Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/e4b5162f-ffbc-3991-972c-1958633f7ab4.roa
File:                     e4b5162f-ffbc-3991-972c-1958633f7ab4.roa (raw, json)
Hash identifier:          cC69I9SX0uc1y7rxPwHqRK3cX9BB57+yjZuOHHaRQzo=
Subject key identifier:   BD:A5:4E:D6:E3:0B:6A:C9:E3:68:50:0A:4A:E6:D2:21:93:47:4D:B1
Certificate issuer:       /CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35
Certificate serial:       010D0C9F4328584EF1822EB8DC7E9B9E07EA0E00
Authority key identifier: 0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/e4b5162f-ffbc-3991-972c-1958633f7ab4.roa
Signing time:             Mon 24 Aug 2026 13:00:12 +0000
ROA not before:           Mon 24 Aug 2026 13:00:12 +0000
ROA not after:            Sun 22 Nov 2026 14:00:12 +0000
asID:                     399838
IP address blocks:        64.112.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 15 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f1:82:2e:b8:dc:7e:9b:9e:07:ea:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35
        Validity
            Not Before: Aug 24 13:00:12 2026 GMT
            Not After : Nov 22 14:00:12 2026 GMT
        Subject: CN=3627a2bc-6659-4c29-a690-04017e5bb060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2a:59:98:de:9d:76:fb:7f:d7:72:7c:f0:f3:
                    0e:de:96:15:1c:9a:50:05:b2:2c:c6:b0:d0:2a:82:
                    7d:64:c4:60:83:c8:e4:0c:b8:cf:21:b5:94:44:d1:
                    17:99:c6:3e:22:6b:fb:72:6b:7c:1f:86:25:ec:d4:
                    93:93:f3:cb:62:25:b4:17:75:98:12:60:db:81:e5:
                    3d:bf:f5:ec:6a:5c:53:a4:7d:43:a8:37:61:64:c9:
                    57:4c:34:18:e0:bd:26:9a:0b:18:94:22:ad:ea:22:
                    27:f2:f5:39:16:ca:8a:4f:f6:99:c6:63:44:12:ef:
                    f3:d4:fb:79:27:67:6f:ae:56:0e:80:5e:d5:f5:02:
                    09:15:49:6a:cf:14:68:f2:4c:cf:93:19:72:3e:82:
                    26:70:91:45:7a:0e:28:6c:e8:b0:ce:50:c9:d9:2f:
                    cf:63:51:64:2d:86:39:2a:e0:f0:e6:66:ea:39:54:
                    b3:a0:a7:62:0e:ae:67:94:74:a6:a1:3f:57:b6:a2:
                    ae:36:04:44:b7:db:ee:5f:0d:39:16:a0:66:d9:14:
                    31:9e:89:8a:e1:16:73:b3:66:74:56:16:ff:61:4c:
                    45:ab:2d:c7:a7:5d:7b:41:28:aa:48:1c:3e:02:b8:
                    2e:17:01:f1:7c:9c:ac:a7:52:03:dc:cc:29:fd:5f:
                    a1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A5:4E:D6:E3:0B:6A:C9:E3:68:50:0A:4A:E6:D2:21:93:47:4D:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/e4b5162f-ffbc-3991-972c-1958633f7ab4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl

            X509v3 Authority Key Identifier:
                keyid:0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:56:0a:e0:13:fb:1a:99:a2:00:eb:63:91:81:85:98:8f:1d:
         8e:ea:f4:8f:45:53:b7:d6:31:90:32:ac:8d:12:96:22:a0:2b:
         2c:16:7d:64:8d:ad:cc:22:70:c0:77:38:8f:88:97:72:c8:3f:
         57:ff:94:43:64:94:15:b9:52:01:c4:f0:44:a1:ca:61:36:07:
         6a:4e:38:e8:ac:4b:2b:e3:2c:20:77:61:fe:82:e7:ac:27:a1:
         39:fc:06:15:6a:5c:c4:f0:7b:d2:f6:05:03:bb:1a:fc:c1:33:
         ac:fa:32:1d:ee:07:ba:dc:fd:4a:f5:57:9a:57:a0:b4:72:fb:
         48:23:71:8a:4b:6c:f3:38:0c:99:05:e0:67:40:77:ca:2a:a3:
         72:02:a3:c4:3c:e8:67:51:89:9d:f2:d3:a0:66:ca:47:d7:2f:
         5a:c2:0e:3a:58:da:59:33:57:46:95:b2:6e:e2:6d:4d:7e:ba:
         a4:23:13:d3:f8:e8:86:4b:d3:18:95:73:34:2a:b5:a8:59:50:
         2f:8d:09:a6:08:3f:e2:c9:9a:00:0c:e7:25:7e:a8:83:d2:2f:
         f7:c0:8c:e6:da:03:2e:11:39:ed:da:6b:bf:18:4a:f5:8c:58:
         3f:12:e3:13:e8:81:aa:89:4e:aa:b0:6a:9d:ef:3b:9c:8a:e6:
         50:b4:7e:01
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7xgi643H6bngfqDgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGU0OWI0YzYtNGQ1OC00MmUwLWFiZTItOTM3NTRmZGNk
YTM1MB4XDTI2MDgyNDEzMDAxMloXDTI2MTEyMjE0MDAxMlowLzEtMCsGA1UEAxMk
MzYyN2EyYmMtNjY1OS00YzI5LWE2OTAtMDQwMTdlNWJiMDYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSpZmN6ddvt/13J88PMO3pYVHJpQBbIsxrDQ
KoJ9ZMRgg8jkDLjPIbWURNEXmcY+Imv7cmt8H4Yl7NSTk/PLYiW0F3WYEmDbgeU9
v/XsalxTpH1DqDdhZMlXTDQY4L0mmgsYlCKt6iIn8vU5FsqKT/aZxmNEEu/z1Pt5
J2dvrlYOgF7V9QIJFUlqzxRo8kzPkxlyPoImcJFFeg4obOiwzlDJ2S/PY1FkLYY5
KuDw5mbqOVSzoKdiDq5nlHSmoT9XtqKuNgREt9vuXw05FqBm2RQxnomK4RZzs2Z0
Vhb/YUxFqy3Hp117QSiqSBw+ArguFwHxfJysp1ID3Mwp/V+hiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL2lTtbjC2rJ42hQCkrm0iGTR02xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTQ5
YjRjNi00ZDU4LTQyZTAtYWJlMi05Mzc1NGZkY2RhMzUvZTRiNTE2MmYtZmZiYy0z
OTkxLTk3MmMtMTk1ODYzM2Y3YWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGU0OWI0YzYtNGQ1OC00MmUwLWFi
ZTItOTM3NTRmZGNkYTM1LzhlNDliNGM2LTRkNTgtNDJlMC1hYmUyLTkzNzU0ZmRj
ZGEzNS5jcmwwHwYDVR0jBBgwFoAUCkkYlphvz9SNs+aiIifBJlnS62swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTQ5YjRjNi00ZDU4LTQyZTAtYWJlMi05Mzc1
NGZkY2RhMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQHBIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACJWCuAT+xqZogDrY5GBhZiPHY7q9I9FU7fWMZAyrI0SliKgKywWfWSN
rcwicMB3OI+Il3LIP1f/lENklBW5UgHE8EShymE2B2pOOOisSyvjLCB3Yf6C56wn
oTn8BhVqXMTwe9L2BQO7GvzBM6z6Mh3uB7rc/Ur1V5pXoLRy+0gjcYpLbPM4DJkF
4GdAd8oqo3ICo8Q86GdRiZ3y06BmykfXL1rCDjpY2lkzV0aVsm7ibU1+uqQjE9P4
6IZL0xiVczQqtahZUC+NCaYIP+LJmgAM5yV+qIPSL/fAjObaAy4ROe3aa78YSvWM
WD8S4xPogaqJTqqwap3vO5yK5lC0fgE=
-----END CERTIFICATE-----
Generated at Mon Sep 14 16:01:22 2026 by rpki-client