Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/db08c0ba-423d-4547-9dee-8ed97f061fff/f463439c-3a81-3b1f-a980-d032e5fb89be.roa
File:                     f463439c-3a81-3b1f-a980-d032e5fb89be.roa (raw, json)
Hash identifier:          +u3qT+lhsOqdRwwN8ewRqIWZ37xscQBSvQJBQrmcTv8=
Subject key identifier:   90:01:0C:BB:77:1B:D7:7C:4F:AA:6C:8C:53:6F:0C:76:2E:AE:2C:24
Certificate issuer:       /CN=db08c0ba-423d-4547-9dee-8ed97f061fff
Certificate serial:       010D0C9F4328584E90BA527DE1548624DB72B580
Authority key identifier: 55:07:FA:15:4C:2D:07:5F:22:A7:A7:AD:94:D7:53:B9:EF:E2:B3:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/db08c0ba-423d-4547-9dee-8ed97f061fff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/db08c0ba-423d-4547-9dee-8ed97f061fff/f463439c-3a81-3b1f-a980-d032e5fb89be.roa
Signing time:             Mon 20 Jul 2026 21:00:11 +0000
ROA not before:           Mon 20 Jul 2026 21:00:11 +0000
ROA not after:            Sun 18 Oct 2026 21:00:11 +0000
asID:                     400268
IP address blocks:        66.129.32.0/21 maxlen: 24
                          140.106.32.0/20 maxlen: 24
                          152.55.128.0/20 maxlen: 24
                          160.79.96.0/21 maxlen: 24
                          2606:79c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/db08c0ba-423d-4547-9dee-8ed97f061fff/db08c0ba-423d-4547-9dee-8ed97f061fff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/db08c0ba-423d-4547-9dee-8ed97f061fff/db08c0ba-423d-4547-9dee-8ed97f061fff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/db08c0ba-423d-4547-9dee-8ed97f061fff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:90:ba:52:7d:e1:54:86:24:db:72:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db08c0ba-423d-4547-9dee-8ed97f061fff
        Validity
            Not Before: Jul 20 21:00:11 2026 GMT
            Not After : Oct 18 21:00:11 2026 GMT
        Subject: CN=c16b9035-680f-4ad2-89b1-e9a92dbbe3fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:73:52:6f:9b:d6:94:b7:fb:ad:83:92:ff:ee:
                    e7:33:ee:90:e5:00:72:31:e8:91:df:4a:9a:fa:76:
                    b6:9e:3c:95:40:47:a2:91:25:3d:82:a6:f1:ea:b0:
                    d5:ec:c4:a3:5d:01:db:bb:e0:cb:ac:60:b8:47:11:
                    c7:1a:d5:d0:ec:e4:df:21:f8:d1:d4:9b:48:b8:7d:
                    87:84:0e:93:a2:32:99:39:70:6e:0d:b7:a7:f6:68:
                    21:73:da:ba:e7:19:51:9c:7c:2b:d2:32:19:2c:62:
                    45:2f:0e:c2:8f:65:ad:d5:89:94:dd:cc:53:6b:a8:
                    4f:bf:d2:95:d8:64:fc:5e:6a:7e:f2:6d:77:01:7e:
                    88:e7:a8:74:f8:29:42:42:0c:20:80:0c:0b:1a:5d:
                    d4:d1:85:fa:c6:ef:88:cf:74:b3:0d:77:ef:bd:84:
                    ac:67:84:11:74:64:a8:fd:42:e7:b7:01:07:70:45:
                    ff:8e:98:62:87:b7:37:d1:eb:a2:9b:f2:9d:29:17:
                    8a:84:06:67:ca:13:b7:64:8a:17:c4:c5:70:b8:fc:
                    01:9f:05:2b:2f:88:47:4c:33:a8:0d:41:78:7c:e0:
                    c1:98:11:f2:a5:48:28:0e:f0:cb:ef:99:fc:62:6d:
                    21:be:72:ee:81:18:e0:c6:25:28:70:49:d1:9f:eb:
                    2c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:01:0C:BB:77:1B:D7:7C:4F:AA:6C:8C:53:6F:0C:76:2E:AE:2C:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/db08c0ba-423d-4547-9dee-8ed97f061fff/f463439c-3a81-3b1f-a980-d032e5fb89be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/db08c0ba-423d-4547-9dee-8ed97f061fff/db08c0ba-423d-4547-9dee-8ed97f061fff.crl

            X509v3 Authority Key Identifier:
                keyid:55:07:FA:15:4C:2D:07:5F:22:A7:A7:AD:94:D7:53:B9:EF:E2:B3:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/db08c0ba-423d-4547-9dee-8ed97f061fff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.129.32.0/21
                  140.106.32.0/20
                  152.55.128.0/20
                  160.79.96.0/21
                IPv6:
                  2606:79c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:a9:ef:46:23:32:c3:1e:65:7c:a0:c3:fa:86:63:a0:16:7a:
         c8:a8:1a:34:bf:ec:a3:e8:44:d1:b3:7b:c0:ad:67:5b:22:42:
         c4:af:28:85:9c:7d:8f:40:bc:ee:b4:81:ef:fd:ef:a5:ae:fa:
         f0:83:62:06:7a:3f:41:d3:3f:e3:da:f5:e2:d7:f5:91:c0:08:
         11:1a:fc:7c:17:82:5a:61:eb:1b:c7:0a:89:ed:f4:e2:8b:af:
         2b:a6:e1:e9:44:1e:27:ed:4b:58:3c:2b:f3:f2:63:00:ed:67:
         22:fd:37:81:dd:4d:f5:ec:c0:4e:6d:2c:5d:17:e3:6d:bb:74:
         b1:00:ad:ef:f2:2f:c7:8a:68:f7:2f:41:ac:6e:5e:a4:55:eb:
         e4:4c:6f:76:f6:70:39:11:6b:e7:07:39:b6:b2:12:ab:98:85:
         b4:f0:47:dc:c9:8e:9a:73:fd:ad:af:ff:0b:b1:17:81:4b:94:
         48:9d:ae:04:d2:c8:71:af:32:4c:75:c4:9d:72:2d:44:cc:6b:
         fc:0e:3f:b3:fe:4e:b5:d8:e3:6b:72:b2:5a:7f:62:ea:fe:ba:
         43:3a:45:32:0b:9d:ca:53:b5:41:49:b6:29:87:80:ff:f4:d9:
         1d:50:1c:6b:67:24:a7:1e:1e:9f:26:59:2b:22:5a:4d:f9:87:
         d4:48:93:8d
-----BEGIN CERTIFICATE-----
MIIGZDCCBUygAwIBAgIUAQ0Mn0MoWE6QulJ94VSGJNtytYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGIwOGMwYmEtNDIzZC00NTQ3LTlkZWUtOGVkOTdmMDYx
ZmZmMB4XDTI2MDcyMDIxMDAxMVoXDTI2MTAxODIxMDAxMVowLzEtMCsGA1UEAxMk
YzE2YjkwMzUtNjgwZi00YWQyLTg5YjEtZTlhOTJkYmJlM2ZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nNSb5vWlLf7rYOS/+7nM+6Q5QByMeiR30qa
+na2njyVQEeikSU9gqbx6rDV7MSjXQHbu+DLrGC4RxHHGtXQ7OTfIfjR1JtIuH2H
hA6TojKZOXBuDben9mghc9q65xlRnHwr0jIZLGJFLw7Cj2Wt1YmU3cxTa6hPv9KV
2GT8Xmp+8m13AX6I56h0+ClCQgwggAwLGl3U0YX6xu+Iz3SzDXfvvYSsZ4QRdGSo
/ULntwEHcEX/jphih7c30euim/KdKReKhAZnyhO3ZIoXxMVwuPwBnwUrL4hHTDOo
DUF4fODBmBHypUgoDvDL75n8Ym0hvnLugRjgxiUocEnRn+ssuwIDAQABo4IDdjCC
A3IwHQYDVR0OBBYEFJABDLt3G9d8T6psjFNvDHYuriwkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kYjA4
YzBiYS00MjNkLTQ1NDctOWRlZS04ZWQ5N2YwNjFmZmYvZjQ2MzQzOWMtM2E4MS0z
YjFmLWE5ODAtZDAzMmU1ZmI4OWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZGIwOGMwYmEtNDIzZC00NTQ3LTlk
ZWUtOGVkOTdmMDYxZmZmL2RiMDhjMGJhLTQyM2QtNDU0Ny05ZGVlLThlZDk3ZjA2
MWZmZi5jcmwwHwYDVR0jBBgwFoAUVQf6FUwtB18ip6etlNdTue/is0AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kYjA4YzBiYS00MjNkLTQ1NDctOWRlZS04ZWQ5
N2YwNjFmZmYuY2VyMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDQoEgAwQE
jGogAwQEmDeAAwQDoE9gMA0EAgACMAcDBQAmBnnAMFQGA1UdIAEB/wRKMEgwRgYI
KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz
b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBANmp70YjMsMe
ZXygw/qGY6AWesioGjS/7KPoRNGze8CtZ1siQsSvKIWcfY9AvO60ge/976Wu+vCD
YgZ6P0HTP+Pa9eLX9ZHACBEa/HwXglph6xvHCont9OKLryum4elEHiftS1g8K/Py
YwDtZyL9N4HdTfXswE5tLF0X4227dLEAre/yL8eKaPcvQaxuXqRV6+RMb3b2cDkR
a+cHObayEquYhbTwR9zJjppz/a2v/wuxF4FLlEidrgTSyHGvMkx1xJ1yLUTMa/wO
P7P+TrXY42tyslp/Yur+ukM6RTILncpTtUFJtimHgP/02R1QHGtnJKceHp8mWSsi
Wk35h9RIk40=
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:57:36 2026 by rpki-client