Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/bcb4a493-66dc-3f03-946d-1ed9d7088970.roa
File:                     bcb4a493-66dc-3f03-946d-1ed9d7088970.roa (raw, json)
Hash identifier:          TDeAHOxhACJee8NzjxX7wsd869SYpWN5mUmAN8+teXE=
Subject key identifier:   56:7B:B0:C9:06:E9:19:60:C9:D9:AB:A8:ED:70:98:BA:BE:0F:60:9C
Certificate issuer:       /CN=7b93e99c-9b42-4e7b-a72c-9676e6733c16
Certificate serial:       010D0C9F4328584CAE570AFB2032B4A154B9D800
Authority key identifier: C7:1D:6D:6A:C9:BD:3A:73:1C:5F:2C:45:DA:56:3D:BC:D9:60:73:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/bcb4a493-66dc-3f03-946d-1ed9d7088970.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     396032
IP address blocks:        64.38.149.0/24 maxlen: 24
                          66.114.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:57:0a:fb:20:32:b4:a1:54:b9:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b93e99c-9b42-4e7b-a72c-9676e6733c16
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=ea7d7559-1c20-46cc-99b6-03ee88f06e30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:3a:9f:07:f3:ac:2b:30:f8:9c:5f:fb:6e:50:
                    0f:56:ad:14:32:ef:91:1c:18:9a:d1:22:31:b2:0b:
                    26:8b:bd:81:5f:65:37:02:55:54:18:5a:d0:3e:08:
                    70:93:25:20:af:72:ba:ea:6a:f6:de:50:e5:ec:59:
                    04:7f:7b:fc:b7:6f:35:37:51:58:e5:50:91:5e:80:
                    39:9f:cc:24:d3:91:6e:b6:34:72:f2:76:d9:d4:71:
                    52:8b:1f:4f:aa:4b:fd:f8:bf:9b:aa:e1:0a:92:ef:
                    41:16:1b:23:9b:12:9b:87:c2:9b:dd:0e:19:c1:7f:
                    1a:ed:dd:d2:e6:93:61:25:dc:7d:b9:ea:6d:12:0f:
                    8c:5f:c7:a0:a8:f9:06:df:36:e8:74:14:14:2a:16:
                    f2:3e:ae:29:ce:fc:e8:da:f3:77:6b:7b:d9:50:fa:
                    08:e0:33:96:a7:08:d1:7b:3f:88:ad:34:33:3c:ea:
                    c3:de:1f:f7:aa:6a:58:cc:e7:16:ac:d1:4f:24:b4:
                    ce:04:f3:96:5a:05:b6:c7:e0:f1:fc:7a:24:e6:6f:
                    43:46:27:0b:70:e8:e1:4a:61:d1:94:b0:b8:0d:65:
                    d5:f7:41:2b:f9:ea:5a:1d:fb:87:27:4f:9a:1f:f9:
                    80:07:28:f2:a4:bf:52:01:1b:14:5d:aa:15:87:c4:
                    2a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:7B:B0:C9:06:E9:19:60:C9:D9:AB:A8:ED:70:98:BA:BE:0F:60:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/bcb4a493-66dc-3f03-946d-1ed9d7088970.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.crl

            X509v3 Authority Key Identifier:
                keyid:C7:1D:6D:6A:C9:BD:3A:73:1C:5F:2C:45:DA:56:3D:BC:D9:60:73:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.38.149.0/24
                  66.114.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:e3:cf:07:70:f9:93:26:b8:6c:7b:8d:58:b7:8e:64:db:09:
         6a:e1:02:fa:d3:9e:06:3d:1f:f8:63:62:30:0d:4f:c5:60:98:
         17:cf:91:a7:d0:a0:e1:df:e5:db:0f:cb:03:23:d5:0a:0a:27:
         34:e0:83:d2:0b:39:0a:4e:d0:24:2f:be:aa:b0:e7:87:5e:d7:
         25:34:c8:23:63:ba:14:d2:da:49:bf:e1:6b:e2:bf:ba:a4:e3:
         c2:77:fc:c4:84:d3:02:40:cd:b1:dd:8c:00:90:93:2a:84:86:
         0b:c7:6f:2e:db:4d:6b:e9:70:fe:65:bb:2c:bc:ca:7c:c1:7d:
         d9:57:4b:4f:55:23:1f:17:e3:0e:2a:dc:e1:04:ea:d0:a7:eb:
         fc:92:a5:37:c0:a6:14:59:9b:ea:eb:9d:48:a5:ce:f4:5c:55:
         cd:10:57:3b:73:64:33:8d:56:63:0f:63:69:36:e5:e5:3e:5f:
         68:25:b3:dd:e6:e9:bd:5b:d2:8a:e7:53:f7:b3:d7:73:b7:31:
         2e:e7:0d:bd:fd:bf:69:02:a8:10:ac:45:55:a4:5d:6c:f4:d7:
         fe:d7:82:2c:88:f1:24:c2:da:d6:8a:02:61:b1:b8:b6:6e:ac:
         a3:fe:78:18:f9:77:f3:47:6c:0c:41:5a:e5:bd:df:d8:c0:3d:
         30:e2:8a:8c
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEyuVwr7IDK0oVS52AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2I5M2U5OWMtOWI0Mi00ZTdiLWE3MmMtOTY3NmU2NzMz
YzE2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
ZWE3ZDc1NTktMWMyMC00NmNjLTk5YjYtMDNlZTg4ZjA2ZTMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijqfB/OsKzD4nF/7blAPVq0UMu+RHBia0SIx
sgsmi72BX2U3AlVUGFrQPghwkyUgr3K66mr23lDl7FkEf3v8t281N1FY5VCRXoA5
n8wk05FutjRy8nbZ1HFSix9Pqkv9+L+bquEKku9BFhsjmxKbh8Kb3Q4ZwX8a7d3S
5pNhJdx9ueptEg+MX8egqPkG3zbodBQUKhbyPq4pzvzo2vN3a3vZUPoI4DOWpwjR
ez+IrTQzPOrD3h/3qmpYzOcWrNFPJLTOBPOWWgW2x+Dx/Hok5m9DRicLcOjhSmHR
lLC4DWXV90Er+epaHfuHJ0+aH/mAByjypL9SARsUXaoVh8Qq7QIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFFZ7sMkG6RlgydmrqO1wmLq+D2CcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83Yjkz
ZTk5Yy05YjQyLTRlN2ItYTcyYy05Njc2ZTY3MzNjMTYvYmNiNGE0OTMtNjZkYy0z
ZjAzLTk0NmQtMWVkOWQ3MDg4OTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2I5M2U5OWMtOWI0Mi00ZTdiLWE3
MmMtOTY3NmU2NzMzYzE2LzdiOTNlOTljLTliNDItNGU3Yi1hNzJjLTk2NzZlNjcz
M2MxNi5jcmwwHwYDVR0jBBgwFoAUxx1tasm9OnMcXyxF2lY9vNlgc5IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83YjkzZTk5Yy05YjQyLTRlN2ItYTcyYy05Njc2
ZTY3MzNjMTYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQCaVAwQA
QnKHMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBANXjzwdw+ZMmuGx7jVi3jmTbCWrhAvrTngY9H/hjYjANT8Vg
mBfPkafQoOHf5dsPywMj1QoKJzTgg9ILOQpO0CQvvqqw54de1yU0yCNjuhTS2km/
4Wviv7qk48J3/MSE0wJAzbHdjACQkyqEhgvHby7bTWvpcP5luyy8ynzBfdlXS09V
Ix8X4w4q3OEE6tCn6/ySpTfAphRZm+rrnUilzvRcVc0QVztzZDONVmMPY2k25eU+
X2gls93m6b1b0ornU/ez13O3MS7nDb39v2kCqBCsRVWkXWz01/7XgiyI8STC2taK
AmGxuLZurKP+eBj5d/NHbAxBWuW939jAPTDiiow=
-----END CERTIFICATE-----
Generated at Thu Feb 26 09:30:46 2026 by rpki-client