Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/a846fd05-f4c2-3bf9-9f41-4b09df2d732f.roa
File:                     a846fd05-f4c2-3bf9-9f41-4b09df2d732f.roa (raw, json)
Hash identifier:          EE/6joeBYbGU3nAZxnNJXW9Wv9kmOc5tP2XoLDtqm3A=
Subject key identifier:   9A:E0:0A:57:4D:06:DA:12:55:64:9E:3D:8B:2A:84:15:9A:CD:D8:84
Certificate issuer:       /CN=da8ef68a-20eb-4f6e-a80e-617aa1473f09
Certificate serial:       010D0C9F4328584EC332B65BE5D2A4F55D72B598
Authority key identifier: CC:52:EE:D6:CD:6F:C2:A0:F3:2B:8E:12:3B:23:87:59:02:0B:35:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/a846fd05-f4c2-3bf9-9f41-4b09df2d732f.roa
Signing time:             Fri 07 Aug 2026 22:53:19 +0000
ROA not before:           Fri 07 Aug 2026 22:53:19 +0000
ROA not after:            Thu 05 Nov 2026 23:53:19 +0000
asID:                     40933
IP address blocks:        64.187.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/da8ef68a-20eb-4f6e-a80e-617aa1473f09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/da8ef68a-20eb-4f6e-a80e-617aa1473f09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:32:b6:5b:e5:d2:a4:f5:5d:72:b5:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da8ef68a-20eb-4f6e-a80e-617aa1473f09
        Validity
            Not Before: Aug  7 22:53:19 2026 GMT
            Not After : Nov  5 23:53:19 2026 GMT
        Subject: CN=fc353ffd-a5c7-4bdf-8c3f-9a6ec46809d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:85:d9:df:ad:3a:ec:88:63:e8:3d:8f:35:93:
                    ee:f7:d8:e1:f2:06:76:a7:43:6a:d2:81:b7:80:17:
                    83:01:31:7e:0c:90:3c:e1:3a:e2:ae:e7:80:ae:75:
                    03:f9:3f:71:c9:1c:78:90:d1:3a:79:8c:10:0c:a7:
                    c0:f4:a6:75:18:c3:7a:8d:45:47:c2:c6:f4:c2:d9:
                    97:da:82:ec:e7:ac:fa:99:96:0c:fd:13:c9:1d:2c:
                    db:b8:3a:08:55:3f:a3:76:3c:c6:0a:fe:4f:d7:9a:
                    69:86:44:4a:52:28:8e:59:77:19:08:7f:39:22:db:
                    17:19:7d:9d:2f:25:7e:96:47:15:41:c7:b7:27:78:
                    89:f9:3c:ea:52:27:f8:07:d4:84:e9:3e:02:24:1f:
                    60:06:39:e5:d9:48:19:50:76:08:34:12:48:50:65:
                    f4:ab:10:c2:ee:48:50:a5:bd:3d:6e:f9:77:a1:59:
                    9c:e3:8e:97:da:9c:20:30:dc:30:55:e8:38:34:1b:
                    89:7f:53:8e:a4:b1:56:1c:e9:74:5f:1b:e6:2f:d4:
                    72:23:e9:90:f5:9f:fc:14:38:0a:fc:6c:36:0b:8c:
                    ba:24:31:35:cd:4f:e0:5a:35:b4:84:6a:20:7e:45:
                    80:56:6e:32:84:82:f9:96:33:55:88:52:35:f8:a7:
                    a3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:E0:0A:57:4D:06:DA:12:55:64:9E:3D:8B:2A:84:15:9A:CD:D8:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/a846fd05-f4c2-3bf9-9f41-4b09df2d732f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/da8ef68a-20eb-4f6e-a80e-617aa1473f09.crl

            X509v3 Authority Key Identifier:
                keyid:CC:52:EE:D6:CD:6F:C2:A0:F3:2B:8E:12:3B:23:87:59:02:0B:35:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.187.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:95:88:2c:3a:a6:30:fd:50:7f:23:b8:61:a6:7f:7d:09:10:
         6f:33:7c:73:f9:20:a4:78:11:a1:f5:2a:bb:dd:32:8c:9c:79:
         6f:35:98:86:46:20:ee:b7:df:3e:e4:ec:3d:34:62:e0:4e:35:
         a0:00:33:2f:61:9d:53:59:dc:a7:44:3f:21:2b:e8:18:83:5f:
         1a:46:79:63:b4:e2:fd:87:68:39:f7:b2:2b:23:22:c4:9a:90:
         09:d3:bf:6b:06:4e:3a:fd:d6:2f:0d:18:fd:fe:40:2b:06:3f:
         7d:d9:97:11:09:e5:b4:f7:c8:32:dc:24:c5:9f:98:e9:f9:6f:
         45:c4:05:ca:9b:83:cd:12:ae:d2:6b:c3:86:7e:48:7e:66:c8:
         b3:c5:87:d9:a5:ca:e5:02:f8:d2:1d:8c:7d:08:fb:3f:56:6b:
         58:e3:6c:56:12:8b:74:b8:a3:e4:8f:0b:1e:80:1c:34:7d:ba:
         5c:c4:9d:ca:9a:3c:a5:4f:fc:b7:1e:c2:d5:e0:12:3d:f4:73:
         a5:0c:56:92:29:96:25:d0:8d:ae:9d:76:b4:38:ce:58:cc:11:
         8c:d8:88:04:bc:b4:d9:fc:95:aa:10:47:14:20:57:b5:1f:b1:
         5d:09:5e:0b:5b:ec:2c:25:34:d0:7e:53:ba:b7:f8:5f:00:6a:
         98:d7:c9:85
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7DMrZb5dKk9V1ytZgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGE4ZWY2OGEtMjBlYi00ZjZlLWE4MGUtNjE3YWExNDcz
ZjA5MB4XDTI2MDgwNzIyNTMxOVoXDTI2MTEwNTIzNTMxOVowLzEtMCsGA1UEAxMk
ZmMzNTNmZmQtYTVjNy00YmRmLThjM2YtOWE2ZWM0NjgwOWQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIXZ36067Ihj6D2PNZPu99jh8gZ2p0Nq0oG3
gBeDATF+DJA84TrirueArnUD+T9xyRx4kNE6eYwQDKfA9KZ1GMN6jUVHwsb0wtmX
2oLs56z6mZYM/RPJHSzbuDoIVT+jdjzGCv5P15pphkRKUiiOWXcZCH85ItsXGX2d
LyV+lkcVQce3J3iJ+TzqUif4B9SE6T4CJB9gBjnl2UgZUHYINBJIUGX0qxDC7khQ
pb09bvl3oVmc446X2pwgMNwwVeg4NBuJf1OOpLFWHOl0XxvmL9RyI+mQ9Z/8FDgK
/Gw2C4y6JDE1zU/gWjW0hGogfkWAVm4yhIL5ljNViFI1+Kej5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJrgCldNBtoSVWSePYsqhBWazdiEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9kYThl
ZjY4YS0yMGViLTRmNmUtYTgwZS02MTdhYTE0NzNmMDkvYTg0NmZkMDUtZjRjMi0z
YmY5LTlmNDEtNGIwOWRmMmQ3MzJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k
ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvZGE4ZWY2OGEtMjBlYi00ZjZlLWE4
MGUtNjE3YWExNDczZjA5L2RhOGVmNjhhLTIwZWItNGY2ZS1hODBlLTYxN2FhMTQ3
M2YwOS5jcmwwHwYDVR0jBBgwFoAUzFLu1s1vwqDzK44SOyOHWQILNTkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4
Ny1iMmNjLTU2ODkzODFhM2M0Mi9kYThlZjY4YS0yMGViLTRmNmUtYTgwZS02MTdh
YTE0NzNmMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQLvPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJiViCw6pjD9UH8juGGmf30JEG8zfHP5IKR4EaH1KrvdMoyceW81mIZG
IO633z7k7D00YuBONaAAMy9hnVNZ3KdEPyEr6BiDXxpGeWO04v2HaDn3sisjIsSa
kAnTv2sGTjr91i8NGP3+QCsGP33ZlxEJ5bT3yDLcJMWfmOn5b0XEBcqbg80SrtJr
w4Z+SH5myLPFh9mlyuUC+NIdjH0I+z9Wa1jjbFYSi3S4o+SPCx6AHDR9ulzEncqa
PKVP/LcewtXgEj30c6UMVpIpliXQja6ddrQ4zljMEYzYiAS8tNn8laoQRxQgV7Uf
sV0JXgtb7CwlNNB+U7q3+F8AapjXyYU=
-----END CERTIFICATE-----
Generated at Wed Aug 26 17:25:33 2026 by rpki-client