Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b1c54636-5aab-30a4-a185-5fdf5045ecd6.roa
File:                     b1c54636-5aab-30a4-a185-5fdf5045ecd6.roa (raw, json)
Hash identifier:          KjrIGqWs0doAvOeB9XHMMNJwGVh5V1Z6Let9GL2iUko=
Subject key identifier:   B5:6D:BF:99:61:0A:FD:B1:50:F5:78:7A:BD:2C:8E:13:E1:0D:B4:8A
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F5434B2F3E3B833A5C814A880
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b1c54636-5aab-30a4-a185-5fdf5045ecd6.roa
Signing time:             Mon 28 Sep 2026 21:29:32 +0000
ROA not before:           Mon 28 Sep 2026 21:29:32 +0000
ROA not after:            Sun 27 Dec 2026 22:29:32 +0000
asID:                     402899
IP address blocks:        64.205.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:34:b2:f3:e3:b8:33:a5:c8:14:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 28 21:29:32 2026 GMT
            Not After : Dec 27 22:29:32 2026 GMT
        Subject: CN=cccdde41-4fe4-4002-b958-e772404a5090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:64:d0:f5:fd:f4:32:b2:5c:03:a5:64:9a:99:
                    e0:03:9b:04:c8:f3:66:c6:c5:89:e8:30:bc:0e:2a:
                    70:d1:42:94:ba:19:24:6c:7e:63:44:88:59:07:80:
                    87:76:5b:b3:c4:dc:87:97:85:c8:40:02:a3:05:2f:
                    13:eb:30:7a:06:0d:af:2c:92:71:5e:c4:2d:75:b6:
                    10:aa:d4:92:95:0e:f3:6f:87:20:ff:87:c0:c1:1c:
                    13:8a:18:21:e5:e8:e8:84:01:f8:45:2e:ab:72:c7:
                    16:be:03:3d:ab:ee:02:19:42:15:f9:3f:17:36:03:
                    99:4c:c9:56:8b:0a:f7:0b:45:34:75:2f:c9:5f:2b:
                    c5:a2:bb:e0:8b:49:45:49:cc:13:ec:91:a7:c4:22:
                    9f:99:60:a8:d6:94:ed:2a:36:c5:0f:19:ea:de:f1:
                    66:53:a4:74:dd:3e:d1:29:f4:26:72:22:e1:f7:2b:
                    84:36:a8:8a:f3:3e:c3:8f:09:e7:6c:b4:47:1e:97:
                    24:be:31:d2:f6:14:6c:a6:73:85:3f:f5:9c:d3:7e:
                    35:55:08:e3:60:e1:37:61:1e:d6:56:db:d5:58:ae:
                    27:6c:49:97:0e:91:16:84:6d:1b:71:16:95:34:26:
                    18:05:c9:b9:b0:97:8a:01:6d:90:9e:2b:56:be:68:
                    e5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:6D:BF:99:61:0A:FD:B1:50:F5:78:7A:BD:2C:8E:13:E1:0D:B4:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b1c54636-5aab-30a4-a185-5fdf5045ecd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.205.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:a4:76:93:9e:17:9b:71:b7:ef:cc:8f:79:b3:10:56:5b:01:
         79:72:45:70:92:ec:e3:33:a0:b4:72:fc:9e:68:29:2e:cc:aa:
         00:32:8b:6c:e7:2f:5c:88:e9:bc:be:cf:64:c8:80:9b:db:2d:
         91:61:f6:6b:47:33:09:9e:0f:fa:28:5f:b1:77:e6:92:bc:6e:
         f4:43:a7:c7:df:bf:e1:c2:7f:d1:7d:84:bc:0f:71:b7:8d:5c:
         cc:e0:7a:30:86:b0:de:11:f7:d9:f0:7e:48:c2:5e:e3:99:80:
         81:44:9d:b7:55:61:b4:92:dd:35:fc:fb:96:00:67:60:10:00:
         ed:f2:f3:bf:55:d2:71:92:2e:6c:5c:14:b4:af:1a:97:7e:75:
         a6:e9:f1:db:c0:31:ca:39:13:53:f9:6a:b2:1f:59:2e:dc:43:
         82:3c:4f:29:ea:4a:c2:c9:47:08:6f:9c:35:6a:e7:b3:3c:cd:
         18:55:23:44:e5:35:60:d8:69:08:e7:ca:25:cd:da:40:ff:90:
         bd:33:3c:82:89:bc:21:8b:f5:e7:94:47:fc:e0:e4:bc:62:da:
         fe:64:0b:78:3f:a6:1b:7d:57:52:e7:d3:86:4c:39:92:dd:40:
         b1:f1:03:32:c5:f7:9b:d6:01:07:68:50:f9:cc:2d:46:23:63:
         9e:97:cd:94
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UNLLz47gzpcgUqIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDkyODIxMjkzMloXDTI2MTIyNzIyMjkzMlowLzEtMCsGA1UEAxMk
Y2NjZGRlNDEtNGZlNC00MDAyLWI5NTgtZTc3MjQwNGE1MDkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmTQ9f30MrJcA6VkmpngA5sEyPNmxsWJ6DC8
Dipw0UKUuhkkbH5jRIhZB4CHdluzxNyHl4XIQAKjBS8T6zB6Bg2vLJJxXsQtdbYQ
qtSSlQ7zb4cg/4fAwRwTihgh5ejohAH4RS6rcscWvgM9q+4CGUIV+T8XNgOZTMlW
iwr3C0U0dS/JXyvForvgi0lFScwT7JGnxCKfmWCo1pTtKjbFDxnq3vFmU6R03T7R
KfQmciLh9yuENqiK8z7DjwnnbLRHHpckvjHS9hRspnOFP/Wc0341VQjjYOE3YR7W
VtvVWK4nbEmXDpEWhG0bcRaVNCYYBcm5sJeKAW2QnitWvmjlyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLVtv5lhCv2xUPV4er0sjhPhDbSKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYjFjNTQ2MzYtNWFhYi0z
MGE0LWExODUtNWZkZjUwNDVlY2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQM1nMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFykdpOeF5txt+/Mj3mzEFZbAXlyRXCS7OMzoLRy/J5oKS7MqgAyi2zn
L1yI6by+z2TIgJvbLZFh9mtHMwmeD/ooX7F35pK8bvRDp8ffv+HCf9F9hLwPcbeN
XMzgejCGsN4R99nwfkjCXuOZgIFEnbdVYbSS3TX8+5YAZ2AQAO3y879V0nGSLmxc
FLSvGpd+dabp8dvAMco5E1P5arIfWS7cQ4I8TynqSsLJRwhvnDVq57M8zRhVI0Tl
NWDYaQjnyiXN2kD/kL0zPIKJvCGL9eeUR/zg5Lxi2v5kC3g/pht9V1Ln04ZMOZLd
QLHxAzLF95vWAQdoUPnMLUYjY56XzZQ=
-----END CERTIFICATE-----
Generated at Sun Oct 11 17:29:03 2026 by rpki-client