Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/4dd8305e-e04a-3ce1-a306-cad4284760dd.roa
File:                     4dd8305e-e04a-3ce1-a306-cad4284760dd.roa (raw, json)
Hash identifier:          mQELek7ksVD5vvManUv9GynSSaW3DyQ0N0wHV09KZw0=
Subject key identifier:   81:45:45:E5:A3:99:1F:05:82:51:F0:2C:B2:95:F3:3F:C8:51:33:92
Certificate issuer:       /CN=28df346d-3f66-4555-b2ab-67f450efdcb3
Certificate serial:       010D0C9F4328584DE15075FBC5A74AD8CD339180
Authority key identifier: D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/4dd8305e-e04a-3ce1-a306-cad4284760dd.roa
Signing time:             Tue 19 May 2026 01:00:24 +0000
ROA not before:           Tue 19 May 2026 01:00:24 +0000
ROA not after:            Mon 17 Aug 2026 01:00:24 +0000
asID:                     14230
IP address blocks:        64.71.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e1:50:75:fb:c5:a7:4a:d8:cd:33:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28df346d-3f66-4555-b2ab-67f450efdcb3
        Validity
            Not Before: May 19 01:00:24 2026 GMT
            Not After : Aug 17 01:00:24 2026 GMT
        Subject: CN=9b42fd2f-3f83-4876-b227-2465f62d6cb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:1f:64:47:ca:8d:c1:6c:b4:0e:87:aa:46:80:
                    f4:58:35:05:61:74:bc:f2:d9:66:21:62:a8:75:47:
                    e8:f4:68:e2:21:b3:fd:5e:a7:7c:85:f4:62:cb:7e:
                    ce:3a:e5:f2:fc:26:f2:46:d0:fd:11:f2:55:de:18:
                    61:07:cd:52:f1:f1:55:30:1b:37:87:86:23:e4:3b:
                    00:47:02:71:d4:17:cf:21:cf:90:aa:59:2c:92:08:
                    62:66:e1:33:2b:ec:e9:1e:89:2f:3c:72:ca:8f:2e:
                    6b:65:d6:16:d9:9b:35:25:12:1b:8f:b4:07:56:96:
                    df:52:2b:f2:dc:14:ed:63:00:3b:3c:ff:08:fc:d4:
                    06:b7:f1:83:a7:77:c9:6b:d6:38:bc:65:22:ca:18:
                    26:75:b3:b7:fa:c1:5f:49:c4:19:44:ee:d1:cb:8f:
                    e1:66:81:f2:c5:be:d6:50:15:bd:2e:ff:84:1b:41:
                    e2:23:35:46:4f:03:61:c5:43:17:42:6a:8e:34:98:
                    32:a6:b3:8e:26:5e:07:11:ba:98:62:28:92:2f:fe:
                    b8:e1:1e:f5:38:55:27:21:5f:b0:87:8d:8d:5e:bf:
                    59:a4:26:4a:65:fe:d9:5a:6b:bf:e9:7d:3e:7e:41:
                    c7:6f:6c:49:a0:f4:4c:a5:03:34:c3:ff:b8:1c:10:
                    54:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:45:45:E5:A3:99:1F:05:82:51:F0:2C:B2:95:F3:3F:C8:51:33:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/4dd8305e-e04a-3ce1-a306-cad4284760dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl

            X509v3 Authority Key Identifier:
                keyid:D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.71.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:c1:58:58:b8:de:04:64:27:64:26:db:35:d7:08:d9:ec:2a:
         40:72:25:10:c5:fd:fe:42:66:eb:ed:a4:6d:13:5e:a9:f2:bd:
         a1:c4:72:94:42:50:38:95:14:93:0f:93:22:0a:0c:f4:4b:9b:
         13:ab:b0:f5:49:2d:cc:bc:d1:d4:87:2e:b7:02:a0:2a:52:c3:
         d9:ff:0c:d4:43:e6:1c:27:e7:50:36:dc:be:b4:c7:99:b2:25:
         db:87:31:42:00:53:f5:03:59:39:11:38:be:f2:5f:c9:b5:20:
         4c:7b:bb:07:16:af:cd:09:20:fc:54:8e:7d:3c:ac:7e:fe:a1:
         27:6a:30:2a:a6:93:bb:3c:79:40:e1:18:00:1f:49:2f:e1:c0:
         4d:b1:99:e1:38:ac:3a:53:3a:de:fa:53:e5:f5:86:f6:c6:bd:
         ff:2a:4e:35:f0:61:0b:60:36:50:1f:ae:0b:1e:36:fb:87:6a:
         7a:e1:77:07:42:98:2c:0e:4c:f9:34:63:ad:9a:3a:9b:03:c0:
         11:98:d3:c3:0c:d0:77:6e:a5:5b:da:1f:78:a5:94:83:2a:ff:
         89:65:d6:b9:e6:e0:93:e0:d0:f6:97:c4:9d:83:5e:04:a8:35:
         8a:0a:29:c4:d8:b1:3a:8e:a9:91:d8:34:11:01:86:55:9e:89:
         41:03:7d:15
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3hUHX7xadK2M0zkYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjhkZjM0NmQtM2Y2Ni00NTU1LWIyYWItNjdmNDUwZWZk
Y2IzMB4XDTI2MDUxOTAxMDAyNFoXDTI2MDgxNzAxMDAyNFowLzEtMCsGA1UEAxMk
OWI0MmZkMmYtM2Y4My00ODc2LWIyMjctMjQ2NWY2MmQ2Y2I4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhx9kR8qNwWy0DoeqRoD0WDUFYXS88tlmIWKo
dUfo9GjiIbP9Xqd8hfRiy37OOuXy/CbyRtD9EfJV3hhhB81S8fFVMBs3h4Yj5DsA
RwJx1BfPIc+QqlkskghiZuEzK+zpHokvPHLKjy5rZdYW2Zs1JRIbj7QHVpbfUivy
3BTtYwA7PP8I/NQGt/GDp3fJa9Y4vGUiyhgmdbO3+sFfScQZRO7Ry4/hZoHyxb7W
UBW9Lv+EG0HiIzVGTwNhxUMXQmqONJgyprOOJl4HEbqYYiiSL/644R71OFUnIV+w
h42NXr9ZpCZKZf7ZWmu/6X0+fkHHb2xJoPRMpQM0w/+4HBBUzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIFFReWjmR8FglHwLLKV8z/IUTOSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yOGRm
MzQ2ZC0zZjY2LTQ1NTUtYjJhYi02N2Y0NTBlZmRjYjMvNGRkODMwNWUtZTA0YS0z
Y2UxLWEzMDYtY2FkNDI4NDc2MGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjhkZjM0NmQtM2Y2Ni00NTU1LWIy
YWItNjdmNDUwZWZkY2IzLzI4ZGYzNDZkLTNmNjYtNDU1NS1iMmFiLTY3ZjQ1MGVm
ZGNiMy5jcmwwHwYDVR0jBBgwFoAU0TE0tLR3LAyK//WCA1AodurlHZ4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8yOGRmMzQ2ZC0zZjY2LTQ1NTUtYjJhYi02N2Y0
NTBlZmRjYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQEfAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC7BWFi43gRkJ2Qm2zXXCNnsKkByJRDF/f5CZuvtpG0TXqnyvaHEcpRC
UDiVFJMPkyIKDPRLmxOrsPVJLcy80dSHLrcCoCpSw9n/DNRD5hwn51A23L60x5my
JduHMUIAU/UDWTkROL7yX8m1IEx7uwcWr80JIPxUjn08rH7+oSdqMCqmk7s8eUDh
GAAfSS/hwE2xmeE4rDpTOt76U+X1hvbGvf8qTjXwYQtgNlAfrgseNvuHanrhdwdC
mCwOTPk0Y62aOpsDwBGY08MM0HdupVvaH3illIMq/4ll1rnm4JPg0PaXxJ2DXgSo
NYoKKcTYsTqOqZHYNBEBhlWeiUEDfRU=
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:58:14 2026 by rpki-client