Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/6671dd3a-3311-33c9-ae82-ff1f7d223a8a.roa
File:                     6671dd3a-3311-33c9-ae82-ff1f7d223a8a.roa (raw, json)
Hash identifier:          0RxU54KrMUABPOmK9NJU8ZulTU6VY+HeRMCa5vM7Z2A=
Subject key identifier:   7E:C6:CF:B1:3A:38:FC:9D:34:F7:FE:DC:D9:4C:C8:86:04:8A:54:84
Certificate issuer:       /CN=6e10601c-e280-4510-9d84-b6d2b02b8446
Certificate serial:       010D0C9F4328584CEB0472CBD01571F5FC637640
Authority key identifier: 4E:ED:44:97:58:9A:1C:39:9A:33:B8:A5:80:07:96:D7:83:3A:8A:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/6671dd3a-3311-33c9-ae82-ff1f7d223a8a.roa
Signing time:             Thu 19 Feb 2026 19:38:34 +0000
ROA not before:           Thu 19 Feb 2026 19:38:34 +0000
ROA not after:            Wed 20 May 2026 18:38:34 +0000
asID:                     393397
IP address blocks:        64.188.54.0/24 maxlen: 24
                          64.188.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/6e10601c-e280-4510-9d84-b6d2b02b8446.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/6e10601c-e280-4510-9d84-b6d2b02b8446.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:eb:04:72:cb:d0:15:71:f5:fc:63:76:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e10601c-e280-4510-9d84-b6d2b02b8446
        Validity
            Not Before: Feb 19 19:38:34 2026 GMT
            Not After : May 20 18:38:34 2026 GMT
        Subject: CN=731771a6-0502-482a-b36f-d8fc19213089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:69:ba:3a:9a:69:f6:40:36:eb:f8:17:97:42:
                    5d:ae:9f:69:0e:6b:b3:07:4b:75:8b:5a:b4:08:3a:
                    a6:b2:b6:92:01:70:42:09:a1:ef:c5:79:b3:50:79:
                    f7:f8:bc:dd:b6:3a:c6:8e:29:91:67:34:db:41:00:
                    0c:8f:23:7a:ea:ad:05:1a:60:67:dc:53:27:6c:7d:
                    3e:93:e9:f5:fa:e5:d4:b4:ec:13:87:6b:7d:93:4d:
                    6d:2c:25:47:ae:f6:59:83:c6:3c:8a:9b:f7:17:21:
                    30:fb:c7:fc:68:58:1e:e7:57:af:8a:f5:72:bb:d0:
                    95:42:fb:bb:e8:18:4b:ae:52:9b:4e:25:15:14:67:
                    7f:57:f1:cc:58:91:a0:13:27:13:04:9b:b9:1f:24:
                    13:52:b7:49:4d:13:d3:8c:80:2e:f8:5f:da:7c:1d:
                    6f:37:b3:8b:03:76:ba:6e:f0:26:dc:5c:96:fa:4e:
                    89:15:b5:4c:cc:1e:d7:42:be:51:67:ce:ac:b2:bf:
                    1f:01:3c:09:7c:a3:15:f0:ce:50:0f:98:97:28:4c:
                    cf:8a:11:89:f1:16:03:d3:21:a5:95:47:fc:e8:26:
                    3f:2b:9e:b4:7f:51:0e:58:6b:7d:a5:22:53:19:18:
                    1f:aa:b6:43:ca:cc:04:db:8f:f8:f6:84:f4:4d:89:
                    ea:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:C6:CF:B1:3A:38:FC:9D:34:F7:FE:DC:D9:4C:C8:86:04:8A:54:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/6671dd3a-3311-33c9-ae82-ff1f7d223a8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/6e10601c-e280-4510-9d84-b6d2b02b8446.crl

            X509v3 Authority Key Identifier:
                keyid:4E:ED:44:97:58:9A:1C:39:9A:33:B8:A5:80:07:96:D7:83:3A:8A:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.188.54.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:79:19:d6:09:3f:09:4c:e5:cf:19:e5:04:0d:a7:8b:be:fc:
         9f:2e:46:d1:2d:9c:22:0c:e7:1e:04:88:0c:e9:e0:0a:00:1d:
         2f:91:2a:25:3f:e7:1c:5e:54:ec:82:b1:27:48:04:72:fe:92:
         8e:c5:43:61:b3:ea:b1:e4:07:8d:b3:aa:13:7f:4a:ad:18:92:
         5d:25:6a:fa:5d:20:9a:83:44:fb:63:76:1c:9e:6c:62:ee:6f:
         c1:79:71:de:74:7b:ba:fe:e3:a7:ab:bf:87:59:27:22:e6:48:
         14:71:0a:2a:9b:34:7d:26:64:70:9e:d4:2b:c3:4e:96:f7:bc:
         61:60:19:e0:c6:6d:a7:c4:b5:84:c9:74:47:95:8b:64:b0:43:
         76:f1:e3:28:ff:17:01:11:9f:58:1a:23:69:ec:5b:44:af:4c:
         62:a2:3e:8b:78:58:d6:21:35:08:bf:b3:2f:ca:d6:d9:0e:20:
         49:41:76:cf:58:dd:d7:e3:09:82:29:97:0c:c6:0d:0a:f6:29:
         9a:01:b4:80:ac:f9:93:35:7d:d8:06:13:05:87:6a:ca:fc:24:
         d5:40:60:5f:63:3b:7d:37:95:c6:f9:5a:6c:d0:8a:08:d9:fd:
         7f:b6:97:14:4e:d1:66:2e:6c:bf:33:68:c4:01:d2:7d:95:fe:
         b0:4c:eb:6e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzrBHLL0BVx9fxjdkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmUxMDYwMWMtZTI4MC00NTEwLTlkODQtYjZkMmIwMmI4
NDQ2MB4XDTI2MDIxOTE5MzgzNFoXDTI2MDUyMDE4MzgzNFowLzEtMCsGA1UEAxMk
NzMxNzcxYTYtMDUwMi00ODJhLWIzNmYtZDhmYzE5MjEzMDg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWm6Oppp9kA26/gXl0Jdrp9pDmuzB0t1i1q0
CDqmsraSAXBCCaHvxXmzUHn3+LzdtjrGjimRZzTbQQAMjyN66q0FGmBn3FMnbH0+
k+n1+uXUtOwTh2t9k01tLCVHrvZZg8Y8ipv3FyEw+8f8aFge51evivVyu9CVQvu7
6BhLrlKbTiUVFGd/V/HMWJGgEycTBJu5HyQTUrdJTRPTjIAu+F/afB1vN7OLA3a6
bvAm3FyW+k6JFbVMzB7XQr5RZ86ssr8fATwJfKMV8M5QD5iXKEzPihGJ8RYD0yGl
lUf86CY/K560f1EOWGt9pSJTGRgfqrZDyswE24/49oT0TYnqQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH7Gz7E6OPydNPf+3NlMyIYEilSEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82ZTEw
NjAxYy1lMjgwLTQ1MTAtOWQ4NC1iNmQyYjAyYjg0NDYvNjY3MWRkM2EtMzMxMS0z
M2M5LWFlODItZmYxZjdkMjIzYThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmUxMDYwMWMtZTI4MC00NTEwLTlk
ODQtYjZkMmIwMmI4NDQ2LzZlMTA2MDFjLWUyODAtNDUxMC05ZDg0LWI2ZDJiMDJi
ODQ0Ni5jcmwwHwYDVR0jBBgwFoAUTu1El1iaHDmaM7ilgAeW14M6ikQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS82ZTEwNjAxYy1lMjgwLTQ1MTAtOWQ4NC1iNmQy
YjAyYjg0NDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQLw2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADN5GdYJPwlM5c8Z5QQNp4u+/J8uRtEtnCIM5x4EiAzp4AoAHS+RKiU/
5xxeVOyCsSdIBHL+ko7FQ2Gz6rHkB42zqhN/Sq0Ykl0lavpdIJqDRPtjdhyebGLu
b8F5cd50e7r+46erv4dZJyLmSBRxCiqbNH0mZHCe1CvDTpb3vGFgGeDGbafEtYTJ
dEeVi2SwQ3bx4yj/FwERn1gaI2nsW0SvTGKiPot4WNYhNQi/sy/K1tkOIElBds9Y
3dfjCYIplwzGDQr2KZoBtICs+ZM1fdgGEwWHasr8JNVAYF9jO303lcb5WmzQigjZ
/X+2lxRO0WYubL8zaMQB0n2V/rBM624=
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:42:24 2026 by rpki-client