Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8b175d15-15c1-32b2-83c5-058909ea4074.roa
File:                     8b175d15-15c1-32b2-83c5-058909ea4074.roa (raw, json)
Hash identifier:          6FNNzHr8JgiMR5PyKvjcNF3XVekwTC5Xuibq6yuqsQA=
Subject key identifier:   70:93:6A:D9:ED:8C:C3:CA:77:F8:6C:0D:72:B9:AA:CA:7E:6F:D8:A8
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584EAFCCBCC5680DFCB657AAE740
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8b175d15-15c1-32b2-83c5-058909ea4074.roa
Signing time:             Sat 01 Aug 2026 00:07:30 +0000
ROA not before:           Sat 01 Aug 2026 00:07:30 +0000
ROA not after:            Fri 30 Oct 2026 00:07:30 +0000
asID:                     834
IP address blocks:        64.205.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:af:cc:bc:c5:68:0d:fc:b6:57:aa:e7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Aug  1 00:07:30 2026 GMT
            Not After : Oct 30 00:07:30 2026 GMT
        Subject: CN=a4482547-8686-4e3e-a352-616752a69ed6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:4e:da:78:01:57:c2:18:ae:1d:4f:d4:29:0c:
                    5e:c5:f6:1d:88:7f:4a:b8:86:e4:c9:b8:f6:96:45:
                    00:0a:4f:b3:54:05:69:ef:a5:d9:0b:47:ce:b1:f3:
                    bd:c4:8d:3b:aa:34:be:84:79:a1:71:1d:14:05:af:
                    2a:00:e4:23:5a:0a:27:6a:00:4b:94:27:ca:e6:5e:
                    67:c0:f9:e7:f3:0a:93:8f:c8:a9:01:2d:e0:63:20:
                    3f:d1:08:a3:65:6a:26:78:ad:57:9b:8f:e7:97:c2:
                    99:77:6c:22:6f:4f:cb:9a:17:af:68:2f:0b:d2:68:
                    22:81:ca:75:72:93:98:67:09:98:c1:33:f0:a5:3e:
                    2d:ab:b0:14:57:b5:60:b0:67:66:36:c4:3c:70:63:
                    54:38:96:6a:b3:6a:8a:71:dc:80:ae:fc:6f:69:ad:
                    bd:58:74:97:c9:39:66:db:96:48:6a:0a:eb:fe:9d:
                    67:23:95:e8:0d:de:42:0e:0b:e6:59:63:81:70:fc:
                    ac:f9:38:5c:e8:04:ff:15:ac:e6:97:6b:bf:13:a7:
                    09:9d:fb:e1:1f:c6:22:2b:97:79:7f:d0:20:23:48:
                    76:a4:e9:04:37:e4:9e:fe:40:31:95:af:b4:40:25:
                    05:95:9a:e7:df:f5:f0:d8:75:65:5d:76:e2:d8:07:
                    34:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:93:6A:D9:ED:8C:C3:CA:77:F8:6C:0D:72:B9:AA:CA:7E:6F:D8:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8b175d15-15c1-32b2-83c5-058909ea4074.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.205.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:2a:13:e0:3e:f7:9a:2d:ba:90:50:11:4a:e7:35:0a:7f:0a:
         3c:0e:5b:21:c4:e4:c4:b7:3c:a6:d7:a0:09:5d:9f:05:8c:a3:
         ef:4f:9c:ac:9e:0c:f4:c9:b6:42:6e:54:f0:cb:e0:77:aa:dd:
         ea:56:64:c1:59:e1:3d:8c:c7:b7:a0:85:5f:0c:8c:7b:ff:54:
         b2:8f:44:4b:67:11:c4:a4:42:e2:9a:14:66:8c:b9:fc:76:f9:
         28:f1:ba:d1:a7:63:14:f4:fc:8f:40:e2:ad:da:eb:9e:a5:21:
         36:31:5e:94:0a:8a:85:42:c5:77:77:2d:bc:49:8f:6a:9a:57:
         93:56:12:c9:cf:8e:ba:4f:89:e0:5e:f6:e7:5e:50:59:60:60:
         d1:0e:cc:0f:bc:e8:e5:e2:24:9d:54:39:8e:18:4e:24:6a:3b:
         1a:14:4c:e5:fa:9b:ca:13:41:f8:9e:df:4b:a9:86:86:d5:30:
         d5:18:dc:51:48:d4:46:88:92:75:f4:df:92:db:2e:44:bc:62:
         96:0d:ea:1c:e7:a8:a4:91:b5:36:0c:2a:f7:f8:9e:b1:87:27:
         c4:62:45:f1:9e:c9:31:8a:a5:4b:61:85:a8:20:cb:11:35:2f:
         78:fd:99:5b:69:60:4a:b1:63:f6:9e:45:5b:b8:37:f4:8e:13:
         e8:89:9c:c8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6vzLzFaA38tleq50AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDgwMTAwMDczMFoXDTI2MTAzMDAwMDczMFowLzEtMCsGA1UEAxMk
YTQ0ODI1NDctODY4Ni00ZTNlLWEzNTItNjE2NzUyYTY5ZWQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7E7aeAFXwhiuHU/UKQxexfYdiH9KuIbkybj2
lkUACk+zVAVp76XZC0fOsfO9xI07qjS+hHmhcR0UBa8qAOQjWgonagBLlCfK5l5n
wPnn8wqTj8ipAS3gYyA/0QijZWomeK1Xm4/nl8KZd2wib0/LmhevaC8L0mgigcp1
cpOYZwmYwTPwpT4tq7AUV7VgsGdmNsQ8cGNUOJZqs2qKcdyArvxvaa29WHSXyTlm
25ZIagrr/p1nI5XoDd5CDgvmWWOBcPys+Thc6AT/Fazml2u/E6cJnfvhH8YiK5d5
f9AgI0h2pOkEN+Se/kAxla+0QCUFlZrn3/Xw2HVlXXbi2Ac0dQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHCTatntjMPKd/hsDXK5qsp+b9ioMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOGIxNzVkMTUtMTVjMS0z
MmIyLTgzYzUtMDU4OTA5ZWE0MDc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQM08MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGgqE+A+95otupBQEUrnNQp/CjwOWyHE5MS3PKbXoAldnwWMo+9PnKye
DPTJtkJuVPDL4Heq3epWZMFZ4T2Mx7eghV8MjHv/VLKPREtnEcSkQuKaFGaMufx2
+SjxutGnYxT0/I9A4q3a656lITYxXpQKioVCxXd3LbxJj2qaV5NWEsnPjrpPieBe
9udeUFlgYNEOzA+86OXiJJ1UOY4YTiRqOxoUTOX6m8oTQfie30uphobVMNUY3FFI
1EaIknX035LbLkS8YpYN6hznqKSRtTYMKvf4nrGHJ8RiRfGeyTGKpUthhaggyxE1
L3j9mVtpYEqxY/aeRVu4N/SOE+iJnMg=
-----END CERTIFICATE-----
Generated at Thu Aug 13 12:19:51 2026 by rpki-client