Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/64838672-df43-3c74-873f-5a77f1b61bcd.roa
File:                     64838672-df43-3c74-873f-5a77f1b61bcd.roa (raw, json)
Hash identifier:          YwUVfVLOxxo36zJyK/Q0UDEh7tKNN2vrbWPPQm3t/f8=
Subject key identifier:   64:F8:AD:B0:EA:54:95:F1:BA:1B:7F:EE:9C:44:68:82:36:A1:5F:3F
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584DE150AA76214B4213920D7800
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/64838672-df43-3c74-873f-5a77f1b61bcd.roa
Signing time:             Tue 19 May 2026 01:00:24 +0000
ROA not before:           Tue 19 May 2026 01:00:24 +0000
ROA not after:            Mon 17 Aug 2026 01:00:24 +0000
asID:                     54253
IP address blocks:        168.107.100.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e1:50:aa:76:21:4b:42:13:92:0d:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: May 19 01:00:24 2026 GMT
            Not After : Aug 17 01:00:24 2026 GMT
        Subject: CN=579696db-57f8-4ad4-b8fe-2e4a7767b988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ce:78:7e:5c:7c:28:65:8c:6a:98:53:11:79:
                    4d:8c:71:e7:03:37:12:5d:57:ba:bb:fb:d4:b1:6f:
                    f9:d1:1e:62:7d:f8:e0:19:e3:42:8d:dc:b2:6e:68:
                    5c:1f:e2:23:96:98:27:c4:72:60:b5:d4:bc:8e:11:
                    78:e9:22:fb:61:e7:10:38:4b:e6:80:ff:fe:81:99:
                    e8:be:54:d2:1d:05:7d:5e:72:e1:73:b5:e2:67:86:
                    91:63:93:48:62:bc:4a:fa:f2:70:e0:55:ad:3c:3a:
                    bd:0b:2f:43:39:6b:18:5c:67:7c:ce:a1:aa:e6:6e:
                    1f:7f:4e:2a:46:a8:fa:e3:dc:4e:eb:42:96:0f:15:
                    72:8d:44:73:5a:56:7e:17:60:a3:87:d3:d7:86:be:
                    3e:90:a2:69:3b:9a:83:34:c2:6d:27:1c:82:26:eb:
                    ae:01:42:e6:bc:4a:f8:b4:03:e3:dc:82:2e:98:4a:
                    bc:a6:df:4f:d7:aa:86:eb:f9:e0:dc:6a:a3:3c:5f:
                    ce:5a:9c:61:fe:19:07:3e:45:b4:45:44:82:47:4b:
                    63:c3:9f:a5:46:8d:1a:17:e8:81:06:8a:72:5c:ce:
                    ca:d3:ad:fb:a4:5f:32:af:63:28:07:7d:ff:54:69:
                    db:39:75:e5:35:42:06:1d:82:fc:0a:8c:36:e9:1d:
                    31:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:F8:AD:B0:EA:54:95:F1:BA:1B:7F:EE:9C:44:68:82:36:A1:5F:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/64838672-df43-3c74-873f-5a77f1b61bcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.107.100.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:a5:c0:5b:5b:46:c9:a0:70:38:60:8d:12:d4:2b:79:2e:ca:
         b3:11:02:07:3b:9d:f6:d4:ca:ef:4e:75:d2:c9:0b:23:73:14:
         94:3a:ca:1f:28:ad:c1:ed:85:8f:fb:ed:cc:d1:a5:76:61:47:
         a3:66:cd:34:af:f2:9a:ad:9c:8e:62:43:5d:99:ba:74:cf:c8:
         9a:39:3a:e3:5f:eb:85:5e:bd:12:60:b3:b7:80:ca:b8:85:37:
         68:14:60:3b:d7:41:88:28:74:c6:28:da:ed:8c:69:33:de:6c:
         22:f3:67:bf:87:9d:4b:25:60:ec:4c:9b:f0:4b:0a:b9:1e:86:
         5c:23:01:8f:fe:05:31:8a:96:71:9d:16:d8:9e:73:b7:47:a5:
         f2:2c:54:00:83:b9:25:62:fa:1d:72:5d:17:20:9b:83:fa:be:
         3c:af:ed:4f:09:84:72:3c:43:02:87:54:e7:77:e2:e5:a3:aa:
         cb:88:fe:2b:28:c3:c5:74:0e:ac:37:17:de:6b:a6:6e:99:4f:
         4b:a2:8e:46:48:1b:f2:5c:72:30:a6:89:b6:c5:be:33:19:da:
         77:47:59:86:8e:e4:d5:fe:10:48:d8:4f:1b:f8:92:6b:fc:36:
         3a:71:af:06:f7:0b:85:a9:f3:57:32:3b:75:fb:9b:34:b5:c3:
         09:35:57:bd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3hUKp2IUtCE5INeAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDUxOTAxMDAyNFoXDTI2MDgxNzAxMDAyNFowLzEtMCsGA1UEAxMk
NTc5Njk2ZGItNTdmOC00YWQ0LWI4ZmUtMmU0YTc3NjdiOTg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl854flx8KGWMaphTEXlNjHHnAzcSXVe6u/vU
sW/50R5iffjgGeNCjdyybmhcH+IjlpgnxHJgtdS8jhF46SL7YecQOEvmgP/+gZno
vlTSHQV9XnLhc7XiZ4aRY5NIYrxK+vJw4FWtPDq9Cy9DOWsYXGd8zqGq5m4ff04q
Rqj649xO60KWDxVyjURzWlZ+F2Cjh9PXhr4+kKJpO5qDNMJtJxyCJuuuAULmvEr4
tAPj3IIumEq8pt9P16qG6/ng3GqjPF/OWpxh/hkHPkW0RUSCR0tjw5+lRo0aF+iB
BopyXM7K0637pF8yr2MoB33/VGnbOXXlNUIGHYL8Cow26R0xSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGT4rbDqVJXxuht/7pxEaII2oV8/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNjQ4Mzg2NzItZGY0My0z
Yzc0LTg3M2YtNWE3N2YxYjYxYmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqGtkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADGlwFtbRsmgcDhgjRLUK3kuyrMRAgc7nfbUyu9OddLJCyNzFJQ6yh8o
rcHthY/77czRpXZhR6NmzTSv8pqtnI5iQ12ZunTPyJo5OuNf64VevRJgs7eAyriF
N2gUYDvXQYgodMYo2u2MaTPebCLzZ7+HnUslYOxMm/BLCrkehlwjAY/+BTGKlnGd
Ftiec7dHpfIsVACDuSVi+h1yXRcgm4P6vjyv7U8JhHI8QwKHVOd34uWjqsuI/iso
w8V0Dqw3F95rpm6ZT0uijkZIG/JccjCmibbFvjMZ2ndHWYaO5NX+EEjYTxv4kmv8
Njpxrwb3C4Wp81cyO3X7mzS1wwk1V70=
-----END CERTIFICATE-----
Generated at Thu May 28 17:04:28 2026 by rpki-client