Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/1dfb0410-c853-3b79-abaa-0f67acc343b1.roa
File:                     1dfb0410-c853-3b79-abaa-0f67acc343b1.roa (raw, json)
Hash identifier:          kw/tollywNkvs1C6Nf5Qhlr27ZiAvXGnN3yVrzilN5E=
Subject key identifier:   C3:D5:1F:6C:24:A8:6E:BE:D2:DC:8B:39:FB:46:ED:03:94:23:25:C3
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584EC371BBD08A117832BBC7C5A0
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/1dfb0410-c853-3b79-abaa-0f67acc343b1.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     11537
IP address blocks:        64.57.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:71:bb:d0:8a:11:78:32:bb:c7:c5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=4219dc96-d970-4c2b-87c2-f6707ce5d6e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:27:df:74:8b:17:4a:f0:50:37:af:ce:c5:a5:
                    7f:4e:3b:56:b2:27:db:c0:b5:53:9e:1f:a3:c0:0f:
                    18:d0:d5:ea:42:76:ad:cf:c7:05:89:a4:69:5e:99:
                    cb:31:af:b0:2b:59:40:90:a8:2c:37:0d:d0:65:dc:
                    a3:2f:7e:10:1e:9a:0e:2d:f4:94:dd:06:a8:fc:f0:
                    83:d4:d3:57:db:73:ab:74:19:11:9e:e3:eb:c3:ca:
                    8f:cd:37:03:2a:0f:95:6a:e3:18:01:29:af:24:a1:
                    10:97:c7:6d:c3:35:2d:a5:e9:2d:43:25:93:0d:27:
                    58:9c:7e:c3:ee:37:ab:b1:4c:11:2f:9f:cb:27:4c:
                    38:9b:38:12:f6:5e:47:51:75:b7:4a:64:3c:51:94:
                    91:32:27:e0:d3:5d:eb:35:a7:0b:45:3d:fe:66:37:
                    d6:f7:9c:c7:ac:eb:33:6a:25:9b:b8:69:f1:95:ac:
                    ca:2a:3f:63:31:0f:78:e0:43:0e:47:01:1e:20:27:
                    37:9b:9f:6e:0c:74:5e:66:56:72:c9:93:98:e2:4d:
                    52:dc:0e:fa:34:3e:c4:79:b6:00:b9:1c:26:92:f8:
                    ce:94:5c:bf:64:71:cc:70:14:51:73:b1:30:80:cb:
                    0b:93:60:43:a2:ff:b3:d2:e5:e7:89:3c:ac:11:d6:
                    12:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:D5:1F:6C:24:A8:6E:BE:D2:DC:8B:39:FB:46:ED:03:94:23:25:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/1dfb0410-c853-3b79-abaa-0f67acc343b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:2c:67:64:d3:6b:fe:4c:ed:fa:0e:13:30:e3:41:5a:63:80:
         94:0f:b2:e6:9b:ed:ee:c2:c7:36:35:6c:e0:0d:66:93:eb:f0:
         78:7a:c8:75:ae:6e:de:6a:93:1a:af:31:20:a3:ae:c0:2d:67:
         7e:76:99:52:d3:5c:05:ef:95:08:fc:4a:d3:a3:7e:fe:52:7a:
         0e:bc:c6:db:59:14:1a:10:42:0f:9e:91:ea:ca:c5:50:f6:8a:
         c1:51:79:3f:aa:0c:3b:d8:27:a3:2c:37:24:b7:47:da:ac:49:
         1d:d1:ff:06:a8:c5:49:11:45:53:c9:4b:4b:2a:24:a4:70:31:
         a5:1b:d9:ca:12:32:62:b1:72:20:00:e8:36:5f:bd:08:cf:9c:
         7e:e3:0e:26:2a:ab:95:07:8c:ae:fd:65:a0:46:7b:64:64:ea:
         b0:c2:2b:c0:34:2f:48:64:9e:ac:82:eb:ef:a8:a1:95:07:f0:
         3c:30:39:94:8f:db:91:98:a0:f9:53:29:ee:2f:9e:87:f4:3d:
         a1:2a:e2:93:5e:0a:37:ed:20:39:e8:7a:5f:52:93:26:26:7b:
         60:4a:25:a3:a1:dc:eb:bd:8a:78:22:ce:d0:ae:eb:a3:84:20:
         35:ab:a2:c3:e5:ae:5a:c9:a4:76:1e:2b:17:49:0f:00:c0:17:
         34:fc:f7:e8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7DcbvQihF4MrvHxaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy
ZjgyMB4XDTI2MDgwODAxMDAxMVoXDTI2MTEwNjAyMDAxMVowLzEtMCsGA1UEAxMk
NDIxOWRjOTYtZDk3MC00YzJiLTg3YzItZjY3MDdjZTVkNmU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSffdIsXSvBQN6/OxaV/TjtWsifbwLVTnh+j
wA8Y0NXqQnatz8cFiaRpXpnLMa+wK1lAkKgsNw3QZdyjL34QHpoOLfSU3Qao/PCD
1NNX23OrdBkRnuPrw8qPzTcDKg+VauMYASmvJKEQl8dtwzUtpektQyWTDSdYnH7D
7jersUwRL5/LJ0w4mzgS9l5HUXW3SmQ8UZSRMifg013rNacLRT3+ZjfW95zHrOsz
aiWbuGnxlazKKj9jMQ944EMORwEeICc3m59uDHReZlZyyZOY4k1S3A76ND7EebYA
uRwmkvjOlFy/ZHHMcBRRc7EwgMsLk2BDov+z0uXniTysEdYSeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMPVH2wkqG6+0tyLOftG7QOUIyXDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl
MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvMWRmYjA0MTAtYzg1My0z
Yjc5LWFiYWEtMGY2N2FjYzM0M2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5
MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2
MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4
YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQDkZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMIsZ2TTa/5M7foOEzDjQVpjgJQPsuab7e7CxzY1bOANZpPr8Hh6yHWu
bt5qkxqvMSCjrsAtZ352mVLTXAXvlQj8StOjfv5Seg68xttZFBoQQg+ekerKxVD2
isFReT+qDDvYJ6MsNyS3R9qsSR3R/waoxUkRRVPJS0sqJKRwMaUb2coSMmKxciAA
6DZfvQjPnH7jDiYqq5UHjK79ZaBGe2Rk6rDCK8A0L0hknqyC6++ooZUH8DwwOZSP
25GYoPlTKe4vnof0PaEq4pNeCjftIDnoel9SkyYme2BKJaOh3Ou9ingiztCu66OE
IDWrosPlrlrJpHYeKxdJDwDAFzT89+g=
-----END CERTIFICATE-----
Generated at Thu Aug 13 14:22:30 2026 by rpki-client