Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/64813668-7441-3698-89bc-4d47b28f5036.roa
File:                     64813668-7441-3698-89bc-4d47b28f5036.roa (raw, json)
Hash identifier:          Vifc3tvNE//ls8zP15gjMg3CvxBEGiJmRdcKFmbvWag=
Subject key identifier:   EC:63:2B:C2:A1:22:0D:2A:7C:28:2B:25:A4:15:80:B0:79:B1:B1:6E
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D59EA9D3D3DDAA12D97532B80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/64813668-7441-3698-89bc-4d47b28f5036.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     14979
IP address blocks:        64.62.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:9d:3d:3d:da:a1:2d:97:53:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=dbd6ac5e-dbee-4ef8-8be3-85d1c0fa1a70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7f:ef:25:2e:5b:8a:8e:4e:2f:11:b1:49:10:
                    a6:85:7e:44:15:63:50:7d:a2:d9:b6:27:4a:15:8e:
                    76:22:84:1c:d1:9c:ed:36:cc:21:58:3f:40:0e:95:
                    c5:84:26:c9:e6:54:ec:ca:50:70:ea:fd:81:de:5b:
                    a9:e6:c4:f7:b2:4c:1d:92:fb:1c:9d:b7:a1:b3:0c:
                    5d:c8:57:76:8e:f2:e6:d6:f6:d8:01:97:46:c9:48:
                    6e:bb:50:05:c9:f2:43:11:90:77:3d:80:69:8f:57:
                    85:5d:a2:12:32:51:7f:99:ca:ab:8b:a5:c5:61:aa:
                    37:6f:c1:84:a1:5f:14:01:a9:a9:6e:d2:83:ed:83:
                    16:b2:37:6b:10:30:78:24:87:44:ec:ff:06:cd:cd:
                    e1:af:6a:00:25:64:fa:cb:3c:58:da:b7:2e:98:2c:
                    b8:7d:b6:97:07:92:b5:30:74:f2:14:d9:2d:92:08:
                    3f:d2:d0:e6:09:f0:f3:b0:51:a5:ff:ec:6b:c1:b0:
                    68:09:ab:ba:40:4f:a7:df:32:d5:bb:1b:42:09:6d:
                    24:ce:bc:d3:8f:08:55:b3:81:87:10:87:64:06:7b:
                    b3:ea:46:fe:f4:e9:ae:a5:2a:95:7b:6b:e3:14:ae:
                    e2:fb:f3:46:d3:bb:26:f0:b9:15:60:eb:b4:43:35:
                    a1:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:63:2B:C2:A1:22:0D:2A:7C:28:2B:25:A4:15:80:B0:79:B1:B1:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/64813668-7441-3698-89bc-4d47b28f5036.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.62.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:56:f8:42:59:10:94:e6:14:d4:30:21:bc:03:03:a9:e5:56:
         8f:9a:0b:1a:7b:8f:18:ce:75:a7:ea:1d:2d:12:82:ba:6c:71:
         27:f8:d7:0f:68:bf:f9:f6:34:e9:c4:56:d6:04:d3:2f:ca:cf:
         6d:83:7e:8d:8d:ee:35:f2:cb:ab:79:47:46:57:be:48:b5:b1:
         65:0d:57:ff:ff:f2:60:4a:65:96:fa:67:cf:76:2b:e7:ba:43:
         ee:00:e3:fc:90:f8:6f:af:c7:7a:0f:b4:dd:85:b3:8e:8d:f2:
         b6:19:37:e0:b0:4f:f4:57:c0:be:3a:28:a6:30:6c:94:c0:3c:
         b7:f6:17:39:d0:df:22:55:08:20:9e:cc:8f:22:81:75:24:d1:
         e6:f1:26:a7:e6:03:a7:75:d9:fc:55:23:46:a6:a7:ae:1a:6e:
         44:bb:cd:a4:c1:3f:77:8f:c3:29:1c:2a:7b:6f:e5:f3:60:98:
         bd:d4:4f:a3:9d:e5:ab:3f:5a:3f:83:57:48:cd:78:37:aa:07:
         76:3b:00:97:a6:76:f4:6b:24:37:15:ce:c2:2e:90:9c:ab:06:
         2a:9f:83:07:56:63:23:ae:7a:12:48:49:1a:8a:a4:94:95:6c:
         86:71:52:56:a8:35:e4:93:e9:eb:6c:d6:d9:d6:0d:f3:26:b8:
         91:2a:48:0d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6p09PdqhLZdTK4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk
ZGJkNmFjNWUtZGJlZS00ZWY4LThiZTMtODVkMWMwZmExYTcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqX/vJS5bio5OLxGxSRCmhX5EFWNQfaLZtidK
FY52IoQc0ZztNswhWD9ADpXFhCbJ5lTsylBw6v2B3lup5sT3skwdkvscnbehswxd
yFd2jvLm1vbYAZdGyUhuu1AFyfJDEZB3PYBpj1eFXaISMlF/mcqri6XFYao3b8GE
oV8UAampbtKD7YMWsjdrEDB4JIdE7P8Gzc3hr2oAJWT6yzxY2rcumCy4fbaXB5K1
MHTyFNktkgg/0tDmCfDzsFGl/+xrwbBoCau6QE+n3zLVuxtCCW0kzrzTjwhVs4GH
EIdkBnuz6kb+9OmupSqVe2vjFK7i+/NG07sm8LkVYOu0QzWhqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOxjK8KhIg0qfCgrJaQVgLB5sbFuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNjQ4MTM2NjgtNzQ0MS0z
Njk4LTg5YmMtNGQ0N2IyOGY1MDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQD73MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABJW+EJZEJTmFNQwIbwDA6nlVo+aCxp7jxjOdafqHS0SgrpscSf41w9o
v/n2NOnEVtYE0y/Kz22Dfo2N7jXyy6t5R0ZXvki1sWUNV///8mBKZZb6Z892K+e6
Q+4A4/yQ+G+vx3oPtN2Fs46N8rYZN+CwT/RXwL46KKYwbJTAPLf2FznQ3yJVCCCe
zI8igXUk0ebxJqfmA6d12fxVI0amp64abkS7zaTBP3ePwykcKntv5fNgmL3UT6Od
5as/Wj+DV0jNeDeqB3Y7AJemdvRrJDcVzsIukJyrBiqfgwdWYyOuehJISRqKpJSV
bIZxUlaoNeST6ets1tnWDfMmuJEqSA0=
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:32:20 2026 by rpki-client