Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dc3b8f96-84de-3c7c-a848-c0ba3280b30b.roa
File:                     dc3b8f96-84de-3c7c-a848-c0ba3280b30b.roa (raw, json)
Hash identifier:          H8daMnXrK3oCc8lXSJhftHwztoTU3t/EQA23hsWQA7I=
Subject key identifier:   79:87:58:E0:48:21:A2:D3:3E:23:63:34:5D:E7:18:25:C4:8B:F8:30
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F669B8BFE06B5D431C89B0B80
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dc3b8f96-84de-3c7c-a848-c0ba3280b30b.roa
Signing time:             Mon 05 Oct 2026 11:41:19 +0000
ROA not before:           Mon 05 Oct 2026 11:41:19 +0000
ROA not after:            Sun 03 Jan 2027 12:41:19 +0000
asID:                     20473
IP address blocks:        64.204.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:66:9b:8b:fe:06:b5:d4:31:c8:9b:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Oct  5 11:41:19 2026 GMT
            Not After : Jan  3 12:41:19 2027 GMT
        Subject: CN=9b523ecf-7c7f-4165-937e-43c0500d00fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f8:fc:77:36:e1:3d:7b:33:51:23:e7:34:8d:
                    22:32:db:60:a6:e4:13:af:a0:a0:ce:40:8d:e3:26:
                    33:83:78:bb:ec:cf:fa:e4:0f:11:4e:bf:6c:f5:5f:
                    05:36:d8:fd:38:bb:1e:bf:e1:db:e6:52:25:9e:14:
                    43:e0:ee:df:56:86:ea:e6:bc:ac:c9:4f:35:6c:f7:
                    86:28:cf:39:c0:f0:aa:2a:48:41:d6:97:33:73:67:
                    18:f3:1a:34:56:32:13:df:ed:63:2d:89:69:c6:f5:
                    2b:4f:d6:7d:3c:81:86:37:45:47:1a:1b:28:94:b0:
                    13:d4:c3:79:1c:b9:c3:9a:70:a3:00:42:28:37:48:
                    96:99:a1:0b:ba:97:da:ed:54:61:c9:6e:c8:01:45:
                    f8:64:bf:f0:a5:5e:61:a7:2d:00:63:8f:f7:d7:9b:
                    a1:ff:8f:4d:14:51:db:05:86:09:ef:77:85:e5:f1:
                    87:9d:0e:df:8f:4e:5c:3d:25:2c:08:5d:80:44:14:
                    d6:e5:c8:a9:55:37:67:53:d3:77:20:d2:22:33:b6:
                    d7:1e:49:74:5f:e5:a9:af:bf:0b:e7:63:67:3f:e1:
                    e0:ab:b3:56:79:5f:c2:25:37:47:ef:19:7a:f1:96:
                    66:57:63:71:87:6c:f5:06:25:53:1f:5e:8e:24:60:
                    30:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:87:58:E0:48:21:A2:D3:3E:23:63:34:5D:E7:18:25:C4:8B:F8:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dc3b8f96-84de-3c7c-a848-c0ba3280b30b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.204.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:88:0e:fe:bf:09:e5:a0:d4:69:d1:cb:31:9d:fa:27:70:ed:
         34:a2:3d:05:76:90:0b:f6:9f:28:8e:b8:53:4d:a0:28:b8:19:
         5d:70:15:f3:76:73:3c:ec:4c:85:1e:5f:f9:1c:e7:a7:d2:f9:
         2f:50:48:0b:9d:cf:bf:c2:8f:57:0e:bb:a6:a3:31:88:4b:fd:
         4b:e1:9c:0c:6e:46:23:5c:5e:45:bc:76:19:c8:ef:13:f5:3b:
         94:90:0a:ec:a7:7a:46:36:ee:c7:54:e7:89:25:2b:ec:ee:2b:
         8b:63:2d:cd:e8:70:cd:3f:74:b8:05:00:dd:bf:55:2b:e3:07:
         3d:09:33:28:7c:0b:22:18:10:39:5c:e4:4b:9f:a1:a1:34:f9:
         21:af:43:7d:31:c2:20:bf:b1:e9:53:68:3d:83:f9:02:bd:1d:
         04:42:3c:fa:96:a2:21:fa:5b:3d:b7:e0:98:1a:20:39:47:46:
         9a:6a:a2:25:40:96:1c:e1:e2:e6:43:68:30:7d:22:17:b4:0f:
         6b:51:67:97:ae:3f:ba:e0:cb:39:2d:b4:ca:b7:10:f7:b6:0f:
         44:57:58:78:a8:c6:0c:be:07:25:ac:4b:4a:d0:27:68:61:26:
         b7:06:4c:69:0a:1b:63:83:91:55:79:25:8c:11:f6:ee:3a:85:
         29:25:47:85
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9mm4v+BrXUMcibC4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MTAwNTExNDExOVoXDTI3MDEwMzEyNDExOVowLzEtMCsGA1UEAxMk
OWI1MjNlY2YtN2M3Zi00MTY1LTkzN2UtNDNjMDUwMGQwMGZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivj8dzbhPXszUSPnNI0iMttgpuQTr6CgzkCN
4yYzg3i77M/65A8RTr9s9V8FNtj9OLsev+Hb5lIlnhRD4O7fVobq5rysyU81bPeG
KM85wPCqKkhB1pczc2cY8xo0VjIT3+1jLYlpxvUrT9Z9PIGGN0VHGhsolLAT1MN5
HLnDmnCjAEIoN0iWmaELupfa7VRhyW7IAUX4ZL/wpV5hpy0AY4/315uh/49NFFHb
BYYJ73eF5fGHnQ7fj05cPSUsCF2ARBTW5cipVTdnU9N3INIiM7bXHkl0X+Wpr78L
52NnP+Hgq7NWeV/CJTdH7xl68ZZmV2Nxh2z1BiVTH16OJGAw2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHmHWOBIIaLTPiNjNF3nGCXEi/gwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZGMzYjhmOTYtODRkZS0z
YzdjLWE4NDgtYzBiYTMyODBiMzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMywMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGKIDv6/CeWg1GnRyzGd+idw7TSiPQV2kAv2nyiOuFNNoCi4GV1wFfN2
czzsTIUeX/kc56fS+S9QSAudz7/Cj1cOu6ajMYhL/UvhnAxuRiNcXkW8dhnI7xP1
O5SQCuynekY27sdU54klK+zuK4tjLc3ocM0/dLgFAN2/VSvjBz0JMyh8CyIYEDlc
5EufoaE0+SGvQ30xwiC/selTaD2D+QK9HQRCPPqWoiH6Wz234JgaIDlHRppqoiVA
lhzh4uZDaDB9Ihe0D2tRZ5euP7rgyzkttMq3EPe2D0RXWHioxgy+ByWsS0rQJ2hh
JrcGTGkKG2ODkVV5JYwR9u46hSklR4U=
-----END CERTIFICATE-----
Generated at Sat Oct 10 14:45:28 2026 by rpki-client