Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a1da4272-fe45-3726-aefb-2fa308035d5d.roa
File:                     a1da4272-fe45-3726-aefb-2fa308035d5d.roa (raw, json)
Hash identifier:          hwYaDX0YuxEu1NbrJfGIJCwNmg77sPemYu8MJpBb3CY=
Subject key identifier:   C7:FC:5D:16:32:9C:8D:52:C9:9C:BB:EF:E3:51:5C:43:10:A9:CE:B7
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584DEAA13E3113ECF4D87E9FDD80
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a1da4272-fe45-3726-aefb-2fa308035d5d.roa
Signing time:             Fri 22 May 2026 09:05:37 +0000
ROA not before:           Fri 22 May 2026 09:05:37 +0000
ROA not after:            Thu 20 Aug 2026 09:05:37 +0000
asID:                     834
IP address blocks:        64.204.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ea:a1:3e:31:13:ec:f4:d8:7e:9f:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: May 22 09:05:37 2026 GMT
            Not After : Aug 20 09:05:37 2026 GMT
        Subject: CN=565a6df3-106e-4a4e-96f2-e5733f1ee50c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:97:27:76:16:bc:6a:d6:4d:d4:37:0b:c4:c9:
                    6b:e1:93:ea:f3:d0:42:35:fc:dd:4a:33:6e:79:0b:
                    bd:69:f6:0d:3b:c7:0b:9d:cd:2b:51:43:b1:a5:45:
                    8e:a6:0d:84:47:43:8c:9b:2b:bf:52:04:9a:06:da:
                    36:d6:bf:31:39:bf:e5:4d:d2:b9:c9:55:4e:e0:99:
                    cc:b9:16:63:93:f1:89:3c:5e:17:fa:03:f8:c7:da:
                    28:93:a6:e4:59:85:1f:7d:30:45:e4:83:d3:e3:51:
                    be:36:92:bf:75:e1:97:1f:c0:59:2c:6d:46:bb:d2:
                    21:6b:55:57:f1:22:68:96:2b:d9:ea:1c:59:e2:84:
                    8f:ad:04:b1:dc:9c:b4:e0:50:ca:ca:3e:f6:f0:d8:
                    84:4e:b3:51:72:3b:25:0d:17:3f:b2:03:d4:89:b1:
                    76:14:84:f3:b1:1b:ec:b9:d6:3b:2d:5e:0f:75:c7:
                    63:97:f2:f4:65:3f:96:c2:2d:28:13:ae:aa:9a:ff:
                    2d:32:7c:4e:83:66:92:aa:56:f9:8f:25:ec:86:5c:
                    cb:08:1f:72:13:64:00:e8:9a:05:e1:2e:74:10:79:
                    f1:88:34:e1:4d:34:7e:06:5e:2e:4e:d8:64:a0:38:
                    b6:15:cc:81:2c:44:6f:48:3a:f9:37:61:16:15:33:
                    8a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:FC:5D:16:32:9C:8D:52:C9:9C:BB:EF:E3:51:5C:43:10:A9:CE:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a1da4272-fe45-3726-aefb-2fa308035d5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.204.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:8e:e4:47:37:69:93:36:91:b4:5c:88:b3:55:7a:d5:89:1f:
         6b:2c:ae:e2:58:69:de:55:3c:53:b1:b6:7a:25:b8:f0:62:13:
         59:e3:7c:2e:fb:65:c8:aa:e3:31:33:b2:fb:c8:1f:81:31:ac:
         3b:5c:2c:1e:5a:a6:01:f5:9e:34:21:f4:83:75:a2:c2:e7:7e:
         6d:02:01:09:0f:59:98:0f:52:a7:5f:84:98:30:a1:79:8a:8b:
         12:94:18:44:3a:cb:06:a9:21:fd:4b:d1:09:82:ed:b9:ca:dd:
         0c:ee:6f:e8:cd:6e:3d:b3:ec:4f:cb:a2:36:5d:f9:41:25:02:
         be:1d:73:5a:e2:20:2e:3f:f0:44:3e:e1:7d:f5:7b:4b:5b:68:
         cc:ac:3f:a8:d8:6e:5d:32:f1:75:11:4d:07:21:30:5b:42:00:
         bd:6e:3b:18:c9:1b:e7:2d:ab:ca:15:a9:43:8c:df:76:32:10:
         f7:74:55:e3:bf:8b:5d:84:5c:01:bd:b5:48:d6:30:13:4e:7b:
         9e:23:76:fc:be:1e:4d:4c:5b:a6:18:47:35:23:1b:a2:52:f2:
         be:71:3e:97:42:0b:14:e2:77:6c:e7:ae:ba:9a:09:c2:ca:d6:
         b6:98:94:28:f8:3c:8d:c5:fb:05:83:e5:68:91:30:56:50:33:
         ab:da:cc:93
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3qoT4xE+z02H6f3YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDUyMjA5MDUzN1oXDTI2MDgyMDA5MDUzN1owLzEtMCsGA1UEAxMk
NTY1YTZkZjMtMTA2ZS00YTRlLTk2ZjItZTU3MzNmMWVlNTBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJcndha8atZN1DcLxMlr4ZPq89BCNfzdSjNu
eQu9afYNO8cLnc0rUUOxpUWOpg2ER0OMmyu/UgSaBto21r8xOb/lTdK5yVVO4JnM
uRZjk/GJPF4X+gP4x9ook6bkWYUffTBF5IPT41G+NpK/deGXH8BZLG1Gu9Iha1VX
8SJolivZ6hxZ4oSPrQSx3Jy04FDKyj728NiETrNRcjslDRc/sgPUibF2FITzsRvs
udY7LV4Pdcdjl/L0ZT+Wwi0oE66qmv8tMnxOg2aSqlb5jyXshlzLCB9yE2QA6JoF
4S50EHnxiDThTTR+Bl4uTthkoDi2FcyBLERvSDr5N2EWFTOK+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMf8XRYynI1SyZy77+NRXEMQqc63MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYTFkYTQyNzItZmU0NS0z
NzI2LWFlZmItMmZhMzA4MDM1ZDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMxZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIGO5Ec3aZM2kbRciLNVetWJH2ssruJYad5VPFOxtnoluPBiE1njfC77
Zciq4zEzsvvIH4ExrDtcLB5apgH1njQh9IN1osLnfm0CAQkPWZgPUqdfhJgwoXmK
ixKUGEQ6ywapIf1L0QmC7bnK3Qzub+jNbj2z7E/LojZd+UElAr4dc1riIC4/8EQ+
4X31e0tbaMysP6jYbl0y8XURTQchMFtCAL1uOxjJG+ctq8oVqUOM33YyEPd0VeO/
i12EXAG9tUjWMBNOe54jdvy+Hk1MW6YYRzUjG6JS8r5xPpdCCxTid2znrrqaCcLK
1raYlCj4PI3F+wWD5WiRMFZQM6vazJM=
-----END CERTIFICATE-----
Generated at Tue May 26 02:30:10 2026 by rpki-client