Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2a6a304c-8b07-3c41-a364-f60ca9551e26.roa
File:                     2a6a304c-8b07-3c41-a364-f60ca9551e26.roa (raw, json)
Hash identifier:          yK8ig0XEfVpPCoMegwLQd685lNUdTCwE3vL5V+Jukxo=
Subject key identifier:   12:D2:54:28:FD:77:14:B4:5A:F4:28:36:D6:9F:81:9E:FA:B8:2F:33
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F3B7D1ADE40379673284DDA80
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2a6a304c-8b07-3c41-a364-f60ca9551e26.roa
Signing time:             Sun 20 Sep 2026 01:00:11 +0000
ROA not before:           Sun 20 Sep 2026 01:00:11 +0000
ROA not after:            Sat 19 Dec 2026 02:00:11 +0000
asID:                     6079
IP address blocks:        64.204.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3b:7d:1a:de:40:37:96:73:28:4d:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 20 01:00:11 2026 GMT
            Not After : Dec 19 02:00:11 2026 GMT
        Subject: CN=5061c127-ff9b-4720-a18b-3919c1eacc29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:33:8b:e8:5d:1d:a2:33:ae:de:56:e3:17:0c:
                    30:e1:9a:a9:58:f7:a7:14:3b:fd:ab:50:0c:ac:21:
                    05:ed:a8:16:c2:10:36:10:9f:41:23:c3:b8:71:51:
                    f8:9a:e6:bc:83:61:cf:9b:e4:02:ec:75:58:04:50:
                    62:ce:33:2d:17:23:5d:0b:4d:a9:02:55:8b:6c:ef:
                    50:0c:2f:03:a0:cc:43:00:dc:dc:58:d5:fc:be:f3:
                    96:55:e2:d3:cd:3f:3d:ce:77:6e:71:d0:57:a7:2e:
                    6e:a8:53:7e:d7:08:29:35:66:ba:60:7e:8c:9f:db:
                    ed:68:56:f1:89:fa:2d:8e:de:70:60:3f:99:10:f9:
                    1c:fc:32:3c:2d:c7:ab:ab:3d:e2:76:5d:af:4d:8a:
                    52:ad:6b:e3:49:70:aa:37:d6:f7:11:2d:ca:4a:fc:
                    38:eb:23:f0:1d:96:25:be:1b:06:fd:dc:70:6b:26:
                    6a:3e:77:33:93:3d:fd:34:b1:8b:57:29:2b:87:3b:
                    98:44:a5:1a:88:a3:d1:a2:d8:4f:a8:7e:cd:86:c5:
                    f9:f9:7a:7c:d6:21:a4:ee:63:96:cc:a2:5a:2e:71:
                    91:38:00:aa:41:a9:e1:f8:0e:ec:7c:2a:a1:f1:c7:
                    df:8b:17:dd:b1:69:a7:63:c0:da:37:48:1e:d9:00:
                    83:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:D2:54:28:FD:77:14:B4:5A:F4:28:36:D6:9F:81:9E:FA:B8:2F:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2a6a304c-8b07-3c41-a364-f60ca9551e26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.204.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:71:68:3a:6a:2a:1e:40:8b:48:d2:a6:ea:39:f3:bb:a7:a4:
         b8:29:50:ff:99:82:cd:2c:69:fa:93:9e:b8:8f:f7:d8:9e:a9:
         b1:93:20:98:0d:79:a6:d4:ae:c8:6c:c5:49:75:a9:ac:f7:da:
         13:53:62:59:24:b1:61:0c:d0:7f:28:bd:91:9f:89:c7:6a:24:
         96:d3:57:30:3b:8b:75:14:b7:6e:42:46:5e:03:84:41:81:b6:
         86:da:90:5f:10:3b:cf:09:b3:c6:14:62:c4:22:30:fa:b3:33:
         79:6a:77:ff:b4:64:54:c2:96:a1:47:1e:75:f8:66:87:21:0b:
         b4:3f:f0:e1:5f:6b:90:45:6c:d8:e5:6f:ec:91:7d:41:10:d5:
         a1:3d:0a:fa:ef:df:dc:27:2d:7f:bd:ec:a0:22:71:3e:12:f2:
         98:43:79:ce:13:92:62:bd:07:bf:54:db:74:f0:dd:a4:96:f4:
         01:31:ac:90:d1:24:cd:b4:91:7e:e1:97:29:9c:4d:20:75:92:
         36:fb:de:9c:89:54:13:75:e7:41:18:84:24:55:0d:80:c1:b9:
         6f:74:9c:2c:79:f2:88:4e:6f:ca:72:8f:87:62:8d:9c:a5:9b:
         19:72:b2:19:68:17:b3:53:e1:bd:2f:8c:03:c7:2e:70:cf:dc:
         8f:a4:3f:9b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE87fRreQDeWcyhN2oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDkyMDAxMDAxMVoXDTI2MTIxOTAyMDAxMVowLzEtMCsGA1UEAxMk
NTA2MWMxMjctZmY5Yi00NzIwLWExOGItMzkxOWMxZWFjYzI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzOL6F0dojOu3lbjFwww4ZqpWPenFDv9q1AM
rCEF7agWwhA2EJ9BI8O4cVH4mua8g2HPm+QC7HVYBFBizjMtFyNdC02pAlWLbO9Q
DC8DoMxDANzcWNX8vvOWVeLTzT89znducdBXpy5uqFN+1wgpNWa6YH6Mn9vtaFbx
ifotjt5wYD+ZEPkc/DI8Lcerqz3idl2vTYpSrWvjSXCqN9b3ES3KSvw46yPwHZYl
vhsG/dxwayZqPnczkz39NLGLVykrhzuYRKUaiKPRothPqH7NhsX5+Xp81iGk7mOW
zKJaLnGROACqQanh+A7sfCqh8cffixfdsWmnY8DaN0ge2QCDJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBLSVCj9dxS0WvQoNtafgZ76uC8zMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMmE2YTMwNGMtOGIwNy0z
YzQxLWEzNjQtZjYwY2E5NTUxZTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMwsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABhxaDpqKh5Ai0jSpuo587unpLgpUP+Zgs0safqTnriP99ieqbGTIJgN
eabUrshsxUl1qaz32hNTYlkksWEM0H8ovZGficdqJJbTVzA7i3UUt25CRl4DhEGB
tobakF8QO88Js8YUYsQiMPqzM3lqd/+0ZFTClqFHHnX4ZochC7Q/8OFfa5BFbNjl
b+yRfUEQ1aE9Cvrv39wnLX+97KAicT4S8phDec4TkmK9B79U23Tw3aSW9AExrJDR
JM20kX7hlymcTSB1kjb73pyJVBN150EYhCRVDYDBuW90nCx58ohOb8pyj4dijZyl
mxlyshloF7NT4b0vjAPHLnDP3I+kP5s=
-----END CERTIFICATE-----
Generated at Sat Oct 10 14:43:29 2026 by rpki-client