Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/90db42c4-6921-388d-8bed-643eefa83bde.roa
File:                     90db42c4-6921-388d-8bed-643eefa83bde.roa (raw, json)
Hash identifier:          tmQdRWkV9u25pl/Z/98Ogaef8gZX0/TK9qCXo2jJWT4=
Subject key identifier:   63:F1:0E:3A:99:5F:E8:27:59:CD:1F:A7:6C:2D:A4:E1:EF:DB:96:09
Certificate issuer:       /CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398
Certificate serial:       010D0C9F4328584EED5205C14764F4FA47AAC370
Authority key identifier: E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/90db42c4-6921-388d-8bed-643eefa83bde.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     11572
IP address blocks:        64.38.249.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:05:c1:47:64:f4:fa:47:aa:c3:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=a1e6ade2-c57d-4f96-a90f-18a45610299b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:8a:77:41:05:ca:92:67:09:ca:77:e4:35:c3:
                    b1:3b:01:ab:3d:dc:77:82:65:65:37:7c:2e:e3:93:
                    24:47:45:1a:f4:9f:1e:55:22:36:ee:c4:aa:b0:ff:
                    2b:58:0a:4e:5b:1d:91:c5:77:c2:81:6a:5e:54:73:
                    ec:de:70:3b:1f:e0:b0:0c:82:4c:8e:fd:f5:13:a6:
                    79:ea:50:b8:99:de:0f:a0:78:33:10:e7:5f:6f:d4:
                    bc:b8:44:7a:e6:73:90:15:20:a4:fa:d4:07:19:50:
                    19:66:63:62:85:7a:fc:9d:3c:e9:69:07:d3:e6:f7:
                    85:e5:c7:0b:7f:d3:78:69:1b:ad:94:4c:90:b6:38:
                    38:83:c3:7f:ba:5c:81:f3:1e:1f:d1:f8:1f:2d:0c:
                    64:b3:20:18:21:1b:c8:28:62:ca:49:6f:c5:c3:2e:
                    d1:13:fe:fe:8b:12:08:61:53:d0:06:e7:5d:3b:e8:
                    15:51:c5:34:8a:cf:fd:d2:6b:54:5f:98:8b:1f:b6:
                    0c:bd:b8:e6:00:ac:fc:22:36:88:28:08:08:0e:c5:
                    cc:e7:88:b2:4a:b7:f5:d8:42:25:f2:c4:67:79:2f:
                    18:96:bb:ba:95:a9:16:dd:50:34:14:91:14:de:39:
                    75:ce:c1:75:54:cc:da:ba:8e:7e:61:3c:4b:89:01:
                    2c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F1:0E:3A:99:5F:E8:27:59:CD:1F:A7:6C:2D:A4:E1:EF:DB:96:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/90db42c4-6921-388d-8bed-643eefa83bde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl

            X509v3 Authority Key Identifier:
                keyid:E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.38.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:9b:41:9b:60:b9:98:fa:bf:98:63:a2:2e:06:d6:6b:47:d8:
         bc:bd:3c:48:c7:40:b3:94:9b:c2:4e:30:f4:7a:3a:25:de:bb:
         a2:37:90:22:0d:a2:aa:19:0e:6c:ff:08:3b:a6:24:ef:a6:ee:
         13:0b:2a:34:e1:14:9a:b6:b2:88:cf:3b:e8:85:fc:37:9d:ef:
         36:0a:0a:fe:1d:a5:08:02:28:38:a3:c9:f7:49:0f:bf:e4:39:
         bb:9a:19:bb:8d:0e:6a:10:44:14:cd:00:b5:1c:22:ab:80:85:
         91:07:b9:c3:e5:08:94:6a:7b:8b:e1:b3:e4:63:69:0c:08:93:
         36:81:b8:71:e8:e8:ab:0e:07:de:30:30:71:11:1b:6c:5f:fc:
         4c:3b:57:81:14:2d:da:52:a4:3b:03:8b:18:16:f9:90:0e:aa:
         8c:2c:48:9f:db:c5:41:cc:d3:53:e6:58:67:5c:7f:c8:db:71:
         be:6f:85:d7:31:a6:db:54:71:ad:56:2d:0c:e3:68:da:5e:95:
         8a:81:80:c1:90:ab:06:4b:24:75:ff:5d:28:95:2b:35:f0:37:
         ee:6d:5e:a4:94:2e:96:30:4d:3c:80:39:2a:dd:98:77:0d:5d:
         d1:6d:8c:c8:99:e0:ac:5b:41:96:b6:40:b8:aa:0d:0d:56:20:
         fd:0f:cb:bf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUgXBR2T0+keqw3AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODAyMzEzZTYtNTZiZi00ZmQ4LWFlMGQtYzllMDU3ZDNi
Mzk4MB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk
YTFlNmFkZTItYzU3ZC00Zjk2LWE5MGYtMThhNDU2MTAyOTliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIp3QQXKkmcJynfkNcOxOwGrPdx3gmVlN3wu
45MkR0Ua9J8eVSI27sSqsP8rWApOWx2RxXfCgWpeVHPs3nA7H+CwDIJMjv31E6Z5
6lC4md4PoHgzEOdfb9S8uER65nOQFSCk+tQHGVAZZmNihXr8nTzpaQfT5veF5ccL
f9N4aRutlEyQtjg4g8N/ulyB8x4f0fgfLQxksyAYIRvIKGLKSW/Fwy7RE/7+ixII
YVPQBuddO+gVUcU0is/90mtUX5iLH7YMvbjmAKz8IjaIKAgIDsXM54iySrf12EIl
8sRneS8Ylru6lakW3VA0FJEU3jl1zsF1VMzauo5+YTxLiQEsQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGPxDjqZX+gnWc0fp2wtpOHv25YJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84MDIz
MTNlNi01NmJmLTRmZDgtYWUwZC1jOWUwNTdkM2IzOTgvOTBkYjQyYzQtNjkyMS0z
ODhkLThiZWQtNjQzZWVmYTgzYmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODAyMzEzZTYtNTZiZi00ZmQ4LWFl
MGQtYzllMDU3ZDNiMzk4LzgwMjMxM2U2LTU2YmYtNGZkOC1hZTBkLWM5ZTA1N2Qz
YjM5OC5jcmwwHwYDVR0jBBgwFoAU6Nx8ybbq227grPfqrNCHZurVu2gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84MDIzMTNlNi01NmJmLTRmZDgtYWUwZC1jOWUw
NTdkM2IzOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCb5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGGbQZtguZj6v5hjoi4G1mtH2Ly9PEjHQLOUm8JOMPR6OiXeu6I3kCIN
oqoZDmz/CDumJO+m7hMLKjThFJq2sojPO+iF/Ded7zYKCv4dpQgCKDijyfdJD7/k
ObuaGbuNDmoQRBTNALUcIquAhZEHucPlCJRqe4vhs+RjaQwIkzaBuHHo6KsOB94w
MHERG2xf/Ew7V4EULdpSpDsDixgW+ZAOqowsSJ/bxUHM01PmWGdcf8jbcb5vhdcx
pttUca1WLQzjaNpelYqBgMGQqwZLJHX/XSiVKzXwN+5tXqSULpYwTTyAOSrdmHcN
XdFtjMiZ4KxbQZa2QLiqDQ1WIP0Py78=
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:25:50 2026 by rpki-client