Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/df6ffceb-3664-34d8-8a96-01aafc7628e4.roa
File:                     df6ffceb-3664-34d8-8a96-01aafc7628e4.roa (raw, json)
Hash identifier:          Yf/BfYT5od5F6yFthIQH0/aZw7BdXrfgo6P72O0NqUs=
Subject key identifier:   30:AB:1F:F3:3B:56:0F:E8:FF:C0:6D:20:D1:24:DC:6E:F7:BD:F6:55
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584E6F3A4AE5D3AD0076D3C36280
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/df6ffceb-3664-34d8-8a96-01aafc7628e4.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     7029
IP address blocks:        142.173.0.0/20 maxlen: 20
                          142.173.16.0/20 maxlen: 20
                          142.173.64.0/20 maxlen: 20
                          142.173.80.0/20 maxlen: 20
                          142.173.112.0/20 maxlen: 20
                          142.173.128.0/20 maxlen: 20
                          142.173.144.0/20 maxlen: 20
                          142.173.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:4a:e5:d3:ad:00:76:d3:c3:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=4985e873-2c81-4d96-816e-8f95e8e22292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:37:0e:b6:8e:37:57:aa:aa:eb:c5:aa:45:de:
                    38:4d:47:d3:3a:ee:1f:99:38:59:e6:27:c8:af:76:
                    a9:4d:e7:cd:13:1b:c9:04:e5:f4:74:be:a8:cf:0a:
                    23:72:90:6a:64:96:5e:fe:b1:52:c2:89:c2:e4:57:
                    78:eb:4f:e7:ca:e3:df:70:8f:b5:a7:ad:f0:a2:8f:
                    de:f9:a3:03:cc:3d:4d:ae:c3:8e:8e:ef:54:f4:76:
                    ba:d7:d0:72:47:e9:c3:35:8c:da:50:2c:e6:b9:97:
                    33:6a:c9:92:cf:fa:42:de:45:d9:ad:f9:97:9d:f6:
                    11:68:97:14:74:72:48:dc:a8:ae:76:3f:c9:7c:d7:
                    35:3a:6e:76:e9:50:fa:ce:23:db:f8:d3:88:7d:27:
                    45:8b:45:1e:99:b6:72:45:85:2d:9e:e3:e8:06:78:
                    60:07:2e:3e:a2:f9:d2:4d:21:f3:ba:cb:92:13:f1:
                    50:9e:bb:9b:92:38:e3:25:df:4e:74:36:ae:c6:a6:
                    6a:9a:c7:aa:3a:99:05:e7:0f:fa:db:f3:bc:94:63:
                    2f:67:55:1c:d2:d2:14:d7:a0:b2:3c:db:f6:ed:86:
                    1c:8a:75:8d:6a:2e:be:89:d5:98:bd:d0:12:4a:32:
                    2d:8c:e6:37:03:9a:58:54:24:e8:4b:27:10:fa:3e:
                    b4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:AB:1F:F3:3B:56:0F:E8:FF:C0:6D:20:D1:24:DC:6E:F7:BD:F6:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/df6ffceb-3664-34d8-8a96-01aafc7628e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.173.0.0/19
                  142.173.64.0/19
                  142.173.112.0-142.173.159.255
                  142.173.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:fc:bc:30:87:ba:56:67:78:d9:ba:e3:e6:0f:54:70:c0:3d:
         b1:36:a9:41:f8:2e:08:6e:30:1d:8d:a7:46:97:f9:77:16:c8:
         7e:98:eb:2e:ca:49:f2:e8:ba:ef:be:0e:cd:10:c4:b1:76:3f:
         bf:bb:7d:ff:d4:10:31:01:31:5e:73:4b:d6:46:50:a2:ff:5b:
         19:c4:27:03:8f:77:18:b1:bf:ec:31:aa:e3:d7:f3:71:a1:87:
         1a:56:da:5d:cb:16:71:70:ab:b4:b2:2a:8b:d8:12:5a:0a:0a:
         ea:f1:65:9c:95:84:ee:b4:6a:cc:67:49:d2:bb:89:44:34:4a:
         92:af:ef:b3:71:c1:73:49:6f:fe:d7:f2:9a:bd:14:dd:95:1f:
         b0:c2:0b:a7:b7:61:63:f7:49:f9:b9:40:03:60:61:7d:1d:ec:
         47:8f:89:f7:80:51:26:2e:96:f7:62:d2:40:2e:dd:0c:86:69:
         31:09:8c:31:91:83:4a:82:1d:84:5b:10:a4:07:10:4f:c5:b1:
         11:7e:3a:5d:70:bf:c6:a4:ab:6e:66:34:83:e9:24:86:4c:b2:
         a9:d1:84:ae:39:51:02:a3:6a:6d:c1:fe:ff:9e:2f:9a:fc:ca:
         fc:6b:b7:88:db:39:0f:65:6c:2b:ca:20:6c:c2:c4:df:72:0d:
         05:db:87:ad
-----BEGIN CERTIFICATE-----
MIIGXTCCBUWgAwIBAgIUAQ0Mn0MoWE5vOkrl060AdtPDYoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk
NDk4NWU4NzMtMmM4MS00ZDk2LTgxNmUtOGY5NWU4ZTIyMjkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDcOto43V6qq68WqRd44TUfTOu4fmThZ5ifI
r3apTefNExvJBOX0dL6ozwojcpBqZJZe/rFSwonC5Fd460/nyuPfcI+1p63woo/e
+aMDzD1NrsOOju9U9Ha619ByR+nDNYzaUCzmuZczasmSz/pC3kXZrfmXnfYRaJcU
dHJI3Kiudj/JfNc1Om526VD6ziPb+NOIfSdFi0UembZyRYUtnuPoBnhgBy4+ovnS
TSHzusuSE/FQnrubkjjjJd9OdDauxqZqmseqOpkF5w/62/O8lGMvZ1Uc0tIU16Cy
PNv27YYcinWNai6+idWYvdASSjItjOY3A5pYVCToSycQ+j60KQIDAQABo4IDbzCC
A2swHQYDVR0OBBYEFDCrH/M7Vg/o/8BtINEk3G73vfZVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZGY2ZmZjZWItMzY2NC0z
NGQ4LThhOTYtMDFhYWZjNzYyOGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQFjq0AAwQF
jq1AMAwDBASOrXADBAWOrYADBASOrcAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO
AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv
cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAvfy8MIe6Vmd42brj5g9U
cMA9sTapQfguCG4wHY2nRpf5dxbIfpjrLspJ8ui6774OzRDEsXY/v7t9/9QQMQEx
XnNL1kZQov9bGcQnA493GLG/7DGq49fzcaGHGlbaXcsWcXCrtLIqi9gSWgoK6vFl
nJWE7rRqzGdJ0ruJRDRKkq/vs3HBc0lv/tfymr0U3ZUfsMILp7dhY/dJ+blAA2Bh
fR3sR4+J94BRJi6W92LSQC7dDIZpMQmMMZGDSoIdhFsQpAcQT8WxEX46XXC/xqSr
bmY0g+kkhkyyqdGErjlRAqNqbcH+/54vmvzK/Gu3iNs5D2VsK8ogbMLE33INBduH
rQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:04:51 2026 by rpki-client