Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/42fed2c7-e0b3-3af7-b342-35efac5bef13.roa
File:                     42fed2c7-e0b3-3af7-b342-35efac5bef13.roa (raw, json)
Hash identifier:          izMeIuC3Z2QEWveX+jKUda05iZ6ASFqlyjuuI2ny6Go=
Subject key identifier:   53:85:66:CF:6E:8F:76:F5:CF:BB:6C:78:2B:49:0F:56:FA:51:E9:96
Certificate issuer:       /CN=81565da9-aab9-45ca-b99c-0684053daa09
Certificate serial:       010D0C9F4328584D1F4A44A55C19856285A1E6E0
Authority key identifier: D7:5C:90:A0:F6:CD:17:C6:44:68:A9:C4:16:61:D5:7E:64:23:2D:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/42fed2c7-e0b3-3af7-b342-35efac5bef13.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     6461
IP address blocks:        149.64.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:44:a5:5c:19:85:62:85:a1:e6:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81565da9-aab9-45ca-b99c-0684053daa09
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=6f0c3181-e121-4863-b87e-e1d674416be8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2d:1c:43:83:c0:d4:48:c9:94:92:80:0a:4f:
                    4a:7b:1e:d2:47:fd:d4:24:c9:70:f6:cb:7f:97:7a:
                    f0:c8:df:70:cc:52:cc:a6:13:54:77:f1:84:f9:f2:
                    bc:35:a3:1e:55:58:8e:e7:11:ab:0f:27:c9:ce:aa:
                    c3:b7:df:c4:e3:53:00:df:8e:fd:a7:49:89:6f:a6:
                    34:aa:46:ba:2f:7b:c4:91:ff:f2:5c:b9:de:30:21:
                    fb:e9:ef:2d:e5:91:bc:8e:29:cd:98:9f:61:48:73:
                    5a:8a:f7:ee:b9:7c:68:a9:a1:d4:e0:c0:94:7c:66:
                    65:e8:11:5c:4f:6d:92:35:c7:4e:b8:ec:9e:12:9a:
                    4a:f5:c0:70:f8:4e:57:38:f8:82:ea:ec:80:70:ec:
                    15:57:a6:fd:31:5c:55:7b:c1:d3:ee:0b:41:6a:30:
                    5b:70:97:62:87:d7:24:64:d0:aa:b9:c6:01:fa:c8:
                    81:a4:cf:12:cd:a0:11:97:23:c4:3e:29:21:13:cf:
                    51:ab:b1:76:df:ad:0c:6b:49:15:df:6e:c9:05:4e:
                    8b:23:eb:74:65:42:83:9c:02:11:30:17:1b:61:84:
                    1e:ae:7a:02:ec:12:ea:33:e8:fe:be:97:64:80:b8:
                    86:6f:6f:30:52:63:6b:2a:82:39:ca:39:87:fe:04:
                    1e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:85:66:CF:6E:8F:76:F5:CF:BB:6C:78:2B:49:0F:56:FA:51:E9:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/42fed2c7-e0b3-3af7-b342-35efac5bef13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.crl

            X509v3 Authority Key Identifier:
                keyid:D7:5C:90:A0:F6:CD:17:C6:44:68:A9:C4:16:61:D5:7E:64:23:2D:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.64.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:89:29:fc:7f:99:58:b8:5d:95:93:26:05:d1:cc:a3:3d:7f:
         65:b4:77:12:d5:32:89:8a:00:9a:ff:26:46:a3:5d:f6:e6:8c:
         bb:49:cf:ea:8f:73:4e:de:44:77:5e:ae:09:1c:b1:d5:56:07:
         55:72:42:fa:48:ee:c3:56:4a:0c:d0:5a:9a:61:75:57:9c:29:
         b2:ad:ea:df:f6:dc:7b:cb:ea:3d:8d:7c:61:05:0f:67:ce:c7:
         aa:15:75:b2:97:24:0c:7a:ff:fb:cd:e5:92:3e:bd:0f:ef:d9:
         ca:c3:81:c6:de:fd:1c:34:25:c8:2b:d6:c8:09:e8:52:c3:ff:
         23:93:0d:67:c3:0e:c2:8d:b4:25:f3:62:83:fd:ca:68:72:f2:
         59:93:34:57:93:2c:b8:0b:e3:0e:ff:69:94:6a:57:89:e7:44:
         fd:c3:06:09:05:6d:c1:65:fb:84:25:ac:b7:ca:6d:2f:d6:98:
         ab:86:2a:47:d6:8b:82:b1:a3:a9:fb:65:01:49:aa:53:45:dd:
         98:51:56:9c:aa:8d:56:bf:4e:9a:de:08:26:89:5d:96:ce:a2:
         b2:f1:3a:1f:d3:40:f2:75:af:7a:c0:fa:c6:ef:3b:52:8f:7a:
         f7:51:a1:84:38:47:20:25:44:14:5b:5c:3b:58:23:ab:b5:c3:
         87:3b:f0:5a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSkSlXBmFYoWh5uAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODE1NjVkYTktYWFiOS00NWNhLWI5OWMtMDY4NDA1M2Rh
YTA5MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk
NmYwYzMxODEtZTEyMS00ODYzLWI4N2UtZTFkNjc0NDE2YmU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsS0cQ4PA1EjJlJKACk9Kex7SR/3UJMlw9st/
l3rwyN9wzFLMphNUd/GE+fK8NaMeVViO5xGrDyfJzqrDt9/E41MA3479p0mJb6Y0
qka6L3vEkf/yXLneMCH76e8t5ZG8jinNmJ9hSHNaivfuuXxoqaHU4MCUfGZl6BFc
T22SNcdOuOyeEppK9cBw+E5XOPiC6uyAcOwVV6b9MVxVe8HT7gtBajBbcJdih9ck
ZNCqucYB+siBpM8SzaARlyPEPikhE89Rq7F2360Ma0kV327JBU6LI+t0ZUKDnAIR
MBcbYYQernoC7BLqM+j+vpdkgLiGb28wUmNrKoI5yjmH/gQeuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFOFZs9uj3b1z7tseCtJD1b6UemWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84MTU2
NWRhOS1hYWI5LTQ1Y2EtYjk5Yy0wNjg0MDUzZGFhMDkvNDJmZWQyYzctZTBiMy0z
YWY3LWIzNDItMzVlZmFjNWJlZjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODE1NjVkYTktYWFiOS00NWNhLWI5
OWMtMDY4NDA1M2RhYTA5LzgxNTY1ZGE5LWFhYjktNDVjYS1iOTljLTA2ODQwNTNk
YWEwOS5jcmwwHwYDVR0jBBgwFoAU11yQoPbNF8ZEaKnEFmHVfmQjLcgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS84MTU2NWRhOS1hYWI5LTQ1Y2EtYjk5Yy0wNjg0
MDUzZGFhMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlUDiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADmJKfx/mVi4XZWTJgXRzKM9f2W0dxLVMomKAJr/JkajXfbmjLtJz+qP
c07eRHdergkcsdVWB1VyQvpI7sNWSgzQWpphdVecKbKt6t/23HvL6j2NfGEFD2fO
x6oVdbKXJAx6//vN5ZI+vQ/v2crDgcbe/Rw0Jcgr1sgJ6FLD/yOTDWfDDsKNtCXz
YoP9ymhy8lmTNFeTLLgL4w7/aZRqV4nnRP3DBgkFbcFl+4QlrLfKbS/WmKuGKkfW
i4Kxo6n7ZQFJqlNF3ZhRVpyqjVa/TpreCCaJXZbOorLxOh/TQPJ1r3rA+sbvO1KP
evdRoYQ4RyAlRBRbXDtYI6u1w4c78Fo=
-----END CERTIFICATE-----
Generated at Mon Mar 23 17:26:22 2026 by rpki-client