Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ed9fcb81-76e5-3bbc-9e9b-533e53afc411.roa
File:                     ed9fcb81-76e5-3bbc-9e9b-533e53afc411.roa (raw, json)
Hash identifier:          bsk4tkFnWp7zBFBewmXvS5hV+CjPIUaTIYWgFMdFvNQ=
Subject key identifier:   17:25:F5:86:45:60:2C:7C:10:4C:83:06:09:18:E8:2C:A9:5C:83:03
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D746FE1FEB72FC2C6B4D1FF40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ed9fcb81-76e5-3bbc-9e9b-533e53afc411.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     701
IP address blocks:        64.10.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:e1:fe:b7:2f:c2:c6:b4:d1:ff:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=18db8dca-ebb7-41f4-8818-7c895e423105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:58:42:1a:ab:29:17:f5:9a:81:cf:fc:65:a7:
                    a7:16:6f:ff:ac:cd:22:02:61:23:0e:46:fe:07:3a:
                    d4:51:38:bd:b8:5e:a7:32:d8:83:63:39:82:45:9e:
                    bb:8d:7a:2e:2f:44:18:1e:4a:f5:f7:1b:bc:5e:95:
                    47:ee:90:03:a3:87:ee:97:3a:18:d4:bf:9d:d0:7d:
                    4c:31:24:a7:b0:0a:21:83:23:90:00:de:ef:04:12:
                    e9:3d:67:44:ab:1d:ab:58:25:d6:b0:41:af:4c:c7:
                    1f:92:cc:2c:b6:1b:fb:87:6d:9e:6b:7c:25:74:c8:
                    aa:68:74:8c:f4:ce:e9:bc:88:ac:e5:09:57:b1:ce:
                    c3:49:6f:9d:4a:77:df:8a:85:9c:05:23:9d:fd:1d:
                    8a:36:ff:2c:24:e1:e6:9f:a2:e5:81:ac:1a:5d:14:
                    d8:57:88:f6:6a:a9:35:1e:ef:16:f8:a7:f8:85:a5:
                    b5:a1:d3:2e:99:85:50:3b:49:7e:7a:3a:cb:f9:11:
                    73:d3:62:08:c6:0f:5e:3d:4a:9d:cc:fe:5c:65:93:
                    2d:13:24:0d:39:ce:14:c0:a4:d6:45:da:72:86:3d:
                    99:72:71:ca:34:d9:d2:53:df:64:b1:e7:13:a4:90:
                    a9:8e:27:a9:0f:74:57:f3:fe:47:a7:c7:57:8d:6d:
                    84:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:25:F5:86:45:60:2C:7C:10:4C:83:06:09:18:E8:2C:A9:5C:83:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ed9fcb81-76e5-3bbc-9e9b-533e53afc411.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.10.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:b8:e4:d7:62:ca:56:cf:2e:f6:41:73:6d:46:b1:61:07:c7:
         a9:e6:3d:7a:5d:4c:ee:66:9d:1f:89:81:69:e8:4b:91:e0:a1:
         fb:c1:c4:29:6d:46:a0:f7:db:a4:1a:fd:f1:7d:d4:b7:e0:6c:
         04:84:cf:54:e9:e9:61:0f:92:9e:f4:c3:04:9c:0c:7c:73:33:
         e7:fc:7b:c1:63:83:07:10:c4:00:b0:66:ed:39:ea:47:b0:88:
         77:ca:b3:9d:0f:d2:64:0e:d5:1d:0d:fb:e5:7d:04:f6:55:ed:
         27:19:f4:e9:68:f3:6e:60:57:41:ee:16:49:27:0a:06:39:e4:
         5f:5f:ad:85:2e:13:0a:eb:8e:6f:25:98:b1:c2:16:e2:b9:a1:
         38:a3:53:6e:a4:66:8f:2a:10:ec:c5:7e:dc:46:1e:f5:6f:0b:
         e9:f9:36:de:22:b2:91:0c:dd:ce:d9:01:32:52:36:d5:bb:18:
         98:5e:4b:cb:ba:da:79:37:8a:a3:f6:98:fd:46:7f:e5:1f:d2:
         d3:62:2d:56:4d:67:cd:e7:b2:54:b6:10:5c:40:a0:98:3b:c4:
         89:5c:b0:8f:25:2e:12:30:e4:9c:14:1d:6c:7e:aa:28:cb:bd:
         1b:97:03:b6:87:e7:47:7f:2b:3e:70:88:68:65:d9:7d:80:f8:
         31:af:2d:b5
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE10b+H+ty/CxrTR/0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk
MThkYjhkY2EtZWJiNy00MWY0LTg4MTgtN2M4OTVlNDIzMTA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVhCGqspF/Wagc/8ZaenFm//rM0iAmEjDkb+
BzrUUTi9uF6nMtiDYzmCRZ67jXouL0QYHkr19xu8XpVH7pADo4fulzoY1L+d0H1M
MSSnsAohgyOQAN7vBBLpPWdEqx2rWCXWsEGvTMcfkswsthv7h22ea3wldMiqaHSM
9M7pvIis5QlXsc7DSW+dSnffioWcBSOd/R2KNv8sJOHmn6LlgawaXRTYV4j2aqk1
Hu8W+Kf4haW1odMumYVQO0l+ejrL+RFz02IIxg9ePUqdzP5cZZMtEyQNOc4UwKTW
Rdpyhj2ZcnHKNNnSU99ksecTpJCpjiepD3RX8/5Hp8dXjW2E0wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFBcl9YZFYCx8EEyDBgkY6CypXIMDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZWQ5ZmNiODEtNzZlNS0z
YmJjLTllOWItNTMzZTUzYWZjNDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBQAowVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEANbjk12LKVs8u9kFzbUaxYQfHqeY9el1M7madH4mBaehLkeCh+8HEKW1G
oPfbpBr98X3Ut+BsBITPVOnpYQ+SnvTDBJwMfHMz5/x7wWODBxDEALBm7TnqR7CI
d8qznQ/SZA7VHQ375X0E9lXtJxn06WjzbmBXQe4WSScKBjnkX1+thS4TCuuObyWY
scIW4rmhOKNTbqRmjyoQ7MV+3EYe9W8L6fk23iKykQzdztkBMlI21bsYmF5Ly7ra
eTeKo/aY/UZ/5R/S02ItVk1nzeeyVLYQXECgmDvEiVywjyUuEjDknBQdbH6qKMu9
G5cDtofnR38rPnCIaGXZfYD4Ma8ttQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:40:55 2026 by rpki-client