Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/4fa54654-ded6-3619-96ff-55f46cd35a76.roa
File:                     4fa54654-ded6-3619-96ff-55f46cd35a76.roa (raw, json)
Hash identifier:          e0GEwVTjPv74R5jVN3T2E0qUrTw4rgMC3XmiH0Y1+aE=
Subject key identifier:   6D:85:AF:35:8A:48:45:1B:5C:80:2E:4E:5F:2B:3D:89:7F:B4:7A:C5
Certificate issuer:       /CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
Certificate serial:       010D0C9F4328584CBDB1D44A6DA7EFABF47BC840
Authority key identifier: 89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/4fa54654-ded6-3619-96ff-55f46cd35a76.roa
Signing time:             Tue 03 Feb 2026 14:00:39 +0000
ROA not before:           Tue 03 Feb 2026 14:00:39 +0000
ROA not after:            Mon 04 May 2026 13:00:39 +0000
asID:                     398391
IP address blocks:        64.227.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Feb 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bd:b1:d4:4a:6d:a7:ef:ab:f4:7b:c8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
        Validity
            Not Before: Feb  3 14:00:39 2026 GMT
            Not After : May  4 13:00:39 2026 GMT
        Subject: CN=02802fe5-e8f2-47fa-8e58-fdd52a05510e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:23:69:87:57:05:9d:fb:05:a2:c3:2f:c6:32:
                    10:5b:8a:5d:91:0b:45:f3:91:26:ce:4f:f2:62:9c:
                    a4:06:b0:7f:1d:86:bb:30:04:36:6a:20:d8:ae:3a:
                    d4:4a:cb:1d:e7:f4:65:c2:e8:05:a3:9b:b6:47:36:
                    50:a7:14:f2:fd:d2:3d:cd:10:89:9c:1f:91:c5:8d:
                    62:1c:a9:b6:80:91:84:cb:b9:bf:1c:3f:c5:bf:57:
                    ab:59:f3:35:b3:ef:51:a9:a7:95:3e:b6:7a:04:a7:
                    7a:20:5e:fb:bf:fa:6d:ce:a8:6b:70:e5:84:6a:d7:
                    50:9a:e9:01:ba:83:95:d7:b0:66:02:4a:30:6f:fc:
                    cc:92:46:71:fd:c9:a1:78:c2:a9:87:49:c4:5a:e5:
                    fb:59:28:45:01:ec:73:53:28:2e:cc:c8:5d:21:d0:
                    85:b9:f1:ea:cd:03:c5:cc:eb:86:a8:05:27:4c:59:
                    61:24:d4:44:d0:e4:ae:1a:8a:45:9a:3a:08:6f:03:
                    78:7b:ff:ac:f4:63:21:01:bb:e2:9b:97:a6:44:05:
                    98:9b:22:7f:10:6e:eb:59:0d:dc:ad:80:2b:68:60:
                    cb:2b:d1:e4:8c:c9:0b:71:f5:4b:0e:0f:f1:14:53:
                    29:15:83:45:2b:9c:b0:76:d3:a9:9c:63:18:e5:64:
                    51:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:85:AF:35:8A:48:45:1B:5C:80:2E:4E:5F:2B:3D:89:7F:B4:7A:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/4fa54654-ded6-3619-96ff-55f46cd35a76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl

            X509v3 Authority Key Identifier:
                keyid:89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.227.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:43:21:b0:4d:8d:6f:81:23:74:15:6e:9a:88:3c:68:b1:b3:
         f3:c7:8e:d6:39:87:12:45:37:ec:e3:83:62:be:3b:47:c3:80:
         4d:05:eb:49:b6:9a:cd:09:6e:89:ea:42:74:4c:65:4f:62:07:
         5b:7d:4a:30:a0:f6:47:8f:b9:82:d4:5b:16:86:cc:98:88:98:
         7b:e7:1b:4b:e5:c0:fb:04:71:90:f7:5d:96:fc:6d:d7:81:7f:
         92:c4:ff:6d:e1:e8:95:b5:9e:84:47:2b:a7:08:f9:3d:4f:82:
         89:26:5c:83:97:46:de:05:7d:81:e5:02:b0:7e:47:aa:27:32:
         0a:a8:2b:4d:2a:28:30:c5:5b:b1:40:02:07:91:af:84:1b:92:
         a6:40:40:8c:40:ca:46:12:9c:11:96:12:ad:93:d6:fa:73:0c:
         79:f1:7c:92:2e:bf:f7:7e:4a:33:55:09:a9:dc:c0:34:14:15:
         5d:0a:45:ef:b7:6c:55:b4:1f:a3:cb:6b:ad:1f:d6:20:36:36:
         85:b4:94:ac:96:b7:49:2e:d0:fe:e3:04:e2:25:6b:25:90:68:
         03:fa:be:92:c4:2a:29:52:55:82:19:94:6e:da:df:77:93:78:
         87:47:7c:87:10:db:4b:a2:c5:3c:6d:c7:98:2f:26:26:58:05:
         58:60:fd:56
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy9sdRKbafvq/R7yEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjQyMzk4MjUtZDNlNi00YjFmLWEzMzktZjczZjJkYjg5
ZWU5MB4XDTI2MDIwMzE0MDAzOVoXDTI2MDUwNDEzMDAzOVowLzEtMCsGA1UEAxMk
MDI4MDJmZTUtZThmMi00N2ZhLThlNTgtZmRkNTJhMDU1MTBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyNph1cFnfsFosMvxjIQW4pdkQtF85Emzk/y
YpykBrB/HYa7MAQ2aiDYrjrUSssd5/RlwugFo5u2RzZQpxTy/dI9zRCJnB+RxY1i
HKm2gJGEy7m/HD/Fv1erWfM1s+9RqaeVPrZ6BKd6IF77v/ptzqhrcOWEatdQmukB
uoOV17BmAkowb/zMkkZx/cmheMKph0nEWuX7WShFAexzUyguzMhdIdCFufHqzQPF
zOuGqAUnTFlhJNRE0OSuGopFmjoIbwN4e/+s9GMhAbvim5emRAWYmyJ/EG7rWQ3c
rYAraGDLK9HkjMkLcfVLDg/xFFMpFYNFK5ywdtOpnGMY5WRRqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG2FrzWKSEUbXIAuTl8rPYl/tHrFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82NDIz
OTgyNS1kM2U2LTRiMWYtYTMzOS1mNzNmMmRiODllZTkvNGZhNTQ2NTQtZGVkNi0z
NjE5LTk2ZmYtNTVmNDZjZDM1YTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjQyMzk4MjUtZDNlNi00YjFmLWEz
MzktZjczZjJkYjg5ZWU5LzY0MjM5ODI1LWQzZTYtNGIxZi1hMzM5LWY3M2YyZGI4
OWVlOS5jcmwwHwYDVR0jBBgwFoAUiYq+4lrGIGWwmxKaCUUuy2q5rIMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC82NDIzOTgyNS1kM2U2LTRiMWYtYTMzOS1mNzNm
MmRiODllZTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOPPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACBDIbBNjW+BI3QVbpqIPGixs/PHjtY5hxJFN+zjg2K+O0fDgE0F60m2
ms0JbonqQnRMZU9iB1t9SjCg9kePuYLUWxaGzJiImHvnG0vlwPsEcZD3XZb8bdeB
f5LE/23h6JW1noRHK6cI+T1PgokmXIOXRt4FfYHlArB+R6onMgqoK00qKDDFW7FA
AgeRr4QbkqZAQIxAykYSnBGWEq2T1vpzDHnxfJIuv/d+SjNVCancwDQUFV0KRe+3
bFW0H6PLa60f1iA2NoW0lKyWt0ku0P7jBOIlayWQaAP6vpLEKilSVYIZlG7a33eT
eIdHfIcQ20uixTxtx5gvJiZYBVhg/VY=
-----END CERTIFICATE-----
Generated at Mon Feb 23 00:07:34 2026 by rpki-client