Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e07b3376-7383-3930-8576-9621779f9f06.roa
File:                     e07b3376-7383-3930-8576-9621779f9f06.roa (raw, json)
Hash identifier:          bYV0A8oeoHoRPAy4qFV6KYZFIFMEYgwldiOZLKmhoQQ=
Subject key identifier:   B1:94:E1:3F:55:AF:72:07:8B:7A:89:12:61:98:59:FE:2F:F3:07:BA
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D789FD064E2E435E86BDD2680
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e07b3376-7383-3930-8576-9621779f9f06.roa
Signing time:             Sat 11 Apr 2026 13:00:31 +0000
ROA not before:           Sat 11 Apr 2026 13:00:31 +0000
ROA not after:            Fri 10 Jul 2026 13:00:31 +0000
asID:                     40676
IP address blocks:        64.105.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:78:9f:d0:64:e2:e4:35:e8:6b:dd:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Apr 11 13:00:31 2026 GMT
            Not After : Jul 10 13:00:31 2026 GMT
        Subject: CN=d3106e94-2041-4d82-a3fd-d214a950e908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:3e:09:aa:e6:20:cb:f8:ec:f7:76:d0:9d:7b:
                    1e:f4:de:e2:de:eb:4f:61:a6:16:74:bb:53:43:1c:
                    ce:4f:03:0a:cc:2c:fb:1a:1e:23:f5:3a:bc:fc:fc:
                    19:35:4c:b9:a0:93:31:46:ae:a0:b3:f1:a5:11:0d:
                    aa:fe:cf:0f:fa:23:a9:2d:60:1b:34:06:4a:1e:06:
                    d8:05:57:b9:c3:12:f8:d1:e9:7b:43:91:2c:a2:27:
                    49:40:78:b0:b5:62:2c:e5:9e:d9:5f:57:28:a2:0a:
                    3d:e0:53:d4:4d:6c:df:25:b7:30:a5:8b:42:e3:fb:
                    52:49:fb:bf:1d:58:01:00:68:9c:d8:fa:be:74:28:
                    ab:1d:29:33:27:0b:33:30:a6:9d:7f:95:03:2b:dc:
                    5e:79:06:e8:af:69:df:68:b4:97:15:63:d5:e1:4a:
                    30:c2:bf:18:8c:a6:a9:3a:93:42:9f:72:a2:4d:27:
                    dd:6a:a3:79:48:08:ef:ed:ef:85:15:5f:33:f8:07:
                    5a:c1:69:d3:13:4e:af:a2:23:7f:6c:96:04:44:45:
                    cd:27:06:2f:f2:9c:b5:35:39:99:d2:fe:ed:4b:73:
                    0a:88:29:58:c3:6f:c1:3a:cc:bb:0a:35:cc:1a:1d:
                    79:9d:cd:f3:43:ab:e8:44:13:16:da:52:7f:3c:e4:
                    dc:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:94:E1:3F:55:AF:72:07:8B:7A:89:12:61:98:59:FE:2F:F3:07:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e07b3376-7383-3930-8576-9621779f9f06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.105.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:71:96:b3:85:c6:4f:73:15:01:3b:d6:e1:10:59:f9:66:ec:
         d6:85:c1:80:59:0c:31:21:b7:88:20:8c:e5:84:3e:1d:02:ae:
         c1:82:e2:e7:7f:84:92:66:48:95:8a:f5:63:ed:33:05:29:1a:
         c3:d9:d8:01:fe:7a:5f:45:e6:17:81:03:2a:42:ca:c4:7b:7b:
         7d:f3:5a:c2:a5:58:4c:f5:31:ec:14:80:26:7d:ec:2f:1f:3a:
         d8:e1:40:9e:34:70:cb:cc:bf:b9:65:0f:5a:b1:47:0a:0d:fd:
         e3:13:fa:2c:45:7e:b9:65:21:ed:a8:46:af:cf:81:a7:79:48:
         dc:6d:6c:32:c1:f7:49:ec:ce:58:80:48:e1:f6:70:b5:0c:bf:
         b2:4e:5f:e2:3a:9d:ff:1d:21:99:03:af:dd:86:1b:e6:e2:50:
         b4:81:ce:26:38:f2:2b:20:71:a2:4a:d0:42:54:18:bc:d5:f9:
         a6:fb:3c:18:04:8b:48:2a:ca:4d:9c:ec:18:83:89:95:d4:7f:
         8c:2f:c7:21:15:34:18:6b:b8:f0:87:87:8f:5b:c7:d5:7c:f6:
         59:6b:eb:23:71:fa:5d:2f:0e:4b:32:69:51:ca:3c:97:2d:7d:
         72:da:00:fd:52:96:67:8a:5f:83:93:26:d3:90:15:c1:e0:c2:
         b6:00:39:06
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE14n9Bk4uQ16GvdJoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDQxMTEzMDAzMVoXDTI2MDcxMDEzMDAzMVowLzEtMCsGA1UEAxMk
ZDMxMDZlOTQtMjA0MS00ZDgyLWEzZmQtZDIxNGE5NTBlOTA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjT4JquYgy/js93bQnXse9N7i3utPYaYWdLtT
QxzOTwMKzCz7Gh4j9Tq8/PwZNUy5oJMxRq6gs/GlEQ2q/s8P+iOpLWAbNAZKHgbY
BVe5wxL40el7Q5EsoidJQHiwtWIs5Z7ZX1coogo94FPUTWzfJbcwpYtC4/tSSfu/
HVgBAGic2Pq+dCirHSkzJwszMKadf5UDK9xeeQbor2nfaLSXFWPV4Uowwr8YjKap
OpNCn3KiTSfdaqN5SAjv7e+FFV8z+AdawWnTE06voiN/bJYEREXNJwYv8py1NTmZ
0v7tS3MKiClYw2/BOsy7CjXMGh15nc3zQ6voRBMW2lJ/POTchQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLGU4T9Vr3IHi3qJEmGYWf4v8we6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZTA3YjMzNzYtNzM4My0z
OTMwLTg1NzYtOTYyMTc3OWY5ZjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQGkMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKtxlrOFxk9zFQE71uEQWflm7NaFwYBZDDEht4ggjOWEPh0CrsGC4ud/
hJJmSJWK9WPtMwUpGsPZ2AH+el9F5heBAypCysR7e33zWsKlWEz1MewUgCZ97C8f
OtjhQJ40cMvMv7llD1qxRwoN/eMT+ixFfrllIe2oRq/Pgad5SNxtbDLB90nszliA
SOH2cLUMv7JOX+I6nf8dIZkDr92GG+biULSBziY48isgcaJK0EJUGLzV+ab7PBgE
i0gqyk2c7BiDiZXUf4wvxyEVNBhruPCHh49bx9V89llr6yNx+l0vDksyaVHKPJct
fXLaAP1SlmeKX4OTJtOQFcHgwrYAOQY=
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:03:59 2026 by rpki-client