Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/14d7dec4-f24b-3f8c-bffe-d0c828486488.roa
File:                     14d7dec4-f24b-3f8c-bffe-d0c828486488.roa (raw, json)
Hash identifier:          gnABNNj9V7siZ2WzDu7imuy/r0v6e+LOVQX4jRyDB9A=
Subject key identifier:   31:FB:79:EA:5B:7A:4F:1C:62:4E:42:6C:CF:80:DF:49:0D:E3:0C:EE
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F4328584F81483D78C69F3E2372908000
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/14d7dec4-f24b-3f8c-bffe-d0c828486488.roa
Signing time:             Thu 15 Oct 2026 01:00:12 +0000
ROA not before:           Thu 15 Oct 2026 01:00:12 +0000
ROA not after:            Wed 13 Jan 2027 02:00:12 +0000
asID:                     396356
IP address blocks:        64.40.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:81:48:3d:78:c6:9f:3e:23:72:90:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Oct 15 01:00:12 2026 GMT
            Not After : Jan 13 02:00:12 2027 GMT
        Subject: CN=799928b2-8b15-45af-84de-53bb681e9a5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8c:cb:5d:2a:ac:9b:bc:2a:2c:ac:51:1d:59:
                    d0:dd:3c:6e:0d:df:a9:7b:12:57:93:e3:87:87:af:
                    9f:31:fc:9e:a4:90:52:17:e6:61:a7:33:cf:35:c3:
                    f5:0b:32:fe:38:ed:bf:17:4c:ed:c0:5c:6b:22:d2:
                    f7:de:c1:f2:03:13:9b:f1:49:fc:48:f1:be:2b:ba:
                    48:44:fa:cb:cf:77:bf:67:35:fb:d0:98:0f:7c:85:
                    46:4e:1a:b0:ef:b5:f4:74:94:54:ff:64:55:0a:5d:
                    54:19:95:9e:83:76:c4:32:d2:f0:7a:58:41:00:45:
                    be:16:28:3d:8c:74:6e:e1:e0:21:ec:cb:c0:7e:c2:
                    8c:75:39:f7:ae:6b:e6:6d:66:59:4a:3d:50:05:1c:
                    15:54:79:fc:05:73:ca:d4:7a:3e:65:f0:91:64:af:
                    07:95:53:1c:94:61:91:73:23:21:5b:a4:65:81:ee:
                    34:29:98:9e:ce:d5:39:23:4c:02:eb:3b:6b:71:78:
                    94:98:2a:a0:ed:15:c9:80:f6:51:71:a1:d7:fe:ae:
                    ee:ff:47:46:38:ee:08:c1:4d:9e:78:45:c6:b9:05:
                    a0:98:cb:a7:00:ba:44:cd:66:16:de:95:b9:aa:2f:
                    4b:26:de:4c:b2:9f:24:94:ab:51:cd:99:83:23:77:
                    f8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:FB:79:EA:5B:7A:4F:1C:62:4E:42:6C:CF:80:DF:49:0D:E3:0C:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/14d7dec4-f24b-3f8c-bffe-d0c828486488.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.40.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:b0:05:a5:b5:6d:84:0e:26:57:bd:a3:e8:36:4d:38:48:ed:
         2b:23:fd:4b:32:fd:b5:41:c4:c4:b9:6c:41:08:f9:00:75:6d:
         b5:70:75:cf:d4:59:ae:0a:00:3f:c3:e4:7c:1d:25:62:6c:f1:
         4a:7e:c4:6e:03:7b:8b:08:2f:62:9b:83:f8:ad:e1:5d:6b:d2:
         6c:e2:ef:73:21:d6:16:9b:67:42:85:7d:62:3d:65:2e:fb:5b:
         67:3d:f5:99:b9:2a:19:0c:f5:31:51:77:7c:72:73:c4:48:c8:
         ad:d0:3f:4b:61:e3:48:b7:ee:95:03:5a:ff:9a:48:cb:d7:98:
         f8:28:cb:b1:2f:23:aa:93:43:89:28:19:7e:1d:1c:92:35:97:
         42:60:fd:4c:d2:61:8b:21:ad:d5:a7:c8:93:ac:45:82:62:90:
         a2:7f:be:23:76:25:aa:4b:e4:1d:e2:ff:81:37:5c:0c:ff:77:
         cd:52:13:8c:55:b4:30:e9:9d:86:d6:c0:4b:f6:e1:72:42:03:
         c0:3d:0a:9c:b6:b5:88:3c:2d:8e:19:a5:48:9e:7d:1e:41:5a:
         d2:be:f3:ec:1d:52:6e:84:3b:13:a5:14:9d:d9:1a:24:b8:a4:
         9e:15:37:25:71:ae:45:4f:fd:92:ed:45:46:3a:29:36:d8:2b:
         11:88:af:7a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+BSD14xp8+I3KQgAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2IzOTBhMGUtN2Q1Ny00MTJkLWI4Y2QtZDA0NWJjYWZk
NWVlMB4XDTI2MTAxNTAxMDAxMloXDTI3MDExMzAyMDAxMlowLzEtMCsGA1UEAxMk
Nzk5OTI4YjItOGIxNS00NWFmLTg0ZGUtNTNiYjY4MWU5YTVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzozLXSqsm7wqLKxRHVnQ3TxuDd+pexJXk+OH
h6+fMfyepJBSF+ZhpzPPNcP1CzL+OO2/F0ztwFxrItL33sHyAxOb8Un8SPG+K7pI
RPrLz3e/ZzX70JgPfIVGThqw77X0dJRU/2RVCl1UGZWeg3bEMtLwelhBAEW+Fig9
jHRu4eAh7MvAfsKMdTn3rmvmbWZZSj1QBRwVVHn8BXPK1Ho+ZfCRZK8HlVMclGGR
cyMhW6Rlge40KZieztU5I0wC6ztrcXiUmCqg7RXJgPZRcaHX/q7u/0dGOO4IwU2e
eEXGuQWgmMunALpEzWYW3pW5qi9LJt5Msp8klKtRzZmDI3f4oQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDH7eepbek8cYk5CbM+A30kN4wzuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5
MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1YmNhZmQ1ZWUvMTRkN2RlYzQtZjI0Yi0z
ZjhjLWJmZmUtZDBjODI4NDg2NDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2IzOTBhMGUtN2Q1Ny00MTJkLWI4
Y2QtZDA0NWJjYWZkNWVlLzdiMzkwYTBlLTdkNTctNDEyZC1iOGNkLWQwNDViY2Fm
ZDVlZS5jcmwwHwYDVR0jBBgwFoAU7FajwDb41jr5rJwPnJt737I3gqAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1
YmNhZmQ1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCiXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABWwBaW1bYQOJle9o+g2TThI7Ssj/Usy/bVBxMS5bEEI+QB1bbVwdc/U
Wa4KAD/D5HwdJWJs8Up+xG4De4sIL2Kbg/it4V1r0mzi73Mh1habZ0KFfWI9ZS77
W2c99Zm5KhkM9TFRd3xyc8RIyK3QP0th40i37pUDWv+aSMvXmPgoy7EvI6qTQ4ko
GX4dHJI1l0Jg/UzSYYshrdWnyJOsRYJikKJ/viN2JapL5B3i/4E3XAz/d81SE4xV
tDDpnYbWwEv24XJCA8A9Cpy2tYg8LY4ZpUiefR5BWtK+8+wdUm6EOxOlFJ3ZGiS4
pJ4VNyVxrkVP/ZLtRUY6KTbYKxGIr3o=
-----END CERTIFICATE-----
Generated at Sun Oct 25 01:37:13 2026 by rpki-client