Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/9d24522e-48c5-31cc-93f4-aa8d5c2a4fbf.roa
File:                     9d24522e-48c5-31cc-93f4-aa8d5c2a4fbf.roa (raw, json)
Hash identifier:          8j1XJhaV8CGcUm5/QCAdCIzzNhrIH5YCWfm7Avf2ZVA=
Subject key identifier:   63:A9:65:19:13:1F:12:A4:DF:09:FC:D2:DA:20:23:37:1F:1F:F2:9D
Certificate issuer:       /CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
Certificate serial:       010D0C9F4328584EB2B1BB5B2F8D4DB2666FB100
Authority key identifier: DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/9d24522e-48c5-31cc-93f4-aa8d5c2a4fbf.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     270147
IP address blocks:        192.64.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:bb:5b:2f:8d:4d:b2:66:6f:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=4f471854-48d8-4ab3-9d5d-5ff9c7998a6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:8a:41:79:c2:f0:4f:33:49:0d:86:20:00:9b:
                    db:3a:bf:9b:fb:9e:19:b6:5a:e5:3a:12:61:18:31:
                    35:b3:20:9d:ba:cc:0a:77:ea:c2:4f:38:ea:07:0a:
                    b0:a4:c5:a1:4a:82:82:51:5d:40:b7:bd:e1:59:f2:
                    c0:48:b5:57:a0:c6:ed:ad:07:fb:41:88:6b:ae:da:
                    8a:c7:ca:13:89:6f:d3:1f:7a:8d:1b:06:1a:06:d9:
                    59:d5:39:39:aa:46:58:a8:c1:c2:36:1c:7b:2f:85:
                    10:e4:ae:20:fd:f7:b3:9a:65:43:c7:30:a8:6e:91:
                    84:6e:05:2e:7b:ba:38:c1:1d:88:f7:40:d8:41:1e:
                    db:d1:9c:f8:cc:2e:37:f8:3f:73:a8:52:fa:4d:46:
                    4f:24:e2:5f:00:74:66:6a:3a:3a:a3:d3:fa:7e:40:
                    2a:6c:8d:c4:ca:db:2e:d1:9f:ed:06:01:03:23:64:
                    38:ed:45:42:a1:20:c3:79:61:e5:83:41:17:6d:73:
                    1a:cc:38:e2:a0:35:38:a0:b3:55:5d:e0:38:60:23:
                    0b:0a:60:cd:ae:99:22:82:36:c6:38:50:0e:ca:09:
                    fa:c7:cc:1b:2b:f7:2a:52:52:06:2d:9f:90:66:4d:
                    2f:a3:a3:db:12:31:f9:f8:5e:2b:e5:92:ac:6b:bc:
                    15:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:A9:65:19:13:1F:12:A4:DF:09:FC:D2:DA:20:23:37:1F:1F:F2:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/9d24522e-48c5-31cc-93f4-aa8d5c2a4fbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl

            X509v3 Authority Key Identifier:
                keyid:DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.64.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:cf:dc:b4:b1:69:4c:74:f5:7f:4e:66:9e:fe:e6:6c:d6:b1:
         c3:1c:ee:5c:69:35:53:ae:89:cf:ad:d1:10:c9:0f:ee:58:4c:
         d5:f3:4d:c5:98:5f:a9:56:9d:15:6e:9a:6f:e3:6d:6f:87:95:
         7c:10:31:19:80:d5:7a:3c:1c:46:e6:e1:02:4d:16:08:8f:91:
         7c:36:56:aa:8c:c3:c4:bb:ab:01:4a:69:3c:c9:41:b0:59:aa:
         0a:b6:11:32:35:95:59:fe:12:7b:40:1b:16:2d:10:bf:73:77:
         f9:c7:87:e7:84:85:b1:3e:ab:f5:e7:a0:99:f3:df:6a:2a:15:
         aa:e6:1b:ed:02:66:45:f6:16:dd:30:88:38:e3:ed:dc:0d:2b:
         2b:fe:1f:35:43:7f:ce:72:0a:30:78:49:bf:16:cc:66:a9:b6:
         1a:0b:5d:4e:3b:cf:7f:8d:ac:23:62:40:53:7d:7b:77:48:81:
         bd:e9:e8:d6:39:8c:7f:ab:a7:40:8f:79:4a:f8:94:fd:55:0a:
         42:a4:bb:12:81:43:86:34:38:ed:36:dc:d3:83:d5:95:0b:bc:
         a8:34:19:98:0b:c0:58:69:db:63:cc:a2:37:95:4a:8d:63:c0:
         12:e3:bb:69:c8:ae:45:43:22:40:b2:22:1a:9b:2a:19:2f:b2:
         9a:7e:70:8c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ysbtbL41NsmZvsQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTRlM2U3MmUtMzJjYi00ZTgzLThkNDQtODYyNDY2YmIw
YzhiMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk
NGY0NzE4NTQtNDhkOC00YWIzLTlkNWQtNWZmOWM3OTk4YTZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIpBecLwTzNJDYYgAJvbOr+b+54ZtlrlOhJh
GDE1syCduswKd+rCTzjqBwqwpMWhSoKCUV1At73hWfLASLVXoMbtrQf7QYhrrtqK
x8oTiW/TH3qNGwYaBtlZ1Tk5qkZYqMHCNhx7L4UQ5K4g/fezmmVDxzCobpGEbgUu
e7o4wR2I90DYQR7b0Zz4zC43+D9zqFL6TUZPJOJfAHRmajo6o9P6fkAqbI3Eytsu
0Z/tBgEDI2Q47UVCoSDDeWHlg0EXbXMazDjioDU4oLNVXeA4YCMLCmDNrpkigjbG
OFAOygn6x8wbK/cqUlIGLZ+QZk0vo6PbEjH5+F4r5ZKsa7wVbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGOpZRkTHxKk3wn80togIzcfH/KdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNGUz
ZTcyZS0zMmNiLTRlODMtOGQ0NC04NjI0NjZiYjBjOGIvOWQyNDUyMmUtNDhjNS0z
MWNjLTkzZjQtYWE4ZDVjMmE0ZmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTRlM2U3MmUtMzJjYi00ZTgzLThk
NDQtODYyNDY2YmIwYzhiL2E0ZTNlNzJlLTMyY2ItNGU4My04ZDQ0LTg2MjQ2NmJi
MGM4Yi5jcmwwHwYDVR0jBBgwFoAU36ao4MNy5scPhIXGsRigy1w+vcMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNGUzZTcyZS0zMmNiLTRlODMtOGQ0NC04NjI0
NjZiYjBjOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwEDNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAPP3LSxaUx09X9OZp7+5mzWscMc7lxpNVOuic+t0RDJD+5YTNXzTcWY
X6lWnRVumm/jbW+HlXwQMRmA1Xo8HEbm4QJNFgiPkXw2VqqMw8S7qwFKaTzJQbBZ
qgq2ETI1lVn+EntAGxYtEL9zd/nHh+eEhbE+q/XnoJnz32oqFarmG+0CZkX2Ft0w
iDjj7dwNKyv+HzVDf85yCjB4Sb8WzGapthoLXU47z3+NrCNiQFN9e3dIgb3p6NY5
jH+rp0CPeUr4lP1VCkKkuxKBQ4Y0OO023NOD1ZULvKg0GZgLwFhp22PMojeVSo1j
wBLju2nIrkVDIkCyIhqbKhkvspp+cIw=
-----END CERTIFICATE-----
Generated at Fri Aug 21 06:04:35 2026 by rpki-client