Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/071523b4-05b3-3db0-ad4c-61dff1ef4d91.roa
File:                     071523b4-05b3-3db0-ad4c-61dff1ef4d91.roa (raw, json)
Hash identifier:          W7RtgHlSrOGreSRL8Ggrqh4dnPznUtT2HMDpA5XBbgE=
Subject key identifier:   36:82:A5:58:F7:E7:54:C3:AC:07:10:99:A6:D2:6D:35:88:56:B9:B8
Certificate issuer:       /CN=3975c39a-715c-4dc0-891a-b38f9d7cb3e8
Certificate serial:       010D0C9F4328584F093CD261C149C33F225BF9D0
Authority key identifier: EA:18:F7:B0:DF:9E:48:6A:B0:B0:6F:45:6D:0F:57:CC:95:0E:8A:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/071523b4-05b3-3db0-ad4c-61dff1ef4d91.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     12071
IP address blocks:        64.94.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3c:d2:61:c1:49:c3:3f:22:5b:f9:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3975c39a-715c-4dc0-891a-b38f9d7cb3e8
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=2af8efeb-27c5-4618-8080-cff10eb12da7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b4:41:30:61:cb:fb:a2:63:e3:e0:29:58:43:
                    a7:d0:e9:76:fb:95:0e:e6:25:a7:5b:de:1a:27:5a:
                    f7:24:0e:89:86:5c:62:3f:b7:2b:3e:b2:a4:de:5c:
                    f0:f8:3c:6b:b2:28:15:b4:85:d9:1a:bf:31:20:e5:
                    0c:21:d4:93:38:55:fa:b1:40:48:3f:92:20:19:f7:
                    95:a0:ba:48:11:18:7f:f7:f9:65:6f:5e:05:91:6f:
                    9c:88:f3:f1:de:a4:76:50:58:9b:fe:88:26:f3:99:
                    c9:c1:d5:8f:86:bc:04:9e:0c:ba:35:5e:49:30:7a:
                    65:76:64:f0:60:3a:59:e2:c9:b4:ef:44:cc:d1:41:
                    60:79:2d:d6:3f:e9:c6:e3:94:5d:fb:50:52:8a:62:
                    a3:39:06:b1:ed:61:9f:7b:1a:c2:ca:30:30:63:40:
                    ac:5a:fa:27:f8:f0:81:cf:ce:94:d6:31:81:c2:3c:
                    5e:b3:7a:f6:3b:8a:b1:80:42:ea:13:ec:79:d8:c7:
                    2c:37:f4:d9:a7:87:10:55:6f:76:c5:fa:fe:58:d2:
                    64:18:56:f7:eb:b6:81:90:4a:4a:73:b7:28:de:56:
                    0a:63:70:21:ce:4f:1e:bc:1a:af:dd:ca:5c:44:82:
                    15:b0:fa:72:f8:07:3e:3e:59:c5:a3:b7:0e:46:b9:
                    8d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:82:A5:58:F7:E7:54:C3:AC:07:10:99:A6:D2:6D:35:88:56:B9:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/071523b4-05b3-3db0-ad4c-61dff1ef4d91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.crl

            X509v3 Authority Key Identifier:
                keyid:EA:18:F7:B0:DF:9E:48:6A:B0:B0:6F:45:6D:0F:57:CC:95:0E:8A:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.94.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:f1:80:61:e0:74:7f:b4:40:92:aa:f1:89:67:f8:44:68:96:
         be:1b:c3:d8:99:79:0b:30:e5:e2:6d:12:89:31:00:56:14:7c:
         ac:ee:5f:e7:fd:c3:88:20:54:34:21:5a:ed:50:3a:88:5c:19:
         28:05:bd:c7:fe:ee:ed:17:e2:c6:89:5a:13:09:9b:66:3d:73:
         6a:62:7a:c5:1b:bc:2e:aa:17:15:1b:06:5e:b9:73:5b:1a:7d:
         b9:79:b3:6e:c6:dd:4d:89:1b:f2:30:ce:8f:13:30:1f:4c:fc:
         78:99:83:38:1e:32:60:74:db:96:42:a9:7e:91:96:21:c9:16:
         9f:ae:72:e9:94:45:10:7f:5f:79:f0:76:57:93:f1:7d:3a:45:
         50:66:e1:5d:da:44:cc:55:62:a2:aa:56:30:a2:0a:81:3c:eb:
         b6:2f:8e:93:3a:8e:44:ba:2b:20:63:a9:0f:96:00:02:a9:0a:
         38:9a:a2:d9:45:a2:10:e8:99:f9:b9:7a:fd:1a:f2:c5:b4:39:
         7c:f1:b9:e6:92:3a:c4:7a:ec:b0:fe:79:cd:b5:f4:64:6b:61:
         56:79:9d:0e:07:a3:c4:70:4d:c8:63:ee:f8:af:50:19:d0:eb:
         58:4f:7a:39:c6:17:d2:f6:9a:f0:5c:0e:6a:3d:0a:de:ec:94:
         4a:6e:2e:0e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPNJhwUnDPyJb+dAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzk3NWMzOWEtNzE1Yy00ZGMwLTg5MWEtYjM4ZjlkN2Ni
M2U4MB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk
MmFmOGVmZWItMjdjNS00NjE4LTgwODAtY2ZmMTBlYjEyZGE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrRBMGHL+6Jj4+ApWEOn0Ol2+5UO5iWnW94a
J1r3JA6JhlxiP7crPrKk3lzw+DxrsigVtIXZGr8xIOUMIdSTOFX6sUBIP5IgGfeV
oLpIERh/9/llb14FkW+ciPPx3qR2UFib/ogm85nJwdWPhrwEngy6NV5JMHpldmTw
YDpZ4sm070TM0UFgeS3WP+nG45Rd+1BSimKjOQax7WGfexrCyjAwY0CsWvon+PCB
z86U1jGBwjxes3r2O4qxgELqE+x52McsN/TZp4cQVW92xfr+WNJkGFb367aBkEpK
c7co3lYKY3Ahzk8evBqv3cpcRIIVsPpy+Ac+PlnFo7cORrmN6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDaCpVj351TDrAcQmabSbTWIVrm4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zOTc1
YzM5YS03MTVjLTRkYzAtODkxYS1iMzhmOWQ3Y2IzZTgvMDcxNTIzYjQtMDViMy0z
ZGIwLWFkNGMtNjFkZmYxZWY0ZDkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzk3NWMzOWEtNzE1Yy00ZGMwLTg5
MWEtYjM4ZjlkN2NiM2U4LzM5NzVjMzlhLTcxNWMtNGRjMC04OTFhLWIzOGY5ZDdj
YjNlOC5jcmwwHwYDVR0jBBgwFoAU6hj3sN+eSGqwsG9FbQ9XzJUOingwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8zOTc1YzM5YS03MTVjLTRkYzAtODkxYS1iMzhm
OWQ3Y2IzZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQF4NMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF3xgGHgdH+0QJKq8Yln+ERolr4bw9iZeQsw5eJtEokxAFYUfKzuX+f9
w4ggVDQhWu1QOohcGSgFvcf+7u0X4saJWhMJm2Y9c2piesUbvC6qFxUbBl65c1sa
fbl5s27G3U2JG/Iwzo8TMB9M/HiZgzgeMmB025ZCqX6RliHJFp+ucumURRB/X3nw
dleT8X06RVBm4V3aRMxVYqKqVjCiCoE867YvjpM6jkS6KyBjqQ+WAAKpCjiaotlF
ohDomfm5ev0a8sW0OXzxueaSOsR67LD+ec219GRrYVZ5nQ4Ho8RwTchj7vivUBnQ
61hPejnGF9L2mvBcDmo9Ct7slEpuLg4=
-----END CERTIFICATE-----
Generated at Thu Sep 3 12:06:19 2026 by rpki-client