Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/4b9b1710-12bf-3899-8a1f-3116005d14f1.roa
File:                     4b9b1710-12bf-3899-8a1f-3116005d14f1.roa (raw, json)
Hash identifier:          70ZmCk4vnZzAhr/n/p7vKzqvBT0W8gZcbYGi61qyGxk=
Subject key identifier:   3B:3F:6E:03:CA:6E:0A:43:78:20:F0:54:26:98:3D:97:BB:E3:58:B3
Certificate issuer:       /CN=5dcf6139-5993-4941-a803-3ff450a6149e
Certificate serial:       010D0C9F4328584EAD1C560172CA1354EB8DAF00
Authority key identifier: 2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/4b9b1710-12bf-3899-8a1f-3116005d14f1.roa
Signing time:             Fri 31 Jul 2026 01:00:11 +0000
ROA not before:           Fri 31 Jul 2026 01:00:11 +0000
ROA not after:            Thu 29 Oct 2026 01:00:11 +0000
asID:                     16713
IP address blocks:        64.113.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ad:1c:56:01:72:ca:13:54:eb:8d:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dcf6139-5993-4941-a803-3ff450a6149e
        Validity
            Not Before: Jul 31 01:00:11 2026 GMT
            Not After : Oct 29 01:00:11 2026 GMT
        Subject: CN=f4a3ccca-9157-4b98-aed3-83f0ff63d63b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c5:35:6e:18:9b:6f:db:2d:07:e0:3b:42:be:
                    69:99:95:d5:07:2b:a8:d8:1a:a9:57:8d:48:72:cb:
                    18:05:ce:7e:ea:e2:74:11:fd:30:60:44:2b:ce:ea:
                    ae:7a:e9:af:34:14:e0:ab:e3:6f:60:de:56:38:91:
                    7f:34:2b:80:e9:ef:f7:0f:4e:5f:1d:ab:b4:68:83:
                    c2:5d:7f:04:fb:10:ee:03:02:42:85:d2:b9:08:c7:
                    78:0d:95:d6:e9:fc:4b:ec:8c:50:63:ed:9e:7a:cc:
                    bd:70:52:69:c2:de:84:f3:e7:be:ef:32:a9:d0:2f:
                    1f:a7:45:85:aa:91:5e:62:02:c0:a7:2b:a9:0b:34:
                    05:9b:84:64:09:60:e9:6b:f6:4a:6f:39:79:58:da:
                    8f:b6:0d:57:ad:b4:54:ab:63:ec:1a:c8:3e:15:1a:
                    18:55:f3:7d:8d:55:1d:cd:bc:e9:ca:ab:66:6c:19:
                    09:94:d6:24:d1:e9:8e:1f:8b:25:eb:d3:81:46:92:
                    69:de:13:73:18:6a:29:69:d2:ee:9c:78:22:47:e4:
                    5e:75:9c:c0:03:f2:fb:e8:ce:2e:1b:6b:c5:c8:e9:
                    10:67:f2:38:c8:86:5d:06:a3:57:cd:6f:d3:9f:72:
                    86:9e:07:ed:a0:8c:ab:25:1b:0b:7f:dd:53:8d:7c:
                    f4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:3F:6E:03:CA:6E:0A:43:78:20:F0:54:26:98:3D:97:BB:E3:58:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/4b9b1710-12bf-3899-8a1f-3116005d14f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.crl

            X509v3 Authority Key Identifier:
                keyid:2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.113.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:30:c4:d2:71:d1:bc:f1:f8:fe:9a:38:f4:7d:24:3f:31:84:
         66:97:df:30:67:9b:fb:f2:a9:32:60:38:7e:df:15:b6:5a:b6:
         f3:b0:e7:7c:dd:d3:6d:b9:5d:86:0b:37:b3:67:08:d8:d0:2e:
         e0:f9:08:2a:1a:a9:61:4f:a0:f1:40:8e:d4:33:d0:6d:12:7b:
         cd:ef:83:f5:e9:44:58:fd:93:e2:a8:df:57:d0:04:b5:0c:e6:
         53:e7:40:88:0a:df:5a:5f:7e:31:a6:26:50:92:1e:aa:e2:da:
         cc:b1:d7:bd:00:63:3f:41:5d:8a:d2:b7:93:16:8f:e6:96:94:
         1d:48:c9:7c:41:d9:5b:47:93:9f:14:45:65:b5:f4:01:7d:25:
         dc:49:2e:42:3e:00:8b:7c:cf:2d:1c:3c:4c:f6:aa:55:cb:03:
         fc:e3:ac:76:33:db:7b:f9:fd:b1:bb:4a:e2:15:7c:8b:3b:28:
         c3:30:9e:f0:b0:5e:df:24:66:c1:00:95:51:b7:cd:72:ad:d2:
         39:14:65:f7:0a:ff:95:1f:85:1e:1a:f8:98:ae:27:94:71:b6:
         03:ee:d0:27:0b:26:86:8a:e9:21:2d:43:f8:ca:68:31:3c:5c:
         a9:eb:9a:7a:72:21:76:10:8c:c2:27:1f:56:eb:bb:57:97:10:
         c2:c6:76:67
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6tHFYBcsoTVOuNrwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWRjZjYxMzktNTk5My00OTQxLWE4MDMtM2ZmNDUwYTYx
NDllMB4XDTI2MDczMTAxMDAxMVoXDTI2MTAyOTAxMDAxMVowLzEtMCsGA1UEAxMk
ZjRhM2NjY2EtOTE1Ny00Yjk4LWFlZDMtODNmMGZmNjNkNjNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8U1bhibb9stB+A7Qr5pmZXVByuo2BqpV41I
cssYBc5+6uJ0Ef0wYEQrzuqueumvNBTgq+NvYN5WOJF/NCuA6e/3D05fHau0aIPC
XX8E+xDuAwJChdK5CMd4DZXW6fxL7IxQY+2eesy9cFJpwt6E8+e+7zKp0C8fp0WF
qpFeYgLApyupCzQFm4RkCWDpa/ZKbzl5WNqPtg1XrbRUq2PsGsg+FRoYVfN9jVUd
zbzpyqtmbBkJlNYk0emOH4sl69OBRpJp3hNzGGopadLunHgiR+RedZzAA/L76M4u
G2vFyOkQZ/I4yIZdBqNXzW/Tn3KGngftoIyrJRsLf91TjXz04QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDs/bgPKbgpDeCDwVCaYPZe741izMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81ZGNm
NjEzOS01OTkzLTQ5NDEtYTgwMy0zZmY0NTBhNjE0OWUvNGI5YjE3MTAtMTJiZi0z
ODk5LThhMWYtMzExNjAwNWQxNGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWRjZjYxMzktNTk5My00OTQxLWE4
MDMtM2ZmNDUwYTYxNDllLzVkY2Y2MTM5LTU5OTMtNDk0MS1hODAzLTNmZjQ1MGE2
MTQ5ZS5jcmwwHwYDVR0jBBgwFoAULLflCxT6PZa8DBcX1K4/3yZtZm8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81ZGNmNjEzOS01OTkzLTQ5NDEtYTgwMy0zZmY0
NTBhNjE0OWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQHETMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHswxNJx0bzx+P6aOPR9JD8xhGaX3zBnm/vyqTJgOH7fFbZatvOw53zd
0225XYYLN7NnCNjQLuD5CCoaqWFPoPFAjtQz0G0Se83vg/XpRFj9k+Ko31fQBLUM
5lPnQIgK31pffjGmJlCSHqri2syx170AYz9BXYrSt5MWj+aWlB1IyXxB2VtHk58U
RWW19AF9JdxJLkI+AIt8zy0cPEz2qlXLA/zjrHYz23v5/bG7SuIVfIs7KMMwnvCw
Xt8kZsEAlVG3zXKt0jkUZfcK/5UfhR4a+JiuJ5RxtgPu0CcLJoaK6SEtQ/jKaDE8
XKnrmnpyIXYQjMInH1bru1eXEMLGdmc=
-----END CERTIFICATE-----
Generated at Thu Aug 13 14:22:29 2026 by rpki-client