Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/04bb32bf-ccbc-3bbc-9458-2be52917e211.roa
File:                     04bb32bf-ccbc-3bbc-9458-2be52917e211.roa (raw, json)
Hash identifier:          pSVApmLxwTDKqAEioS/l7+lrlZ++wVTQg+TXO8tBHBg=
Subject key identifier:   CC:68:F8:6D:0D:8A:6D:8D:6F:7A:E9:34:E7:71:AD:DF:57:C5:FC:3A
Certificate issuer:       /CN=835152c2-2ed8-4151-8f82-ac9407335b2c
Certificate serial:       010D0C9F4328584D2BDA0B8A388E041334EC22C0
Authority key identifier: 8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/04bb32bf-ccbc-3bbc-9458-2be52917e211.roa
Signing time:             Sun 15 Mar 2026 01:00:32 +0000
ROA not before:           Sun 15 Mar 2026 01:00:32 +0000
ROA not after:            Sat 13 Jun 2026 01:00:32 +0000
asID:                     396982
IP address blocks:        108.179.232.0/22 maxlen: 23
                          192.185.144.0/20 maxlen: 21
                          192.185.160.0/20 maxlen: 21
                          192.185.176.0/23 maxlen: 24
                          192.185.208.0/20 maxlen: 21
                          192.185.224.0/19 maxlen: 20
                          192.254.240.0/21 maxlen: 24
                          192.254.248.0/22 maxlen: 23
                          216.172.160.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2b:da:0b:8a:38:8e:04:13:34:ec:22:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835152c2-2ed8-4151-8f82-ac9407335b2c
        Validity
            Not Before: Mar 15 01:00:32 2026 GMT
            Not After : Jun 13 01:00:32 2026 GMT
        Subject: CN=4bf5777c-3bd0-4e00-9f05-66e9d8b0ff7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:03:4c:f4:a4:aa:51:e4:e6:2a:fe:43:5f:34:
                    76:4e:f6:fb:f8:66:6f:31:46:8a:e8:5d:4c:e0:26:
                    d9:35:17:2c:4e:6f:4f:61:df:01:70:63:df:f7:e9:
                    fe:55:ee:26:ee:76:7d:b6:67:81:a5:ae:71:6c:f7:
                    ad:95:f9:bc:df:44:a9:28:b4:ad:c1:2e:9d:8b:63:
                    ed:79:f7:0d:c4:48:7c:5e:82:45:9d:ac:17:05:9b:
                    41:74:d1:3e:c5:8e:18:34:c5:64:9b:ff:8d:8c:fa:
                    28:95:3e:05:40:36:70:84:6b:51:6c:8b:7d:23:7a:
                    5a:a9:44:1e:2b:48:c3:52:7a:e1:d6:5c:a0:b4:83:
                    d0:45:65:89:2b:b8:ec:48:b0:00:39:d3:6e:50:cd:
                    42:50:49:df:db:cc:ef:04:4d:a1:8f:79:d0:c5:3f:
                    a2:09:02:f8:fa:99:87:84:d4:75:20:9a:05:5e:0e:
                    84:9d:ba:e8:ec:2a:4b:4f:7e:0a:59:da:54:25:ec:
                    ee:09:c4:b6:70:81:e0:66:f4:9f:16:48:97:ab:b7:
                    50:2c:09:64:34:26:55:21:3b:bc:95:84:43:5e:83:
                    2b:d9:e2:68:8e:a9:7c:03:4c:5a:ca:ca:f8:2f:82:
                    fe:d1:b5:af:68:88:cd:37:09:2c:ba:11:cb:68:c2:
                    f5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:68:F8:6D:0D:8A:6D:8D:6F:7A:E9:34:E7:71:AD:DF:57:C5:FC:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/04bb32bf-ccbc-3bbc-9458-2be52917e211.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.179.232.0/22
                  192.185.144.0-192.185.177.255
                  192.185.208.0-192.185.255.255
                  192.254.240.0-192.254.251.255
                  216.172.160.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:9b:2c:94:4a:03:42:7a:81:4d:07:c5:ae:15:7f:73:33:75:
         77:b0:89:3c:79:ad:e1:b0:0b:a3:ce:e3:80:d3:47:c8:cc:ae:
         55:b9:14:de:d8:f1:f2:cb:db:38:85:2c:f4:68:56:6c:9b:49:
         c3:0c:ae:8a:bc:0c:b6:c9:c9:34:d8:c8:a3:b8:dd:f1:cf:82:
         d6:96:6a:0e:b2:1d:0a:b9:04:ba:ca:37:4e:60:cb:d9:91:36:
         5f:bf:4d:35:42:46:75:0e:57:d3:f2:5e:32:5c:25:04:61:b8:
         9d:87:2e:35:98:f7:f3:c4:fd:3d:f2:ea:8a:02:62:ee:c1:79:
         25:9a:d7:55:5a:fd:46:48:ef:e0:d6:a4:ca:e4:16:d4:69:a8:
         c3:cb:28:cd:67:d6:2a:d3:d7:df:b8:f2:cf:71:eb:7c:21:3b:
         2f:4e:76:2a:5a:05:97:2b:e0:e1:06:b3:53:2b:69:c2:68:f4:
         db:b3:05:22:30:57:76:cc:40:15:d8:a1:56:62:cc:c3:ac:50:
         0a:60:fb:a7:b1:84:1b:38:be:cc:7e:d9:93:2b:23:48:f3:d9:
         7b:38:a7:92:ea:6d:12:2a:b4:db:bb:43:83:00:07:7d:88:aa:
         07:c9:cd:e1:06:f1:19:87:37:89:a6:18:fc:0a:03:46:83:67:
         a3:d9:7b:5e
-----BEGIN CERTIFICATE-----
MIIGcjCCBVqgAwIBAgIUAQ0Mn0MoWE0r2guKOI4EEzTsIsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODM1MTUyYzItMmVkOC00MTUxLThmODItYWM5NDA3MzM1
YjJjMB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk
NGJmNTc3N2MtM2JkMC00ZTAwLTlmMDUtNjZlOWQ4YjBmZjdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQNM9KSqUeTmKv5DXzR2Tvb7+GZvMUaK6F1M
4CbZNRcsTm9PYd8BcGPf9+n+Ve4m7nZ9tmeBpa5xbPetlfm830SpKLStwS6di2Pt
efcNxEh8XoJFnawXBZtBdNE+xY4YNMVkm/+NjPoolT4FQDZwhGtRbIt9I3paqUQe
K0jDUnrh1lygtIPQRWWJK7jsSLAAOdNuUM1CUEnf28zvBE2hj3nQxT+iCQL4+pmH
hNR1IJoFXg6Enbro7CpLT34KWdpUJezuCcS2cIHgZvSfFkiXq7dQLAlkNCZVITu8
lYRDXoMr2eJojql8A0xaysr4L4L+0bWvaIjNNwksuhHLaML1VQIDAQABo4IDhDCC
A4AwHQYDVR0OBBYEFMxo+G0Nim2Nb3rpNOdxrd9Xxfw6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84MzUx
NTJjMi0yZWQ4LTQxNTEtOGY4Mi1hYzk0MDczMzViMmMvMDRiYjMyYmYtY2NiYy0z
YmJjLTk0NTgtMmJlNTI5MTdlMjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvODM1MTUyYzItMmVkOC00MTUxLThm
ODItYWM5NDA3MzM1YjJjLzgzNTE1MmMyLTJlZDgtNDE1MS04ZjgyLWFjOTQwNzMz
NWIyYy5jcmwwHwYDVR0jBBgwFoAUip902Uy3YwUwNo8P7EWat+Zpdd4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy84MzUxNTJjMi0yZWQ4LTQxNTEtOGY4Mi1hYzk0
MDczMzViMmMuY2VyME4GCCsGAQUFBwEHAQH/BD8wPTA7BAIAATA1AwQCbLPoMAwD
BATAuZADBAHAubAwCwMEBMC50AMDAcC4MAwDBATA/vADBALA/vgDBAHYrKAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAbJsslEoDQnqBTQfFrhV/czN1d7CJPHmt4bALo87jgNNHyMyuVbkU3tjx
8svbOIUs9GhWbJtJwwyuirwMtsnJNNjIo7jd8c+C1pZqDrIdCrkEuso3TmDL2ZE2
X79NNUJGdQ5X0/JeMlwlBGG4nYcuNZj388T9PfLqigJi7sF5JZrXVVr9Rkjv4Nak
yuQW1Gmow8sozWfWKtPX37jyz3HrfCE7L052KloFlyvg4QazUytpwmj027MFIjBX
dsxAFdihVmLMw6xQCmD7p7GEGzi+zH7ZkysjSPPZezinkuptEiq027tDgwAHfYiq
B8nN4QbxGYc3iaYY/AoDRoNno9l7Xg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:09:59 2026 by rpki-client