Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/33a760ed-1ef9-33ee-86ea-0dacfba7efc7.roa
File:                     33a760ed-1ef9-33ee-86ea-0dacfba7efc7.roa (raw, json)
Hash identifier:          AgtXnHy11YjosvQ12KTU0CXeaS6fVuvRrFR6MiFovfA=
Subject key identifier:   FB:D1:09:41:30:0C:9B:9E:E9:8C:6B:73:89:87:B6:29:4F:59:90:2C
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584F119D165C6EFCF63CF9573A50
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/33a760ed-1ef9-33ee-86ea-0dacfba7efc7.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     54643
IP address blocks:        64.34.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9d:16:5c:6e:fc:f6:3c:f9:57:3a:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=9ed43335-9a40-4f57-83e9-7408e49279a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3b:f4:3c:5c:f2:b9:ac:69:c0:3b:57:42:ab:
                    b4:00:4d:d7:9f:60:3c:f3:31:9e:6b:45:e5:09:77:
                    0c:85:6a:ea:85:ef:1f:b8:25:a7:1a:51:6f:c6:40:
                    56:ef:71:24:88:48:21:5b:14:e8:89:5a:80:3f:5b:
                    6d:7e:39:cb:cb:c3:30:66:83:56:9e:ba:90:ad:6a:
                    e9:9a:ee:f3:ff:bd:85:cd:d7:39:2e:1d:01:56:3b:
                    01:1f:2d:c5:6b:dc:dd:11:a1:90:e6:33:cb:c4:93:
                    df:e1:97:3d:53:9b:9d:76:c8:a7:ff:f4:95:29:2c:
                    e9:d0:a0:4c:fd:f1:f8:cd:9b:63:7a:7f:56:a6:41:
                    b2:b5:b9:63:c9:ae:98:7a:ee:35:e7:f3:02:69:d7:
                    0a:c9:c3:b5:80:c4:79:97:43:88:90:02:16:01:9e:
                    82:dd:9f:f7:52:2a:37:ef:2e:5f:de:50:69:22:74:
                    91:80:a0:a9:b5:2f:07:c1:5b:47:d1:86:4b:0a:c0:
                    55:04:eb:6a:8a:76:23:c7:25:f4:8d:72:e0:c8:53:
                    58:f5:fe:86:be:65:02:7c:9f:ae:0b:42:62:e9:61:
                    59:c4:48:d8:a4:03:88:af:af:a7:d9:d0:df:5e:fa:
                    33:11:f3:d5:71:05:1c:3e:37:fd:5b:b2:9e:a3:3b:
                    7d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:D1:09:41:30:0C:9B:9E:E9:8C:6B:73:89:87:B6:29:4F:59:90:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/33a760ed-1ef9-33ee-86ea-0dacfba7efc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.34.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:ec:1a:c9:9a:3b:6f:d2:67:38:49:0b:3d:43:bd:18:05:a8:
         48:98:2d:e4:8f:f1:a0:0a:4f:b5:93:4b:eb:cd:98:7c:f0:96:
         99:10:7e:48:37:03:a4:44:61:39:6a:eb:b5:88:3d:fd:44:a6:
         30:2a:eb:bd:d3:72:0a:15:72:94:8f:d7:ee:de:bf:22:83:71:
         f6:e3:02:41:39:aa:75:71:68:00:67:02:e9:73:94:12:97:f3:
         eb:00:ca:46:c6:8c:ec:17:fa:bb:60:62:22:e7:72:7c:35:e8:
         39:93:75:fa:f8:57:3e:12:a4:9c:b7:20:91:de:43:90:97:19:
         32:3b:9d:9e:2c:ec:ab:98:fe:21:16:2c:ac:79:79:19:c8:eb:
         8a:3a:0e:8a:b2:a9:71:07:f6:43:28:5b:53:b9:7d:9b:61:5a:
         d4:8b:77:2f:34:47:4c:32:b3:5d:dc:08:f0:15:d3:f7:29:b9:
         a2:7d:fe:dd:e9:b7:bd:ed:2a:d2:0f:01:04:dd:d4:3e:a3:5b:
         fd:88:ff:e1:03:d3:23:15:2e:8c:66:46:98:4b:25:2e:8a:96:
         c1:a3:32:de:7e:e6:9d:b2:ba:dc:20:08:b4:60:69:3e:49:b8:
         76:b0:d5:64:9d:a1:98:32:89:ca:8c:45:92:f1:15:b5:12:66:
         82:8f:5f:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnRZcbvz2PPlXOlAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk
YjEwMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk
OWVkNDMzMzUtOWE0MC00ZjU3LTgzZTktNzQwOGU0OTI3OWEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDv0PFzyuaxpwDtXQqu0AE3Xn2A88zGea0Xl
CXcMhWrqhe8fuCWnGlFvxkBW73EkiEghWxToiVqAP1ttfjnLy8MwZoNWnrqQrWrp
mu7z/72Fzdc5Lh0BVjsBHy3Fa9zdEaGQ5jPLxJPf4Zc9U5uddsin//SVKSzp0KBM
/fH4zZtjen9WpkGytbljya6Yeu415/MCadcKycO1gMR5l0OIkAIWAZ6C3Z/3Uio3
7y5f3lBpInSRgKCptS8HwVtH0YZLCsBVBOtqinYjxyX0jXLgyFNY9f6GvmUCfJ+u
C0Ji6WFZxEjYpAOIr6+n2dDfXvozEfPVcQUcPjf9W7Keozt9gwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPvRCUEwDJue6Yxrc4mHtilPWZAsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3
OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvMzNhNzYwZWQtMWVmOS0z
M2VlLTg2ZWEtMGRhY2ZiYTdlZmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0
YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1
ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl
NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCJvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEvsGsmaO2/SZzhJCz1DvRgFqEiYLeSP8aAKT7WTS+vNmHzwlpkQfkg3
A6REYTlq67WIPf1EpjAq673TcgoVcpSP1+7evyKDcfbjAkE5qnVxaABnAulzlBKX
8+sAykbGjOwX+rtgYiLncnw16DmTdfr4Vz4SpJy3IJHeQ5CXGTI7nZ4s7KuY/iEW
LKx5eRnI64o6DoqyqXEH9kMoW1O5fZthWtSLdy80R0wys13cCPAV0/cpuaJ9/t3p
t73tKtIPAQTd1D6jW/2I/+ED0yMVLoxmRphLJS6KlsGjMt5+5p2yutwgCLRgaT5J
uHaw1WSdoZgyicqMRZLxFbUSZoKPX1g=
-----END CERTIFICATE-----
Generated at Sat Sep 5 08:06:10 2026 by rpki-client