Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/d06bb805-d96a-3412-bcf9-7f09d8d1d58a.roa
File:                     d06bb805-d96a-3412-bcf9-7f09d8d1d58a.roa (raw, json)
Hash identifier:          zufndUvvwH/SXadPBz3im0CDgDtJycLfVTR6fj429Lg=
Subject key identifier:   5B:2B:EF:1B:15:D8:F7:40:1B:80:E0:3F:B2:F4:5F:9E:B4:7A:6A:6C
Certificate issuer:       /CN=9de5b47f-bd49-4614-b658-9980cfd17769
Certificate serial:       010D0C9F4328584D67DFBC6014084DDCC70CBF00
Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/d06bb805-d96a-3412-bcf9-7f09d8d1d58a.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     27471
IP address blocks:        148.64.24.0/24 maxlen: 24
                          148.64.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:bc:60:14:08:4d:dc:c7:0c:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=5cada776-6aca-4ccd-94bb-f3f3af57fefe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b3:19:df:d2:a3:52:02:99:46:61:34:de:4b:
                    25:ad:50:03:7c:58:94:ab:30:25:b3:de:ab:34:c4:
                    3b:cf:40:68:88:5a:48:0f:3a:e4:38:d9:3c:42:ee:
                    3c:f1:e1:b7:d3:e8:14:5f:96:ea:48:b9:5d:5b:2b:
                    77:4d:c1:f1:25:2b:a5:f7:5c:23:65:a9:4a:93:d9:
                    72:01:50:ae:02:a3:cf:2c:7e:fc:e4:65:76:01:b0:
                    a8:4e:b0:54:30:d6:fd:fa:43:5b:31:2a:cd:1c:24:
                    1e:9a:32:94:ba:26:53:4b:53:7e:27:5c:9c:d7:89:
                    49:e2:85:e4:bf:74:f0:64:df:99:4b:1e:86:f4:4c:
                    48:1c:49:4d:32:0a:5c:f5:e6:c5:19:7d:0e:ca:b7:
                    99:fc:63:a9:bf:5b:4e:9c:42:23:bd:65:26:7d:23:
                    47:93:56:d7:a8:3b:0d:5b:ec:50:2b:5e:ba:cb:1a:
                    c1:64:fa:5e:7a:89:1d:dc:2a:fe:af:68:e9:a2:f4:
                    42:1a:a2:e3:b8:78:18:e9:dd:e0:7d:71:e0:a2:1e:
                    9f:81:dd:91:03:ce:3d:aa:c0:c4:f9:f6:55:11:d5:
                    dc:74:6d:4d:fd:a0:73:31:a3:ea:ef:54:9b:40:34:
                    da:e8:ec:f1:5f:71:76:6e:91:7e:c4:cc:3c:f1:12:
                    d2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:2B:EF:1B:15:D8:F7:40:1B:80:E0:3F:B2:F4:5F:9E:B4:7A:6A:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/d06bb805-d96a-3412-bcf9-7f09d8d1d58a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl

            X509v3 Authority Key Identifier:
                keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.64.24.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:94:d8:83:9a:2e:df:31:19:86:45:41:0d:8a:9e:fa:12:c8:
         a7:ac:ec:93:66:80:f6:f8:10:15:20:31:3f:da:37:d7:21:1c:
         72:8d:d1:f1:a9:52:da:3e:df:cb:01:21:d9:7c:a1:92:14:56:
         00:04:9f:e1:fc:2e:5c:8b:90:24:ee:96:b2:2b:e2:6a:47:0f:
         03:ff:b3:0e:86:77:f1:7e:04:1e:bf:d2:5d:72:da:03:c2:ea:
         15:84:fb:d7:fe:a8:5e:30:39:84:ae:43:20:d8:cf:03:8f:68:
         d9:b5:8b:ec:37:3c:84:a8:13:fe:37:49:c7:3f:23:6c:98:4f:
         28:1a:70:77:7d:39:e1:59:46:64:64:42:5f:9f:8c:fe:f7:d3:
         2b:80:92:68:fb:2c:08:99:0a:39:6f:a7:76:ab:2c:f1:61:c2:
         53:be:d3:cf:16:ef:82:dc:01:eb:97:b1:47:f1:72:c9:26:fd:
         58:45:5f:b3:66:02:50:6e:24:35:23:e6:60:3a:17:f1:f8:12:
         1b:e6:24:76:fd:bf:3d:38:3a:48:6e:56:ca:6c:af:ed:fa:27:
         ff:54:08:6f:04:5c:f2:bc:d8:4c:be:a7:05:6f:0c:95:53:4a:
         8d:2e:52:7a:ef:21:32:8b:c9:67:3d:b1:80:ef:4f:f2:8c:81:
         c7:ec:22:47
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n37xgFAhN3McMvwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWRlNWI0N2YtYmQ0OS00NjE0LWI2NTgtOTk4MGNmZDE3
NzY5MB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk
NWNhZGE3NzYtNmFjYS00Y2NkLTk0YmItZjNmM2FmNTdmZWZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LMZ39KjUgKZRmE03kslrVADfFiUqzAls96r
NMQ7z0BoiFpIDzrkONk8Qu488eG30+gUX5bqSLldWyt3TcHxJSul91wjZalKk9ly
AVCuAqPPLH785GV2AbCoTrBUMNb9+kNbMSrNHCQemjKUuiZTS1N+J1yc14lJ4oXk
v3TwZN+ZSx6G9ExIHElNMgpc9ebFGX0OyreZ/GOpv1tOnEIjvWUmfSNHk1bXqDsN
W+xQK166yxrBZPpeeokd3Cr+r2jpovRCGqLjuHgY6d3gfXHgoh6fgd2RA849qsDE
+fZVEdXcdG1N/aBzMaPq71SbQDTa6OzxX3F2bpF+xMw88RLSNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFsr7xsV2PdAG4DgP7L0X560empsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1
YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgwY2ZkMTc3NjkvZDA2YmI4MDUtZDk2YS0z
NDEyLWJjZjktN2YwOWQ4ZDFkNThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWRlNWI0N2YtYmQ0OS00NjE0LWI2
NTgtOTk4MGNmZDE3NzY5LzlkZTViNDdmLWJkNDktNDYxNC1iNjU4LTk5ODBjZmQx
Nzc2OS5jcmwwHwYDVR0jBBgwFoAUjxiLGO21eSNV+7m/BlYK0+IBpDcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgw
Y2ZkMTc3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlEAYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH2U2IOaLt8xGYZFQQ2KnvoSyKes7JNmgPb4EBUgMT/aN9chHHKN0fGp
Uto+38sBIdl8oZIUVgAEn+H8LlyLkCTulrIr4mpHDwP/sw6Gd/F+BB6/0l1y2gPC
6hWE+9f+qF4wOYSuQyDYzwOPaNm1i+w3PISoE/43Scc/I2yYTygacHd9OeFZRmRk
Ql+fjP730yuAkmj7LAiZCjlvp3arLPFhwlO+088W74LcAeuXsUfxcskm/VhFX7Nm
AlBuJDUj5mA6F/H4EhvmJHb9vz04OkhuVspsr+36J/9UCG8EXPK82Ey+pwVvDJVT
So0uUnrvITKLyWc9sYDvT/KMgcfsIkc=
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:36:56 2026 by rpki-client