Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a8f751a6-d81f-3824-b1f9-396a8c060dd0.roa
File:                     a8f751a6-d81f-3824-b1f9-396a8c060dd0.roa (raw, json)
Hash identifier:          5rPOu8G5CAUfcF32rxlSRRRHDygnVifgdJS3LhhbPM0=
Subject key identifier:   57:7B:E2:18:5D:21:A6:42:60:49:B6:0F:6B:87:C7:61:24:B0:F7:FF
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E2AD44C160B25E9627E612300
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a8f751a6-d81f-3824-b1f9-396a8c060dd0.roa
Signing time:             Sun 14 Jun 2026 09:00:11 +0000
ROA not before:           Sun 14 Jun 2026 09:00:11 +0000
ROA not after:            Sat 12 Sep 2026 09:00:11 +0000
asID:                     7029
IP address blocks:        65.86.150.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2a:d4:4c:16:0b:25:e9:62:7e:61:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jun 14 09:00:11 2026 GMT
            Not After : Sep 12 09:00:11 2026 GMT
        Subject: CN=a98848bd-4dfd-49e0-b887-a0fb38fb80ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ca:c7:bc:21:30:c6:96:ed:3a:83:18:95:1e:
                    a0:8f:a9:1e:a7:3a:39:8d:3b:39:65:80:e0:a5:c1:
                    08:2f:4d:7c:72:d4:91:6c:81:2d:5f:a2:6f:92:87:
                    74:68:ed:9e:98:1c:de:7e:e6:1c:e5:89:f9:f6:77:
                    7f:b6:4f:ee:b1:f9:fb:ce:fa:e3:f0:f3:8f:60:d8:
                    39:02:e0:72:c0:5c:02:43:3b:f8:80:23:c6:16:35:
                    9d:4c:a5:87:36:fb:e2:e3:e5:c9:7a:40:39:b2:20:
                    87:47:f0:ed:ee:9c:9f:27:cb:8e:7a:34:4f:d8:db:
                    04:d4:e6:97:c2:dd:37:fb:8b:09:5b:7a:0d:bd:65:
                    d3:f8:25:0c:7e:c6:52:69:ee:4b:44:b9:92:74:87:
                    17:7a:0d:2c:0b:93:23:05:ab:92:34:5d:23:d9:6c:
                    c7:a6:b4:17:2a:f4:fe:49:ef:38:e0:92:2d:09:f1:
                    27:4a:dd:48:5b:5c:c7:2f:05:3d:56:bc:46:3b:da:
                    e7:f2:4d:f0:ba:59:d2:bf:79:48:50:b8:0f:93:5b:
                    bf:b5:8f:c3:01:c5:6c:43:44:fd:d8:87:06:d8:d5:
                    d1:6f:56:12:26:b9:b2:43:50:b3:a6:b3:e1:6e:41:
                    ae:e3:ab:75:52:a5:e1:a0:45:76:00:ce:b2:87:9c:
                    c8:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:7B:E2:18:5D:21:A6:42:60:49:B6:0F:6B:87:C7:61:24:B0:F7:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a8f751a6-d81f-3824-b1f9-396a8c060dd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.86.150.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:ec:61:d4:03:1b:ab:d4:f6:25:94:00:0e:87:47:e3:43:37:
         30:ec:0f:c8:ab:9f:37:49:17:96:97:0d:a5:27:8f:1c:07:d9:
         ac:7e:b6:c0:24:5a:7e:71:c0:e1:bb:d5:52:c3:9b:7f:5b:e2:
         6c:d9:f4:97:37:64:d7:7a:56:41:61:e8:47:ef:f4:0b:1d:1e:
         91:4e:b6:2c:d3:98:a4:7d:05:b7:89:3f:1e:a6:da:76:4f:ef:
         0a:d4:76:a3:0c:50:e1:c9:29:f9:1d:31:c0:09:fc:fc:ae:0c:
         f5:79:d0:06:d8:72:5f:41:f3:ab:99:ab:13:65:1f:ea:b1:73:
         4c:4c:8a:8b:05:f0:8f:db:62:4b:7b:32:ec:71:16:b1:11:5a:
         de:2f:e2:88:54:84:ec:b6:88:7f:97:44:0d:54:7c:97:72:9d:
         11:9a:cc:6d:f4:21:2c:59:6b:5b:81:fa:b2:ad:27:fa:67:72:
         ef:56:67:f4:f6:6c:ca:32:7c:ad:40:f8:3f:09:6b:63:a7:19:
         b7:3d:ef:bf:e5:ec:b1:0a:93:f7:b9:d9:c1:11:63:69:e9:2b:
         c6:02:44:a1:41:e5:2b:db:fe:a7:d2:1b:0c:98:2b:a8:89:d3:
         98:d5:2a:73:e2:22:b1:53:ba:88:b7:ba:e7:fa:12:65:22:19:
         e5:97:d2:fc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4q1EwWCyXpYn5hIwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDYxNDA5MDAxMVoXDTI2MDkxMjA5MDAxMVowLzEtMCsGA1UEAxMk
YTk4ODQ4YmQtNGRmZC00OWUwLWI4ODctYTBmYjM4ZmI4MGZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksrHvCEwxpbtOoMYlR6gj6kepzo5jTs5ZYDg
pcEIL018ctSRbIEtX6Jvkod0aO2emBzefuYc5Yn59nd/tk/usfn7zvrj8POPYNg5
AuBywFwCQzv4gCPGFjWdTKWHNvvi4+XJekA5siCHR/Dt7pyfJ8uOejRP2NsE1OaX
wt03+4sJW3oNvWXT+CUMfsZSae5LRLmSdIcXeg0sC5MjBauSNF0j2WzHprQXKvT+
Se844JItCfEnSt1IW1zHLwU9VrxGO9rn8k3wulnSv3lIULgPk1u/tY/DAcVsQ0T9
2IcG2NXRb1YSJrmyQ1CzprPhbkGu46t1UqXhoEV2AM6yh5zIxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFd74hhdIaZCYEm2D2uHx2EksPf/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYThmNzUxYTYtZDgxZi0z
ODI0LWIxZjktMzk2YThjMDYwZGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQVaWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA/sYdQDG6vU9iWUAA6HR+NDNzDsD8irnzdJF5aXDaUnjxwH2ax+tsAk
Wn5xwOG71VLDm39b4mzZ9Jc3ZNd6VkFh6Efv9AsdHpFOtizTmKR9BbeJPx6m2nZP
7wrUdqMMUOHJKfkdMcAJ/PyuDPV50AbYcl9B86uZqxNlH+qxc0xMiosF8I/bYkt7
MuxxFrERWt4v4ohUhOy2iH+XRA1UfJdynRGazG30ISxZa1uB+rKtJ/pncu9WZ/T2
bMoyfK1A+D8Ja2OnGbc977/l7LEKk/e52cERY2npK8YCRKFB5Svb/qfSGwyYK6iJ
05jVKnPiIrFTuoi3uuf6EmUiGeWX0vw=
-----END CERTIFICATE-----
Generated at Fri Jul 10 13:53:07 2026 by rpki-client