Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/031ed816-d716-387e-bcc2-eecd10719c63.roa
File:                     031ed816-d716-387e-bcc2-eecd10719c63.roa (raw, json)
Hash identifier:          ThYSRYOePVxsQCysjsV2rUNh4E4heO+untpwaa3Chc8=
Subject key identifier:   E1:52:D5:38:BF:60:78:A4:A4:FC:C3:E2:53:F6:BD:62:90:3E:22:99
Certificate issuer:       /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial:       010D0C9F4328584EA79B62066EED58C28A43A180
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/031ed816-d716-387e-bcc2-eecd10719c63.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     213122
IP address blocks:        64.112.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 13 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:62:06:6e:ed:58:c2:8a:43:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=706b3ecf-08e4-4fef-9553-b34669b90e88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9d:d8:49:96:2d:f2:33:69:ef:11:a8:44:e3:
                    3c:fd:5f:0d:50:bd:20:07:6f:62:0c:8a:e8:ee:6c:
                    cd:ee:ac:ff:cf:14:05:09:c7:db:14:06:dc:1e:bb:
                    c8:74:f7:d4:a6:33:bb:6f:e4:e3:81:0c:bd:d9:ae:
                    27:96:2b:31:8e:2e:6a:e9:e9:6d:ae:3a:2b:25:13:
                    2c:34:3e:86:82:15:61:fe:f3:03:45:85:25:08:b3:
                    93:50:da:38:56:6e:00:87:b1:18:f5:8e:1c:8a:fb:
                    61:94:a6:34:de:1d:ec:bb:db:34:d4:61:a0:d4:14:
                    b6:2f:72:c2:6e:5e:fe:6f:05:46:08:3c:47:f1:4f:
                    d8:8b:ee:e2:cc:80:ee:5a:9f:a9:ad:19:d3:3e:73:
                    6a:c3:77:c8:87:1f:4f:2c:9d:0a:99:93:0c:18:b8:
                    18:a7:d2:bd:b7:e0:01:d8:ac:24:c4:3d:82:fd:65:
                    63:2a:e8:b8:a7:73:22:36:75:be:8d:ab:df:a8:69:
                    f8:cc:c9:83:e2:32:e2:ee:8a:31:50:04:bd:12:08:
                    42:91:2c:13:e3:cb:5a:84:17:7a:78:2b:e1:86:1a:
                    eb:20:dd:4a:9d:c4:d3:82:01:d9:ec:00:3e:59:d8:
                    3b:af:c2:9b:b5:51:b4:cc:14:b5:35:3b:2a:09:cc:
                    92:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:52:D5:38:BF:60:78:A4:A4:FC:C3:E2:53:F6:BD:62:90:3E:22:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/031ed816-d716-387e-bcc2-eecd10719c63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl

            X509v3 Authority Key Identifier:
                keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:80:af:70:27:33:99:92:07:04:d4:af:ee:05:80:87:48:76:
         46:a6:3e:b2:15:40:5b:6d:25:d4:4a:31:ec:ea:c4:19:b5:f1:
         1c:a6:dd:46:b0:6e:11:40:3b:bf:fe:e4:50:67:ed:2c:08:fe:
         75:86:b0:b1:28:90:48:6c:a0:d9:4d:45:df:95:65:c0:f2:31:
         3e:fd:75:30:cf:fa:57:69:78:6a:e4:45:de:30:4f:35:89:c0:
         15:80:74:ea:8f:f3:fc:aa:7e:d2:28:39:7a:84:45:dd:24:aa:
         33:ea:19:59:b4:54:43:11:e9:39:d5:31:3e:9a:dc:1d:de:d3:
         bd:21:4d:e2:ee:c8:2c:cb:79:86:7a:ee:3e:09:b9:25:49:12:
         e0:86:d9:be:52:53:b4:ce:77:37:8f:0d:46:0c:94:62:59:28:
         3e:76:33:f1:e6:3b:6b:c9:86:e9:02:64:20:95:c6:5b:26:22:
         c4:52:e3:87:c6:de:32:f7:c0:68:57:3c:ad:bb:60:b2:7a:e4:
         d1:ce:3e:3b:e6:bc:8e:bc:12:71:15:51:90:74:e9:8a:8c:a4:
         6c:1a:bc:b5:23:18:28:dd:5d:41:56:78:cb:9d:40:18:5c:e3:
         a7:bd:50:f7:4e:0e:a7:23:2c:69:b1:a2:21:25:6f:d2:dc:bd:
         68:cc:25:cd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nm2IGbu1YwopDoYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0
YjY1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NzA2YjNlY2YtMDhlNC00ZmVmLTk1NTMtYjM0NjY5YjkwZTg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt53YSZYt8jNp7xGoROM8/V8NUL0gB29iDIro
7mzN7qz/zxQFCcfbFAbcHrvIdPfUpjO7b+TjgQy92a4nlisxji5q6eltrjorJRMs
ND6GghVh/vMDRYUlCLOTUNo4Vm4Ah7EY9Y4civthlKY03h3su9s01GGg1BS2L3LC
bl7+bwVGCDxH8U/Yi+7izIDuWp+prRnTPnNqw3fIhx9PLJ0KmZMMGLgYp9K9t+AB
2KwkxD2C/WVjKui4p3MiNnW+javfqGn4zMmD4jLi7ooxUAS9EghCkSwT48tahBd6
eCvhhhrrIN1KncTTggHZ7AA+Wdg7r8KbtVG0zBS1NTsqCcyS/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOFS1Ti/YHikpPzD4lP2vWKQPiKZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0
NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvMDMxZWQ4MTYtZDcxNi0z
ODdlLWJjYzItZWVjZDEwNzE5YzYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0
NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4
NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3
YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQHBVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABKAr3AnM5mSBwTUr+4FgIdIdkamPrIVQFttJdRKMezqxBm18Rym3Uaw
bhFAO7/+5FBn7SwI/nWGsLEokEhsoNlNRd+VZcDyMT79dTDP+ldpeGrkRd4wTzWJ
wBWAdOqP8/yqftIoOXqERd0kqjPqGVm0VEMR6TnVMT6a3B3e070hTeLuyCzLeYZ6
7j4JuSVJEuCG2b5SU7TOdzePDUYMlGJZKD52M/HmO2vJhukCZCCVxlsmIsRS44fG
3jL3wGhXPK27YLJ65NHOPjvmvI68EnEVUZB06YqMpGwavLUjGCjdXUFWeMudQBhc
46e9UPdODqcjLGmxoiElb9LcvWjMJc0=
-----END CERTIFICATE-----
Generated at Tue Aug 11 09:13:40 2026 by rpki-client