Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a550ebdf-7911-4ff2-b736-20785a55062a/5434b4b2-89b2-33ca-b477-b7312e09492d.roa
File:                     5434b4b2-89b2-33ca-b477-b7312e09492d.roa (raw, json)
Hash identifier:          x3GlzycMa7yIbWHv8MCIlQs2NSSLRaiY16LinfAk4pI=
Subject key identifier:   B5:44:8C:AD:0B:00:B9:46:7E:0F:57:2B:09:A8:89:61:CE:2D:7F:34
Certificate issuer:       /CN=a550ebdf-7911-4ff2-b736-20785a55062a
Certificate serial:       010D0C9F4328584E4989D7BAFE5B428751FCE140
Authority key identifier: CB:C0:AD:BA:01:65:07:51:8C:33:73:E3:83:7D:38:12:5A:8C:CD:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a550ebdf-7911-4ff2-b736-20785a55062a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a550ebdf-7911-4ff2-b736-20785a55062a/5434b4b2-89b2-33ca-b477-b7312e09492d.roa
Signing time:             Thu 25 Jun 2026 09:00:13 +0000
ROA not before:           Thu 25 Jun 2026 09:00:13 +0000
ROA not after:            Wed 23 Sep 2026 09:00:13 +0000
asID:                     6461
IP address blocks:        64.83.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a550ebdf-7911-4ff2-b736-20785a55062a/a550ebdf-7911-4ff2-b736-20785a55062a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a550ebdf-7911-4ff2-b736-20785a55062a/a550ebdf-7911-4ff2-b736-20785a55062a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a550ebdf-7911-4ff2-b736-20785a55062a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:49:89:d7:ba:fe:5b:42:87:51:fc:e1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a550ebdf-7911-4ff2-b736-20785a55062a
        Validity
            Not Before: Jun 25 09:00:13 2026 GMT
            Not After : Sep 23 09:00:13 2026 GMT
        Subject: CN=27059531-5c63-42be-9537-2e0319eed78b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d7:59:84:aa:55:43:8c:23:0c:e4:92:1e:81:
                    e9:4b:04:86:af:de:29:69:cf:3d:dc:3b:19:28:6d:
                    9f:f6:ee:c3:d5:35:15:bf:11:55:87:df:0e:a6:ef:
                    e5:60:7e:05:12:e5:1b:1f:0d:fe:f0:2e:e9:a7:ee:
                    ff:30:c0:f9:8e:2a:f5:eb:d3:43:8c:67:b6:0b:01:
                    50:89:7e:81:fe:39:5a:2b:ce:92:97:98:cd:4b:96:
                    18:80:28:1f:61:8c:e3:df:87:1a:21:d6:5f:7b:65:
                    e4:09:4e:bd:fe:d3:1d:6e:01:b2:2f:ac:54:bf:e2:
                    63:a7:af:4f:f8:e1:4b:5f:6d:b5:27:73:47:25:82:
                    27:a0:14:ab:7e:86:fb:a1:d2:21:bc:7f:a7:cd:4f:
                    9c:83:63:82:55:06:23:c3:80:67:02:e2:07:fd:ff:
                    15:5a:4f:3a:df:5f:5f:fe:ea:2d:3a:3e:b2:79:87:
                    ee:de:eb:97:a1:a6:23:a0:1c:f3:3e:2c:d0:d0:69:
                    9c:b9:a1:e3:df:8e:e4:94:38:86:66:ee:55:14:00:
                    c5:ea:69:51:45:41:5c:24:87:b5:8a:44:ae:8c:76:
                    c9:83:f5:f8:eb:a5:ae:62:3a:55:f9:14:5d:ee:0b:
                    10:cf:14:c1:8e:40:fa:df:fd:72:c9:74:e3:00:6f:
                    80:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:44:8C:AD:0B:00:B9:46:7E:0F:57:2B:09:A8:89:61:CE:2D:7F:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a550ebdf-7911-4ff2-b736-20785a55062a/5434b4b2-89b2-33ca-b477-b7312e09492d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a550ebdf-7911-4ff2-b736-20785a55062a/a550ebdf-7911-4ff2-b736-20785a55062a.crl

            X509v3 Authority Key Identifier:
                keyid:CB:C0:AD:BA:01:65:07:51:8C:33:73:E3:83:7D:38:12:5A:8C:CD:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a550ebdf-7911-4ff2-b736-20785a55062a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.83.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:11:dc:2e:d9:12:a0:82:af:25:a0:0e:a2:3d:2f:36:28:98:
         20:7f:b0:24:37:75:17:aa:03:b0:af:5a:4d:63:99:db:70:56:
         f2:4a:fa:7e:ad:37:d8:1f:85:dc:07:5f:89:8e:ed:a4:00:76:
         5b:a1:8f:d1:a0:3f:7e:12:db:a5:4f:d1:f1:13:f6:e6:a4:cc:
         7e:01:66:52:ba:b7:99:ad:61:6e:90:b0:e2:9a:74:41:8e:8d:
         31:4e:84:a3:3e:96:19:0f:47:f2:ce:c3:b1:73:b3:a9:61:9b:
         10:cb:33:28:8b:40:68:cf:5a:04:3b:a3:52:93:24:c1:76:1e:
         c0:6e:52:d9:d2:6d:19:7f:97:94:bb:f3:96:ff:a5:f5:88:9e:
         16:ff:38:f6:a4:f9:b2:5c:2e:b4:3e:4f:10:08:d2:97:7d:63:
         c7:5d:9f:99:03:5d:fd:af:d4:04:04:93:3d:f2:9a:8d:c0:16:
         75:df:01:d7:ce:e8:58:30:d1:dd:43:df:d0:e5:7a:14:30:35:
         bb:7e:c8:1c:8b:cc:88:91:c2:ee:42:91:11:42:3b:d1:f2:b0:
         e8:d2:e7:58:a8:58:e9:e2:3a:98:fc:aa:90:e3:75:d5:6e:43:
         bf:8c:cb:14:6e:f8:e5:97:c8:58:83:e3:c6:46:94:da:25:16:
         52:9d:da:50
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5Jide6/ltCh1H84UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTU1MGViZGYtNzkxMS00ZmYyLWI3MzYtMjA3ODVhNTUw
NjJhMB4XDTI2MDYyNTA5MDAxM1oXDTI2MDkyMzA5MDAxM1owLzEtMCsGA1UEAxMk
MjcwNTk1MzEtNWM2My00MmJlLTk1MzctMmUwMzE5ZWVkNzhiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytdZhKpVQ4wjDOSSHoHpSwSGr94pac893DsZ
KG2f9u7D1TUVvxFVh98Opu/lYH4FEuUbHw3+8C7pp+7/MMD5jir169NDjGe2CwFQ
iX6B/jlaK86Sl5jNS5YYgCgfYYzj34caIdZfe2XkCU69/tMdbgGyL6xUv+Jjp69P
+OFLX221J3NHJYInoBSrfob7odIhvH+nzU+cg2OCVQYjw4BnAuIH/f8VWk86319f
/uotOj6yeYfu3uuXoaYjoBzzPizQ0GmcuaHj347klDiGZu5VFADF6mlRRUFcJIe1
ikSujHbJg/X466WuYjpV+RRd7gsQzxTBjkD63/1yyXTjAG+ATQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLVEjK0LALlGfg9XKwmoiWHOLX80MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hNTUw
ZWJkZi03OTExLTRmZjItYjczNi0yMDc4NWE1NTA2MmEvNTQzNGI0YjItODliMi0z
M2NhLWI0NzctYjczMTJlMDk0OTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYTU1MGViZGYtNzkxMS00ZmYyLWI3
MzYtMjA3ODVhNTUwNjJhL2E1NTBlYmRmLTc5MTEtNGZmMi1iNzM2LTIwNzg1YTU1
MDYyYS5jcmwwHwYDVR0jBBgwFoAUy8CtugFlB1GMM3Pjg304ElqMzf4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9hNTUwZWJkZi03OTExLTRmZjItYjczNi0yMDc4
NWE1NTA2MmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQFOAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIAR3C7ZEqCCryWgDqI9LzYomCB/sCQ3dReqA7CvWk1jmdtwVvJK+n6t
N9gfhdwHX4mO7aQAdluhj9GgP34S26VP0fET9uakzH4BZlK6t5mtYW6QsOKadEGO
jTFOhKM+lhkPR/LOw7Fzs6lhmxDLMyiLQGjPWgQ7o1KTJMF2HsBuUtnSbRl/l5S7
85b/pfWInhb/OPak+bJcLrQ+TxAI0pd9Y8ddn5kDXf2v1AQEkz3ymo3AFnXfAdfO
6Fgw0d1D39DlehQwNbt+yByLzIiRwu5CkRFCO9HysOjS51ioWOniOpj8qpDjddVu
Q7+MyxRu+OWXyFiD48ZGlNolFlKd2lA=
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:09:15 2026 by rpki-client