Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/8fbee004-d77c-3406-a15c-51548b9eb616.roa
File:                     8fbee004-d77c-3406-a15c-51548b9eb616.roa (raw, json)
Hash identifier:          b3/jqNw7upPsP0/CrH9I8BMuDchpIy9oEhnpdIO8AKU=
Subject key identifier:   1F:30:18:52:B9:B9:9A:4E:70:6A:99:82:F3:77:43:44:10:C8:F1:81
Certificate issuer:       /CN=253c1f46-e2ad-4547-8b1c-5935addeddb5
Certificate serial:       010D0C9F4328584D3F64DAED6F78FC6A9E3F6520
Authority key identifier: 80:1D:43:D8:F7:17:16:B0:69:AB:08:47:B2:A9:15:13:40:32:69:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/8fbee004-d77c-3406-a15c-51548b9eb616.roa
Signing time:             Sun 22 Mar 2026 01:00:32 +0000
ROA not before:           Sun 22 Mar 2026 01:00:32 +0000
ROA not after:            Sat 20 Jun 2026 01:00:32 +0000
asID:                     17012
IP address blocks:        64.4.240.0/21 maxlen: 24
                          64.4.248.0/22 maxlen: 24
                          66.211.168.0/22 maxlen: 24
                          173.0.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3f:64:da:ed:6f:78:fc:6a:9e:3f:65:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=253c1f46-e2ad-4547-8b1c-5935addeddb5
        Validity
            Not Before: Mar 22 01:00:32 2026 GMT
            Not After : Jun 20 01:00:32 2026 GMT
        Subject: CN=8bdb211e-3c7d-486d-bbf7-c1f5ab8333d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:5c:75:e1:7f:84:75:8a:ba:7a:0b:66:bd:7b:
                    8e:b8:a3:0d:56:f4:8a:30:40:03:bf:00:b8:d1:32:
                    de:21:ea:1f:fd:15:19:50:1f:45:a8:9e:db:f0:2b:
                    1f:52:47:f1:e0:6d:a7:f8:cc:61:8c:31:98:44:f5:
                    a9:61:96:21:60:da:44:05:d4:8d:b6:62:90:f3:57:
                    04:f8:09:0b:16:a9:6b:91:57:a5:de:c3:e9:a6:ff:
                    6c:69:f6:8b:67:f5:d5:52:e5:5d:17:2e:a8:9d:7c:
                    3b:eb:db:ae:fb:b3:fc:df:1d:c7:4d:7e:7d:f9:8e:
                    bf:6e:4a:74:0a:83:30:ff:53:22:d9:17:00:ef:2a:
                    10:83:7a:ab:59:63:63:6d:d3:22:c5:24:f8:21:83:
                    82:db:4a:42:1e:2f:fc:56:13:58:52:91:d1:43:c1:
                    14:f1:e1:2d:1a:a5:88:de:75:0f:2a:72:31:9b:8c:
                    96:aa:23:fb:10:38:fc:4d:cb:89:61:63:11:dc:a7:
                    46:53:85:4d:88:b2:85:c4:d8:d6:b7:3a:6d:2e:0a:
                    f9:c2:f1:66:58:9b:1c:bc:da:89:81:e8:52:ef:00:
                    ea:e3:94:6c:7a:32:f5:2c:5e:84:46:ae:0f:e4:a6:
                    33:80:3e:ff:0b:02:38:7e:38:00:54:e6:81:7c:cf:
                    a3:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:30:18:52:B9:B9:9A:4E:70:6A:99:82:F3:77:43:44:10:C8:F1:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/8fbee004-d77c-3406-a15c-51548b9eb616.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.crl

            X509v3 Authority Key Identifier:
                keyid:80:1D:43:D8:F7:17:16:B0:69:AB:08:47:B2:A9:15:13:40:32:69:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.4.240.0-64.4.251.255
                  66.211.168.0/22
                  173.0.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:bd:1a:a1:8a:af:7f:04:1d:0a:ac:87:60:d4:86:38:22:9b:
         0c:da:0e:2a:31:c3:ad:d4:46:eb:a2:43:69:65:50:e0:c3:5a:
         2f:ad:fb:af:5d:aa:c7:92:b3:06:bd:9b:dd:16:ef:03:f4:f4:
         64:04:05:21:17:b6:9c:33:17:c7:ac:e4:cb:ae:75:d3:2d:51:
         4d:bd:fa:78:c8:e9:82:50:f3:87:c3:50:40:77:43:37:2f:95:
         9f:f1:90:66:ca:87:93:0c:25:3a:48:a3:0a:91:73:66:69:91:
         2a:d8:6f:4c:98:cf:50:08:87:b0:5e:03:80:9d:62:13:05:ec:
         18:a8:78:84:e8:59:ab:92:d7:a3:1f:f8:95:29:ad:d1:3d:3e:
         5f:63:ae:fc:93:b9:9a:4e:37:d4:2e:d8:e0:9e:75:34:62:97:
         94:ae:5d:03:b4:38:7e:a5:36:4b:e9:f0:17:22:14:2c:8c:5e:
         a9:4b:d0:28:ae:27:8a:88:96:c0:27:ec:dc:2a:64:81:ca:c7:
         68:a8:9e:fb:9b:e0:16:58:27:68:a7:58:67:21:57:73:6f:9c:
         90:0d:b7:65:30:c6:86:a1:cc:7b:0d:fe:c1:e6:95:c5:f0:e1:
         27:7f:e3:52:f2:a5:e9:8d:3e:4d:a9:0d:b7:20:64:3e:99:94:
         1b:1c:d3:91
-----BEGIN CERTIFICATE-----
MIIGVzCCBT+gAwIBAgIUAQ0Mn0MoWE0/ZNrtb3j8ap4/ZSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjUzYzFmNDYtZTJhZC00NTQ3LThiMWMtNTkzNWFkZGVk
ZGI1MB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk
OGJkYjIxMWUtM2M3ZC00ODZkLWJiZjctYzFmNWFiODMzM2QwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1x14X+EdYq6egtmvXuOuKMNVvSKMEADvwC4
0TLeIeof/RUZUB9FqJ7b8CsfUkfx4G2n+MxhjDGYRPWpYZYhYNpEBdSNtmKQ81cE
+AkLFqlrkVel3sPppv9safaLZ/XVUuVdFy6onXw769uu+7P83x3HTX59+Y6/bkp0
CoMw/1Mi2RcA7yoQg3qrWWNjbdMixST4IYOC20pCHi/8VhNYUpHRQ8EU8eEtGqWI
3nUPKnIxm4yWqiP7EDj8TcuJYWMR3KdGU4VNiLKFxNjWtzptLgr5wvFmWJscvNqJ
gehS7wDq45RsejL1LF6ERq4P5KYzgD7/CwI4fjgAVOaBfM+juwIDAQABo4IDaTCC
A2UwHQYDVR0OBBYEFB8wGFK5uZpOcGqZgvN3Q0QQyPGBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNTNj
MWY0Ni1lMmFkLTQ1NDctOGIxYy01OTM1YWRkZWRkYjUvOGZiZWUwMDQtZDc3Yy0z
NDA2LWExNWMtNTE1NDhiOWViNjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjUzYzFmNDYtZTJhZC00NTQ3LThi
MWMtNTkzNWFkZGVkZGI1LzI1M2MxZjQ2LWUyYWQtNDU0Ny04YjFjLTU5MzVhZGRl
ZGRiNS5jcmwwHwYDVR0jBBgwFoAUgB1D2PcXFrBpqwhHsqkVE0AyaWYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNTNjMWY0Ni1lMmFkLTQ1NDctOGIxYy01OTM1
YWRkZWRkYjUuY2VyMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBARABPAD
BAJABPgDBAJC06gDBAStAFAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG
CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j
cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEArr0aoYqvfwQdCqyHYNSGOCKbDNoO
KjHDrdRG66JDaWVQ4MNaL637r12qx5KzBr2b3RbvA/T0ZAQFIRe2nDMXx6zky651
0y1RTb36eMjpglDzh8NQQHdDNy+Vn/GQZsqHkwwlOkijCpFzZmmRKthvTJjPUAiH
sF4DgJ1iEwXsGKh4hOhZq5LXox/4lSmt0T0+X2Ou/JO5mk431C7Y4J51NGKXlK5d
A7Q4fqU2S+nwFyIULIxeqUvQKK4nioiWwCfs3CpkgcrHaKie+5vgFlgnaKdYZyFX
c2+ckA23ZTDGhqHMew3+weaVxfDhJ3/jUvKl6Y0+TakNtyBkPpmUGxzTkQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:59:21 2026 by rpki-client