2YRt1GUhK5FPAzFVHH6TFNepacM9rR3IJZNmcBR+7b9PZtIaCYmav
a5bS3SFFI3DXcb00hAOKiCSbJUGDUlEYLRS5gvrUPww/R3+bXBcFbqM/1mEpq+Hz
99Sc0Ng+yKS9V+FOCQ4JzjuX9tRH0t9WScWy4YIa4McVyC1Crgx1CACYuBe+sE/8
ToFlvDIGCWtTuNxaQrzpRITyPrQbcFVnBmtqgVsHzfGR6pLBDItnl9KJoU6pIt7r
DT1Z4lgwF75VXBmPdKtcZ1tqGBny5sUysL8GzjWwpfbJ34wRGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEVdnNPXO0leCo/ps+uk/3gxlgv/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFm
ZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZkZDQyOTk3N2YvYmZkMzk2MWEtYTg3MS0z
Zjg5LTkwMmUtNWY1NDAzZjg3YzU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTcxZmYzOTItZGQzMy00ZWE4LTlj
MWItOGFmZGQ0Mjk5NzdmL2E3MWZmMzkyLWRkMzMtNGVhOC05YzFiLThhZmRkNDI5
OTc3Zi5jcmwwHwYDVR0jBBgwFoAUrknJUG2uUJbz62ommeoYPXRw8cUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFmZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZk
ZDQyOTk3N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQBKQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEAJbE/LuXbPnjFCmTvhlsByoFZMSrzA3wob0VsZ6jqQqkkuoC10pYKH
we/6Cf7x72SN0HCfQmjZ1Ui/zca4EmSD+sdWlD3Xve09rda7ADxpNLh2UCyQkmCA
q+UYx683S0Ao96+lL9BLNf5QJ6fnV7Bu9j0ozbCEjBN/emFFm/8teZNoT91Bu9uv
gbJWoFtCerHKHooickVjRZPWGejsbsYbaBIZ12Wlzcm6PuRUIL9oVuuVfdi0DYSr
AADDIORsqlLOHNQGt+3a//GOmtkrEkt3ztQJIfTZhF6UtsIRsZGfoPCeOu/YypDi
uDpN06Vm8xpGuJGrvl96mqJSctTZXv0=
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:14 2026 by rpki-client