Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/db08c0ba-423d-4547-9dee-8ed97f061fff/f463439c-3a81-3b1f-a980-d032e5fb89be.roa
File:                     f463439c-3a81-3b1f-a980-d032e5fb89be.roa (raw, json)
Hash identifier:          CQMMiOGK1f3AgFCxrdambm8J9uQSbdjhVyPQi6aPM6k=
Subject key identifier:   29:D9:46:94:43:77:25:0D:FC:42:D9:D6:82:91:14:69:3B:11:60:52
Certificate issuer:       /CN=db08c0ba-423d-4547-9dee-8ed97f061fff
Certificate serial:       010D0C9F4328584DB0758CDBE713181BB10A8000
Authority key identifier: 55:07:FA:15:4C:2D:07:5F:22:A7:A7:AD:94:D7:53:B9:EF:E2:B3:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/db08c0ba-423d-4547-9dee-8ed97f061fff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/db08c0ba-423d-4547-9dee-8ed97f061fff/f463439c-3a81-3b1f-a980-d032e5fb89be.roa
Signing time:             Fri 01 May 2026 13:00:30 +0000
ROA not before:           Fri 01 May 2026 13:00:30 +0000
ROA not after:            Thu 30 Jul 2026 13:00:30 +0000
asID:                     400268
IP address blocks:        66.129.32.0/21 maxlen: 24
                          140.106.32.0/20 maxlen: 24
                          152.55.128.0/20 maxlen: 24
                          160.79.96.0/21 maxlen: 24
                          2606:79c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/db08c0ba-423d-4547-9dee-8ed97f061fff/db08c0ba-423d-4547-9dee-8ed97f061fff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/db08c0ba-423d-4547-9dee-8ed97f061fff/db08c0ba-423d-4547-9dee-8ed97f061fff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/db08c0ba-423d-4547-9dee-8ed97f061fff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b0:75:8c:db:e7:13:18:1b:b1:0a:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db08c0ba-423d-4547-9dee-8ed97f061fff
        Validity
            Not Before: May  1 13:00:30 2026 GMT
            Not After : Jul 30 13:00:30 2026 GMT
        Subject: CN=1bf96812-2f0b-4588-8e00-0ce020c500d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f2:e6:f0:92:fe:55:1d:82:0b:5e:02:55:4a:
                    d0:4a:8f:67:6a:2f:f6:29:da:c6:ef:a0:61:72:68:
                    97:ab:15:b5:1f:40:50:40:12:fb:e1:31:be:29:c6:
                    05:39:2d:65:32:78:61:92:42:13:fd:35:ed:f9:f2:
                    9f:4a:d1:45:31:d0:e9:13:14:b7:17:54:62:48:eb:
                    e7:28:4b:c6:60:9e:28:e1:87:a6:a8:94:46:94:18:
                    23:e3:c1:bc:82:08:8c:57:31:81:fe:a4:57:6c:c2:
                    15:3b:9b:ec:4e:88:a6:98:b9:99:73:47:be:9b:5f:
                    1e:5b:5b:a1:9e:21:c2:9d:d5:de:10:91:92:7c:c5:
                    b8:ef:69:94:56:19:1e:d8:10:65:d0:36:1c:4b:b3:
                    db:c1:bc:02:79:b9:49:d2:3d:34:cb:52:06:84:3e:
                    57:ce:71:bc:73:f8:dd:87:0c:12:50:bc:be:de:76:
                    3d:c2:b3:e1:a3:bc:9e:31:20:ae:01:52:75:b9:b0:
                    cc:07:a2:86:25:18:3d:99:4a:80:2b:e7:76:a8:29:
                    df:e2:38:15:eb:18:86:bc:9f:b5:f9:5a:2b:fa:38:
                    ad:a8:1c:e9:b5:39:d4:26:fe:57:e1:87:95:0e:e1:
                    a2:cf:9d:5a:1a:2c:fc:71:9a:b3:1c:84:eb:fa:05:
                    05:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:D9:46:94:43:77:25:0D:FC:42:D9:D6:82:91:14:69:3B:11:60:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/db08c0ba-423d-4547-9dee-8ed97f061fff/f463439c-3a81-3b1f-a980-d032e5fb89be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/db08c0ba-423d-4547-9dee-8ed97f061fff/db08c0ba-423d-4547-9dee-8ed97f061fff.crl

            X509v3 Authority Key Identifier:
                keyid:55:07:FA:15:4C:2D:07:5F:22:A7:A7:AD:94:D7:53:B9:EF:E2:B3:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/db08c0ba-423d-4547-9dee-8ed97f061fff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.129.32.0/21
                  140.106.32.0/20
                  152.55.128.0/20
                  160.79.96.0/21
                IPv6:
                  2606:79c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:57:eb:f8:97:99:7c:78:e0:5e:7e:5d:94:96:55:65:2a:4d:
         c8:2d:c0:c7:b1:d3:7c:0b:87:e9:ec:13:ae:3f:62:3d:14:5e:
         24:8f:dd:56:4f:41:76:77:d8:4f:b8:7c:1e:8d:cc:5c:3a:76:
         e3:14:42:64:9f:a6:6e:bc:60:37:9c:77:b1:24:a9:6d:dd:5d:
         8f:0c:e6:dc:c9:c4:6a:2b:b3:e7:20:2d:ea:58:96:c6:8f:2d:
         b1:c8:b3:c2:35:b4:6c:9b:67:1d:0b:5c:a9:22:b7:87:50:d7:
         bb:5d:b0:94:ee:1e:9d:33:c4:ee:75:4b:dd:da:ac:75:89:7f:
         ed:f5:87:20:dc:3c:7c:8e:d2:2f:f8:bc:62:07:88:8c:a6:b4:
         b5:ad:75:91:30:9f:45:ef:66:47:8a:e4:7f:f4:4b:ba:21:b3:
         b3:12:e9:19:7d:71:73:7e:ff:3c:30:1d:a3:70:2e:aa:6e:84:
         b7:e2:74:f3:da:e4:94:cf:68:9e:55:45:7b:d2:a8:ec:64:e6:
         03:b5:f1:72:7e:18:77:9d:72:75:22:dd:7c:a6:03:ce:fe:24:
         a3:57:04:78:0a:50:c1:25:17:bd:75:61:71:80:32:f4:17:71:
         f1:05:14:d2:90:54:6d:b6:d6:f1:1c:38:7c:3e:d0:79:10:ea:
         f4:cf:d8:3e
-----BEGIN CERTIFICATE-----
MIIGZDCCBUygAwIBAgIUAQ0Mn0MoWE2wdYzb5xMYG7EKgAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGIwOGMwYmEtNDIzZC00NTQ3LTlkZWUtOGVkOTdmMDYx
ZmZmMB4XDTI2MDUwMTEzMDAzMFoXDTI2MDczMDEzMDAzMFowLzEtMCsGA1UEAxMk
MWJmOTY4MTItMmYwYi00NTg4LThlMDAtMGNlMDIwYzUwMGQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4vLm8JL+VR2CC14CVUrQSo9nai/2KdrG76Bh
cmiXqxW1H0BQQBL74TG+KcYFOS1lMnhhkkIT/TXt+fKfStFFMdDpExS3F1RiSOvn
KEvGYJ4o4YemqJRGlBgj48G8ggiMVzGB/qRXbMIVO5vsToimmLmZc0e+m18eW1uh
niHCndXeEJGSfMW472mUVhke2BBl0DYcS7PbwbwCeblJ0j00y1IGhD5XznG8c/jd
hwwSULy+3nY9wrPho7yeMSCuAVJ1ubDMB6KGJRg9mUqAK+d2qCnf4jgV6xiGvJ+1
+Vor+jitqBzptTnUJv5X4YeVDuGiz51aGiz8cZqzHITr+gUFpwIDAQABo4IDdjCC
A3IwHQYDVR0OBBYEFCnZRpRDdyUN/ELZ1oKRFGk7EWBSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kYjA4
YzBiYS00MjNkLTQ1NDctOWRlZS04ZWQ5N2YwNjFmZmYvZjQ2MzQzOWMtM2E4MS0z
YjFmLWE5ODAtZDAzMmU1ZmI4OWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZGIwOGMwYmEtNDIzZC00NTQ3LTlk
ZWUtOGVkOTdmMDYxZmZmL2RiMDhjMGJhLTQyM2QtNDU0Ny05ZGVlLThlZDk3ZjA2
MWZmZi5jcmwwHwYDVR0jBBgwFoAUVQf6FUwtB18ip6etlNdTue/is0AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kYjA4YzBiYS00MjNkLTQ1NDctOWRlZS04ZWQ5
N2YwNjFmZmYuY2VyMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDQoEgAwQE
jGogAwQEmDeAAwQDoE9gMA0EAgACMAcDBQAmBnnAMFQGA1UdIAEB/wRKMEgwRgYI
KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz
b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABBX6/iXmXx4
4F5+XZSWVWUqTcgtwMex03wLh+nsE64/Yj0UXiSP3VZPQXZ32E+4fB6NzFw6duMU
QmSfpm68YDecd7EkqW3dXY8M5tzJxGors+cgLepYlsaPLbHIs8I1tGybZx0LXKki
t4dQ17tdsJTuHp0zxO51S93arHWJf+31hyDcPHyO0i/4vGIHiIymtLWtdZEwn0Xv
ZkeK5H/0S7ohs7MS6Rl9cXN+/zwwHaNwLqpuhLfidPPa5JTPaJ5VRXvSqOxk5gO1
8XJ+GHedcnUi3XymA87+JKNXBHgKUMElF711YXGAMvQXcfEFFNKQVG221vEcOHw+
0HkQ6vTP2D4=
-----END CERTIFICATE-----
Generated at Wed May 13 09:56:15 2026 by rpki-client