Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/2ea41de4-2808-3ddb-96dd-9c277c38dec4.roa
File:                     2ea41de4-2808-3ddb-96dd-9c277c38dec4.roa (raw, json)
Hash identifier:          qYbHESkaPtyb484QFqQjnOmZDOQsKO2GgKTmpxWNlM8=
Subject key identifier:   03:04:25:43:04:73:FA:C8:F2:83:13:9B:EB:90:ED:8E:1F:E4:47:06
Certificate issuer:       /CN=a3630f82-169c-4b03-ad42-aa6f5b71d91d
Certificate serial:       010D0C9F4328584EA788DA5D8696D45D08B82900
Authority key identifier: 8C:BB:12:0E:88:E0:E4:10:DC:79:9A:11:CC:5E:E0:EA:C1:40:0E:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/2ea41de4-2808-3ddb-96dd-9c277c38dec4.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     14618
IP address blocks:        64.95.199.48/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:da:5d:86:96:d4:5d:08:b8:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3630f82-169c-4b03-ad42-aa6f5b71d91d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b32f2ffa-e2db-4912-859c-803d625f19e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c7:aa:fb:00:9c:d8:6e:f7:98:69:a3:e4:42:
                    3f:7f:43:93:c7:81:15:81:e0:d6:15:78:fc:6e:71:
                    53:2a:05:3e:96:1b:a4:e7:0d:5c:62:38:10:8a:d4:
                    8f:df:23:dd:ec:64:99:85:39:a1:9b:5a:74:29:35:
                    29:b5:ed:62:89:c6:c0:e2:c9:e9:94:11:db:32:21:
                    d5:65:a2:74:e6:b3:4e:a0:7d:66:6f:ff:f9:42:64:
                    8a:3e:bf:90:2a:a8:7c:d0:10:c3:a2:e8:4d:20:4f:
                    4b:ac:58:f4:23:3d:72:cc:ba:99:85:38:4e:79:86:
                    8f:74:db:a8:ed:8d:0d:4f:c5:21:b6:ad:90:c5:bb:
                    33:f1:db:9e:19:19:31:87:47:87:3d:40:17:57:b2:
                    b5:79:98:ca:fe:a2:c2:3a:ae:a7:60:d0:c9:4d:ef:
                    b2:13:e4:91:22:a2:e7:78:ce:4a:a2:80:1b:93:52:
                    9f:90:36:2e:17:c9:6f:ff:d5:27:6a:d9:db:8e:5b:
                    0e:00:18:bc:f8:86:36:fc:65:f3:6f:77:af:42:34:
                    b9:df:9c:14:69:7f:3e:3d:c1:63:20:fc:18:05:7d:
                    fb:a6:d0:fe:ab:be:53:da:6a:5a:4f:2b:15:71:a3:
                    f2:8c:44:5f:91:f5:aa:1c:40:17:98:8c:36:1e:a2:
                    e4:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:04:25:43:04:73:FA:C8:F2:83:13:9B:EB:90:ED:8E:1F:E4:47:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/2ea41de4-2808-3ddb-96dd-9c277c38dec4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.crl

            X509v3 Authority Key Identifier:
                keyid:8C:BB:12:0E:88:E0:E4:10:DC:79:9A:11:CC:5E:E0:EA:C1:40:0E:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.95.199.48/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:f9:f0:61:1f:d9:b0:47:f6:cf:12:f3:22:2d:20:3d:37:c6:
         fc:aa:4c:9d:81:7d:a3:b2:14:71:f1:c7:7c:9c:78:5e:55:b2:
         0a:f6:a8:1d:30:fa:a6:53:b1:b2:9b:ca:f3:12:46:b5:57:30:
         c1:77:d7:6f:1a:1c:70:a0:e2:df:de:20:6a:2f:06:b0:9e:3b:
         3a:a2:21:78:3a:af:a9:97:38:91:de:e0:67:5c:ba:11:e4:18:
         3e:f8:a2:27:92:77:ba:31:fa:24:ff:ae:b3:ce:ad:1f:92:e6:
         a4:9b:53:3d:a1:d1:f2:c7:27:92:1a:c1:f0:d0:7c:7c:14:0c:
         fd:9f:dd:d3:58:63:97:fd:bd:60:d5:93:38:f6:3a:5c:03:3c:
         82:b5:de:9a:b3:11:f9:82:e6:0e:16:19:98:d6:81:1b:08:38:
         60:a6:6a:78:b0:bc:e4:72:6d:b1:15:27:20:e0:c3:92:ec:02:
         17:2e:fe:5c:1c:1f:3d:a1:42:75:bf:96:08:48:53:5f:30:af:
         1c:24:fb:74:85:be:76:2c:a1:ee:c8:3a:f2:de:11:7e:c6:4e:
         81:14:f2:d7:99:54:9f:c7:44:ac:14:35:cb:51:a4:28:fb:ad:
         6b:5d:94:09:87:c4:9a:4d:cc:f2:eb:a5:a0:3c:22:5f:70:e0:
         69:d4:08:e1
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6niNpdhpbUXQi4KQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTM2MzBmODItMTY5Yy00YjAzLWFkNDItYWE2ZjViNzFk
OTFkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
YjMyZjJmZmEtZTJkYi00OTEyLTg1OWMtODAzZDYyNWYxOWUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApseq+wCc2G73mGmj5EI/f0OTx4EVgeDWFXj8
bnFTKgU+lhuk5w1cYjgQitSP3yPd7GSZhTmhm1p0KTUpte1iicbA4snplBHbMiHV
ZaJ05rNOoH1mb//5QmSKPr+QKqh80BDDouhNIE9LrFj0Iz1yzLqZhThOeYaPdNuo
7Y0NT8Uhtq2Qxbsz8dueGRkxh0eHPUAXV7K1eZjK/qLCOq6nYNDJTe+yE+SRIqLn
eM5KooAbk1KfkDYuF8lv/9UnatnbjlsOABi8+IY2/GXzb3evQjS535wUaX8+PcFj
IPwYBX37ptD+q75T2mpaTysVcaPyjERfkfWqHEAXmIw2HqLk8QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFAMEJUMEc/rI8oMTm+uQ7Y4f5EcGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzYz
MGY4Mi0xNjljLTRiMDMtYWQ0Mi1hYTZmNWI3MWQ5MWQvMmVhNDFkZTQtMjgwOC0z
ZGRiLTk2ZGQtOWMyNzdjMzhkZWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTM2MzBmODItMTY5Yy00YjAzLWFk
NDItYWE2ZjViNzFkOTFkL2EzNjMwZjgyLTE2OWMtNGIwMy1hZDQyLWFhNmY1Yjcx
ZDkxZC5jcmwwHwYDVR0jBBgwFoAUjLsSDojg5BDceZoRzF7g6sFADkYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzYzMGY4Mi0xNjljLTRiMDMtYWQ0Mi1hYTZm
NWI3MWQ5MWQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEQF/HMDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBF+fBhH9mwR/bPEvMiLSA9N8b8qkydgX2jshRx8cd8nHheVbIK9qgd
MPqmU7Gym8rzEka1VzDBd9dvGhxwoOLf3iBqLwawnjs6oiF4Oq+plziR3uBnXLoR
5Bg++KInkne6Mfok/66zzq0fkuakm1M9odHyxyeSGsHw0Hx8FAz9n93TWGOX/b1g
1ZM49jpcAzyCtd6asxH5guYOFhmY1oEbCDhgpmp4sLzkcm2xFScg4MOS7AIXLv5c
HB89oUJ1v5YISFNfMK8cJPt0hb52LKHuyDry3hF+xk6BFPLXmVSfx0SsFDXLUaQo
+61rXZQJh8SaTczy66WgPCJfcOBp1Ajh
-----END CERTIFICATE-----
Generated at Thu Aug 13 21:55:43 2026 by rpki-client