Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/303b468a-60a6-32b8-8eda-0b627679ca21.roa
File:                     303b468a-60a6-32b8-8eda-0b627679ca21.roa (raw, json)
Hash identifier:          uegvrDRcn0FWqmJVEYBLDJlYzMqfjolqLf7MrkGiMCg=
Subject key identifier:   99:97:7C:6B:ED:A2:F7:09:5B:71:1B:F5:6A:2E:7C:6F:D5:5C:80:0A
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584EFF2F4DABF8624D5B369F83C0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/303b468a-60a6-32b8-8eda-0b627679ca21.roa
Signing time:             Sat 29 Aug 2026 10:34:57 +0000
ROA not before:           Sat 29 Aug 2026 10:34:57 +0000
ROA not after:            Fri 27 Nov 2026 11:34:57 +0000
asID:                     402265
IP address blocks:        64.81.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ff:2f:4d:ab:f8:62:4d:5b:36:9f:83:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Aug 29 10:34:57 2026 GMT
            Not After : Nov 27 11:34:57 2026 GMT
        Subject: CN=d5164254-007e-476d-8dbd-a74d381686a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cc:17:37:7f:77:df:3f:e2:62:d0:d4:49:9b:
                    cd:30:54:9d:47:59:03:60:69:07:46:e3:67:69:68:
                    58:da:8b:aa:46:db:b5:6e:36:61:0d:24:6c:eb:70:
                    f9:d4:dd:2c:ba:89:1b:d6:2e:d1:45:18:ff:82:8a:
                    cb:64:99:ca:99:11:ab:83:27:ac:9c:bd:17:4e:c8:
                    f5:52:72:7e:54:f0:39:04:6d:2b:6a:ff:3f:13:24:
                    d3:3b:d3:2f:b0:e4:0d:b3:ac:83:b0:ba:fa:23:dd:
                    aa:07:7d:30:f1:b9:b4:e1:36:ce:31:4d:de:3b:7a:
                    da:16:4c:be:32:d8:54:b3:e5:49:40:1a:36:ee:64:
                    05:0c:83:93:8d:6f:4d:db:9a:8b:60:f6:4f:1f:64:
                    5e:98:fb:68:fd:a7:cf:57:f0:ec:d4:cb:bc:56:07:
                    ed:23:49:87:c8:d6:bd:a2:8a:19:45:fc:9c:2a:e5:
                    25:44:c0:a3:d8:7e:88:a9:12:c0:d2:a2:98:e1:e6:
                    8c:70:3d:64:1a:ee:86:60:de:f8:67:5e:be:f5:f2:
                    73:3c:39:51:40:42:a1:08:e2:fe:f1:2e:ff:2e:c3:
                    71:88:b5:b5:c5:d5:e8:21:23:c5:3d:5f:b8:a1:3f:
                    e1:4c:42:ca:aa:0e:2d:d9:8f:2b:1c:60:0e:eb:47:
                    d7:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:97:7C:6B:ED:A2:F7:09:5B:71:1B:F5:6A:2E:7C:6F:D5:5C:80:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/303b468a-60a6-32b8-8eda-0b627679ca21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.81.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:7b:30:0b:c9:cd:62:a8:f5:81:53:e4:e0:62:0f:f4:3f:f1:
         74:5d:1e:0b:bc:8a:94:9b:e1:e7:4f:2b:43:e6:8b:64:e8:97:
         51:1b:85:c4:28:96:50:15:f7:3b:96:a8:6a:b5:e6:20:dc:ab:
         dc:ec:ef:03:b6:e2:1c:19:4a:eb:17:c5:41:23:63:c8:53:04:
         e0:10:7b:2c:8e:ac:e1:84:26:61:b4:7f:62:52:e6:ad:a3:d5:
         41:a1:13:3c:f0:02:d3:07:07:8c:42:00:c8:ff:a7:32:e3:86:
         c6:58:de:5b:1b:08:dc:9a:e2:7f:9d:18:3a:17:1b:eb:7f:15:
         04:2b:a8:63:ba:50:44:6d:9f:44:d8:b9:59:26:e9:ea:93:f2:
         1a:3f:24:ae:7c:8e:f4:e2:b9:c0:d0:61:e0:dd:f8:3e:67:fd:
         69:ec:c6:8e:54:eb:90:34:3b:05:c9:f1:c5:a3:25:94:c0:71:
         5f:59:d1:57:30:0b:aa:85:c7:85:05:cb:70:83:15:3d:95:7b:
         35:01:fc:ae:56:ad:67:70:d2:b5:c9:52:2d:52:f7:2a:08:9a:
         7e:62:25:33:f2:22:c2:cd:41:f8:fe:c8:a8:a7:ef:fc:67:63:
         76:4e:91:bd:0a:dd:9f:61:f1:dc:cf:fb:08:c1:e4:3d:44:28:
         4b:e9:da:87
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7/L02r+GJNWzafg8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDgyOTEwMzQ1N1oXDTI2MTEyNzExMzQ1N1owLzEtMCsGA1UEAxMk
ZDUxNjQyNTQtMDA3ZS00NzZkLThkYmQtYTc0ZDM4MTY4NmE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8wXN3933z/iYtDUSZvNMFSdR1kDYGkHRuNn
aWhY2ouqRtu1bjZhDSRs63D51N0suokb1i7RRRj/gorLZJnKmRGrgyesnL0XTsj1
UnJ+VPA5BG0rav8/EyTTO9MvsOQNs6yDsLr6I92qB30w8bm04TbOMU3eO3raFky+
MthUs+VJQBo27mQFDIOTjW9N25qLYPZPH2RemPto/afPV/Ds1Mu8VgftI0mHyNa9
oooZRfycKuUlRMCj2H6IqRLA0qKY4eaMcD1kGu6GYN74Z16+9fJzPDlRQEKhCOL+
8S7/LsNxiLW1xdXoISPFPV+4oT/hTELKqg4t2Y8rHGAO60fXtwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJmXfGvtovcJW3Eb9WoufG/VXIAKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMzAzYjQ2OGEtNjBhNi0z
MmI4LThlZGEtMGI2Mjc2NzljYTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQFGqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADJ7MAvJzWKo9YFT5OBiD/Q/8XRdHgu8ipSb4edPK0Pmi2Tol1EbhcQo
llAV9zuWqGq15iDcq9zs7wO24hwZSusXxUEjY8hTBOAQeyyOrOGEJmG0f2JS5q2j
1UGhEzzwAtMHB4xCAMj/pzLjhsZY3lsbCNya4n+dGDoXG+t/FQQrqGO6UERtn0TY
uVkm6eqT8ho/JK58jvTiucDQYeDd+D5n/Wnsxo5U65A0OwXJ8cWjJZTAcV9Z0Vcw
C6qFx4UFy3CDFT2VezUB/K5WrWdw0rXJUi1S9yoImn5iJTPyIsLNQfj+yKin7/xn
Y3ZOkb0K3Z9h8dzP+wjB5D1EKEvp2oc=
-----END CERTIFICATE-----
Generated at Thu Sep 3 22:30:00 2026 by rpki-client