Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a/2bd126b7-2be7-355a-ad57-44a85047e0cf.roa
File:                     2bd126b7-2be7-355a-ad57-44a85047e0cf.roa (raw, json)
Hash identifier:          KGUXGlxPebRpmm0zc0aDWrolO8wNnHy1QcgwUw5ZXsQ=
Subject key identifier:   28:94:C5:5F:01:89:8D:09:B9:8C:59:EA:F4:C1:1E:91:99:0A:20:D3
Certificate issuer:       /CN=6534ebb8-2490-4f36-a6d0-f7741019122a
Certificate serial:       010D0C9F4328584DA6B023761D7DFC9D2D5836F0
Authority key identifier: 16:04:FA:B3:29:29:39:B0:DD:77:0A:75:3F:C5:DC:BF:38:9A:5F:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a/2bd126b7-2be7-355a-ad57-44a85047e0cf.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     27553
IP address blocks:        64.27.192.0/19 maxlen: 24
                          64.255.64.0/20 maxlen: 24
                          66.79.192.0/19 maxlen: 24
                          69.54.192.0/19 maxlen: 24
                          209.142.192.0/18 maxlen: 24
                          216.144.200.0/21 maxlen: 24
                          216.144.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a/6534ebb8-2490-4f36-a6d0-f7741019122a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a/6534ebb8-2490-4f36-a6d0-f7741019122a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:23:76:1d:7d:fc:9d:2d:58:36:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6534ebb8-2490-4f36-a6d0-f7741019122a
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=745e9d4e-0f0a-4ff4-9c99-50583aeb62f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:27:07:a6:83:4f:46:10:c2:f8:b1:18:a8:6b:
                    e5:0e:cd:37:82:bc:1c:af:38:9c:15:93:33:84:09:
                    54:18:f7:80:eb:59:47:d4:9a:9b:e0:a6:2e:0f:86:
                    2b:51:9c:68:fc:a3:14:b8:2b:dc:a4:3f:b7:8a:6f:
                    15:5c:64:67:b7:42:ae:94:41:35:d2:73:40:04:99:
                    00:a9:de:fe:2f:9c:2f:ce:fb:6e:07:f1:60:18:38:
                    2c:35:b2:4e:d5:82:06:ad:9b:22:0d:f7:e4:5e:79:
                    59:21:9a:ba:95:66:e6:dc:e0:f1:ac:c6:cc:1a:8e:
                    e2:d5:86:91:8b:76:c9:9c:49:c1:a7:c2:e0:cc:f6:
                    04:2e:2f:02:b3:90:ec:26:80:d3:be:73:5c:f5:9c:
                    29:83:03:9d:44:01:d1:21:d6:1d:9c:59:e3:70:a0:
                    99:ee:74:15:fe:f5:56:ec:06:1b:89:9f:c3:e7:ec:
                    3c:c7:27:66:ec:91:28:7c:a1:e0:56:8b:b4:42:11:
                    3c:9b:2d:66:82:55:fd:4c:9e:42:44:bf:b0:c2:72:
                    d3:7b:8f:e4:9e:66:49:c5:08:36:c5:22:69:c4:af:
                    f2:fd:4f:b6:a3:e7:a0:a1:68:d4:f0:da:6f:20:2d:
                    4c:f1:97:ab:99:5e:42:a6:28:3e:d0:47:48:9c:96:
                    06:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:94:C5:5F:01:89:8D:09:B9:8C:59:EA:F4:C1:1E:91:99:0A:20:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a/2bd126b7-2be7-355a-ad57-44a85047e0cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a/6534ebb8-2490-4f36-a6d0-f7741019122a.crl

            X509v3 Authority Key Identifier:
                keyid:16:04:FA:B3:29:29:39:B0:DD:77:0A:75:3F:C5:DC:BF:38:9A:5F:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.27.192.0/19
                  64.255.64.0/20
                  66.79.192.0/19
                  69.54.192.0/19
                  209.142.192.0/18
                  216.144.200.0-216.144.223.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:10:08:f8:b9:3f:f8:76:27:4e:2b:11:21:ab:93:b5:dd:73:
         d7:28:ce:c8:0f:f5:74:c0:fd:8e:be:41:c6:ed:56:7b:f5:23:
         29:66:91:86:7b:7b:e0:8d:27:04:ea:e5:42:94:99:48:d1:8d:
         ea:15:22:3b:9d:a2:dd:81:46:6f:fc:e2:f2:3e:4b:60:98:43:
         d6:37:8d:15:ac:8e:9c:ae:35:3c:78:7f:86:7d:32:e7:f8:27:
         0b:d2:88:f1:44:e7:35:fc:3d:fe:0e:df:ce:7d:9a:b4:1f:0c:
         4b:6b:32:6a:6a:38:7d:fa:ae:14:7c:98:ec:b3:27:a7:c2:fb:
         4c:c5:f1:c3:74:93:24:7b:8a:8d:79:4e:eb:e3:a8:b7:da:cd:
         5d:dd:be:44:8c:83:fe:77:55:2c:56:dd:d1:6d:a4:b5:34:86:
         4b:9c:67:37:dc:43:2d:5e:7e:12:86:df:37:cb:a7:95:b7:9d:
         7f:33:50:4f:bf:8d:da:fe:1f:79:15:f3:41:7c:bd:47:2c:92:
         37:78:b4:f4:5b:04:a4:37:fc:94:6e:71:55:04:46:10:c9:77:
         b0:81:3b:6f:df:00:21:42:86:5d:c5:07:b1:1f:77:4e:8f:ed:
         8b:77:5d:7b:28:0d:ae:c8:dd:f7:c1:3d:36:1c:5a:3c:29:bb:
         c8:02:d9:7f
-----BEGIN CERTIFICATE-----
MIIGaTCCBVGgAwIBAgIUAQ0Mn0MoWE2msCN2HX38nS1YNvAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjUzNGViYjgtMjQ5MC00ZjM2LWE2ZDAtZjc3NDEwMTkx
MjJhMB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk
NzQ1ZTlkNGUtMGYwYS00ZmY0LTljOTktNTA1ODNhZWI2MmY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmicHpoNPRhDC+LEYqGvlDs03grwcrzicFZMz
hAlUGPeA61lH1Jqb4KYuD4YrUZxo/KMUuCvcpD+3im8VXGRnt0KulEE10nNABJkA
qd7+L5wvzvtuB/FgGDgsNbJO1YIGrZsiDffkXnlZIZq6lWbm3ODxrMbMGo7i1YaR
i3bJnEnBp8LgzPYELi8Cs5DsJoDTvnNc9ZwpgwOdRAHRIdYdnFnjcKCZ7nQV/vVW
7AYbiZ/D5+w8xydm7JEofKHgVou0QhE8my1mglX9TJ5CRL+wwnLTe4/knmZJxQg2
xSJpxK/y/U+2o+egoWjU8NpvIC1M8ZermV5Cpig+0EdInJYGpQIDAQABo4IDezCC
A3cwHQYDVR0OBBYEFCiUxV8BiY0JuYxZ6vTBHpGZCiDTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NTM0
ZWJiOC0yNDkwLTRmMzYtYTZkMC1mNzc0MTAxOTEyMmEvMmJkMTI2YjctMmJlNy0z
NTVhLWFkNTctNDRhODUwNDdlMGNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjUzNGViYjgtMjQ5MC00ZjM2LWE2
ZDAtZjc3NDEwMTkxMjJhLzY1MzRlYmI4LTI0OTAtNGYzNi1hNmQwLWY3NzQxMDE5
MTIyYS5jcmwwHwYDVR0jBBgwFoAUFgT6sykpObDddwp1P8XcvziaX1IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NTM0ZWJiOC0yNDkwLTRmMzYtYTZkMC1mNzc0
MTAxOTEyMmEuY2VyMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQFQBvAAwQE
QP9AAwQFQk/AAwQFRTbAAwQG0Y7AMAwDBAPYkMgDBAXYkMAwVAYDVR0gAQH/BEow
SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l
dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAtxAI
+Lk/+HYnTisRIauTtd1z1yjOyA/1dMD9jr5Bxu1We/UjKWaRhnt74I0nBOrlQpSZ
SNGN6hUiO52i3YFGb/zi8j5LYJhD1jeNFayOnK41PHh/hn0y5/gnC9KI8UTnNfw9
/g7fzn2atB8MS2syamo4ffquFHyY7LMnp8L7TMXxw3STJHuKjXlO6+Oot9rNXd2+
RIyD/ndVLFbd0W2ktTSGS5xnN9xDLV5+EobfN8unlbedfzNQT7+N2v4feRXzQXy9
RyySN3i09FsEpDf8lG5xVQRGEMl3sIE7b98AIUKGXcUHsR93To/ti3ddeygNrsjd
98E9NhxaPCm7yALZfw==
-----END CERTIFICATE-----
Generated at Wed May 13 18:27:02 2026 by rpki-client