Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/d3887374-8545-34aa-837d-dd4cb2f0f338.roa
File:                     d3887374-8545-34aa-837d-dd4cb2f0f338.roa (raw, json)
Hash identifier:          46TFWqEjnMjKi6FtpHyhrpozzLhJPa0bfSNCHrYFVP8=
Subject key identifier:   9C:46:E7:24:92:69:4E:2D:55:F4:47:39:91:49:82:2A:D8:8B:59:74
Certificate issuer:       /CN=835152c2-2ed8-4151-8f82-ac9407335b2c
Certificate serial:       010D0C9F4328584D2644B05A0AC0F22ED2AD72C0
Authority key identifier: 8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/d3887374-8545-34aa-837d-dd4cb2f0f338.roa
Signing time:             Fri 13 Mar 2026 01:00:31 +0000
ROA not before:           Fri 13 Mar 2026 01:00:31 +0000
ROA not after:            Thu 11 Jun 2026 01:00:31 +0000
asID:                     396982
IP address blocks:        50.116.72.0/22 maxlen: 22
                          50.116.76.0/22 maxlen: 22
                          50.116.104.0/21 maxlen: 22
                          50.116.116.0/22 maxlen: 22
                          108.167.139.0/24 maxlen: 24
                          108.167.174.0/23 maxlen: 23
                          108.167.176.0/22 maxlen: 22
                          108.167.184.0/22 maxlen: 22
                          108.179.206.0/23 maxlen: 23
                          108.179.224.0/22 maxlen: 22
                          108.179.236.0/22 maxlen: 22
                          108.179.248.0/22 maxlen: 22
                          108.179.254.0/24 maxlen: 24
                          192.185.206.0/23 maxlen: 24
                          216.172.164.0/22 maxlen: 22
                          216.172.176.0/22 maxlen: 22
                          216.172.180.0/22 maxlen: 22
                          216.172.190.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:26:44:b0:5a:0a:c0:f2:2e:d2:ad:72:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835152c2-2ed8-4151-8f82-ac9407335b2c
        Validity
            Not Before: Mar 13 01:00:31 2026 GMT
            Not After : Jun 11 01:00:31 2026 GMT
        Subject: CN=929cdc12-3dc8-4edf-b042-e1bc0eda0939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ac:e5:db:3e:08:59:43:48:8c:5a:6e:cb:6e:
                    09:e9:df:39:35:ce:41:29:5c:02:d1:27:8e:c2:87:
                    1a:48:53:99:3a:bd:cf:11:06:56:cf:79:0d:54:e5:
                    19:79:4e:ff:80:6b:cf:2d:e0:be:de:82:8a:a7:d4:
                    0f:64:ea:64:4f:30:cb:b2:00:02:e7:ec:27:07:1c:
                    08:d7:19:1b:62:af:8c:85:d3:e6:62:58:98:ce:b1:
                    90:e4:78:35:20:84:08:45:40:17:98:bd:d8:45:32:
                    b2:a9:7a:54:33:ba:72:83:78:41:36:63:19:91:a0:
                    08:1f:0a:47:99:a0:74:83:01:cb:b3:ae:68:80:2d:
                    0b:75:c1:2d:69:dd:19:51:e6:23:46:5f:4e:b5:f7:
                    fa:e2:ab:3b:ed:f8:04:75:52:08:b0:d8:6a:51:95:
                    bb:8f:14:66:a3:66:e8:1a:19:9e:4c:20:e7:07:a9:
                    6e:65:22:4b:c1:e6:22:36:16:b1:8a:33:bd:02:3e:
                    fb:02:0b:63:5b:60:34:94:40:72:dc:a5:17:1c:e1:
                    81:70:b9:11:7c:f1:25:50:73:d7:47:64:58:93:af:
                    07:83:ca:bc:19:ed:f2:a0:06:1f:da:e8:ad:2e:ef:
                    55:12:a2:e3:52:5e:fe:a2:b6:c2:bc:c5:f5:e2:3e:
                    7b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:46:E7:24:92:69:4E:2D:55:F4:47:39:91:49:82:2A:D8:8B:59:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/d3887374-8545-34aa-837d-dd4cb2f0f338.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.116.72.0/21
                  50.116.104.0/21
                  50.116.116.0/22
                  108.167.139.0/24
                  108.167.174.0-108.167.179.255
                  108.167.184.0/22
                  108.179.206.0/23
                  108.179.224.0/22
                  108.179.236.0/22
                  108.179.248.0/22
                  108.179.254.0/24
                  192.185.206.0/23
                  216.172.164.0/22
                  216.172.176.0/21
                  216.172.190.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:34:fe:91:90:4d:bf:3f:28:b0:38:17:06:14:1c:98:c5:0e:
         9f:60:58:f6:06:16:37:71:42:33:7b:a8:6e:e7:40:0b:e0:c4:
         77:3f:c0:59:40:98:ea:8a:a4:b1:f5:20:e5:2a:6b:b6:0d:d0:
         c4:65:8e:86:02:8c:e9:75:6f:a9:e9:a0:c5:55:7b:b8:c6:36:
         90:96:19:31:1f:af:9d:8a:0c:8a:a8:f2:96:9d:c5:8d:f4:46:
         a0:87:79:fa:7e:b4:25:66:93:20:97:d3:99:f5:ec:6d:7a:dc:
         26:9a:b9:1f:d1:0c:67:85:fd:92:15:2f:1e:af:99:0e:2c:4b:
         5f:48:9f:d5:8b:00:1e:c2:4b:1f:5c:9f:65:4b:ba:f0:c5:b5:
         0c:70:5a:3a:84:63:0d:8d:3f:5a:43:1a:87:3f:15:99:33:47:
         cf:03:27:05:79:6e:f9:14:d7:cb:b2:5a:85:bb:5f:e7:04:ce:
         74:da:6b:55:13:1a:ff:14:90:bc:8a:53:93:21:e1:e9:f1:d9:
         7f:0b:db:e3:f5:88:b0:fc:f4:ea:df:47:3c:ad:d1:00:b0:72:
         1b:83:f9:62:01:78:26:59:b4:9b:db:1a:1d:ab:c3:f8:c1:5a:
         c9:de:33:75:f4:f4:85:38:be:d3:de:00:59:d4:c5:fe:cc:76:
         2d:ad:2b:5b
-----BEGIN CERTIFICATE-----
MIIGnzCCBYegAwIBAgIUAQ0Mn0MoWE0mRLBaCsDyLtKtcsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODM1MTUyYzItMmVkOC00MTUxLThmODItYWM5NDA3MzM1
YjJjMB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk
OTI5Y2RjMTItM2RjOC00ZWRmLWIwNDItZTFiYzBlZGEwOTM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqzl2z4IWUNIjFpuy24J6d85Nc5BKVwC0SeO
wocaSFOZOr3PEQZWz3kNVOUZeU7/gGvPLeC+3oKKp9QPZOpkTzDLsgAC5+wnBxwI
1xkbYq+MhdPmYliYzrGQ5Hg1IIQIRUAXmL3YRTKyqXpUM7pyg3hBNmMZkaAIHwpH
maB0gwHLs65ogC0LdcEtad0ZUeYjRl9Otff64qs77fgEdVIIsNhqUZW7jxRmo2bo
GhmeTCDnB6luZSJLweYiNhaxijO9Aj77AgtjW2A0lEBy3KUXHOGBcLkRfPElUHPX
R2RYk68Hg8q8Ge3yoAYf2uitLu9VEqLjUl7+orbCvMX14j57swIDAQABo4IDsTCC
A60wHQYDVR0OBBYEFJxG5ySSaU4tVfRHOZFJgirYi1l0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84MzUx
NTJjMi0yZWQ4LTQxNTEtOGY4Mi1hYzk0MDczMzViMmMvZDM4ODczNzQtODU0NS0z
NGFhLTgzN2QtZGQ0Y2IyZjBmMzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvODM1MTUyYzItMmVkOC00MTUxLThm
ODItYWM5NDA3MzM1YjJjLzgzNTE1MmMyLTJlZDgtNDE1MS04ZjgyLWFjOTQwNzMz
NWIyYy5jcmwwHwYDVR0jBBgwFoAUip902Uy3YwUwNo8P7EWat+Zpdd4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy84MzUxNTJjMi0yZWQ4LTQxNTEtOGY4Mi1hYzk0
MDczMzViMmMuY2VyMHsGCCsGAQUFBwEHAQH/BGwwajBoBAIAATBiAwQDMnRIAwQD
MnRoAwQCMnR0AwQAbKeLMAwDBAFsp64DBAJsp7ADBAJsp7gDBAFss84DBAJss+AD
BAJss+wDBAJss/gDBABss/4DBAHAuc4DBALYrKQDBAPYrLADBAHYrL4wVAYDVR0g
AQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5h
cmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOC
AQEATDT+kZBNvz8osDgXBhQcmMUOn2BY9gYWN3FCM3uobudAC+DEdz/AWUCY6oqk
sfUg5Sprtg3QxGWOhgKM6XVvqemgxVV7uMY2kJYZMR+vnYoMiqjylp3FjfRGoId5
+n60JWaTIJfTmfXsbXrcJpq5H9EMZ4X9khUvHq+ZDixLX0if1YsAHsJLH1yfZUu6
8MW1DHBaOoRjDY0/WkMahz8VmTNHzwMnBXlu+RTXy7Jahbtf5wTOdNprVRMa/xSQ
vIpTkyHh6fHZfwvb4/WIsPz06t9HPK3RALByG4P5YgF4Jlm0m9saHavD+MFayd4z
dfT0hTi+094AWdTF/sx2La0rWw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:48:56 2026 by rpki-client