Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f0cb947c-a039-36ef-b5fa-f05719efd101.roa
File:                     f0cb947c-a039-36ef-b5fa-f05719efd101.roa (raw, json)
Hash identifier:          WrbJCPmxYgRFYwwJQoPLm5R0Nc3jM+Zgurjsq2JSH88=
Subject key identifier:   2A:E5:8B:D1:AA:18:A5:4D:07:24:B1:89:63:48:67:35:6A:F0:85:E4
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E147ED5A0E8BB32224D627010
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f0cb947c-a039-36ef-b5fa-f05719efd101.roa
Signing time:             Sat 06 Jun 2026 09:00:12 +0000
ROA not before:           Sat 06 Jun 2026 09:00:12 +0000
ROA not after:            Fri 04 Sep 2026 09:00:12 +0000
asID:                     834
IP address blocks:        64.204.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:14:7e:d5:a0:e8:bb:32:22:4d:62:70:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jun  6 09:00:12 2026 GMT
            Not After : Sep  4 09:00:12 2026 GMT
        Subject: CN=9ed2d995-f5c3-44e2-a072-467f9c251e2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:be:d6:e2:14:8e:e9:61:9e:6f:3a:a9:0e:5d:
                    83:9a:98:62:f2:ca:e1:71:d4:ac:33:76:70:2d:84:
                    8f:7f:24:c2:3d:84:14:1b:42:83:05:ff:dd:62:47:
                    1e:3e:81:b7:a6:3a:48:ea:8b:1b:3d:8c:9b:62:33:
                    36:cd:42:cc:a9:cf:11:cb:5a:c8:30:71:74:a3:0f:
                    c1:5a:c8:1f:f5:06:40:03:16:b2:56:10:01:5c:20:
                    41:6e:a9:5e:47:d5:e4:e7:05:14:40:8f:65:8c:5e:
                    a4:1a:8d:63:99:61:74:c0:7d:e4:f7:cb:06:2f:94:
                    26:91:4e:f5:7f:e2:57:19:19:d2:e3:ee:2f:df:ee:
                    af:70:de:13:cc:bc:dd:b9:41:7b:25:fc:03:3e:5b:
                    d3:13:5d:d2:3c:96:6b:05:ac:56:98:bc:40:18:0a:
                    6a:da:9a:bf:0d:6f:d0:e6:a0:ad:9a:50:b9:1c:c2:
                    34:c8:15:8e:1f:bd:d5:50:86:3d:f2:d4:ff:f1:64:
                    1b:9b:eb:7e:dc:d9:e4:8c:d2:20:f0:b7:68:9c:4c:
                    68:a9:80:5d:e3:c8:45:63:84:2a:d9:85:fa:99:6a:
                    c3:18:9c:02:c2:56:f5:3e:f1:5d:97:2b:a7:48:7f:
                    82:e2:4c:f3:f6:62:71:b6:e1:eb:bc:47:10:bd:60:
                    28:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:E5:8B:D1:AA:18:A5:4D:07:24:B1:89:63:48:67:35:6A:F0:85:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f0cb947c-a039-36ef-b5fa-f05719efd101.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.204.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:89:4e:3d:dd:86:71:31:b5:1c:b6:68:28:fc:50:c9:23:37:
         16:46:ef:e0:d2:52:14:05:19:fd:b8:9f:9c:4e:26:aa:81:e6:
         78:01:d3:cd:40:be:fa:1f:f7:3c:0c:a0:3b:db:81:0f:4d:d1:
         aa:6d:da:bb:f0:c7:f1:ee:94:f3:3e:54:4f:ac:f3:05:37:d7:
         3b:e3:20:8f:f2:b7:ce:ef:fb:33:57:fb:a4:ff:32:d2:06:26:
         3e:40:07:b5:50:87:e4:2a:e7:e8:fe:f8:e9:11:48:ed:05:c4:
         18:56:70:64:5b:92:ab:53:10:cc:93:6e:20:ba:66:a0:7f:7d:
         be:f6:58:49:8e:1b:66:84:e2:8f:a0:fa:ee:16:ae:52:3c:d1:
         c5:5e:9a:d7:8c:e9:08:fa:85:38:82:5e:ee:04:97:69:f1:27:
         75:ab:d6:1e:24:05:8f:22:80:8e:2a:03:f8:be:2e:b8:6a:8f:
         55:e3:b6:83:e7:d2:44:10:b9:fa:39:3e:84:34:d5:45:bf:73:
         86:6b:12:22:76:2a:d8:c4:71:e5:1e:c3:c5:cb:28:96:ce:4f:
         1e:3f:cd:81:e7:c8:d3:91:2c:7a:e7:3c:18:32:30:4f:3a:70:
         94:30:5f:97:79:0f:fb:96:e5:e7:ec:e2:39:38:dd:3d:50:4d:
         f7:c6:10:b5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4UftWg6LsyIk1icBAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDYwNjA5MDAxMloXDTI2MDkwNDA5MDAxMlowLzEtMCsGA1UEAxMk
OWVkMmQ5OTUtZjVjMy00NGUyLWEwNzItNDY3ZjljMjUxZTJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAib7W4hSO6WGebzqpDl2Dmphi8srhcdSsM3Zw
LYSPfyTCPYQUG0KDBf/dYkcePoG3pjpI6osbPYybYjM2zULMqc8Ry1rIMHF0ow/B
Wsgf9QZAAxayVhABXCBBbqleR9Xk5wUUQI9ljF6kGo1jmWF0wH3k98sGL5QmkU71
f+JXGRnS4+4v3+6vcN4TzLzduUF7JfwDPlvTE13SPJZrBaxWmLxAGApq2pq/DW/Q
5qCtmlC5HMI0yBWOH73VUIY98tT/8WQbm+t+3NnkjNIg8LdonExoqYBd48hFY4Qq
2YX6mWrDGJwCwlb1PvFdlyunSH+C4kzz9mJxtuHrvEcQvWAodwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCrli9GqGKVNBySxiWNIZzVq8IXkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZjBjYjk0N2MtYTAzOS0z
NmVmLWI1ZmEtZjA1NzE5ZWZkMTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQMyQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABSJTj3dhnExtRy2aCj8UMkjNxZG7+DSUhQFGf24n5xOJqqB5ngB081A
vvof9zwMoDvbgQ9N0apt2rvwx/HulPM+VE+s8wU31zvjII/yt87v+zNX+6T/MtIG
Jj5AB7VQh+Qq5+j++OkRSO0FxBhWcGRbkqtTEMyTbiC6ZqB/fb72WEmOG2aE4o+g
+u4WrlI80cVemteM6Qj6hTiCXu4El2nxJ3Wr1h4kBY8igI4qA/i+Lrhqj1XjtoPn
0kQQufo5PoQ01UW/c4ZrEiJ2KtjEceUew8XLKJbOTx4/zYHnyNORLHrnPBgyME86
cJQwX5d5D/uW5efs4jk43T1QTffGELU=
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:10:55 2026 by rpki-client