Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/029e5caf-e9ca-3a47-a3cc-c6e36f103ffc.roa
File:                     029e5caf-e9ca-3a47-a3cc-c6e36f103ffc.roa (raw, json)
Hash identifier:          T0ytm1e/I2y/Id9Sk/jd7AELsZBDEw9ltry+yWI+Dck=
Subject key identifier:   61:19:A5:30:62:47:10:E2:0B:17:DB:81:F9:3B:35:34:70:6B:A4:E1
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584EC3546CB764AB80A311E78680
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/029e5caf-e9ca-3a47-a3cc-c6e36f103ffc.roa
Signing time:             Sat 08 Aug 2026 00:01:15 +0000
ROA not before:           Sat 08 Aug 2026 00:01:15 +0000
ROA not after:            Fri 06 Nov 2026 01:01:15 +0000
asID:                     834
IP address blocks:        64.7.12.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:54:6c:b7:64:ab:80:a3:11:e7:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Aug  8 00:01:15 2026 GMT
            Not After : Nov  6 01:01:15 2026 GMT
        Subject: CN=1c6c20cb-fe86-4c14-9410-5c3593d88781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b1:7a:6b:03:1c:89:cc:42:63:5b:d4:cc:ed:
                    64:71:b4:65:2c:86:e7:71:4e:76:3d:d4:da:f0:35:
                    a0:a3:c3:3d:15:d7:c3:4c:59:dc:5c:1c:ae:62:2d:
                    09:22:de:9c:29:3e:0e:e3:aa:85:39:9d:b3:0a:7a:
                    9e:36:99:ca:0a:8f:71:5c:57:9a:76:a6:48:53:0f:
                    05:5a:a1:3d:cd:0c:42:b8:58:d3:f4:31:7d:98:0d:
                    59:5c:ec:2c:5a:50:db:7a:f3:d7:7e:e7:9e:dc:57:
                    54:1f:83:e5:b3:d8:e5:40:31:cb:38:55:d8:2c:0f:
                    7c:00:2c:37:7d:fa:92:4c:af:c7:3f:0d:08:04:6b:
                    6d:0e:f3:99:c6:3f:51:be:b7:b1:af:96:38:ba:39:
                    0c:f4:4c:c1:2c:bd:e2:fd:98:cc:1b:07:e5:d6:65:
                    3e:d0:00:65:e4:1a:41:8d:7e:98:bb:58:9e:a4:63:
                    42:8a:66:d5:74:1c:b6:8b:a4:b0:a5:69:40:4e:17:
                    b2:3f:22:1b:b3:fb:1c:5f:34:63:91:99:5d:f1:36:
                    cc:b2:e9:db:6c:72:03:a3:1e:cb:84:17:2a:95:b3:
                    6a:bf:1f:b6:89:46:c0:35:43:7b:df:1a:6a:64:96:
                    dd:97:63:06:3a:2a:fe:cf:7a:7b:be:cf:57:b9:cb:
                    a8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:19:A5:30:62:47:10:E2:0B:17:DB:81:F9:3B:35:34:70:6B:A4:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/029e5caf-e9ca-3a47-a3cc-c6e36f103ffc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.7.12.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:5f:97:be:9b:1e:ef:70:09:a0:0b:9e:9e:16:fe:e5:c2:1b:
         76:bd:e0:bf:f8:f4:64:20:be:c0:dd:13:20:d3:b0:79:1f:06:
         db:70:f8:8e:7a:13:48:62:e6:55:8e:47:23:49:8c:09:b1:35:
         4a:41:09:34:e1:14:7c:8b:bc:be:e5:85:cf:71:c8:ce:ad:0f:
         2b:aa:8a:77:82:7b:e7:14:58:aa:d5:43:ca:d3:30:01:55:cc:
         cd:59:55:c4:93:71:e2:a6:57:cf:ee:30:d4:73:36:b9:2a:69:
         2c:29:0d:48:a7:02:9c:65:b2:07:14:db:4c:69:5c:e3:8f:6f:
         79:2d:d8:88:9a:da:48:1e:3a:c8:2a:61:53:04:84:4c:37:01:
         54:2f:50:0c:ad:39:0c:4a:0a:94:2e:05:8c:a5:f9:a2:aa:fc:
         f9:3e:67:70:d5:f7:91:e3:51:73:7d:9e:b4:d8:cb:66:d3:7f:
         33:96:20:6c:f8:2b:a2:0c:f3:06:7d:23:7c:42:65:3e:3d:6f:
         ad:53:23:ae:03:b9:00:ea:61:82:1c:63:2f:49:a4:ab:54:61:
         ad:8b:2f:e5:d3:8a:bc:24:dc:66:65:24:bf:8c:61:48:69:b4:
         ec:14:0d:7b:8c:29:ad:e3:ff:d1:62:bc:63:87:14:f0:93:2b:
         2b:62:24:b1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7DVGy3ZKuAoxHnhoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDgwODAwMDExNVoXDTI2MTEwNjAxMDExNVowLzEtMCsGA1UEAxMk
MWM2YzIwY2ItZmU4Ni00YzE0LTk0MTAtNWMzNTkzZDg4NzgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLF6awMcicxCY1vUzO1kcbRlLIbncU52PdTa
8DWgo8M9FdfDTFncXByuYi0JIt6cKT4O46qFOZ2zCnqeNpnKCo9xXFeadqZIUw8F
WqE9zQxCuFjT9DF9mA1ZXOwsWlDbevPXfuee3FdUH4Pls9jlQDHLOFXYLA98ACw3
ffqSTK/HPw0IBGttDvOZxj9Rvrexr5Y4ujkM9EzBLL3i/ZjMGwfl1mU+0ABl5BpB
jX6Yu1iepGNCimbVdBy2i6SwpWlATheyPyIbs/scXzRjkZld8TbMsunbbHIDox7L
hBcqlbNqvx+2iUbANUN73xpqZJbdl2MGOir+z3p7vs9XucuoJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGEZpTBiRxDiCxfbgfk7NTRwa6ThMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMDI5ZTVjYWYtZTljYS0z
YTQ3LWEzY2MtYzZlMzZmMTAzZmZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQAcMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABZfl76bHu9wCaALnp4W/uXCG3a94L/49GQgvsDdEyDTsHkfBttw+I56
E0hi5lWORyNJjAmxNUpBCTThFHyLvL7lhc9xyM6tDyuqineCe+cUWKrVQ8rTMAFV
zM1ZVcSTceKmV8/uMNRzNrkqaSwpDUinApxlsgcU20xpXOOPb3kt2Iia2kgeOsgq
YVMEhEw3AVQvUAytOQxKCpQuBYyl+aKq/Pk+Z3DV95HjUXN9nrTYy2bTfzOWIGz4
K6IM8wZ9I3xCZT49b61TI64DuQDqYYIcYy9JpKtUYa2LL+XTirwk3GZlJL+MYUhp
tOwUDXuMKa3j/9FivGOHFPCTKytiJLE=
-----END CERTIFICATE-----
Generated at Thu Aug 13 12:19:31 2026 by rpki-client