Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/5b908763-b6ac-3b5c-9c9d-c28e84cf5115.roa
File:                     5b908763-b6ac-3b5c-9c9d-c28e84cf5115.roa (raw, json)
Hash identifier:          EGGa61pn/7Kfk6h7O6zaZANoy4Zfx2Cvyy5/C5IHF0E=
Subject key identifier:   38:BE:EA:D4:51:0E:A9:15:70:21:56:E3:FB:B3:3F:45:A6:75:76:A3
Certificate issuer:       /CN=835152c2-2ed8-4151-8f82-ac9407335b2c
Certificate serial:       010D0C9F4328584D091258BAC5B2AC5873885400
Authority key identifier: 8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/5b908763-b6ac-3b5c-9c9d-c28e84cf5115.roa
Signing time:             Mon 02 Mar 2026 14:00:41 +0000
ROA not before:           Mon 02 Mar 2026 14:00:41 +0000
ROA not after:            Sun 31 May 2026 13:00:41 +0000
asID:                     396982
IP address blocks:        50.116.114.0/23 maxlen: 23
                          108.167.161.0/24 maxlen: 24
                          108.167.172.0/23 maxlen: 23
                          108.167.180.0/22 maxlen: 22
                          108.167.189.0/24 maxlen: 24
                          108.179.232.0/23 maxlen: 23
                          108.179.234.0/23 maxlen: 23
                          192.185.224.0/21 maxlen: 21
                          192.185.232.0/21 maxlen: 21
                          192.185.240.0/21 maxlen: 21
                          192.232.216.0/22 maxlen: 22
                          192.232.220.0/22 maxlen: 22
                          192.232.248.0/22 maxlen: 22
                          192.254.180.0/22 maxlen: 22
                          192.254.184.0/21 maxlen: 21
                          192.254.224.0/21 maxlen: 21
                          192.254.232.0/21 maxlen: 21
                          192.254.249.0/24 maxlen: 24
                          192.254.250.0/24 maxlen: 24
                          192.254.251.0/24 maxlen: 24
                          192.254.252.0/22 maxlen: 22
                          216.172.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:12:58:ba:c5:b2:ac:58:73:88:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835152c2-2ed8-4151-8f82-ac9407335b2c
        Validity
            Not Before: Mar  2 14:00:41 2026 GMT
            Not After : May 31 13:00:41 2026 GMT
        Subject: CN=876d4de6-f6b0-450d-b0f2-4c420806648e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ea:d6:bd:02:15:7d:7a:ee:44:4b:df:10:3a:
                    42:bd:b1:b1:76:84:cb:55:c0:4c:0a:1c:13:22:00:
                    4f:ef:0b:ca:97:1f:15:f4:1d:3b:e9:f3:59:4f:7c:
                    db:54:11:96:51:9b:61:68:21:01:e5:23:6d:57:0f:
                    ff:b9:b6:ed:77:0b:e5:ee:af:c6:d3:9c:84:d4:6b:
                    87:5e:02:45:72:1a:20:bb:a8:1f:cf:a1:b9:4a:e6:
                    bd:a6:de:cc:3d:f8:1c:70:30:9d:c1:ab:9c:ce:6c:
                    b8:23:89:33:b5:42:37:6d:7c:d5:11:52:c2:ad:82:
                    15:a8:81:c8:17:9c:9e:fc:99:1d:a2:af:6c:68:df:
                    14:b8:f9:b9:53:88:1a:c6:60:e0:93:a6:4d:5d:f8:
                    bd:f6:32:41:93:c5:08:f3:6c:68:c6:45:02:7b:43:
                    9f:9c:78:f8:79:6e:54:52:64:75:78:1d:d3:fa:30:
                    ee:2a:fe:b4:b0:33:9e:c0:de:35:94:b1:78:fc:d4:
                    7c:96:07:f6:dd:85:d9:ba:1c:65:60:1e:da:b4:fe:
                    5c:63:9a:56:68:68:dd:db:6e:1b:75:91:23:45:f7:
                    3d:a0:86:e5:1a:f0:35:1d:db:c2:0e:bf:3f:69:9a:
                    2a:47:c8:c6:7a:71:04:c1:a0:c3:8d:8e:54:87:44:
                    4b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:BE:EA:D4:51:0E:A9:15:70:21:56:E3:FB:B3:3F:45:A6:75:76:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/5b908763-b6ac-3b5c-9c9d-c28e84cf5115.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.116.114.0/23
                  108.167.161.0/24
                  108.167.172.0/23
                  108.167.180.0/22
                  108.167.189.0/24
                  108.179.232.0/22
                  192.185.224.0-192.185.247.255
                  192.232.216.0/21
                  192.232.248.0/22
                  192.254.180.0-192.254.191.255
                  192.254.224.0/20
                  192.254.249.0-192.254.255.255
                  216.172.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:cd:8c:b5:e8:b7:4d:a4:24:7e:1d:1a:da:67:ba:fb:56:ab:
         82:f2:39:62:10:b7:d8:ee:73:bc:60:44:3d:71:ff:a2:2d:ed:
         3c:91:c6:b7:e6:8f:ac:1a:cb:6c:ce:be:9f:90:b6:47:b9:c3:
         f8:df:40:c7:de:c8:25:80:ab:99:dc:ba:3c:dd:90:2d:b9:f0:
         5d:54:3e:64:ed:ca:25:19:53:f2:e6:bd:e7:6f:af:cc:2d:92:
         22:28:ec:ca:07:23:9c:c1:32:38:20:27:2f:ca:64:8f:8a:5e:
         0a:8a:bf:7b:3b:13:27:52:4e:b7:8a:cd:c9:c5:d7:8f:e1:da:
         51:1a:9f:b1:37:7e:90:40:72:15:48:a4:72:75:94:1f:79:bb:
         fa:65:78:83:e3:8c:b2:88:8b:a3:4a:ec:35:30:6c:74:bc:ee:
         c1:0f:c2:f8:b3:18:02:9d:0a:58:da:0e:8f:0f:65:0c:79:0c:
         c7:fd:65:f7:7c:08:9a:16:e3:07:eb:41:a4:56:32:47:4e:74:
         6b:1a:d6:01:18:cc:f9:8f:0b:99:da:3d:72:06:a2:05:be:fd:
         ca:52:28:ee:6f:cd:08:3a:10:ca:26:5d:86:9f:d4:dd:43:66:
         94:4f:12:cf:c0:c9:87:01:16:c0:92:5b:5b:5e:46:55:36:8c:
         3e:64:bf:03
-----BEGIN CERTIFICATE-----
MIIGojCCBYqgAwIBAgIUAQ0Mn0MoWE0JEli6xbKsWHOIVAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODM1MTUyYzItMmVkOC00MTUxLThmODItYWM5NDA3MzM1
YjJjMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk
ODc2ZDRkZTYtZjZiMC00NTBkLWIwZjItNGM0MjA4MDY2NDhlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkurWvQIVfXruREvfEDpCvbGxdoTLVcBMChwT
IgBP7wvKlx8V9B076fNZT3zbVBGWUZthaCEB5SNtVw//ubbtdwvl7q/G05yE1GuH
XgJFchogu6gfz6G5Sua9pt7MPfgccDCdwauczmy4I4kztUI3bXzVEVLCrYIVqIHI
F5ye/Jkdoq9saN8UuPm5U4gaxmDgk6ZNXfi99jJBk8UI82xoxkUCe0OfnHj4eW5U
UmR1eB3T+jDuKv60sDOewN41lLF4/NR8lgf23YXZuhxlYB7atP5cY5pWaGjd224b
dZEjRfc9oIblGvA1HdvCDr8/aZoqR8jGenEEwaDDjY5Uh0RLwwIDAQABo4IDtDCC
A7AwHQYDVR0OBBYEFDi+6tRRDqkVcCFW4/uzP0WmdXajMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84MzUx
NTJjMi0yZWQ4LTQxNTEtOGY4Mi1hYzk0MDczMzViMmMvNWI5MDg3NjMtYjZhYy0z
YjVjLTljOWQtYzI4ZTg0Y2Y1MTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvODM1MTUyYzItMmVkOC00MTUxLThm
ODItYWM5NDA3MzM1YjJjLzgzNTE1MmMyLTJlZDgtNDE1MS04ZjgyLWFjOTQwNzMz
NWIyYy5jcmwwHwYDVR0jBBgwFoAUip902Uy3YwUwNo8P7EWat+Zpdd4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy84MzUxNTJjMi0yZWQ4LTQxNTEtOGY4Mi1hYzk0
MDczMzViMmMuY2VyMH4GCCsGAQUFBwEHAQH/BG8wbTBrBAIAATBlAwQBMnRyAwQA
bKehAwQBbKesAwQCbKe0AwQAbKe9AwQCbLPoMAwDBAXAueADBAPAufADBAPA6NgD
BALA6PgwDAMEAsD+tAMEBsD+gAMEBMD+4DALAwQAwP75AwMAwP4DBALYrLgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAhM2Mtei3TaQkfh0a2me6+1argvI5YhC32O5zvGBEPXH/oi3tPJHGt+aP
rBrLbM6+n5C2R7nD+N9Ax97IJYCrmdy6PN2QLbnwXVQ+ZO3KJRlT8ua952+vzC2S
IijsygcjnMEyOCAnL8pkj4peCoq/ezsTJ1JOt4rNycXXj+HaURqfsTd+kEByFUik
cnWUH3m7+mV4g+OMsoiLo0rsNTBsdLzuwQ/C+LMYAp0KWNoOjw9lDHkMx/1l93wI
mhbjB+tBpFYyR050axrWARjM+Y8Lmdo9cgaiBb79ylIo7m/NCDoQyiZdhp/U3UNm
lE8Sz8DJhwEWwJJbW15GVTaMPmS/Aw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:05:13 2026 by rpki-client