Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cabb38bf-bd0f-4374-97d5-2b622fafd0af/93e170ce-dc02-370e-8433-aca15b1b7a71.roa
File:                     93e170ce-dc02-370e-8433-aca15b1b7a71.roa (raw, json)
Hash identifier:          1Rrk2T3LIOhbEac4LujicJsRo/a1asmxh1ytx1EgjWs=
Subject key identifier:   F7:C6:98:66:2E:9C:41:B6:84:3B:FF:34:54:2D:F9:07:4D:BB:5E:E7
Certificate issuer:       /CN=cabb38bf-bd0f-4374-97d5-2b622fafd0af
Certificate serial:       010D0C9F4328584D9FB5680DD9FD317BD9112A40
Authority key identifier: A6:F3:C7:F1:2B:B8:67:DD:6E:C2:AA:D0:8D:CD:3E:83:73:89:79:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cabb38bf-bd0f-4374-97d5-2b622fafd0af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cabb38bf-bd0f-4374-97d5-2b622fafd0af/93e170ce-dc02-370e-8433-aca15b1b7a71.roa
Signing time:             Sat 25 Apr 2026 13:00:30 +0000
ROA not before:           Sat 25 Apr 2026 13:00:30 +0000
ROA not after:            Fri 24 Jul 2026 13:00:30 +0000
asID:                     393916
IP address blocks:        65.110.32.0/21 maxlen: 32
                          74.119.4.0/22 maxlen: 32
                          162.254.128.0/22 maxlen: 32
                          209.131.232.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cabb38bf-bd0f-4374-97d5-2b622fafd0af/cabb38bf-bd0f-4374-97d5-2b622fafd0af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cabb38bf-bd0f-4374-97d5-2b622fafd0af/cabb38bf-bd0f-4374-97d5-2b622fafd0af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cabb38bf-bd0f-4374-97d5-2b622fafd0af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9f:b5:68:0d:d9:fd:31:7b:d9:11:2a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cabb38bf-bd0f-4374-97d5-2b622fafd0af
        Validity
            Not Before: Apr 25 13:00:30 2026 GMT
            Not After : Jul 24 13:00:30 2026 GMT
        Subject: CN=e794bd88-57ae-4e39-bac0-519150bbc3c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:71:16:f2:19:9a:83:cc:b0:e3:c2:97:2c:91:
                    eb:9a:95:b1:1e:6b:ea:79:5d:0d:69:c2:91:e5:b9:
                    f0:d7:38:78:dd:5a:be:51:42:5d:06:71:48:0a:cc:
                    d4:5e:d8:61:af:55:61:e8:ee:84:cf:f5:19:ea:66:
                    c5:0b:49:bc:b3:be:9d:d2:96:42:31:d3:5e:55:e7:
                    c3:0a:b7:05:b0:49:1b:3b:b5:4b:20:3f:d5:0d:89:
                    60:8e:5b:9a:bd:25:2a:c4:4e:4b:ba:b5:cf:7e:29:
                    dd:db:78:33:63:b5:be:64:96:0b:9c:fd:e9:f6:cc:
                    3c:6d:1d:98:88:53:73:38:11:0b:9a:54:a3:f7:46:
                    31:75:1f:17:ab:86:4b:c0:98:90:6b:9b:39:2b:b4:
                    67:29:f8:0d:da:5f:77:8e:30:f8:06:af:da:6d:28:
                    2c:5b:94:2a:1c:2f:89:73:e9:d3:89:82:f6:f9:95:
                    70:8e:7e:8f:fc:5d:02:b0:b0:5d:63:a7:5c:f3:a3:
                    ca:e3:84:41:99:00:16:c0:ce:6a:04:34:9d:da:17:
                    9a:b3:46:2e:3e:55:bf:11:6a:48:3b:c2:19:2c:bb:
                    b0:2a:74:1b:e3:5c:b0:72:3c:6a:8c:ff:3e:94:be:
                    d3:00:85:e9:4c:f4:30:80:e7:6d:94:51:45:1b:06:
                    49:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:C6:98:66:2E:9C:41:B6:84:3B:FF:34:54:2D:F9:07:4D:BB:5E:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cabb38bf-bd0f-4374-97d5-2b622fafd0af/93e170ce-dc02-370e-8433-aca15b1b7a71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cabb38bf-bd0f-4374-97d5-2b622fafd0af/cabb38bf-bd0f-4374-97d5-2b622fafd0af.crl

            X509v3 Authority Key Identifier:
                keyid:A6:F3:C7:F1:2B:B8:67:DD:6E:C2:AA:D0:8D:CD:3E:83:73:89:79:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cabb38bf-bd0f-4374-97d5-2b622fafd0af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.110.32.0/21
                  74.119.4.0/22
                  162.254.128.0/22
                  209.131.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:10:6e:bd:d9:20:b8:52:79:7b:24:d4:b1:a2:40:49:2a:be:
         be:58:64:e8:d7:4b:01:d8:20:a1:b8:03:64:5f:76:90:18:1e:
         2e:51:75:f0:21:f8:6e:d6:80:76:02:52:ce:bd:50:78:d1:8d:
         54:02:70:28:b3:11:44:47:a7:03:e5:31:57:1c:1b:22:cf:b6:
         39:b7:3a:4d:24:38:63:01:ee:af:d0:16:4b:b4:b7:10:64:20:
         1e:c3:58:07:e1:b8:0c:ea:70:6e:4f:91:f7:f8:71:1b:aa:49:
         48:b6:45:c7:c8:f7:81:45:8a:9d:f3:41:ce:a2:35:58:6a:a9:
         3a:b0:c0:e6:1e:a0:e4:30:1a:85:a6:01:13:fb:04:09:90:cd:
         65:52:f0:05:e6:00:09:a6:03:0f:31:b3:23:61:2c:c8:55:6b:
         a9:5d:3f:3c:bc:83:81:23:ce:bb:42:86:b4:53:1b:75:1e:b2:
         1f:3c:51:93:24:99:02:ad:5d:c6:36:2e:95:e1:8c:41:18:04:
         6c:58:41:34:7b:e4:c6:88:8d:88:9d:b0:ac:e5:a1:c4:12:5a:
         45:5d:97:7e:00:b8:d9:99:c9:8a:52:da:4d:33:ea:8c:13:e4:
         b9:d3:82:4c:48:fe:fb:ca:e1:53:41:55:e6:8e:1e:6a:e2:23:
         62:f5:20:7e
-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWE2ftWgN2f0xe9kRKkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2FiYjM4YmYtYmQwZi00Mzc0LTk3ZDUtMmI2MjJmYWZk
MGFmMB4XDTI2MDQyNTEzMDAzMFoXDTI2MDcyNDEzMDAzMFowLzEtMCsGA1UEAxMk
ZTc5NGJkODgtNTdhZS00ZTM5LWJhYzAtNTE5MTUwYmJjM2M0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3EW8hmag8yw48KXLJHrmpWxHmvqeV0NacKR
5bnw1zh43Vq+UUJdBnFICszUXthhr1Vh6O6Ez/UZ6mbFC0m8s76d0pZCMdNeVefD
CrcFsEkbO7VLID/VDYlgjluavSUqxE5LurXPfind23gzY7W+ZJYLnP3p9sw8bR2Y
iFNzOBELmlSj90YxdR8Xq4ZLwJiQa5s5K7RnKfgN2l93jjD4Bq/abSgsW5QqHC+J
c+nTiYL2+ZVwjn6P/F0CsLBdY6dc86PK44RBmQAWwM5qBDSd2heas0YuPlW/EWpI
O8IZLLuwKnQb41ywcjxqjP8+lL7TAIXpTPQwgOdtlFFFGwZJBwIDAQABo4IDZzCC
A2MwHQYDVR0OBBYEFPfGmGYunEG2hDv/NFQt+QdNu17nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jYWJi
MzhiZi1iZDBmLTQzNzQtOTdkNS0yYjYyMmZhZmQwYWYvOTNlMTcwY2UtZGMwMi0z
NzBlLTg0MzMtYWNhMTViMWI3YTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2FiYjM4YmYtYmQwZi00Mzc0LTk3
ZDUtMmI2MjJmYWZkMGFmL2NhYmIzOGJmLWJkMGYtNDM3NC05N2Q1LTJiNjIyZmFm
ZDBhZi5jcmwwHwYDVR0jBBgwFoAUpvPH8Su4Z91uwqrQjc0+g3OJeRIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jYWJiMzhiZi1iZDBmLTQzNzQtOTdkNS0yYjYy
MmZhZmQwYWYuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDQW4gAwQC
SncEAwQCov6AAwQC0YPoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr
BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz
Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBABsQbr3ZILhSeXsk1LGiQEkqvr5YZOjX
SwHYIKG4A2RfdpAYHi5RdfAh+G7WgHYCUs69UHjRjVQCcCizEURHpwPlMVccGyLP
tjm3Ok0kOGMB7q/QFku0txBkIB7DWAfhuAzqcG5Pkff4cRuqSUi2RcfI94FFip3z
Qc6iNVhqqTqwwOYeoOQwGoWmARP7BAmQzWVS8AXmAAmmAw8xsyNhLMhVa6ldPzy8
g4EjzrtChrRTG3Uesh88UZMkmQKtXcY2LpXhjEEYBGxYQTR75MaIjYidsKzlocQS
WkVdl34AuNmZyYpS2k0z6owT5LnTgkxI/vvK4VNBVeaOHmriI2L1IH4=
-----END CERTIFICATE-----
Generated at Wed May 13 13:09:57 2026 by rpki-client