Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3292f16-bd24-4446-a83f-489f05a2076a/be4b8d90-b929-3e3a-a40f-7571bb524df0.roa
File:                     be4b8d90-b929-3e3a-a40f-7571bb524df0.roa (raw, json)
Hash identifier:          OtDFFg+Y8eBVMVqnHkj6pvJmP3KpqADakEdbZBjclf8=
Subject key identifier:   BD:ED:97:34:F1:A4:BD:52:5B:FA:4A:CD:C3:25:E5:38:A8:A4:57:E0
Certificate issuer:       /CN=d3292f16-bd24-4446-a83f-489f05a2076a
Certificate serial:       010D0C9F4328584D60E509796B3F5106CFC97D80
Authority key identifier: 2E:77:5A:98:AE:15:DB:04:99:A6:1B:5C:07:14:7C:4E:51:BF:EC:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3292f16-bd24-4446-a83f-489f05a2076a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3292f16-bd24-4446-a83f-489f05a2076a/be4b8d90-b929-3e3a-a40f-7571bb524df0.roa
Signing time:             Fri 03 Apr 2026 01:00:24 +0000
ROA not before:           Fri 03 Apr 2026 01:00:24 +0000
ROA not after:            Thu 02 Jul 2026 01:00:24 +0000
asID:                     5758
IP address blocks:        64.29.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3292f16-bd24-4446-a83f-489f05a2076a/d3292f16-bd24-4446-a83f-489f05a2076a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3292f16-bd24-4446-a83f-489f05a2076a/d3292f16-bd24-4446-a83f-489f05a2076a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3292f16-bd24-4446-a83f-489f05a2076a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:60:e5:09:79:6b:3f:51:06:cf:c9:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3292f16-bd24-4446-a83f-489f05a2076a
        Validity
            Not Before: Apr  3 01:00:24 2026 GMT
            Not After : Jul  2 01:00:24 2026 GMT
        Subject: CN=a90dbf8f-c4e2-41e1-a547-e282691a10d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5c:6b:00:56:7b:5f:41:3e:bc:11:7b:67:f6:
                    cf:7a:1a:8e:86:72:23:97:10:02:4c:5f:7a:65:9a:
                    10:5b:c3:fe:03:1d:7b:d8:2d:df:4e:ec:9e:5e:f6:
                    cf:62:2b:9a:86:e3:c7:ac:29:dc:f2:33:14:d0:99:
                    00:4e:92:02:57:7e:42:73:40:f5:41:ca:60:27:b2:
                    f6:31:04:85:1e:3a:b0:6a:f3:78:e8:d4:92:61:36:
                    cb:45:7d:23:28:23:11:4d:a7:f3:50:b3:86:a1:2d:
                    44:06:d5:88:0f:ec:c5:7d:56:f0:98:56:89:75:46:
                    11:0d:b0:1c:51:ce:72:bb:c8:ab:d4:2f:b8:5f:ca:
                    6c:09:20:24:3e:82:32:11:6f:99:b5:bb:24:ba:0d:
                    74:3a:b8:a5:e1:c9:e0:39:54:e5:a9:2d:fa:db:51:
                    86:66:74:be:5c:b4:c8:7b:3d:5d:6c:e9:17:32:6e:
                    e5:8e:51:27:69:1b:19:1f:86:f9:62:f8:82:10:ed:
                    d5:a7:a6:d9:be:07:f4:b8:c1:13:39:4f:01:25:ed:
                    a8:e5:18:39:4d:71:ce:51:62:51:a4:a8:ec:e5:86:
                    67:b0:49:e0:26:8a:83:b9:57:ba:e7:20:70:f8:15:
                    02:3e:4d:4c:d2:9f:e1:ef:4c:60:e5:33:21:18:73:
                    74:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:ED:97:34:F1:A4:BD:52:5B:FA:4A:CD:C3:25:E5:38:A8:A4:57:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3292f16-bd24-4446-a83f-489f05a2076a/be4b8d90-b929-3e3a-a40f-7571bb524df0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3292f16-bd24-4446-a83f-489f05a2076a/d3292f16-bd24-4446-a83f-489f05a2076a.crl

            X509v3 Authority Key Identifier:
                keyid:2E:77:5A:98:AE:15:DB:04:99:A6:1B:5C:07:14:7C:4E:51:BF:EC:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3292f16-bd24-4446-a83f-489f05a2076a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.29.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:92:d2:07:8a:24:fc:d3:1f:7a:1f:9f:d7:53:16:2d:dd:91:
         d2:1f:47:e6:8d:c2:e7:b1:1a:fb:77:b8:f3:84:80:96:22:19:
         f2:05:e1:0d:6c:3a:f3:40:a7:22:db:dd:bb:5d:1e:6d:cf:e6:
         77:0b:2a:9f:3a:03:ea:3d:9b:7a:51:a8:1e:be:43:fb:80:3f:
         b2:bd:6b:2f:97:d3:3e:6b:b2:80:82:1b:18:fa:68:4c:91:59:
         4d:08:9e:74:7d:cd:64:98:84:b4:dc:fb:e8:69:2e:e7:8f:32:
         0c:b4:37:b7:e6:f4:c9:41:be:02:dd:e2:98:c3:e0:73:75:c5:
         47:a7:6e:49:49:71:51:3e:16:b3:3b:33:ee:f9:cc:d3:cc:2f:
         69:23:f2:e1:ed:87:dd:34:6d:09:84:46:98:63:1e:bc:23:20:
         d8:9c:a1:03:24:82:bd:29:5f:52:ac:30:f5:24:c5:cb:cb:bb:
         e5:d4:ee:b0:b0:b4:bf:2d:72:73:4d:6e:d4:f9:c0:54:56:df:
         ec:fa:4e:4d:75:21:5b:3f:43:e4:61:12:90:b3:0d:a3:74:46:
         bf:e7:36:7d:05:a2:e9:9d:a1:98:e5:3c:1f:2c:cf:91:9d:51:
         13:99:77:a4:b3:15:52:5c:cf:b9:6b:48:5b:9d:77:5d:f0:de:
         68:99:77:fc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1g5Ql5az9RBs/JfYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDMyOTJmMTYtYmQyNC00NDQ2LWE4M2YtNDg5ZjA1YTIw
NzZhMB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk
YTkwZGJmOGYtYzRlMi00MWUxLWE1NDctZTI4MjY5MWExMGQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVxrAFZ7X0E+vBF7Z/bPehqOhnIjlxACTF96
ZZoQW8P+Ax172C3fTuyeXvbPYiuahuPHrCnc8jMU0JkATpICV35Cc0D1QcpgJ7L2
MQSFHjqwavN46NSSYTbLRX0jKCMRTafzULOGoS1EBtWID+zFfVbwmFaJdUYRDbAc
Uc5yu8ir1C+4X8psCSAkPoIyEW+Ztbskug10Oril4cngOVTlqS3621GGZnS+XLTI
ez1dbOkXMm7ljlEnaRsZH4b5YviCEO3Vp6bZvgf0uMETOU8BJe2o5Rg5TXHOUWJR
pKjs5YZnsEngJoqDuVe65yBw+BUCPk1M0p/h70xg5TMhGHN0swIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL3tlzTxpL1SW/pKzcMl5TiopFfgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kMzI5
MmYxNi1iZDI0LTQ0NDYtYTgzZi00ODlmMDVhMjA3NmEvYmU0YjhkOTAtYjkyOS0z
ZTNhLWE0MGYtNzU3MWJiNTI0ZGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDMyOTJmMTYtYmQyNC00NDQ2LWE4
M2YtNDg5ZjA1YTIwNzZhL2QzMjkyZjE2LWJkMjQtNDQ0Ni1hODNmLTQ4OWYwNWEy
MDc2YS5jcmwwHwYDVR0jBBgwFoAULndamK4V2wSZphtcBxR8TlG/7MAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9kMzI5MmYxNi1iZDI0LTQ0NDYtYTgzZi00ODlm
MDVhMjA3NmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQB1wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAASS0geKJPzTH3ofn9dTFi3dkdIfR+aNwuexGvt3uPOEgJYiGfIF4Q1s
OvNApyLb3btdHm3P5ncLKp86A+o9m3pRqB6+Q/uAP7K9ay+X0z5rsoCCGxj6aEyR
WU0InnR9zWSYhLTc++hpLuePMgy0N7fm9MlBvgLd4pjD4HN1xUenbklJcVE+FrM7
M+75zNPML2kj8uHth900bQmERphjHrwjINicoQMkgr0pX1KsMPUkxcvLu+XU7rCw
tL8tcnNNbtT5wFRW3+z6Tk11IVs/Q+RhEpCzDaN0Rr/nNn0FoumdoZjlPB8sz5Gd
UROZd6SzFVJcz7lrSFudd13w3miZd/w=
-----END CERTIFICATE-----
Generated at Sat Apr 18 04:59:22 2026 by rpki-client