Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/9a4dd3c0-9ef7-3e21-85f6-0d50ae5b77b4.roa
File:                     9a4dd3c0-9ef7-3e21-85f6-0d50ae5b77b4.roa (raw, json)
Hash identifier:          s5GLgnWeWV1Mv8HaqGO4LbJ4OZ75s+6fn3+/4nyVuaU=
Subject key identifier:   B0:EE:51:C5:A8:D3:51:6B:BF:AC:EE:2A:44:0A:F9:FF:59:73:A4:6C
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584D27AA55965A2A415F82568D80
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/9a4dd3c0-9ef7-3e21-85f6-0d50ae5b77b4.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     36040
IP address blocks:        64.15.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:55:96:5a:2a:41:5f:82:56:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=0a254e13-9842-4e81-a02e-31e83a392f44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:73:c2:d4:d0:45:68:85:8c:69:c0:16:75:d6:
                    22:f8:9b:fc:24:a5:79:c9:5f:5c:36:3b:c3:6d:93:
                    df:1a:af:2b:9d:54:8a:cd:a5:c8:3c:79:c1:94:b5:
                    9f:15:de:fe:77:42:e3:ce:88:e3:2f:34:13:36:25:
                    06:38:3b:a1:0f:1d:81:92:93:ba:9e:85:c8:c5:f9:
                    27:5e:46:55:3e:d0:c9:47:a3:d2:44:c0:41:a6:df:
                    57:26:ea:05:a7:64:6e:4f:9d:8f:2d:c7:3f:cb:4b:
                    e9:52:46:e0:06:01:7f:11:0b:c6:2d:a2:39:96:16:
                    18:62:9e:3f:46:46:93:e4:a8:f0:3d:d8:38:74:41:
                    f5:ec:10:91:1e:c6:b0:cf:fa:33:d8:7f:d0:25:2e:
                    eb:88:49:21:de:f0:14:a2:cf:84:73:64:01:69:67:
                    d7:0e:63:5d:1d:e7:76:ea:24:ba:d7:b1:08:d7:45:
                    31:ee:cf:68:6e:e1:10:4c:f9:e1:62:06:7b:83:61:
                    00:52:7b:fe:b5:23:4b:87:7c:35:c8:55:22:e6:28:
                    60:30:dd:55:1d:33:3e:23:1f:d9:94:cb:a6:00:ce:
                    39:49:4d:57:ff:23:6f:d4:b8:c5:ab:53:77:ac:a1:
                    a3:ed:31:30:43:d7:52:24:6a:ec:38:35:f0:8c:67:
                    85:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:EE:51:C5:A8:D3:51:6B:BF:AC:EE:2A:44:0A:F9:FF:59:73:A4:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/9a4dd3c0-9ef7-3e21-85f6-0d50ae5b77b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.15.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:8e:d9:e7:b3:c5:fc:89:f0:51:04:3f:0b:2a:86:1e:29:dd:
         20:a9:c7:43:62:09:8b:ed:25:60:c7:d4:11:55:0c:b8:5e:4f:
         2e:64:53:9d:9f:29:bd:cd:0c:25:8c:30:92:d0:8f:f9:24:5a:
         f5:26:8b:cb:91:bd:76:ef:3c:27:58:cd:4f:ac:5b:a5:53:3b:
         a1:74:2f:d9:99:9b:60:55:2e:85:c5:bd:2e:64:57:27:98:17:
         05:37:5f:b1:92:51:ab:a7:63:3b:22:9b:8e:90:00:5e:1e:3d:
         be:72:45:0d:ba:04:22:42:af:84:8c:cc:77:53:5d:02:87:90:
         01:b0:86:de:3d:d4:60:7d:60:b0:1b:f3:4d:65:28:39:1a:65:
         9f:45:91:68:a3:b2:23:c0:68:f7:c0:d4:82:1f:f0:2b:6a:17:
         6c:e4:c8:40:a6:a1:29:f1:1d:74:3d:8e:52:27:83:32:c4:1b:
         1c:41:dc:78:32:08:86:7e:48:af:70:c4:a1:48:2c:9e:21:64:
         b5:e1:fd:f1:23:ff:be:ae:ef:36:a4:0d:1b:0c:1b:d3:c4:ec:
         51:55:13:80:30:24:04:1b:4a:9a:dd:ee:97:ec:97:0c:17:66:
         57:eb:55:de:61:fa:0d:7f:8d:5b:16:a2:f7:07:10:73:e0:75:
         33:19:3f:e3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqlWWWipBX4JWjYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3
MmI3MB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk
MGEyNTRlMTMtOTg0Mi00ZTgxLWEwMmUtMzFlODNhMzkyZjQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHPC1NBFaIWMacAWddYi+Jv8JKV5yV9cNjvD
bZPfGq8rnVSKzaXIPHnBlLWfFd7+d0LjzojjLzQTNiUGODuhDx2BkpO6noXIxfkn
XkZVPtDJR6PSRMBBpt9XJuoFp2RuT52PLcc/y0vpUkbgBgF/EQvGLaI5lhYYYp4/
RkaT5KjwPdg4dEH17BCRHsawz/oz2H/QJS7riEkh3vAUos+Ec2QBaWfXDmNdHed2
6iS617EI10Ux7s9obuEQTPnhYgZ7g2EAUnv+tSNLh3w1yFUi5ihgMN1VHTM+Ix/Z
lMumAM45SU1X/yNv1LjFq1N3rKGj7TEwQ9dSJGrsODXwjGeF3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLDuUcWo01Frv6zuKkQK+f9Zc6RsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw
ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvOWE0ZGQzYzAtOWVmNy0z
ZTIxLTg1ZjYtMGQ1MGFlNWI3N2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx
ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0
NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2
ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQA98MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALWO2eezxfyJ8FEEPwsqhh4p3SCpx0NiCYvtJWDH1BFVDLheTy5kU52f
Kb3NDCWMMJLQj/kkWvUmi8uRvXbvPCdYzU+sW6VTO6F0L9mZm2BVLoXFvS5kVyeY
FwU3X7GSUaunYzsim46QAF4ePb5yRQ26BCJCr4SMzHdTXQKHkAGwht491GB9YLAb
801lKDkaZZ9FkWijsiPAaPfA1IIf8CtqF2zkyECmoSnxHXQ9jlIngzLEGxxB3Hgy
CIZ+SK9wxKFILJ4hZLXh/fEj/76u7zakDRsMG9PE7FFVE4AwJAQbSprd7pfslwwX
ZlfrVd5h+g1/jVsWovcHEHPgdTMZP+M=
-----END CERTIFICATE-----
Generated at Thu Mar 19 01:59:56 2026 by rpki-client