Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05fce852-a20a-4939-913c-a82df3dd5549/84e794ad-4ee9-3c2a-988a-bc625a41b6da.roa
File:                     84e794ad-4ee9-3c2a-988a-bc625a41b6da.roa (raw, json)
Hash identifier:          MssPSWQby5fNj0XfpE4Y7RBp77H0hYFCh4V/1RjL0pM=
Subject key identifier:   3F:14:FD:81:19:A7:F9:48:26:9B:37:3E:2E:B0:ED:97:78:52:0D:19
Certificate issuer:       /CN=05fce852-a20a-4939-913c-a82df3dd5549
Certificate serial:       010D0C9F4328584DAAE037987D0DF550D0EFBD80
Authority key identifier: 41:DA:05:35:38:0D:F7:16:2B:3C:42:F9:87:D1:8E:1B:99:76:FC:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05fce852-a20a-4939-913c-a82df3dd5549.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05fce852-a20a-4939-913c-a82df3dd5549/84e794ad-4ee9-3c2a-988a-bc625a41b6da.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     55193
IP address blocks:        139.60.192.0/21 maxlen: 24
                          162.223.220.0/22 maxlen: 24
                          162.246.204.0/22 maxlen: 24
                          192.152.110.0/24 maxlen: 24
                          209.107.144.0/20 maxlen: 24
                          216.41.176.0/21 maxlen: 24
                          2605:b680::/32 maxlen: 48
                          2606:eb80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05fce852-a20a-4939-913c-a82df3dd5549/05fce852-a20a-4939-913c-a82df3dd5549.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05fce852-a20a-4939-913c-a82df3dd5549/05fce852-a20a-4939-913c-a82df3dd5549.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05fce852-a20a-4939-913c-a82df3dd5549.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:37:98:7d:0d:f5:50:d0:ef:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05fce852-a20a-4939-913c-a82df3dd5549
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=33168d95-4bc8-436a-8517-475bf94bcf87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7a:47:73:5f:0f:69:a9:7c:05:91:23:18:9c:
                    13:54:42:08:62:2a:3f:54:47:30:39:05:79:d7:3e:
                    86:f6:43:cb:dc:f0:f2:ff:80:54:f0:da:cf:da:68:
                    6e:bd:1e:2c:d8:67:4f:41:0f:01:ec:e5:34:d1:c3:
                    5d:79:0f:e0:74:84:9d:b0:8d:c7:44:af:3a:14:5d:
                    3f:3c:a2:fb:fa:20:e1:7e:11:7b:13:8c:88:1c:99:
                    2d:c7:76:c4:af:cc:a6:16:75:ef:ce:df:93:c9:aa:
                    55:75:47:5b:d9:31:db:b7:63:55:5e:90:6e:00:3a:
                    72:44:ac:cf:fd:76:57:b7:c4:0b:77:43:0b:95:51:
                    68:57:d8:df:e2:76:64:54:5c:20:2c:b9:2a:db:c2:
                    83:86:dc:08:42:5f:f4:56:94:13:73:15:0f:55:ad:
                    72:5e:ae:68:46:71:47:fe:6b:b9:9a:d7:2b:dc:59:
                    d3:f6:71:72:87:22:45:67:f8:46:85:0d:69:53:1f:
                    80:a9:82:b9:43:9e:72:a4:3d:36:93:0c:d5:3d:31:
                    c5:b0:81:50:83:1c:7c:dd:7d:bf:d4:fc:b7:af:ba:
                    d3:64:2e:12:e7:67:02:b8:e8:b0:61:34:03:3e:98:
                    7e:8c:a0:1d:cc:95:be:46:5d:0f:d8:0e:c6:5c:9f:
                    4b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:14:FD:81:19:A7:F9:48:26:9B:37:3E:2E:B0:ED:97:78:52:0D:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05fce852-a20a-4939-913c-a82df3dd5549/84e794ad-4ee9-3c2a-988a-bc625a41b6da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05fce852-a20a-4939-913c-a82df3dd5549/05fce852-a20a-4939-913c-a82df3dd5549.crl

            X509v3 Authority Key Identifier:
                keyid:41:DA:05:35:38:0D:F7:16:2B:3C:42:F9:87:D1:8E:1B:99:76:FC:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05fce852-a20a-4939-913c-a82df3dd5549.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.60.192.0/21
                  162.223.220.0/22
                  162.246.204.0/22
                  192.152.110.0/24
                  209.107.144.0/20
                  216.41.176.0/21
                IPv6:
                  2605:b680::/32
                  2606:eb80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:36:1c:75:16:6f:72:7c:37:45:e2:4f:e7:37:42:a7:68:33:
         18:80:e4:2b:fa:4a:b2:b6:00:11:d3:2b:cf:07:de:2a:35:48:
         71:70:3d:b6:00:17:1e:18:3f:82:b8:e0:a1:56:d9:06:4a:92:
         91:07:96:3c:af:51:c0:0d:50:83:58:1f:36:6d:e4:c2:33:18:
         a9:14:72:82:d6:f4:74:5e:57:f6:36:5d:c9:d2:02:0c:7d:43:
         a9:1d:e3:8b:e4:07:cb:60:8e:43:7a:6a:a2:56:72:16:58:98:
         47:44:91:35:e1:69:4d:f7:2d:69:d6:0d:af:b1:e7:e0:e4:2d:
         4a:cf:07:ac:54:07:25:05:58:3e:4a:1b:d4:39:ea:24:9c:68:
         6d:d6:d2:5e:64:70:2a:0e:d6:e8:1c:07:93:ab:aa:f7:97:90:
         dc:ab:51:b7:7e:a4:e5:af:d6:7d:00:f0:e4:c8:de:d3:18:ff:
         7d:ac:8b:fd:a7:32:62:4c:e4:71:75:c1:21:04:15:92:da:93:
         c0:50:ed:2f:ff:ac:df:dd:34:08:39:25:bc:f3:b5:1b:f0:c7:
         2e:a6:7e:d9:06:60:93:91:02:f0:5c:48:05:9f:cc:ff:1a:af:
         25:bd:95:dc:4f:08:a8:bc:a4:f3:15:41:99:87:86:9f:fe:2a:
         18:6b:af:d4
-----BEGIN CERTIFICATE-----
MIIGdzCCBV+gAwIBAgIUAQ0Mn0MoWE2q4DeYfQ31UNDvvYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDVmY2U4NTItYTIwYS00OTM5LTkxM2MtYTgyZGYzZGQ1
NTQ5MB4XDTI2MDQyOTEzMDAzMVoXDTI2MDcyODEzMDAzMVowLzEtMCsGA1UEAxMk
MzMxNjhkOTUtNGJjOC00MzZhLTg1MTctNDc1YmY5NGJjZjg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXpHc18Paal8BZEjGJwTVEIIYio/VEcwOQV5
1z6G9kPL3PDy/4BU8NrP2mhuvR4s2GdPQQ8B7OU00cNdeQ/gdISdsI3HRK86FF0/
PKL7+iDhfhF7E4yIHJktx3bEr8ymFnXvzt+TyapVdUdb2THbt2NVXpBuADpyRKzP
/XZXt8QLd0MLlVFoV9jf4nZkVFwgLLkq28KDhtwIQl/0VpQTcxUPVa1yXq5oRnFH
/mu5mtcr3FnT9nFyhyJFZ/hGhQ1pUx+AqYK5Q55ypD02kwzVPTHFsIFQgxx83X2/
1Py3r7rTZC4S52cCuOiwYTQDPph+jKAdzJW+Rl0P2A7GXJ9LQwIDAQABo4IDiTCC
A4UwHQYDVR0OBBYEFD8U/YEZp/lIJps3Pi6w7Zd4Ug0ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wNWZj
ZTg1Mi1hMjBhLTQ5MzktOTEzYy1hODJkZjNkZDU1NDkvODRlNzk0YWQtNGVlOS0z
YzJhLTk4OGEtYmM2MjVhNDFiNmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMDVmY2U4NTItYTIwYS00OTM5LTkx
M2MtYTgyZGYzZGQ1NTQ5LzA1ZmNlODUyLWEyMGEtNDkzOS05MTNjLWE4MmRmM2Rk
NTU0OS5jcmwwHwYDVR0jBBgwFoAUQdoFNTgN9xYrPEL5h9GOG5l2/FYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8wNWZjZTg1Mi1hMjBhLTQ5MzktOTEzYy1hODJk
ZjNkZDU1NDkuY2VyMFMGCCsGAQUFBwEHAQH/BEQwQjAqBAIAATAkAwQDizzAAwQC
ot/cAwQCovbMAwQAwJhuAwQE0WuQAwQD2CmwMBQEAgACMA4DBQAmBbaAAwUAJgbr
gDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz
Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3
DQEBCwUAA4IBAQAINhx1Fm9yfDdF4k/nN0KnaDMYgOQr+kqytgAR0yvPB94qNUhx
cD22ABceGD+CuOChVtkGSpKRB5Y8r1HADVCDWB82beTCMxipFHKC1vR0Xlf2Nl3J
0gIMfUOpHeOL5AfLYI5DemqiVnIWWJhHRJE14WlN9y1p1g2vsefg5C1KzwesVAcl
BVg+ShvUOeoknGht1tJeZHAqDtboHAeTq6r3l5Dcq1G3fqTlr9Z9APDkyN7TGP99
rIv9pzJiTORxdcEhBBWS2pPAUO0v/6zf3TQIOSW887Ub8Mcupn7ZBmCTkQLwXEgF
n8z/Gq8lvZXcTwiovKTzFUGZh4af/ioYa6/U
-----END CERTIFICATE-----
Generated at Wed May 13 08:32:49 2026 by rpki-client