Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/a63331ea-2a3e-3d8b-bee2-af4238ec937c.roa
File:                     a63331ea-2a3e-3d8b-bee2-af4238ec937c.roa (raw, json)
Hash identifier:          XQV1md8y2euIme2gTPC9Cvcm556uKmRjTbySq61HfU0=
Subject key identifier:   3F:78:05:3B:07:B2:13:4B:45:40:B7:B5:B7:EA:22:F8:07:34:8D:76
Certificate issuer:       /CN=24f82d36-633a-44e0-9b31-a523e1609720
Certificate serial:       010D0C9F4328584E7E94D78B10354ED5DE352500
Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/a63331ea-2a3e-3d8b-bee2-af4238ec937c.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     20001
IP address blocks:        64.16.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:94:d7:8b:10:35:4e:d5:de:35:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=a6fb3ba6-246b-4988-beb3-d580a6c13ecb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5f:fc:c4:0f:9b:b6:f5:47:4c:9d:6d:ef:f9:
                    5c:1b:18:a1:18:ab:bb:a2:8d:23:54:e1:a8:ba:df:
                    cc:d2:bf:88:30:f3:4c:44:3f:d8:a8:6b:6c:8e:5a:
                    d3:06:cf:d8:af:71:90:63:e2:0d:32:5c:a0:ff:20:
                    31:7f:6a:d6:7a:ba:60:73:1f:02:ac:40:15:5e:46:
                    77:ae:7a:41:52:2b:a5:5f:4f:1a:a9:74:41:d7:44:
                    7f:52:5a:89:15:07:7e:83:07:3c:db:62:fc:2d:80:
                    38:9f:5c:ce:e8:e2:16:40:9b:55:bc:3c:3f:6e:98:
                    05:7c:ec:4f:30:c0:f5:66:85:a9:98:18:5b:b9:55:
                    e3:db:17:fc:11:27:d3:42:52:ad:6d:21:91:c1:c5:
                    36:e0:2d:a9:0b:59:e5:ad:f3:a2:9d:ff:66:fd:99:
                    ba:a5:a7:43:61:a7:e6:fd:e9:49:07:4c:67:08:bf:
                    f6:37:25:71:5d:d4:35:09:c2:67:2c:23:e7:55:44:
                    95:21:fb:a3:35:67:33:f8:68:13:9f:d6:2e:bd:ff:
                    00:86:25:fe:09:72:d5:bc:9c:87:78:cc:97:5a:af:
                    ac:11:5c:b5:31:2d:e2:a8:17:65:a8:bc:23:13:e7:
                    06:81:96:92:66:3c:50:4b:a9:7b:f4:98:2f:79:41:
                    e0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:78:05:3B:07:B2:13:4B:45:40:B7:B5:B7:EA:22:F8:07:34:8D:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/a63331ea-2a3e-3d8b-bee2-af4238ec937c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl

            X509v3 Authority Key Identifier:
                keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.16.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:7e:af:f6:73:aa:c6:b0:51:5c:be:40:7b:8f:82:e9:fe:b1:
         07:3d:27:1f:64:67:d2:8f:96:1d:1d:9b:18:e7:9e:b7:b6:db:
         b3:ee:e2:fd:bf:ae:02:8d:83:98:5e:90:de:22:96:63:75:48:
         d6:be:a4:aa:9e:3c:2b:c8:da:eb:6c:7d:0a:fa:c4:b3:d9:87:
         4e:ff:33:19:f5:f0:7e:92:00:be:f6:ed:4a:de:1c:7e:25:fe:
         64:7b:dd:ef:fc:38:d5:02:1b:52:63:3d:ad:d8:88:0e:f8:04:
         3b:f3:db:b9:b0:b3:02:23:35:aa:f4:83:95:cc:54:5f:23:c5:
         e8:c7:38:f7:99:51:bf:b2:f9:52:c0:46:12:de:21:4e:63:93:
         39:cd:54:78:44:e6:33:59:60:85:f2:0e:13:e6:2a:2d:cd:0f:
         bf:0f:a7:50:84:80:38:61:f2:6f:d3:31:dd:98:da:57:f9:3f:
         f0:9c:33:37:88:79:1a:67:ec:df:e5:4b:a1:a5:9e:5c:f4:d9:
         ea:d8:55:97:e5:04:6a:03:37:3e:29:72:07:0c:67:16:67:fe:
         bc:0e:9d:2b:62:1d:55:94:f9:94:80:ca:b3:fb:d7:79:c0:ea:
         ac:cd:d3:c2:2d:32:f7:92:fc:64:34:e2:1e:54:fa:3a:b2:19:
         a4:42:d5:cd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lNeLEDVO1d41JQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5
NzIwMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk
YTZmYjNiYTYtMjQ2Yi00OTg4LWJlYjMtZDU4MGE2YzEzZWNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1/8xA+btvVHTJ1t7/lcGxihGKu7oo0jVOGo
ut/M0r+IMPNMRD/YqGtsjlrTBs/Yr3GQY+INMlyg/yAxf2rWerpgcx8CrEAVXkZ3
rnpBUiulX08aqXRB10R/UlqJFQd+gwc822L8LYA4n1zO6OIWQJtVvDw/bpgFfOxP
MMD1ZoWpmBhbuVXj2xf8ESfTQlKtbSGRwcU24C2pC1nlrfOinf9m/Zm6padDYafm
/elJB0xnCL/2NyVxXdQ1CcJnLCPnVUSVIfujNWcz+GgTn9Yuvf8AhiX+CXLVvJyH
eMyXWq+sEVy1MS3iqBdlqLwjE+cGgZaSZjxQS6l79JgveUHgCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD94BTsHshNLRUC3tbfqIvgHNI12MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4
MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvYTYzMzMxZWEtMmEzZS0z
ZDhiLWJlZTItYWY0MjM4ZWM5MzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli
MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw
OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz
ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGV+r/ZzqsawUVy+QHuPgun+sQc9Jx9kZ9KPlh0dmxjnnre227Pu4v2/
rgKNg5hekN4ilmN1SNa+pKqePCvI2utsfQr6xLPZh07/Mxn18H6SAL727UreHH4l
/mR73e/8ONUCG1JjPa3YiA74BDvz27mwswIjNar0g5XMVF8jxejHOPeZUb+y+VLA
RhLeIU5jkznNVHhE5jNZYIXyDhPmKi3ND78Pp1CEgDhh8m/TMd2Y2lf5P/CcMzeI
eRpn7N/lS6Glnlz02erYVZflBGoDNz4pcgcMZxZn/rwOnStiHVWU+ZSAyrP713nA
6qzN08ItMveS/GQ04h5U+jqyGaRC1c0=
-----END CERTIFICATE-----
Generated at Tue Jul 21 13:21:21 2026 by rpki-client