Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/9603799b-4197-3482-8c5a-a0487efee778.roa
File:                     9603799b-4197-3482-8c5a-a0487efee778.roa (raw, json)
Hash identifier:          mTHpBy7i/NoLOBay9TVNWM1x83T6uojPSCK8+k759dU=
Subject key identifier:   18:4D:A2:D5:E1:79:AC:F8:99:E6:AA:DA:CD:0C:BA:BA:0E:2D:C1:9E
Certificate issuer:       /CN=6eb3f683-5247-4c55-a10b-2184f26c4f84
Certificate serial:       010D0C9F4328584D5E1A524F98C7D2F5615EFD00
Authority key identifier: 67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/9603799b-4197-3482-8c5a-a0487efee778.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     36445
IP address blocks:        64.45.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:52:4f:98:c7:d2:f5:61:5e:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eb3f683-5247-4c55-a10b-2184f26c4f84
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=d64912dd-ecf9-4a4f-af00-3416e5aed2e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:af:9a:0e:5e:f1:80:c0:22:4f:22:ed:da:2f:
                    6a:7b:c8:15:64:a8:44:dd:9d:c2:30:d9:b2:52:d3:
                    1b:06:1d:df:a6:53:61:d4:d9:73:84:a0:13:27:f3:
                    f6:7f:95:57:d3:0d:b7:a8:38:c1:c8:58:02:18:58:
                    30:e9:a6:7c:66:42:c1:0e:02:3d:fd:0e:62:de:d1:
                    e9:06:ae:75:93:1a:0d:bd:de:11:61:8d:9d:73:31:
                    68:df:e7:f8:47:f1:b4:e4:b9:1d:45:6c:ab:67:67:
                    be:a8:c1:e5:ad:45:e9:d3:ff:43:5d:e2:51:72:5c:
                    ee:ed:88:52:05:ad:98:51:e4:ab:47:51:46:1a:45:
                    ef:6b:1d:c0:83:6b:7a:14:ba:5b:58:d6:b8:e3:bb:
                    63:30:a0:04:c1:17:d7:ae:da:f7:3f:54:af:2b:64:
                    25:c2:ba:54:56:86:47:48:32:8b:fe:62:ba:9b:5f:
                    0b:2b:fe:b5:5c:c7:57:9b:55:5f:f6:2c:a7:c4:5e:
                    5b:2d:e9:32:7c:be:c7:67:39:3a:87:1c:46:a3:a0:
                    f6:c7:c8:0d:4c:39:15:f4:45:01:54:23:27:40:82:
                    a3:06:aa:e6:1c:47:08:3e:ae:3b:61:c1:29:e3:5a:
                    2c:47:65:ff:f4:bb:fa:25:34:2f:e2:e1:3b:ea:b0:
                    09:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:4D:A2:D5:E1:79:AC:F8:99:E6:AA:DA:CD:0C:BA:BA:0E:2D:C1:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/9603799b-4197-3482-8c5a-a0487efee778.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl

            X509v3 Authority Key Identifier:
                keyid:67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.45.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:49:67:42:2a:04:94:89:ed:e2:8d:74:1c:53:48:a2:23:2a:
         34:fc:69:ad:78:9a:fa:77:90:f9:ba:8e:cc:44:a1:8e:ca:52:
         a2:a4:5f:8b:c5:fc:6e:4b:ca:85:48:88:5c:41:8d:fa:33:8d:
         db:af:81:a9:07:25:25:21:ba:58:87:21:af:e9:de:73:91:db:
         fa:98:12:85:91:33:cd:87:a8:31:b7:3e:2b:97:63:92:45:dd:
         3a:32:c6:39:79:3b:0a:9d:8d:eb:f1:dd:08:9e:56:ff:94:7e:
         7c:23:be:3a:bf:cd:e4:87:07:40:4a:73:ec:f2:43:7d:95:0e:
         8a:8d:2e:ef:61:77:f0:f8:bf:80:27:bf:67:d9:de:7f:fb:1e:
         a1:bb:d5:3c:90:31:40:19:0e:7e:ec:ec:11:be:85:89:39:c6:
         83:c7:0c:83:df:84:22:83:f8:1d:26:bb:d7:78:b0:93:d5:32:
         b1:44:7a:35:e0:9b:0f:7f:d1:8e:81:bf:be:9b:a7:e4:8a:2c:
         9a:54:75:b7:b4:c5:5d:0a:95:a9:60:32:72:a5:dd:96:1c:53:
         35:75:a6:b5:19:07:9a:de:12:50:f7:f8:5b:80:68:d7:4e:fd:
         da:4d:57:e7:3d:ec:de:ee:55:90:bb:4a:ba:ad:dc:9e:a2:c8:
         9b:9d:ff:0e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGlJPmMfS9WFe/QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmViM2Y2ODMtNTI0Ny00YzU1LWExMGItMjE4NGYyNmM0
Zjg0MB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk
ZDY0OTEyZGQtZWNmOS00YTRmLWFmMDAtMzQxNmU1YWVkMmU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAna+aDl7xgMAiTyLt2i9qe8gVZKhE3Z3CMNmy
UtMbBh3fplNh1NlzhKATJ/P2f5VX0w23qDjByFgCGFgw6aZ8ZkLBDgI9/Q5i3tHp
Bq51kxoNvd4RYY2dczFo3+f4R/G05LkdRWyrZ2e+qMHlrUXp0/9DXeJRclzu7YhS
Ba2YUeSrR1FGGkXvax3Ag2t6FLpbWNa447tjMKAEwRfXrtr3P1SvK2QlwrpUVoZH
SDKL/mK6m18LK/61XMdXm1Vf9iynxF5bLekyfL7HZzk6hxxGo6D2x8gNTDkV9EUB
VCMnQIKjBqrmHEcIPq47YcEp41osR2X/9Lv6JTQv4uE76rAJKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBhNotXheaz4meaq2s0MuroOLcGeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIz
ZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0ZjI2YzRmODQvOTYwMzc5OWItNDE5Ny0z
NDgyLThjNWEtYTA0ODdlZmVlNzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmViM2Y2ODMtNTI0Ny00YzU1LWEx
MGItMjE4NGYyNmM0Zjg0LzZlYjNmNjgzLTUyNDctNGM1NS1hMTBiLTIxODRmMjZj
NGY4NC5jcmwwHwYDVR0jBBgwFoAUZ3PZ+0gjuyrO78ZBW50EaCloq28wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIzZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0
ZjI2YzRmODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQC2rMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJZJZ0IqBJSJ7eKNdBxTSKIjKjT8aa14mvp3kPm6jsxEoY7KUqKkX4vF
/G5LyoVIiFxBjfozjduvgakHJSUhuliHIa/p3nOR2/qYEoWRM82HqDG3PiuXY5JF
3Toyxjl5Owqdjevx3QieVv+Ufnwjvjq/zeSHB0BKc+zyQ32VDoqNLu9hd/D4v4An
v2fZ3n/7HqG71TyQMUAZDn7s7BG+hYk5xoPHDIPfhCKD+B0mu9d4sJPVMrFEejXg
mw9/0Y6Bv76bp+SKLJpUdbe0xV0KlalgMnKl3ZYcUzV1prUZB5reElD3+FuAaNdO
/dpNV+c97N7uVZC7Srqt3J6iyJud/w4=
-----END CERTIFICATE-----
Generated at Thu Apr 9 02:29:58 2026 by rpki-client