Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fe4bab3d-52a1-4962-a596-99f18f33ad07/ea2571ec-a13e-332b-97ae-a91088ff4eb3.roa
File:                     ea2571ec-a13e-332b-97ae-a91088ff4eb3.roa (raw, json)
Hash identifier:          GXYYxjmSZXjsr/QcgQAerYj/PTCRPtmvug6FS97M8KM=
Subject key identifier:   BC:0C:E2:98:7B:54:FD:FD:94:79:B4:69:55:72:3F:F8:D8:D8:96:90
Certificate issuer:       /CN=fe4bab3d-52a1-4962-a596-99f18f33ad07
Certificate serial:       010D0C9F4328584D524345E27E72D29587A17EC0
Authority key identifier: DB:3B:D7:5E:4E:6E:42:B3:70:D2:3D:85:10:DE:83:1F:86:B3:13:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fe4bab3d-52a1-4962-a596-99f18f33ad07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fe4bab3d-52a1-4962-a596-99f18f33ad07/ea2571ec-a13e-332b-97ae-a91088ff4eb3.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     16896
IP address blocks:        64.32.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fe4bab3d-52a1-4962-a596-99f18f33ad07/fe4bab3d-52a1-4962-a596-99f18f33ad07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fe4bab3d-52a1-4962-a596-99f18f33ad07/fe4bab3d-52a1-4962-a596-99f18f33ad07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fe4bab3d-52a1-4962-a596-99f18f33ad07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:45:e2:7e:72:d2:95:87:a1:7e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe4bab3d-52a1-4962-a596-99f18f33ad07
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=85095294-5b7e-4b39-a46e-f7c756cacb9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e4:ae:0d:6b:e3:cd:06:e4:d7:44:c5:7b:da:
                    e4:21:25:1a:02:a4:56:2c:11:b8:a4:93:a5:49:da:
                    ed:69:e2:14:4e:05:0f:a3:f9:39:39:a6:ca:83:11:
                    8c:23:77:b1:5a:27:3f:75:50:4a:1d:22:21:ac:cf:
                    4a:c8:19:b6:85:86:0d:d9:10:1c:b3:2b:4b:0a:95:
                    1e:3d:ab:96:36:80:41:ba:0f:d1:2a:71:8e:2a:f4:
                    d3:9c:7b:a6:70:22:99:42:06:09:b7:1b:fe:a3:3d:
                    eb:85:8f:5d:5f:ff:c1:97:61:25:2b:4a:17:25:08:
                    4a:b9:29:13:29:35:ef:c1:58:05:c4:a3:97:d1:98:
                    cc:82:19:bf:44:e4:40:ff:65:05:4f:4f:b3:1e:4c:
                    27:9a:c9:04:24:97:23:9f:35:5e:18:eb:e7:b7:99:
                    34:45:0f:c7:2c:4a:e4:0c:b6:64:c5:ad:11:5d:ae:
                    29:ef:b5:ce:b0:8e:32:f7:42:1a:23:c2:b4:47:57:
                    7c:41:d8:90:98:b9:53:10:38:91:91:bf:af:67:8a:
                    c5:18:84:aa:3e:ed:94:f8:03:dc:5b:ce:e2:37:4f:
                    2e:55:ae:44:6f:6a:0e:9e:5e:66:d4:75:d0:51:f4:
                    d3:f9:11:2a:c1:87:86:3b:ba:75:fc:91:47:90:78:
                    76:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:0C:E2:98:7B:54:FD:FD:94:79:B4:69:55:72:3F:F8:D8:D8:96:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fe4bab3d-52a1-4962-a596-99f18f33ad07/ea2571ec-a13e-332b-97ae-a91088ff4eb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fe4bab3d-52a1-4962-a596-99f18f33ad07/fe4bab3d-52a1-4962-a596-99f18f33ad07.crl

            X509v3 Authority Key Identifier:
                keyid:DB:3B:D7:5E:4E:6E:42:B3:70:D2:3D:85:10:DE:83:1F:86:B3:13:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fe4bab3d-52a1-4962-a596-99f18f33ad07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.32.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:28:15:b3:88:bc:ca:87:df:58:9c:98:3d:79:12:d4:b5:86:
         f6:a5:a2:05:45:47:9a:fb:a5:c2:a7:47:7e:ec:11:e3:82:bb:
         44:37:6d:67:5d:e1:67:d4:68:1b:3e:25:cf:86:67:cd:22:56:
         e7:54:5c:da:c3:ee:5e:58:f3:af:3d:f5:6a:c4:d9:20:a1:73:
         f0:ef:36:ef:4c:88:75:24:eb:f1:89:6f:ac:d2:39:a3:2a:8a:
         48:aa:4d:34:56:de:7e:ac:09:e2:72:89:17:e2:2a:92:2c:bd:
         15:ba:ba:f9:67:95:40:27:b4:df:81:7c:a7:4b:ec:93:aa:07:
         3d:f7:88:07:0b:04:1e:c3:da:e9:99:72:d3:67:0d:37:d1:d6:
         5b:28:1f:b9:9f:1e:ae:d6:d3:e9:23:89:3e:34:b9:9e:51:bc:
         6f:da:0d:22:e8:f2:60:85:8e:61:04:59:75:96:9e:76:b0:12:
         cb:5c:8d:09:3f:00:0b:d9:b2:8e:19:b2:03:83:66:cc:d4:6e:
         49:6e:89:d8:e1:fe:d7:e7:ee:5e:cc:85:f6:fa:8c:26:3c:9c:
         03:cb:d5:ac:df:25:e6:98:ea:a5:e6:e1:ff:3c:d0:29:b8:28:
         c7:c1:20:2e:bc:da:2b:9a:d1:57:51:cb:14:55:15:ea:a2:67:
         e1:46:b7:b3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ0XifnLSlYehfsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmU0YmFiM2QtNTJhMS00OTYyLWE1OTYtOTlmMThmMzNh
ZDA3MB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk
ODUwOTUyOTQtNWI3ZS00YjM5LWE0NmUtZjdjNzU2Y2FjYjliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOSuDWvjzQbk10TFe9rkISUaAqRWLBG4pJOl
SdrtaeIUTgUPo/k5OabKgxGMI3exWic/dVBKHSIhrM9KyBm2hYYN2RAcsytLCpUe
PauWNoBBug/RKnGOKvTTnHumcCKZQgYJtxv+oz3rhY9dX//Bl2ElK0oXJQhKuSkT
KTXvwVgFxKOX0ZjMghm/RORA/2UFT0+zHkwnmskEJJcjnzVeGOvnt5k0RQ/HLErk
DLZkxa0RXa4p77XOsI4y90IaI8K0R1d8QdiQmLlTEDiRkb+vZ4rFGISqPu2U+APc
W87iN08uVa5Eb2oOnl5m1HXQUfTT+REqwYeGO7p1/JFHkHh2pwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLwM4ph7VP39lHm0aVVyP/jY2JaQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZTRi
YWIzZC01MmExLTQ5NjItYTU5Ni05OWYxOGYzM2FkMDcvZWEyNTcxZWMtYTEzZS0z
MzJiLTk3YWUtYTkxMDg4ZmY0ZWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmU0YmFiM2QtNTJhMS00OTYyLWE1
OTYtOTlmMThmMzNhZDA3L2ZlNGJhYjNkLTUyYTEtNDk2Mi1hNTk2LTk5ZjE4ZjMz
YWQwNy5jcmwwHwYDVR0jBBgwFoAU2zvXXk5uQrNw0j2FEN6DH4azE2IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZTRiYWIzZC01MmExLTQ5NjItYTU5Ni05OWYx
OGYzM2FkMDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCApMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF8oFbOIvMqH31icmD15EtS1hvalogVFR5r7pcKnR37sEeOCu0Q3bWdd
4WfUaBs+Jc+GZ80iVudUXNrD7l5Y86899WrE2SChc/DvNu9MiHUk6/GJb6zSOaMq
ikiqTTRW3n6sCeJyiRfiKpIsvRW6uvlnlUAntN+BfKdL7JOqBz33iAcLBB7D2umZ
ctNnDTfR1lsoH7mfHq7W0+kjiT40uZ5RvG/aDSLo8mCFjmEEWXWWnnawEstcjQk/
AAvZso4ZsgODZszUbkluidjh/tfn7l7Mhfb6jCY8nAPL1azfJeaY6qXm4f880Cm4
KMfBIC682iua0VdRyxRVFeqiZ+FGt7M=
-----END CERTIFICATE-----
Generated at Fri Apr 17 01:44:21 2026 by rpki-client