Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/af5c94db-4dbb-36f9-a04a-abaf324f57b3.roa
File:                     af5c94db-4dbb-36f9-a04a-abaf324f57b3.roa (raw, json)
Hash identifier:          664z3SeIe3f02WMZgWQF2NFjmkXzuO6NLzTDy1Glhy8=
Subject key identifier:   89:89:75:DB:0A:56:8E:0A:CF:E8:09:50:D2:40:BB:EC:FA:7C:4A:1B
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E534F3A011C386E15420E5C80
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/af5c94db-4dbb-36f9-a04a-abaf324f57b3.roa
Signing time:             Sun 28 Jun 2026 21:00:11 +0000
ROA not before:           Sun 28 Jun 2026 21:00:11 +0000
ROA not after:            Sat 26 Sep 2026 21:00:11 +0000
asID:                     213990
IP address blocks:        64.204.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:53:4f:3a:01:1c:38:6e:15:42:0e:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jun 28 21:00:11 2026 GMT
            Not After : Sep 26 21:00:11 2026 GMT
        Subject: CN=2e8d87fa-3e45-4400-a5ea-8ca367b15e94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:88:52:d9:6a:35:3c:b7:56:a5:a0:9e:fa:c2:
                    dd:50:d6:9e:c3:23:fe:97:71:d4:ff:3b:6b:89:5b:
                    17:e1:cb:66:a8:0d:74:8b:42:c8:b8:93:90:40:a5:
                    fc:10:2b:3d:68:ea:a8:c9:36:a4:10:6b:de:f6:97:
                    b5:be:6a:e4:3d:11:0d:b9:21:ef:a1:1f:f2:b7:aa:
                    f2:ac:58:ac:27:6c:8f:0e:c3:99:32:45:99:a5:30:
                    dd:ce:b7:08:61:9c:04:c2:3c:7a:8f:1b:25:af:f1:
                    63:57:e1:95:b0:8b:61:8f:ab:05:c5:da:83:50:f8:
                    95:6e:c7:ac:2f:57:5d:9a:c9:93:4d:5f:52:13:89:
                    e1:66:9a:80:90:60:41:c9:ff:17:32:52:ba:e7:8d:
                    f1:de:a5:76:ff:71:92:72:b1:69:a3:5d:aa:73:8e:
                    82:d3:f6:1e:b6:ea:ea:88:12:cc:78:13:e0:83:7e:
                    eb:18:33:48:cc:09:46:cd:d9:63:90:18:e1:57:bf:
                    d1:9d:a8:b2:9b:36:00:3e:88:52:0b:12:1f:76:05:
                    16:0e:a2:f6:e1:b6:8c:af:b4:38:a4:f6:8e:d9:97:
                    b2:2c:58:49:1d:c8:e9:b5:90:31:63:7b:3c:dc:88:
                    8e:52:93:ec:fe:19:98:49:2a:12:da:27:82:bc:fe:
                    d1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:89:75:DB:0A:56:8E:0A:CF:E8:09:50:D2:40:BB:EC:FA:7C:4A:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/af5c94db-4dbb-36f9-a04a-abaf324f57b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.204.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:16:c4:9e:34:dc:ae:50:c4:3e:9e:18:23:8f:25:fe:60:da:
         a2:09:2c:eb:be:33:c5:cd:0d:8f:30:1d:4f:36:66:30:e0:54:
         0e:71:23:92:ce:66:e6:9e:fd:6b:27:b8:80:06:9e:d3:73:c2:
         a5:9f:50:67:01:b0:7b:ba:af:b4:92:27:f5:eb:2e:67:89:c9:
         fe:00:47:ac:5f:93:c5:0a:a6:4c:a7:e6:f3:27:65:cb:97:30:
         b1:d5:d3:70:50:71:81:6d:19:44:5c:97:88:25:38:15:2c:6c:
         a7:e8:f9:7c:cc:df:0f:9f:24:f8:08:8d:84:e2:64:5b:42:f5:
         e3:db:50:04:58:42:05:90:35:d0:88:01:df:ed:ed:b3:28:24:
         0e:d3:93:00:f7:d6:0f:8f:ab:23:d8:a5:e4:2e:ce:07:0d:08:
         fd:41:20:f9:28:0a:fe:0a:2e:a9:ef:37:49:93:9a:6d:e1:f2:
         68:6e:b7:c4:99:5d:b9:99:8c:76:0d:8b:c5:06:53:4c:50:38:
         8a:24:48:ff:9e:19:27:19:69:77:d0:ba:4d:7a:d6:dd:c3:03:
         63:f4:7e:d9:a9:96:74:f8:42:bb:4f:2e:8a:fa:c5:ba:9f:36:
         90:d1:3f:15:7c:d1:bf:b9:17:10:ae:f5:ab:98:30:b9:38:bf:
         1e:79:e3:9f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5TTzoBHDhuFUIOXIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDYyODIxMDAxMVoXDTI2MDkyNjIxMDAxMVowLzEtMCsGA1UEAxMk
MmU4ZDg3ZmEtM2U0NS00NDAwLWE1ZWEtOGNhMzY3YjE1ZTk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYhS2Wo1PLdWpaCe+sLdUNaewyP+l3HU/ztr
iVsX4ctmqA10i0LIuJOQQKX8ECs9aOqoyTakEGve9pe1vmrkPRENuSHvoR/yt6ry
rFisJ2yPDsOZMkWZpTDdzrcIYZwEwjx6jxslr/FjV+GVsIthj6sFxdqDUPiVbses
L1ddmsmTTV9SE4nhZpqAkGBByf8XMlK6543x3qV2/3GScrFpo12qc46C0/Yeturq
iBLMeBPgg37rGDNIzAlGzdljkBjhV7/RnaiymzYAPohSCxIfdgUWDqL24baMr7Q4
pPaO2ZeyLFhJHcjptZAxY3s83IiOUpPs/hmYSSoS2ieCvP7R+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFImJddsKVo4Kz+gJUNJAu+z6fEobMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYWY1Yzk0ZGItNGRiYi0z
NmY5LWEwNGEtYWJhZjMyNGY1N2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMwiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIgWxJ403K5QxD6eGCOPJf5g2qIJLOu+M8XNDY8wHU82ZjDgVA5xI5LO
Zuae/WsnuIAGntNzwqWfUGcBsHu6r7SSJ/XrLmeJyf4AR6xfk8UKpkyn5vMnZcuX
MLHV03BQcYFtGURcl4glOBUsbKfo+XzM3w+fJPgIjYTiZFtC9ePbUARYQgWQNdCI
Ad/t7bMoJA7TkwD31g+PqyPYpeQuzgcNCP1BIPkoCv4KLqnvN0mTmm3h8mhut8SZ
XbmZjHYNi8UGU0xQOIokSP+eGScZaXfQuk161t3DA2P0ftmplnT4QrtPLor6xbqf
NpDRPxV80b+5FxCu9auYMLk4vx55458=
-----END CERTIFICATE-----
Generated at Tue Jul 21 17:28:46 2026 by rpki-client