Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/417974a3-d62d-3a03-901d-08d7bd25736a.roa
File:                     417974a3-d62d-3a03-901d-08d7bd25736a.roa (raw, json)
Hash identifier:          s+WuFdDzlrnSdT+g0Ua3jVLJX9advelECimOUXE1ycA=
Subject key identifier:   2D:61:C8:28:B3:9B:20:AC:5F:7C:A9:0D:07:86:29:3A:0F:9D:08:4F
Certificate issuer:       /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial:       010D0C9F4328584D5234FD9376C83229508B8300
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/417974a3-d62d-3a03-901d-08d7bd25736a.roa
Signing time:             Sat 28 Mar 2026 18:44:38 +0000
ROA not before:           Sat 28 Mar 2026 18:44:38 +0000
ROA not after:            Tue 05 May 2026 20:05:27 +0000
asID:                     203106
IP address blocks:        64.22.73.0/24 maxlen: 24
                          74.81.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Apr 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:34:fd:93:76:c8:32:29:50:8b:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
        Validity
            Not Before: Mar 28 18:44:38 2026 GMT
            Not After : May  5 20:05:27 2026 GMT
        Subject: CN=480d0456-1b2a-46ee-afb4-886e87f92823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:23:48:de:29:a8:a0:e4:b3:0c:c2:c0:74:7a:
                    c8:34:fd:49:6b:7c:b5:49:bc:61:df:6d:de:32:04:
                    bb:ed:75:88:ca:18:3b:b0:2d:37:4e:84:eb:a2:45:
                    fe:bb:7a:b6:19:98:ef:6f:ce:80:38:c6:42:fe:dc:
                    26:b6:dd:30:61:b2:a4:85:9c:b6:2c:12:34:c2:87:
                    83:99:07:54:d3:0b:32:3d:1a:a2:a9:35:a9:bb:d6:
                    39:70:22:d4:86:03:65:62:e7:7b:64:f5:70:f4:ac:
                    cb:45:31:db:33:65:ad:4d:a2:4a:b9:6b:72:73:2b:
                    1a:5d:ff:91:0d:28:8c:88:2d:53:26:a2:8e:76:27:
                    3a:50:68:e2:85:a8:51:17:06:a0:98:6d:a7:ca:d7:
                    1a:80:bc:5e:ad:dc:ce:26:ef:1d:f9:91:9f:da:4f:
                    46:08:6a:d9:34:ff:94:7f:a1:07:77:ba:68:0b:08:
                    29:76:ae:88:d1:60:28:0e:a2:d4:c2:27:df:a5:be:
                    47:67:dc:7f:ad:81:39:ee:19:5b:e8:ff:2d:46:15:
                    e9:55:10:0d:b5:7a:59:fe:85:83:f6:77:a4:8a:0c:
                    14:af:fb:18:af:74:ce:5a:4f:5a:47:6e:53:eb:9e:
                    73:a7:7f:40:40:3b:35:87:2e:fb:a0:04:91:17:b8:
                    0f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:61:C8:28:B3:9B:20:AC:5F:7C:A9:0D:07:86:29:3A:0F:9D:08:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/417974a3-d62d-3a03-901d-08d7bd25736a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl

            X509v3 Authority Key Identifier:
                keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.22.73.0/24
                  74.81.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:48:a6:c2:97:97:e9:66:80:21:61:bc:e8:89:58:e0:ef:01:
         8d:d8:23:0c:d5:f9:b2:23:9b:b7:a1:f7:b9:89:64:71:f3:f7:
         10:f0:09:6e:97:9a:5c:d7:17:84:3b:7d:78:22:c1:02:3a:ab:
         a2:b6:4b:05:1b:d2:09:a9:1a:d9:ff:34:5d:6a:96:7d:17:a6:
         01:c8:4e:e4:a4:9d:50:12:6b:fe:43:c4:24:90:55:5d:3d:4d:
         01:6c:06:79:d6:58:47:98:4b:6b:ba:60:9a:b6:80:5b:19:18:
         05:76:87:c8:e6:15:2a:37:3d:23:9d:d1:d7:dd:39:42:01:b6:
         f5:90:1c:22:3d:63:16:9c:c9:aa:60:c1:ac:53:14:e8:7e:d6:
         f9:32:3a:38:41:8f:0c:66:4a:a0:23:51:a9:fc:fa:d2:d8:93:
         fa:1b:64:a6:00:3d:3d:6c:85:95:b7:8e:05:68:3b:13:ac:e2:
         00:f9:10:a5:35:ab:cf:b0:ad:03:ab:f7:e8:32:29:4e:2e:b3:
         39:cb:d0:a0:c6:58:f6:55:32:23:59:ea:28:5c:be:81:9f:cc:
         20:2f:4a:f8:b5:98:0e:3a:9a:5f:a4:25:44:86:25:55:26:fd:
         6a:8b:3b:96:8b:99:bb:65:dc:34:1c:20:0c:d6:2f:e6:de:89:
         10:24:70:5b
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE1SNP2TdsgyKVCLgwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk
ZjgwMB4XDTI2MDMyODE4NDQzOFoXDTI2MDUwNTIwMDUyN1owLzEtMCsGA1UEAxMk
NDgwZDA0NTYtMWIyYS00NmVlLWFmYjQtODg2ZTg3ZjkyODIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyNI3imooOSzDMLAdHrINP1Ja3y1Sbxh323e
MgS77XWIyhg7sC03ToTrokX+u3q2GZjvb86AOMZC/twmtt0wYbKkhZy2LBI0woeD
mQdU0wsyPRqiqTWpu9Y5cCLUhgNlYud7ZPVw9KzLRTHbM2WtTaJKuWtycysaXf+R
DSiMiC1TJqKOdic6UGjihahRFwagmG2nytcagLxerdzOJu8d+ZGf2k9GCGrZNP+U
f6EHd7poCwgpdq6I0WAoDqLUwiffpb5HZ9x/rYE57hlb6P8tRhXpVRANtXpZ/oWD
9nekigwUr/sYr3TOWk9aR25T655zp39AQDs1hy77oASRF7gPewIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFC1hyCizmyCsX3ypDQeGKToPnQhPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh
NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvNDE3OTc0YTMtZDYyZC0z
YTAzLTkwMWQtMDhkN2JkMjU3MzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj
NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0
ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5
MDI3NGRmODAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQBZJAwQA
SlFAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAH1IpsKXl+lmgCFhvOiJWODvAY3YIwzV+bIjm7eh97mJZHHz
9xDwCW6XmlzXF4Q7fXgiwQI6q6K2SwUb0gmpGtn/NF1qln0XpgHITuSknVASa/5D
xCSQVV09TQFsBnnWWEeYS2u6YJq2gFsZGAV2h8jmFSo3PSOd0dfdOUIBtvWQHCI9
YxacyapgwaxTFOh+1vkyOjhBjwxmSqAjUan8+tLYk/obZKYAPT1shZW3jgVoOxOs
4gD5EKU1q8+wrQOr9+gyKU4usznL0KDGWPZVMiNZ6ihcvoGfzCAvSvi1mA46ml+k
JUSGJVUm/WqLO5aLmbtl3DQcIAzWL+beiRAkcFs=
-----END CERTIFICATE-----
Generated at Sat Apr 11 00:29:28 2026 by rpki-client