Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/8457e11b-32d1-34c0-81ea-624f8e85267e.roa
File:                     8457e11b-32d1-34c0-81ea-624f8e85267e.roa (raw, json)
Hash identifier:          kmANmqu7av3o1pgEje/sXHTAhPV1Yzg1n4BYGXUYWXk=
Subject key identifier:   60:C3:61:8A:92:E2:39:C2:A9:11:6D:89:11:6F:41:DE:B9:C4:5C:E2
Certificate issuer:       /CN=7ff6878d-3b7e-4c67-a91a-e21f1042f9e8
Certificate serial:       010D0C9F4328584E3A2F3D8969EE2361539DA500
Authority key identifier: 48:84:03:73:7A:40:DD:51:C9:F1:4B:CD:11:48:90:6D:E1:DD:0C:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/8457e11b-32d1-34c0-81ea-624f8e85267e.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     55254
IP address blocks:        72.46.80.0/22 maxlen: 24
                          104.37.112.0/22 maxlen: 24
                          162.211.184.0/22 maxlen: 24
                          168.100.192.0/19 maxlen: 24
                          172.96.20.0/22 maxlen: 24
                          205.201.30.0/23 maxlen: 24
                          205.220.192.0/20 maxlen: 24
                          216.10.232.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:3d:89:69:ee:23:61:53:9d:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ff6878d-3b7e-4c67-a91a-e21f1042f9e8
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=1a94caba-8784-4988-ab99-be0b2c1949a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:13:17:66:21:d9:e4:f6:69:04:f7:aa:27:4b:
                    d4:3c:4a:d2:e1:63:ff:e3:26:b5:58:13:ec:ed:17:
                    1d:c5:b4:a2:f7:dc:bd:a4:d5:cb:37:40:65:d0:b4:
                    d6:0b:18:dc:58:e1:55:89:e5:e8:66:99:dc:94:1e:
                    dc:d0:8d:e3:aa:ef:5f:59:68:6e:ac:00:f1:81:4f:
                    91:33:f0:9b:e0:cf:4a:37:9c:91:09:ed:b6:75:d4:
                    d0:63:98:a9:dd:4a:82:e1:43:43:66:a4:ff:22:70:
                    8e:c9:21:f1:29:ca:80:b9:e4:e4:4e:51:b3:a9:c7:
                    6a:77:ec:16:78:7b:50:0b:22:37:4e:71:29:2c:26:
                    6e:1a:cb:e4:72:05:e2:09:a4:15:c0:9f:e6:6a:66:
                    d6:4d:db:a2:94:63:4c:75:f7:4a:95:79:cb:3d:1e:
                    27:0d:94:bc:cf:75:9f:6e:f4:df:fb:49:79:a5:44:
                    65:ad:ee:54:32:78:bb:fe:d4:86:77:fe:0c:d0:e7:
                    45:bc:c6:f3:90:4a:9a:16:a5:60:fd:11:6b:08:47:
                    f1:b0:a4:bd:60:43:7b:0f:e6:46:2f:c7:48:e3:55:
                    58:5c:8c:0a:6a:02:16:26:90:5b:7f:29:52:e5:66:
                    6e:56:3f:d2:e0:81:d4:f2:46:79:10:f9:ef:ab:cc:
                    d7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:C3:61:8A:92:E2:39:C2:A9:11:6D:89:11:6F:41:DE:B9:C4:5C:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/8457e11b-32d1-34c0-81ea-624f8e85267e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.crl

            X509v3 Authority Key Identifier:
                keyid:48:84:03:73:7A:40:DD:51:C9:F1:4B:CD:11:48:90:6D:E1:DD:0C:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.46.80.0/22
                  104.37.112.0/22
                  162.211.184.0/22
                  168.100.192.0/19
                  172.96.20.0/22
                  205.201.30.0/23
                  205.220.192.0/20
                  216.10.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:ce:1e:ad:3f:83:32:a9:cf:9e:c4:29:78:66:c7:53:e9:60:
         6e:7c:d5:53:be:6c:9e:4f:54:ec:39:91:1a:8b:f1:b4:25:ba:
         17:24:b4:b2:19:5b:88:b0:be:94:cc:88:61:02:52:3c:c2:cd:
         51:55:5b:3b:16:a5:7d:0a:60:2d:c4:99:37:73:a3:c2:e7:81:
         98:5f:d8:6c:b9:b5:91:13:14:f4:4d:a8:10:2b:c5:74:c6:a5:
         73:a8:a7:be:fa:60:4f:ce:1e:a9:80:79:31:09:41:e4:33:d6:
         49:dc:a7:fe:88:3f:04:f9:5a:5f:f2:45:5f:d3:89:02:55:2b:
         62:ef:2f:5a:f0:1f:62:4c:1f:e1:10:40:0e:c2:12:3d:ca:63:
         5a:fb:0b:fa:9b:72:46:10:d2:96:05:1a:74:32:f7:38:c7:2f:
         ac:ad:34:a9:35:9f:c2:ea:87:4f:69:8b:30:f7:82:a8:d3:25:
         65:9a:80:17:54:69:8c:7d:37:cf:d1:5b:35:28:71:e2:b8:06:
         3e:0f:47:c4:a4:ab:8c:6f:26:02:71:03:43:df:aa:8c:d5:3b:
         eb:ae:1b:b5:60:af:d2:bb:a8:88:7d:bb:8c:05:39:04:76:8b:
         6d:1e:f0:5d:37:2c:62:e4:3d:d8:da:35:94:f0:e8:bf:ef:c6:
         d5:67:ef:5e
-----BEGIN CERTIFICATE-----
MIIGbTCCBVWgAwIBAgIUAQ0Mn0MoWE46Lz2Jae4jYVOdpQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2ZmNjg3OGQtM2I3ZS00YzY3LWE5MWEtZTIxZjEwNDJm
OWU4MB4XDTI2MDYxOTIxMDAxMloXDTI2MDkxNzIxMDAxMlowLzEtMCsGA1UEAxMk
MWE5NGNhYmEtODc4NC00OTg4LWFiOTktYmUwYjJjMTk0OWEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRMXZiHZ5PZpBPeqJ0vUPErS4WP/4ya1WBPs
7RcdxbSi99y9pNXLN0Bl0LTWCxjcWOFVieXoZpnclB7c0I3jqu9fWWhurADxgU+R
M/Cb4M9KN5yRCe22ddTQY5ip3UqC4UNDZqT/InCOySHxKcqAueTkTlGzqcdqd+wW
eHtQCyI3TnEpLCZuGsvkcgXiCaQVwJ/mambWTduilGNMdfdKlXnLPR4nDZS8z3Wf
bvTf+0l5pURlre5UMni7/tSGd/4M0OdFvMbzkEqaFqVg/RFrCEfxsKS9YEN7D+ZG
L8dI41VYXIwKagIWJpBbfylS5WZuVj/S4IHU8kZ5EPnvq8zXFQIDAQABo4IDfzCC
A3swHQYDVR0OBBYEFGDDYYqS4jnCqRFtiRFvQd65xFziMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83ZmY2
ODc4ZC0zYjdlLTRjNjctYTkxYS1lMjFmMTA0MmY5ZTgvODQ1N2UxMWItMzJkMS0z
NGMwLTgxZWEtNjI0ZjhlODUyNjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvN2ZmNjg3OGQtM2I3ZS00YzY3LWE5
MWEtZTIxZjEwNDJmOWU4LzdmZjY4NzhkLTNiN2UtNGM2Ny1hOTFhLWUyMWYxMDQy
ZjllOC5jcmwwHwYDVR0jBBgwFoAUSIQDc3pA3VHJ8UvNEUiQbeHdDJ0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS83ZmY2ODc4ZC0zYjdlLTRjNjctYTkxYS1lMjFm
MTA0MmY5ZTguY2VyMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQCSC5QAwQC
aCVwAwQCotO4AwQFqGTAAwQCrGAUAwQBzckeAwQEzdzAAwQB2AroMFQGA1UdIAEB
/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp
bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB
AEnOHq0/gzKpz57EKXhmx1PpYG581VO+bJ5PVOw5kRqL8bQluhcktLIZW4iwvpTM
iGECUjzCzVFVWzsWpX0KYC3EmTdzo8LngZhf2Gy5tZETFPRNqBArxXTGpXOop776
YE/OHqmAeTEJQeQz1kncp/6IPwT5Wl/yRV/TiQJVK2LvL1rwH2JMH+EQQA7CEj3K
Y1r7C/qbckYQ0pYFGnQy9zjHL6ytNKk1n8Lqh09pizD3gqjTJWWagBdUaYx9N8/R
WzUoceK4Bj4PR8Skq4xvJgJxA0PfqozVO+uuG7Vgr9K7qIh9u4wFOQR2i20e8F03
LGLkPdjaNZTw6L/vxtVn714=
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:02:55 2026 by rpki-client