Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6/a064f050-df9c-349b-bb04-93fe63251bf9.roa
File:                     a064f050-df9c-349b-bb04-93fe63251bf9.roa (raw, json)
Hash identifier:          kMHVW+K9zue3fXyITjoQn11sHpTvMs/qdpYpAdGAvMk=
Subject key identifier:   7D:93:5C:96:1D:D1:86:9D:A8:43:02:5F:EE:84:D7:E7:E6:5D:FE:93
Certificate issuer:       /CN=d1a2d4b1-dd63-4ea3-8762-70d628347ca6
Certificate serial:       010D0C9F4328584CCA41F519F5E9F7E4B087D7C0
Authority key identifier: B3:AC:FE:4F:D4:AB:F0:4E:D1:07:A2:5F:2C:2F:D2:D0:43:17:FE:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6/a064f050-df9c-349b-bb04-93fe63251bf9.roa
Signing time:             Sun 08 Feb 2026 02:00:32 +0000
ROA not before:           Sun 08 Feb 2026 02:00:32 +0000
ROA not after:            Sat 09 May 2026 01:00:32 +0000
asID:                     398564
IP address blocks:        147.64.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6/d1a2d4b1-dd63-4ea3-8762-70d628347ca6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6/d1a2d4b1-dd63-4ea3-8762-70d628347ca6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ca:41:f5:19:f5:e9:f7:e4:b0:87:d7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1a2d4b1-dd63-4ea3-8762-70d628347ca6
        Validity
            Not Before: Feb  8 02:00:32 2026 GMT
            Not After : May  9 01:00:32 2026 GMT
        Subject: CN=e424be9c-2840-4ad2-9121-3857412bab3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:28:38:63:13:a4:ed:8b:30:60:ef:c2:1e:24:
                    72:2f:c3:29:a8:28:1b:cb:73:c4:d1:fd:d0:ba:98:
                    97:63:b9:7d:b8:6d:2f:8e:8e:e4:cb:7a:52:3b:e9:
                    c4:1b:30:ec:a8:3a:81:05:64:66:6f:65:d2:2c:fc:
                    7c:ef:05:44:9f:70:97:6b:01:ab:47:17:fc:73:f3:
                    62:ef:e3:c7:a0:61:d5:66:c4:6a:89:55:28:0a:b7:
                    09:99:ae:c4:f0:79:24:ff:25:eb:1c:38:71:6a:b3:
                    26:f1:4f:b3:ce:15:f0:d3:b7:fe:84:86:95:47:5c:
                    d2:e8:a0:9d:23:23:88:e5:cd:fd:5b:4e:ad:fe:73:
                    c0:8b:c3:b5:53:f4:1d:92:75:44:f5:25:41:4c:20:
                    be:23:46:10:c2:c9:15:3f:5f:6e:d2:ac:69:a2:25:
                    69:97:a6:a4:4d:a4:ae:36:f8:2f:d2:26:85:cb:fe:
                    b0:03:28:99:30:59:6e:1b:46:13:a4:17:81:72:1b:
                    5c:c3:43:21:b8:20:40:dd:7f:56:e8:1e:b8:2a:12:
                    e5:d5:cd:35:7c:4f:59:0f:65:37:18:96:91:8d:22:
                    5c:24:49:96:4b:93:eb:4d:26:f6:76:68:fd:a9:c7:
                    53:3f:e2:81:1e:40:a5:86:e9:94:cc:f7:b9:cb:75:
                    93:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:93:5C:96:1D:D1:86:9D:A8:43:02:5F:EE:84:D7:E7:E6:5D:FE:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6/a064f050-df9c-349b-bb04-93fe63251bf9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6/d1a2d4b1-dd63-4ea3-8762-70d628347ca6.crl

            X509v3 Authority Key Identifier:
                keyid:B3:AC:FE:4F:D4:AB:F0:4E:D1:07:A2:5F:2C:2F:D2:D0:43:17:FE:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.64.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:f4:18:1a:50:34:2b:26:79:be:ac:86:65:2f:62:bf:8a:99:
         cd:15:e0:e4:26:f2:a2:25:06:29:42:56:8b:97:ae:4c:1c:47:
         84:dd:90:85:3f:0b:3e:8f:a8:ee:e3:97:fb:da:52:d3:03:36:
         fc:84:50:ff:f4:f9:83:8b:7b:af:ea:60:1d:3e:b4:f8:08:c7:
         07:f6:db:eb:85:67:1e:65:60:5c:9f:bc:99:92:98:67:55:5e:
         c8:94:e2:37:90:cd:ac:53:7b:99:84:ad:b9:a1:fe:b2:94:fd:
         1b:ad:6b:09:6b:77:2d:30:ef:ee:74:1c:7a:d6:82:9f:1e:22:
         d4:cd:d5:f5:22:2e:c9:d9:1b:f2:a9:06:af:a0:54:f9:79:87:
         4e:52:4d:76:ae:e8:44:a6:28:2e:a1:b2:26:42:72:c5:85:1a:
         03:d0:54:c8:7c:86:12:67:e4:f1:55:98:0c:5b:e9:cd:d1:c6:
         ef:36:c0:4f:f1:3d:3a:ef:9c:e1:bd:0f:3a:49:2a:85:65:b6:
         9f:f0:b7:fc:6b:5c:31:89:7d:59:ac:8d:4d:4a:cb:94:d8:89:
         a8:ad:f1:21:6a:14:6b:48:d9:02:8e:d8:24:e2:00:80:c2:85:
         7d:11:b4:92:f6:f0:80:e9:a2:24:90:13:47:e6:e5:4b:60:e2:
         47:64:e0:b6
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEzKQfUZ9en35LCH18AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDFhMmQ0YjEtZGQ2My00ZWEzLTg3NjItNzBkNjI4MzQ3
Y2E2MB4XDTI2MDIwODAyMDAzMloXDTI2MDUwOTAxMDAzMlowLzEtMCsGA1UEAxMk
ZTQyNGJlOWMtMjg0MC00YWQyLTkxMjEtMzg1NzQxMmJhYjNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCg4YxOk7YswYO/CHiRyL8MpqCgby3PE0f3Q
upiXY7l9uG0vjo7ky3pSO+nEGzDsqDqBBWRmb2XSLPx87wVEn3CXawGrRxf8c/Ni
7+PHoGHVZsRqiVUoCrcJma7E8Hkk/yXrHDhxarMm8U+zzhXw07f+hIaVR1zS6KCd
IyOI5c39W06t/nPAi8O1U/QdknVE9SVBTCC+I0YQwskVP19u0qxpoiVpl6akTaSu
Nvgv0iaFy/6wAyiZMFluG0YTpBeBchtcw0MhuCBA3X9W6B64KhLl1c01fE9ZD2U3
GJaRjSJcJEmWS5PrTSb2dmj9qcdTP+KBHkClhumUzPe5y3WToQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFH2TXJYd0YadqEMCX+6E1+fmXf6TMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kMWEy
ZDRiMS1kZDYzLTRlYTMtODc2Mi03MGQ2MjgzNDdjYTYvYTA2NGYwNTAtZGY5Yy0z
NDliLWJiMDQtOTNmZTYzMjUxYmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDFhMmQ0YjEtZGQ2My00ZWEzLTg3
NjItNzBkNjI4MzQ3Y2E2L2QxYTJkNGIxLWRkNjMtNGVhMy04NzYyLTcwZDYyODM0
N2NhNi5jcmwwHwYDVR0jBBgwFoAUs6z+T9Sr8E7RB6JfLC/S0EMX/vswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9kMWEyZDRiMS1kZDYzLTRlYTMtODc2Mi03MGQ2
MjgzNDdjYTYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAk0AwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAOPQYGlA0KyZ5vqyGZS9iv4qZzRXg5CbyoiUGKUJWi5euTBxHhN2QhT8L
Po+o7uOX+9pS0wM2/IRQ//T5g4t7r+pgHT60+AjHB/bb64VnHmVgXJ+8mZKYZ1Ve
yJTiN5DNrFN7mYStuaH+spT9G61rCWt3LTDv7nQcetaCnx4i1M3V9SIuydkb8qkG
r6BU+XmHTlJNdq7oRKYoLqGyJkJyxYUaA9BUyHyGEmfk8VWYDFvpzdHG7zbAT/E9
Ou+c4b0POkkqhWW2n/C3/GtcMYl9WayNTUrLlNiJqK3xIWoUa0jZAo7YJOIAgMKF
fRG0kvbwgOmiJJATR+blS2DiR2Tgtg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:06:32 2026 by rpki-client