Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c/33111570-d8d7-3e47-925b-bf3d43b8c236.roa
File:                     33111570-d8d7-3e47-925b-bf3d43b8c236.roa (raw, json)
Hash identifier:          mUkqwoOxA59VN7ZNRYHs8Q6r2hjplOpm+StA798A+WE=
Subject key identifier:   58:3D:36:11:80:DE:7D:EC:59:0A:19:DD:F1:26:9F:91:91:F0:54:8D
Certificate issuer:       /CN=b794e507-3ed1-4151-855d-6305696fcb0c
Certificate serial:       010D0C9F4328584EA5AA6F88968C8831796E1960
Authority key identifier: D1:67:3E:09:96:F9:3A:0A:2D:95:28:BE:75:72:9D:15:38:1C:F0:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c/33111570-d8d7-3e47-925b-bf3d43b8c236.roa
Signing time:             Tue 28 Jul 2026 09:00:11 +0000
ROA not before:           Tue 28 Jul 2026 09:00:11 +0000
ROA not after:            Mon 26 Oct 2026 09:00:11 +0000
asID:                     26464
IP address blocks:        64.30.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c/b794e507-3ed1-4151-855d-6305696fcb0c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c/b794e507-3ed1-4151-855d-6305696fcb0c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a5:aa:6f:88:96:8c:88:31:79:6e:19:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b794e507-3ed1-4151-855d-6305696fcb0c
        Validity
            Not Before: Jul 28 09:00:11 2026 GMT
            Not After : Oct 26 09:00:11 2026 GMT
        Subject: CN=243e8cd5-9c55-4b76-a093-a59662e95b66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8f:07:0d:ab:b5:05:64:24:19:74:aa:12:65:
                    9d:75:6e:b5:4b:e4:56:da:23:d1:19:31:be:39:90:
                    22:7c:91:75:4c:c3:69:8c:f5:5a:e7:b9:98:e5:bf:
                    89:2f:db:af:6e:d0:48:a7:19:7e:d9:5b:d4:e3:76:
                    80:35:75:f3:da:49:8a:8e:d0:3a:af:6d:fd:70:06:
                    6b:49:b2:33:ac:0e:52:af:1b:b7:ff:fd:5c:d8:2b:
                    09:34:17:42:04:cb:25:2e:74:7f:7b:33:bd:b4:00:
                    1c:80:29:89:e7:4b:3d:41:98:46:f6:9d:af:f0:77:
                    0a:ea:06:2d:f6:aa:33:09:c8:56:30:05:20:5e:f1:
                    a7:c0:fc:92:35:35:90:fc:18:30:61:8e:9d:00:44:
                    fb:aa:20:6c:59:c2:6b:f4:b4:84:44:5c:35:c4:85:
                    77:56:41:b4:1e:f3:91:d0:75:ef:7c:a8:ae:d1:fb:
                    4c:e5:60:47:d9:4f:28:8b:ea:6d:bb:3c:91:95:09:
                    96:53:bf:a1:8b:58:20:d2:1d:97:26:ef:36:20:54:
                    4f:53:1c:96:f9:dd:dc:f3:eb:2b:40:7f:b9:5f:47:
                    94:75:b3:5b:57:1e:c6:fa:e1:88:2d:e0:9e:2c:e5:
                    58:28:a1:bb:25:1a:34:1d:56:5c:8c:25:2c:42:31:
                    da:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:3D:36:11:80:DE:7D:EC:59:0A:19:DD:F1:26:9F:91:91:F0:54:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c/33111570-d8d7-3e47-925b-bf3d43b8c236.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c/b794e507-3ed1-4151-855d-6305696fcb0c.crl

            X509v3 Authority Key Identifier:
                keyid:D1:67:3E:09:96:F9:3A:0A:2D:95:28:BE:75:72:9D:15:38:1C:F0:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.30.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:a2:31:8b:8f:fb:50:20:b3:19:df:23:0f:20:8c:8c:10:c3:
         87:21:ad:69:b2:55:28:9a:32:b5:54:14:a8:e8:50:48:22:cb:
         0e:b8:cc:a7:75:2f:74:dc:91:35:fa:90:2a:53:3f:a0:f1:25:
         dc:3a:20:f0:05:7d:93:66:95:d3:5e:c8:b7:41:b2:9c:44:7a:
         b0:f1:d0:4a:d4:d3:0a:8b:d6:e3:46:00:61:50:91:d7:9f:e9:
         de:2d:ef:7a:5e:42:93:ba:5d:28:ad:cb:ea:3a:25:a4:10:9b:
         21:44:f9:ef:4a:ab:3b:1f:97:3a:40:fc:22:75:03:1b:f0:b4:
         f6:07:1b:ff:10:12:d9:be:cd:9a:6d:93:81:ed:ad:4f:75:2b:
         ed:a8:2a:b4:cb:62:6f:93:ca:62:ea:7c:c2:f8:d5:cb:d9:ed:
         d6:93:c6:cd:11:19:8b:62:0e:83:e9:2c:02:33:e0:cd:f9:e0:
         a1:48:28:a5:a6:01:b2:a0:06:a4:31:5b:34:d6:aa:5c:95:47:
         4c:3b:ac:79:43:99:95:af:45:72:5c:53:b2:ee:25:48:68:bb:
         4b:3a:59:bc:33:b7:35:ef:59:a3:18:46:e3:67:d1:3a:3e:ef:
         49:66:e2:ed:6b:fd:9a:cb:12:ae:3c:b3:8f:41:7f:dd:0c:cc:
         e6:63:7c:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6lqm+IloyIMXluGWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjc5NGU1MDctM2VkMS00MTUxLTg1NWQtNjMwNTY5NmZj
YjBjMB4XDTI2MDcyODA5MDAxMVoXDTI2MTAyNjA5MDAxMVowLzEtMCsGA1UEAxMk
MjQzZThjZDUtOWM1NS00Yjc2LWEwOTMtYTU5NjYyZTk1YjY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApY8HDau1BWQkGXSqEmWddW61S+RW2iPRGTG+
OZAifJF1TMNpjPVa57mY5b+JL9uvbtBIpxl+2VvU43aANXXz2kmKjtA6r239cAZr
SbIzrA5Srxu3//1c2CsJNBdCBMslLnR/ezO9tAAcgCmJ50s9QZhG9p2v8HcK6gYt
9qozCchWMAUgXvGnwPySNTWQ/BgwYY6dAET7qiBsWcJr9LSERFw1xIV3VkG0HvOR
0HXvfKiu0ftM5WBH2U8oi+ptuzyRlQmWU7+hi1gg0h2XJu82IFRPUxyW+d3c8+sr
QH+5X0eUdbNbVx7G+uGILeCeLOVYKKG7JRo0HVZcjCUsQjHaqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFg9NhGA3n3sWQoZ3fEmn5GR8FSNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iNzk0
ZTUwNy0zZWQxLTQxNTEtODU1ZC02MzA1Njk2ZmNiMGMvMzMxMTE1NzAtZDhkNy0z
ZTQ3LTkyNWItYmYzZDQzYjhjMjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjc5NGU1MDctM2VkMS00MTUxLTg1
NWQtNjMwNTY5NmZjYjBjL2I3OTRlNTA3LTNlZDEtNDE1MS04NTVkLTYzMDU2OTZm
Y2IwYy5jcmwwHwYDVR0jBBgwFoAU0Wc+CZb5OgotlSi+dXKdFTgc8JAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9iNzk0ZTUwNy0zZWQxLTQxNTEtODU1ZC02MzA1
Njk2ZmNiMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQB6AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACyiMYuP+1AgsxnfIw8gjIwQw4chrWmyVSiaMrVUFKjoUEgiyw64zKd1
L3TckTX6kCpTP6DxJdw6IPAFfZNmldNeyLdBspxEerDx0ErU0wqL1uNGAGFQkdef
6d4t73peQpO6XSity+o6JaQQmyFE+e9KqzsflzpA/CJ1AxvwtPYHG/8QEtm+zZpt
k4HtrU91K+2oKrTLYm+TymLqfML41cvZ7daTxs0RGYtiDoPpLAIz4M354KFIKKWm
AbKgBqQxWzTWqlyVR0w7rHlDmZWvRXJcU7LuJUhou0s6WbwztzXvWaMYRuNn0To+
70lm4u1r/ZrLEq48s49Bf90MzOZjfK8=
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:33:16 2026 by rpki-client