Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca4cb307-c1ce-4780-8903-6931cc40426b/c219df58-4252-37c4-a397-4355e77604e1.roa
File:                     c219df58-4252-37c4-a397-4355e77604e1.roa (raw, json)
Hash identifier:          ioL5lyncL8Sn8lsTgZDjVbUyVm7KwhaJj9AkAPFIb3A=
Subject key identifier:   72:CC:62:79:5C:FD:1D:A6:15:72:4F:29:7F:06:AD:7F:C3:05:0D:63
Certificate issuer:       /CN=ca4cb307-c1ce-4780-8903-6931cc40426b
Certificate serial:       010D0C9F4328584E9A7FBEFF66D0BE9EEF6654C0
Authority key identifier: C6:ED:97:39:08:84:2D:D9:0F:6C:91:FB:6C:82:83:ED:D4:3F:A7:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca4cb307-c1ce-4780-8903-6931cc40426b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca4cb307-c1ce-4780-8903-6931cc40426b/c219df58-4252-37c4-a397-4355e77604e1.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     54804
IP address blocks:        67.222.80.0/20 maxlen: 24
                          104.219.164.0/22 maxlen: 24
                          159.48.64.0/19 maxlen: 24
                          162.212.124.0/22 maxlen: 24
                          192.119.4.0/22 maxlen: 24
                          206.251.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca4cb307-c1ce-4780-8903-6931cc40426b/ca4cb307-c1ce-4780-8903-6931cc40426b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca4cb307-c1ce-4780-8903-6931cc40426b/ca4cb307-c1ce-4780-8903-6931cc40426b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca4cb307-c1ce-4780-8903-6931cc40426b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:be:ff:66:d0:be:9e:ef:66:54:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca4cb307-c1ce-4780-8903-6931cc40426b
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=a0717b63-514b-4f50-8b3f-6064a291a7ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:64:45:f1:95:5a:11:91:06:5f:68:c1:12:4f:
                    9e:7e:a4:34:ff:f0:5e:f4:ed:b1:42:d5:da:b1:24:
                    d7:a1:59:ce:80:22:0e:b8:1b:9f:89:2d:7a:72:95:
                    d7:07:d9:82:a9:cd:50:94:f8:98:2a:60:f4:26:9d:
                    53:93:e9:be:84:42:47:cd:62:8b:81:cc:c2:e8:13:
                    07:59:6a:d5:22:6e:42:81:73:3c:a5:a6:b9:f9:5c:
                    68:41:76:e6:9f:c1:16:71:9a:a2:73:08:cf:b8:2c:
                    01:b8:f8:4e:4a:4f:a7:c8:6b:b3:88:c8:0a:09:1e:
                    ff:4b:17:a4:b7:39:df:a0:a6:de:c1:51:fc:ad:86:
                    0d:6a:92:4b:e3:a4:9d:85:b0:8c:e6:38:3f:cb:44:
                    ed:1f:e8:d4:ab:d3:3a:7a:04:5a:c0:92:c2:27:c6:
                    58:35:c3:c6:d4:a7:12:b2:b5:a7:61:7d:8e:a8:85:
                    5e:9f:2b:0e:a3:b3:d4:d1:56:87:18:fc:f0:da:36:
                    de:48:86:cc:dc:b5:0c:2f:1a:65:f1:a9:3b:9c:33:
                    f1:ca:fc:50:a3:8d:94:84:78:74:b4:93:bc:9d:40:
                    0a:75:ce:c4:ab:ed:b1:5e:1b:46:52:b5:9b:71:b8:
                    22:e0:36:0d:af:60:f7:33:df:91:45:3c:71:d3:4e:
                    00:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:CC:62:79:5C:FD:1D:A6:15:72:4F:29:7F:06:AD:7F:C3:05:0D:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca4cb307-c1ce-4780-8903-6931cc40426b/c219df58-4252-37c4-a397-4355e77604e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca4cb307-c1ce-4780-8903-6931cc40426b/ca4cb307-c1ce-4780-8903-6931cc40426b.crl

            X509v3 Authority Key Identifier:
                keyid:C6:ED:97:39:08:84:2D:D9:0F:6C:91:FB:6C:82:83:ED:D4:3F:A7:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca4cb307-c1ce-4780-8903-6931cc40426b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.222.80.0/20
                  104.219.164.0/22
                  159.48.64.0/19
                  162.212.124.0/22
                  192.119.4.0/22
                  206.251.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:50:55:7c:8a:56:7a:b1:9a:7c:21:d2:bb:0b:96:71:b7:05:
         6e:a2:c4:72:13:70:36:63:b2:48:7f:53:1e:6d:e5:e2:ab:05:
         5a:8c:88:4f:aa:b4:22:d0:c8:d2:3c:94:f1:b1:e1:95:56:19:
         67:b1:1a:0c:e3:c3:91:af:31:31:eb:77:b3:5e:54:fe:39:06:
         ab:d2:9f:56:65:39:51:d1:8a:e8:3a:b3:34:8e:52:be:48:a7:
         d5:37:62:ba:00:4d:d9:e9:83:9d:6e:97:48:41:23:2b:2a:ea:
         94:6e:10:f5:bc:f4:08:df:cd:45:cf:e8:67:75:b4:63:eb:c4:
         25:20:1d:46:6a:27:76:21:c6:24:a0:39:49:94:ee:8a:a4:9f:
         60:92:53:2a:c2:9d:5f:d8:c4:8d:71:7e:84:d3:ac:35:0b:13:
         2b:5c:11:f3:81:d9:21:1c:e2:f9:9f:23:33:17:c3:ed:17:d2:
         aa:57:4a:f0:98:e2:b8:00:c2:01:88:b5:47:16:a7:2d:51:0d:
         b2:ee:f6:6a:7e:dc:bd:ff:2f:93:da:09:b4:79:e1:1c:7b:62:
         01:06:18:38:1c:63:06:2a:10:d0:5d:fe:b1:ef:ac:ad:34:89:
         0e:55:88:d7:16:c5:2f:97:d7:18:74:8c:31:94:2e:d2:21:f6:
         a5:56:a7:5e
-----BEGIN CERTIFICATE-----
MIIGYTCCBUmgAwIBAgIUAQ0Mn0MoWE6af77/ZtC+nu9mVMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2E0Y2IzMDctYzFjZS00NzgwLTg5MDMtNjkzMWNjNDA0
MjZiMB4XDTI2MDcyNDA5MDAxMloXDTI2MTAyMjA5MDAxMlowLzEtMCsGA1UEAxMk
YTA3MTdiNjMtNTE0Yi00ZjUwLThiM2YtNjA2NGEyOTFhN2VjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGRF8ZVaEZEGX2jBEk+efqQ0//Be9O2xQtXa
sSTXoVnOgCIOuBufiS16cpXXB9mCqc1QlPiYKmD0Jp1Tk+m+hEJHzWKLgczC6BMH
WWrVIm5CgXM8paa5+VxoQXbmn8EWcZqicwjPuCwBuPhOSk+nyGuziMgKCR7/Sxek
tznfoKbewVH8rYYNapJL46SdhbCM5jg/y0TtH+jUq9M6egRawJLCJ8ZYNcPG1KcS
srWnYX2OqIVenysOo7PU0VaHGPzw2jbeSIbM3LUMLxpl8ak7nDPxyvxQo42UhHh0
tJO8nUAKdc7Eq+2xXhtGUrWbcbgi4DYNr2D3M9+RRTxx004ABwIDAQABo4IDczCC
A28wHQYDVR0OBBYEFHLMYnlc/R2mFXJPKX8GrX/DBQ1jMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jYTRj
YjMwNy1jMWNlLTQ3ODAtODkwMy02OTMxY2M0MDQyNmIvYzIxOWRmNTgtNDI1Mi0z
N2M0LWEzOTctNDM1NWU3NzYwNGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2E0Y2IzMDctYzFjZS00NzgwLTg5
MDMtNjkzMWNjNDA0MjZiL2NhNGNiMzA3LWMxY2UtNDc4MC04OTAzLTY5MzFjYzQw
NDI2Yi5jcmwwHwYDVR0jBBgwFoAUxu2XOQiELdkPbJH7bIKD7dQ/p/cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jYTRjYjMwNy1jMWNlLTQ3ODAtODkwMy02OTMx
Y2M0MDQyNmIuY2VyMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQEQ95QAwQC
aNukAwQFnzBAAwQCotR8AwQCwHcEAwQCzvskMFQGA1UdIAEB/wRKMEgwRgYIKwYB
BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy
Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEpQVXyKVnqxmnwh
0rsLlnG3BW6ixHITcDZjskh/Ux5t5eKrBVqMiE+qtCLQyNI8lPGx4ZVWGWexGgzj
w5GvMTHrd7NeVP45BqvSn1ZlOVHRiug6szSOUr5Ip9U3YroATdnpg51ul0hBIysq
6pRuEPW89AjfzUXP6Gd1tGPrxCUgHUZqJ3YhxiSgOUmU7oqkn2CSUyrCnV/YxI1x
foTTrDULEytcEfOB2SEc4vmfIzMXw+0X0qpXSvCY4rgAwgGItUcWpy1RDbLu9mp+
3L3/L5PaCbR54Rx7YgEGGDgcYwYqENBd/rHvrK00iQ5ViNcWxS+X1xh0jDGULtIh
9qVWp14=
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:32:31 2026 by rpki-client