Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9f5524fb-427a-4258-864d-80d99ebf694c/ba36c661-fc65-3b28-95d6-3fd2abd933be.roa
File:                     ba36c661-fc65-3b28-95d6-3fd2abd933be.roa (raw, json)
Hash identifier:          B5PlPzr4IpfLH5TS6bYH/pHQ1+gkz+3Wlm+m6BToYT8=
Subject key identifier:   28:BA:C9:4E:D1:59:0C:46:4D:12:96:15:92:2C:31:34:B0:C4:77:14
Certificate issuer:       /CN=9f5524fb-427a-4258-864d-80d99ebf694c
Certificate serial:       010D0C9F4328584DB0ABEE1E5234E8E1539F3675
Authority key identifier: C1:AB:39:ED:07:87:F0:26:DB:C6:59:90:B3:93:77:B7:25:E6:F5:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9f5524fb-427a-4258-864d-80d99ebf694c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9f5524fb-427a-4258-864d-80d99ebf694c/ba36c661-fc65-3b28-95d6-3fd2abd933be.roa
Signing time:             Fri 01 May 2026 14:50:16 +0000
ROA not before:           Fri 01 May 2026 14:50:16 +0000
ROA not after:            Thu 30 Jul 2026 14:50:16 +0000
asID:                     19435
IP address blocks:        64.85.176.0/24 maxlen: 24
                          64.85.177.0/24 maxlen: 24
                          64.85.182.0/24 maxlen: 24
                          64.85.183.0/24 maxlen: 24
                          64.85.184.0/24 maxlen: 24
                          64.85.191.0/24 maxlen: 24
                          184.171.128.0/24 maxlen: 24
                          184.171.129.0/24 maxlen: 24
                          184.171.131.0/24 maxlen: 24
                          184.171.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9f5524fb-427a-4258-864d-80d99ebf694c/9f5524fb-427a-4258-864d-80d99ebf694c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9f5524fb-427a-4258-864d-80d99ebf694c/9f5524fb-427a-4258-864d-80d99ebf694c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9f5524fb-427a-4258-864d-80d99ebf694c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b0:ab:ee:1e:52:34:e8:e1:53:9f:36:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f5524fb-427a-4258-864d-80d99ebf694c
        Validity
            Not Before: May  1 14:50:16 2026 GMT
            Not After : Jul 30 14:50:16 2026 GMT
        Subject: CN=38cea442-41a1-42f4-b3c6-b3a83477d57b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:36:ef:19:33:5d:4c:ff:5b:f7:9a:62:3a:24:
                    99:61:35:47:b7:22:57:ce:13:a4:a2:ac:33:ff:d2:
                    5f:a1:60:8a:8a:02:db:a9:26:61:19:fb:a1:e4:5b:
                    c1:4d:69:62:98:42:81:e2:ce:ff:77:2e:92:db:94:
                    dd:bc:c1:ff:e5:77:65:e0:50:f9:6c:b1:e1:2a:ff:
                    86:e6:43:23:18:62:a5:93:ae:a7:dd:5d:fb:eb:b0:
                    c7:12:34:3a:07:67:ec:42:a4:e2:c8:9f:19:b5:ce:
                    dd:ea:be:55:49:08:14:5c:c4:04:18:57:f3:6f:27:
                    01:49:50:47:66:77:e5:f9:00:a9:d7:ac:08:52:bf:
                    90:48:b7:47:27:0d:0f:a1:30:07:c8:e3:ce:1f:a7:
                    66:3d:d9:30:a1:94:42:fd:c1:eb:1d:1f:d4:d3:15:
                    5e:a7:e9:e0:de:65:ee:68:e4:7b:4e:91:8b:0f:48:
                    68:bd:57:ec:ab:d2:7d:a0:2b:65:2a:4e:f8:2b:63:
                    2f:4d:fb:69:37:b3:fa:55:f9:24:fc:8d:1a:e4:8d:
                    1e:8d:40:ed:45:d0:6a:f1:03:8f:fc:31:90:f0:00:
                    fb:6c:cf:ec:7b:2e:12:10:2d:67:7f:d2:f6:4e:20:
                    d0:c4:20:10:60:ac:98:58:0f:01:e5:eb:d4:76:53:
                    28:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:BA:C9:4E:D1:59:0C:46:4D:12:96:15:92:2C:31:34:B0:C4:77:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9f5524fb-427a-4258-864d-80d99ebf694c/ba36c661-fc65-3b28-95d6-3fd2abd933be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9f5524fb-427a-4258-864d-80d99ebf694c/9f5524fb-427a-4258-864d-80d99ebf694c.crl

            X509v3 Authority Key Identifier:
                keyid:C1:AB:39:ED:07:87:F0:26:DB:C6:59:90:B3:93:77:B7:25:E6:F5:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9f5524fb-427a-4258-864d-80d99ebf694c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.85.176.0/23
                  64.85.182.0-64.85.184.255
                  64.85.191.0/24
                  184.171.128.0/23
                  184.171.131.0/24
                  184.171.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:9b:55:38:4a:90:56:a9:8b:57:d6:37:59:5b:09:b7:58:8f:
         18:b9:86:c2:2f:51:1d:67:dd:78:5c:1d:fe:3b:c1:95:c8:01:
         f2:4f:73:f3:22:2b:e5:3d:ab:aa:56:d8:d1:29:5b:90:c3:80:
         11:1c:44:98:8d:ee:45:c7:02:8d:d6:ce:3c:27:c3:56:ee:26:
         23:48:82:75:1d:a5:0e:2f:c5:f1:b5:6f:53:41:cc:15:0a:75:
         c7:c6:36:12:e4:c0:01:6e:1c:74:60:48:2c:55:11:65:ce:07:
         82:18:b2:df:18:8e:dc:e3:3f:07:d7:28:99:85:6f:4c:56:df:
         39:c9:30:c2:5c:ea:3b:a5:98:8a:cb:c9:42:56:89:58:ca:47:
         9e:9c:18:bd:4c:a1:73:18:e8:9d:b2:f7:ca:99:7f:f8:69:14:
         0f:0a:4d:99:0d:d8:99:66:34:4c:ae:f5:82:d2:57:ee:8b:64:
         5b:f8:41:f7:04:90:18:a4:b3:cf:56:05:d0:e5:ba:df:0b:b3:
         c6:1f:dc:44:7e:f6:a4:64:25:c6:00:c6:a3:f1:81:33:ce:55:
         2c:87:3f:80:64:79:0e:fb:e5:fc:c2:c2:21:a9:41:39:b3:26:
         f2:09:ca:db:e7:33:4d:e0:8b:3e:bb:c1:ad:95:4e:87:69:9a:
         11:1e:24:22
-----BEGIN CERTIFICATE-----
MIIGaTCCBVGgAwIBAgIUAQ0Mn0MoWE2wq+4eUjTo4VOfNnUwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWY1NTI0ZmItNDI3YS00MjU4LTg2NGQtODBkOTllYmY2
OTRjMB4XDTI2MDUwMTE0NTAxNloXDTI2MDczMDE0NTAxNlowLzEtMCsGA1UEAxMk
MzhjZWE0NDItNDFhMS00MmY0LWIzYzYtYjNhODM0NzdkNTdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDbvGTNdTP9b95piOiSZYTVHtyJXzhOkoqwz
/9JfoWCKigLbqSZhGfuh5FvBTWlimEKB4s7/dy6S25TdvMH/5Xdl4FD5bLHhKv+G
5kMjGGKlk66n3V3767DHEjQ6B2fsQqTiyJ8Ztc7d6r5VSQgUXMQEGFfzbycBSVBH
Znfl+QCp16wIUr+QSLdHJw0PoTAHyOPOH6dmPdkwoZRC/cHrHR/U0xVep+ng3mXu
aOR7TpGLD0hovVfsq9J9oCtlKk74K2MvTftpN7P6Vfkk/I0a5I0ejUDtRdBq8QOP
/DGQ8AD7bM/sey4SEC1nf9L2TiDQxCAQYKyYWA8B5evUdlMobQIDAQABo4IDezCC
A3cwHQYDVR0OBBYEFCi6yU7RWQxGTRKWFZIsMTSwxHcUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi85ZjU1
MjRmYi00MjdhLTQyNTgtODY0ZC04MGQ5OWViZjY5NGMvYmEzNmM2NjEtZmM2NS0z
YjI4LTk1ZDYtM2ZkMmFiZDkzM2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOWY1NTI0ZmItNDI3YS00MjU4LTg2
NGQtODBkOTllYmY2OTRjLzlmNTUyNGZiLTQyN2EtNDI1OC04NjRkLTgwZDk5ZWJm
Njk0Yy5jcmwwHwYDVR0jBBgwFoAUwas57QeH8CbbxlmQs5N3tyXm9UswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi85ZjU1MjRmYi00MjdhLTQyNTgtODY0ZC04MGQ5
OWViZjY5NGMuY2VyMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQBQFWwMAwD
BAFAVbYDBABAVbgDBABAVb8DBAG4q4ADBAC4q4MDBAC4q4wwVAYDVR0gAQH/BEow
SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l
dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAa5tV
OEqQVqmLV9Y3WVsJt1iPGLmGwi9RHWfdeFwd/jvBlcgB8k9z8yIr5T2rqlbY0Slb
kMOAERxEmI3uRccCjdbOPCfDVu4mI0iCdR2lDi/F8bVvU0HMFQp1x8Y2EuTAAW4c
dGBILFURZc4Hghiy3xiO3OM/B9comYVvTFbfOckwwlzqO6WYisvJQlaJWMpHnpwY
vUyhcxjonbL3ypl/+GkUDwpNmQ3YmWY0TK71gtJX7otkW/hB9wSQGKSzz1YF0OW6
3wuzxh/cRH72pGQlxgDGo/GBM85VLIc/gGR5Dvvl/MLCIalBObMm8gnK2+czTeCL
PrvBrZVOh2maER4kIg==
-----END CERTIFICATE-----
Generated at Wed May 13 14:10:46 2026 by rpki-client