Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/74043b36-4da5-3e84-b21c-ebd4075cbecb.roa
File:                     74043b36-4da5-3e84-b21c-ebd4075cbecb.roa (raw, json)
Hash identifier:          l7aHGZ2pPEavByLt0+M6OK17eSez81Nlmn8xPz1YQdo=
Subject key identifier:   63:4E:AA:73:6D:45:CF:CE:BD:8C:3E:F3:CD:D8:26:B6:53:3D:8C:DB
Certificate issuer:       /CN=86fea470-b380-45c0-9f6b-033b7d884388
Certificate serial:       010D0C9F4328584D492A75D35CE0BE977A673200
Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/74043b36-4da5-3e84-b21c-ebd4075cbecb.roa
Signing time:             Wed 25 Mar 2026 13:00:41 +0000
ROA not before:           Wed 25 Mar 2026 13:00:41 +0000
ROA not after:            Tue 23 Jun 2026 13:00:41 +0000
asID:                     33333
IP address blocks:        67.220.64.0/19 maxlen: 24
                          68.168.16.0/20 maxlen: 24
                          69.42.208.0/20 maxlen: 24
                          186.190.208.0/20 maxlen: 24
                          2607:3b40::/32 maxlen: 48
                          2607:f5a0::/32 maxlen: 48
                          2607:ffd8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:2a:75:d3:5c:e0:be:97:7a:67:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388
        Validity
            Not Before: Mar 25 13:00:41 2026 GMT
            Not After : Jun 23 13:00:41 2026 GMT
        Subject: CN=5a230083-8b91-471f-aa59-6ccc4110f3bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0a:d4:4a:bb:60:39:52:f3:35:3b:5d:1c:b6:
                    a5:67:d3:0c:ed:8c:55:00:5f:32:ad:f3:4f:14:fc:
                    88:10:b0:d4:31:c9:3b:c2:51:b4:76:0c:d6:2e:6f:
                    f7:28:21:84:33:54:3f:02:9a:91:99:1a:ff:45:37:
                    b9:bc:44:70:e8:38:a8:1e:ec:e2:6c:3a:32:d4:a9:
                    71:1e:9a:89:50:f6:49:2d:01:07:4a:37:c2:b7:db:
                    17:be:5e:57:87:59:5c:05:21:31:68:f0:8c:63:e9:
                    53:a6:b2:ee:36:b9:9d:59:9a:0b:9c:43:a5:d2:9c:
                    de:ca:ca:dc:7f:79:a4:a5:a0:99:9a:6b:d1:9e:b6:
                    2c:ae:d6:eb:8b:bb:d5:ce:33:e9:38:92:8a:fb:39:
                    ce:ed:63:5b:da:92:cf:ac:d5:31:72:14:e0:41:dd:
                    02:3a:e6:28:f9:a7:57:c6:5e:8f:73:86:9a:f2:a8:
                    5b:03:6b:83:cd:e1:cc:22:7a:d8:69:1e:ff:f7:7b:
                    63:07:4d:80:95:ee:eb:3c:60:40:ec:ce:15:4c:35:
                    05:51:e6:76:dd:f9:79:b7:c3:43:b2:49:52:d3:6d:
                    02:f5:91:74:81:dc:85:74:d9:77:5d:61:e5:e7:bd:
                    31:45:b2:90:15:b1:95:62:bf:e8:3b:1d:b9:6d:ad:
                    00:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:4E:AA:73:6D:45:CF:CE:BD:8C:3E:F3:CD:D8:26:B6:53:3D:8C:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/74043b36-4da5-3e84-b21c-ebd4075cbecb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl

            X509v3 Authority Key Identifier:
                keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.220.64.0/19
                  68.168.16.0/20
                  69.42.208.0/20
                  186.190.208.0/20
                IPv6:
                  2607:3b40::/32
                  2607:f5a0::/32
                  2607:ffd8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:3b:50:00:b7:1c:2a:4c:95:21:df:ad:62:52:f0:a6:da:66:
         3d:7a:b6:83:c5:e7:97:bb:04:e9:64:a2:f4:5a:44:bf:c0:e2:
         ab:ae:cd:bb:53:32:cb:43:5f:57:ee:9c:64:47:24:1f:62:2f:
         a1:fe:50:95:d3:08:fc:d1:04:5a:33:35:71:e1:a8:e4:89:e7:
         0a:0c:e5:70:83:e7:78:82:99:d6:ee:98:fb:7c:64:4d:fa:ee:
         79:40:28:46:6a:8b:b3:95:97:b1:b1:10:d0:da:21:e3:90:78:
         09:41:c6:3d:08:7e:1f:b0:14:86:cb:a7:56:b7:36:81:c0:db:
         7d:2d:0a:81:b0:49:48:94:64:c7:c8:d1:58:5c:0a:c3:f6:2e:
         23:43:17:ef:43:bc:7f:cc:ce:19:4a:51:fa:fb:77:6f:94:74:
         d6:dd:bb:a7:8b:b1:80:cd:69:f4:10:93:95:e4:5f:20:b6:ba:
         92:af:8b:37:b6:61:d3:80:aa:e0:41:20:21:62:44:dc:51:b3:
         e2:2e:20:6c:ee:18:e8:f3:f2:fe:d5:4b:3a:54:f8:f0:f2:36:
         f7:cf:dc:09:63:5a:ae:d8:b9:c9:fb:86:76:83:de:dd:db:8d:
         3c:05:96:02:ad:14:20:40:b3:46:41:01:68:74:93:e2:86:93:
         54:f0:2b:c9
-----BEGIN CERTIFICATE-----
MIIGcjCCBVqgAwIBAgIUAQ0Mn0MoWE1JKnXTXOC+l3pnMgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0
Mzg4MB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk
NWEyMzAwODMtOGI5MS00NzFmLWFhNTktNmNjYzQxMTBmM2JkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwrUSrtgOVLzNTtdHLalZ9MM7YxVAF8yrfNP
FPyIELDUMck7wlG0dgzWLm/3KCGEM1Q/ApqRmRr/RTe5vERw6DioHuzibDoy1Klx
HpqJUPZJLQEHSjfCt9sXvl5Xh1lcBSExaPCMY+lTprLuNrmdWZoLnEOl0pzeysrc
f3mkpaCZmmvRnrYsrtbri7vVzjPpOJKK+znO7WNb2pLPrNUxchTgQd0COuYo+adX
xl6Pc4aa8qhbA2uDzeHMInrYaR7/93tjB02Ale7rPGBA7M4VTDUFUeZ23fl5t8ND
sklS020C9ZF0gdyFdNl3XWHl570xRbKQFbGVYr/oOx25ba0AUwIDAQABo4IDhDCC
A4AwHQYDVR0OBBYEFGNOqnNtRc/OvYw+883YJrZTPYzbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmZl
YTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvNzQwNDNiMzYtNGRhNS0z
ZTg0LWIyMWMtZWJkNDA3NWNiZWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmZWE0NzAtYjM4MC00NWMwLTlm
NmItMDMzYjdkODg0Mzg4Lzg2ZmVhNDcwLWIzODAtNDVjMC05ZjZiLTAzM2I3ZDg4
NDM4OC5jcmwwHwYDVR0jBBgwFoAUCHSKMQk8LElEoS6K1lyekgQBzxYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNi
N2Q4ODQzODguY2VyME4GCCsGAQUFBwEHAQH/BD8wPTAeBAIAATAYAwQFQ9xAAwQE
RKgQAwQERSrQAwQEur7QMBsEAgACMBUDBQAmBztAAwUAJgf1oAMFACYH/9gwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAHDtQALccKkyVId+tYlLwptpmPXq2g8Xnl7sE6WSi9FpEv8Diq67Nu1My
y0NfV+6cZEckH2Ivof5QldMI/NEEWjM1ceGo5InnCgzlcIPneIKZ1u6Y+3xkTfru
eUAoRmqLs5WXsbEQ0Noh45B4CUHGPQh+H7AUhsunVrc2gcDbfS0KgbBJSJRkx8jR
WFwKw/YuI0MX70O8f8zOGUpR+vt3b5R01t27p4uxgM1p9BCTleRfILa6kq+LN7Zh
04Cq4EEgIWJE3FGz4i4gbO4Y6PPy/tVLOlT48PI298/cCWNarti5yfuGdoPe3duN
PAWWAq0UIECzRkEBaHST4oaTVPAryQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:23:56 2026 by rpki-client