Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/71ac1e75-f2ea-36f4-ad2f-08164d1cb6a0.roa
File:                     71ac1e75-f2ea-36f4-ad2f-08164d1cb6a0.roa (raw, json)
Hash identifier:          YYoh895Wa4/xA0AIoCisp2cgut1I6E+XXhPno0vTGZA=
Subject key identifier:   ED:0C:DF:8D:3C:D9:5C:6E:11:11:01:21:63:F6:29:87:B9:10:42:91
Certificate issuer:       /CN=24f82d36-633a-44e0-9b31-a523e1609720
Certificate serial:       010D0C9F4328584E7634F5797F5B8CF813FE0380
Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/71ac1e75-f2ea-36f4-ad2f-08164d1cb6a0.roa
Signing time:             Sat 11 Jul 2026 09:00:12 +0000
ROA not before:           Sat 11 Jul 2026 09:00:12 +0000
ROA not after:            Fri 09 Oct 2026 09:00:12 +0000
asID:                     20001
IP address blocks:        64.16.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:76:34:f5:79:7f:5b:8c:f8:13:fe:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720
        Validity
            Not Before: Jul 11 09:00:12 2026 GMT
            Not After : Oct  9 09:00:12 2026 GMT
        Subject: CN=c11557a9-657d-49f8-9bc3-26b2255f0da5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fa:6a:6b:2c:dc:b7:51:ba:8d:d2:fc:34:91:
                    d6:04:d1:98:a3:f9:45:93:d2:e9:8e:3e:b3:cc:d3:
                    e6:ae:11:e2:61:29:c2:c3:27:3e:44:37:74:13:fe:
                    e1:1e:45:2e:e9:d3:9d:1c:98:95:eb:15:9a:ee:20:
                    6f:88:e1:a2:52:85:11:4f:53:e2:92:eb:ac:3a:ea:
                    8d:9d:8c:dc:c9:45:64:14:90:cc:13:18:55:9b:c4:
                    03:eb:f7:fb:bc:97:cf:69:78:6d:d7:43:de:64:b4:
                    9a:09:2b:63:ae:89:e9:53:00:a4:bf:08:b3:1d:76:
                    07:74:25:b7:32:1b:66:5f:bc:40:21:f3:ae:47:4b:
                    34:a5:98:0d:34:e5:52:f5:3b:0c:19:f9:95:7e:f4:
                    37:fd:8b:d6:6d:95:c2:67:5c:9d:01:cf:50:46:10:
                    71:7a:84:67:5d:dd:96:56:a3:e5:cb:b4:09:ab:43:
                    28:3a:97:95:66:3e:af:e0:69:96:a8:04:26:93:5a:
                    56:a9:15:eb:6c:1e:88:3d:0c:e4:81:48:6a:76:d6:
                    68:7c:e9:fa:b6:10:2e:56:69:91:82:3c:17:f4:ff:
                    7f:ba:34:0a:d1:d0:46:f5:46:b5:eb:b3:87:fc:16:
                    9e:7f:20:cb:e9:ab:95:0e:91:4c:c5:48:ff:d6:c9:
                    f2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:0C:DF:8D:3C:D9:5C:6E:11:11:01:21:63:F6:29:87:B9:10:42:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/71ac1e75-f2ea-36f4-ad2f-08164d1cb6a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl

            X509v3 Authority Key Identifier:
                keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.16.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:b9:cc:aa:ba:0a:ef:f4:64:0c:6a:22:fc:43:25:a1:b1:32:
         9f:1f:68:4e:8d:21:ca:5f:7f:c7:d9:48:ec:43:df:c2:c4:71:
         50:35:0f:95:35:d6:1f:3d:37:28:d7:94:de:07:41:8e:9b:15:
         3b:88:4e:72:5c:eb:3e:39:96:c3:be:ea:99:1f:53:0a:25:4a:
         07:67:30:c4:a9:2e:06:2d:55:4b:20:62:c3:2a:82:75:1f:07:
         e0:47:b2:4c:ae:3e:59:12:fe:b3:a9:a3:8c:10:fc:f1:1c:ca:
         80:90:b2:51:9c:14:1a:9c:fe:55:f2:c7:7b:8c:7c:7a:33:aa:
         8d:a2:79:4c:ba:74:99:81:e3:fd:85:9c:5b:d3:d7:4c:84:62:
         df:50:92:f5:22:96:b3:d6:5e:3e:a0:2f:f0:90:5c:85:39:b4:
         93:49:d0:c7:cd:88:e1:e9:b5:4c:b9:46:a0:05:a5:7b:dc:5c:
         ae:2f:99:5d:58:12:bb:69:63:c2:20:f7:62:15:59:ad:06:90:
         b7:06:32:02:59:10:6b:61:25:06:dd:f2:65:e8:64:0a:60:b0:
         60:85:e6:42:5f:7c:25:ea:c9:4e:02:1b:a2:c0:6f:67:03:8b:
         d2:49:9c:ef:79:fc:46:0f:2d:a8:9e:19:f5:45:bf:12:08:d8:
         83:7f:57:23
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE52NPV5f1uM+BP+A4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5
NzIwMB4XDTI2MDcxMTA5MDAxMloXDTI2MTAwOTA5MDAxMlowLzEtMCsGA1UEAxMk
YzExNTU3YTktNjU3ZC00OWY4LTliYzMtMjZiMjI1NWYwZGE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfpqayzct1G6jdL8NJHWBNGYo/lFk9Lpjj6z
zNPmrhHiYSnCwyc+RDd0E/7hHkUu6dOdHJiV6xWa7iBviOGiUoURT1PikuusOuqN
nYzcyUVkFJDMExhVm8QD6/f7vJfPaXht10PeZLSaCStjronpUwCkvwizHXYHdCW3
MhtmX7xAIfOuR0s0pZgNNOVS9TsMGfmVfvQ3/YvWbZXCZ1ydAc9QRhBxeoRnXd2W
VqPly7QJq0MoOpeVZj6v4GmWqAQmk1pWqRXrbB6IPQzkgUhqdtZofOn6thAuVmmR
gjwX9P9/ujQK0dBG9Ua167OH/BaefyDL6auVDpFMxUj/1snykwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO0M34082VxuEREBIWP2KYe5EEKRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4
MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvNzFhYzFlNzUtZjJlYS0z
NmY0LWFkMmYtMDgxNjRkMWNiNmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli
MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw
OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz
ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALm5zKq6Cu/0ZAxqIvxDJaGxMp8faE6NIcpff8fZSOxD38LEcVA1D5U1
1h89NyjXlN4HQY6bFTuITnJc6z45lsO+6pkfUwolSgdnMMSpLgYtVUsgYsMqgnUf
B+BHskyuPlkS/rOpo4wQ/PEcyoCQslGcFBqc/lXyx3uMfHozqo2ieUy6dJmB4/2F
nFvT10yEYt9QkvUilrPWXj6gL/CQXIU5tJNJ0MfNiOHptUy5RqAFpXvcXK4vmV1Y
ErtpY8Ig92IVWa0GkLcGMgJZEGthJQbd8mXoZApgsGCF5kJffCXqyU4CG6LAb2cD
i9JJnO95/EYPLaieGfVFvxII2IN/VyM=
-----END CERTIFICATE-----
Generated at Tue Jul 21 13:24:45 2026 by rpki-client