Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/563e4146-93d5-346d-b331-7b58a7727771.roa
File:                     563e4146-93d5-346d-b331-7b58a7727771.roa (raw, json)
Hash identifier:          rYCRWuWAsTfD5ZZgrvV2KSBerEH9eR8SCxJKK7rSIj8=
Subject key identifier:   12:19:FA:A5:1C:B3:5A:36:43:29:9E:DF:4C:D9:02:F1:B2:F7:28:E7
Certificate issuer:       /CN=719038d9-6923-4e29-8b36-f45b06ce12f8
Certificate serial:       010D0C9F4328584D4D5A630C97FCF6AF3CFD7E80
Authority key identifier: 77:B0:ED:77:A7:4B:CF:DD:67:4A:BA:E9:67:66:F8:1D:2E:6F:6D:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/563e4146-93d5-346d-b331-7b58a7727771.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     393238
IP address blocks:        162.253.44.0/22 maxlen: 24
                          192.154.14.0/23 maxlen: 24
                          192.199.180.0/22 maxlen: 24
                          192.236.0.0/24 maxlen: 24
                          199.10.4.0/22 maxlen: 24
                          199.188.64.0/22 maxlen: 24
                          199.189.228.0/22 maxlen: 24
                          205.143.47.0/24 maxlen: 24
                          207.191.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/719038d9-6923-4e29-8b36-f45b06ce12f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/719038d9-6923-4e29-8b36-f45b06ce12f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:63:0c:97:fc:f6:af:3c:fd:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=719038d9-6923-4e29-8b36-f45b06ce12f8
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=d4319e71-f3ed-41ba-99ae-e8cedc25c7f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:15:f5:43:73:e9:d7:6f:53:44:08:ce:bb:f4:
                    f9:b9:a5:f3:f9:a6:c4:30:e9:10:d1:ab:6e:a8:93:
                    32:c3:5b:e1:89:57:bf:9c:82:11:1a:c1:d4:64:81:
                    99:14:9f:b6:4b:d1:8f:74:2f:0c:18:0a:8c:96:cf:
                    b5:db:1c:c2:3a:23:75:ad:36:c4:13:30:c0:d1:34:
                    85:ed:53:f3:63:22:0e:a0:cc:a2:fb:f5:45:aa:2a:
                    6a:af:7a:9a:5f:ca:4b:db:87:ac:9f:a1:f0:d8:04:
                    0a:64:58:b9:16:5b:03:ba:ee:f4:38:d7:07:33:13:
                    f0:c8:f8:ea:49:a0:d4:74:ac:02:d6:84:bb:5b:0f:
                    97:ea:59:e4:47:4b:35:70:f6:30:d1:37:7a:45:f6:
                    c9:f9:67:71:8f:c5:34:92:23:64:08:bf:d5:42:d8:
                    0f:cc:9b:1c:2e:be:c7:79:7e:cd:b4:89:ef:0f:b9:
                    b9:d2:ba:99:14:17:0e:bb:4f:cf:ce:47:e1:38:d4:
                    2e:12:a5:8f:76:93:88:54:d2:ed:30:2e:a7:33:01:
                    f6:52:17:7f:ad:7e:7f:d5:38:a7:60:1e:52:10:a0:
                    65:00:21:a5:4b:2d:98:8e:21:da:8e:bf:b7:28:38:
                    23:e8:1c:2f:61:09:22:23:a4:46:8b:f9:15:d4:3d:
                    f5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:19:FA:A5:1C:B3:5A:36:43:29:9E:DF:4C:D9:02:F1:B2:F7:28:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/563e4146-93d5-346d-b331-7b58a7727771.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/719038d9-6923-4e29-8b36-f45b06ce12f8.crl

            X509v3 Authority Key Identifier:
                keyid:77:B0:ED:77:A7:4B:CF:DD:67:4A:BA:E9:67:66:F8:1D:2E:6F:6D:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.253.44.0/22
                  192.154.14.0/23
                  192.199.180.0/22
                  192.236.0.0/24
                  199.10.4.0/22
                  199.188.64.0/22
                  199.189.228.0/22
                  205.143.47.0/24
                  207.191.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:2a:99:37:e2:d4:48:54:ff:46:3d:b3:4a:fa:52:0e:ae:c7:
         7a:c2:63:f0:cc:48:23:13:5d:fd:42:15:62:fe:3e:1a:e8:47:
         79:3d:5d:7a:25:dd:0f:00:17:d7:c0:6e:67:a2:b3:2d:4f:0a:
         49:37:56:a3:2c:fa:3e:19:26:90:b4:86:d9:04:21:b6:4c:f6:
         ea:82:ff:92:a1:d8:94:32:1f:07:15:74:db:5b:98:20:73:b8:
         cf:55:19:55:51:7d:f8:7b:08:44:a3:14:34:d7:31:ec:ea:1c:
         16:de:22:37:c5:cf:6e:3d:79:71:e0:38:2d:3c:5c:0a:e2:5d:
         77:9b:d4:de:21:e0:2f:a6:35:31:c9:df:89:b0:ec:6e:72:e6:
         0d:65:b5:37:83:f5:1e:95:86:d1:5d:4e:b7:68:42:4f:b1:7d:
         8c:7c:b8:34:03:f5:e6:8c:77:20:6d:96:e7:9c:ea:1e:ad:4a:
         0a:d5:c1:d0:f0:02:cf:2e:01:c2:57:de:97:80:b4:77:6a:4d:
         d3:d3:69:c2:d4:8f:7e:62:39:cb:a5:1f:46:dc:df:d0:07:e9:
         c4:71:be:cf:e3:2d:01:59:ed:09:28:3b:ad:1e:b6:23:89:f8:
         72:c8:54:e0:85:c6:e8:ac:31:7f:c8:ca:51:c6:5b:41:dd:ef:
         5b:68:e9:17
-----BEGIN CERTIFICATE-----
MIIGczCCBVugAwIBAgIUAQ0Mn0MoWE1NWmMMl/z2rzz9foAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzE5MDM4ZDktNjkyMy00ZTI5LThiMzYtZjQ1YjA2Y2Ux
MmY4MB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk
ZDQzMTllNzEtZjNlZC00MWJhLTk5YWUtZThjZWRjMjVjN2Y5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthX1Q3Pp129TRAjOu/T5uaXz+abEMOkQ0atu
qJMyw1vhiVe/nIIRGsHUZIGZFJ+2S9GPdC8MGAqMls+12xzCOiN1rTbEEzDA0TSF
7VPzYyIOoMyi+/VFqipqr3qaX8pL24esn6Hw2AQKZFi5FlsDuu70ONcHMxPwyPjq
SaDUdKwC1oS7Ww+X6lnkR0s1cPYw0Td6RfbJ+Wdxj8U0kiNkCL/VQtgPzJscLr7H
eX7NtInvD7m50rqZFBcOu0/PzkfhONQuEqWPdpOIVNLtMC6nMwH2Uhd/rX5/1Tin
YB5SEKBlACGlSy2YjiHajr+3KDgj6BwvYQkiI6RGi/kV1D316wIDAQABo4IDhTCC
A4EwHQYDVR0OBBYEFBIZ+qUcs1o2Qyme30zZAvGy9yjnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83MTkw
MzhkOS02OTIzLTRlMjktOGIzNi1mNDViMDZjZTEyZjgvNTYzZTQxNDYtOTNkNS0z
NDZkLWIzMzEtN2I1OGE3NzI3NzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNzE5MDM4ZDktNjkyMy00ZTI5LThi
MzYtZjQ1YjA2Y2UxMmY4LzcxOTAzOGQ5LTY5MjMtNGUyOS04YjM2LWY0NWIwNmNl
MTJmOC5jcmwwHwYDVR0jBBgwFoAUd7Dtd6dLz91nSrrpZ2b4HS5vbQMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83MTkwMzhkOS02OTIzLTRlMjktOGIzNi1mNDVi
MDZjZTEyZjguY2VyME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQCov0sAwQB
wJoOAwQCwMe0AwQAwOwAAwQCxwoEAwQCx7xAAwQCx73kAwQAzY8vAwQFz7/AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADwqmTfi1EhU/0Y9s0r6Ug6ux3rCY/DMSCMTXf1CFWL+PhroR3k9XXol
3Q8AF9fAbmeisy1PCkk3VqMs+j4ZJpC0htkEIbZM9uqC/5Kh2JQyHwcVdNtbmCBz
uM9VGVVRffh7CESjFDTXMezqHBbeIjfFz249eXHgOC08XAriXXeb1N4h4C+mNTHJ
34mw7G5y5g1ltTeD9R6VhtFdTrdoQk+xfYx8uDQD9eaMdyBtluec6h6tSgrVwdDw
As8uAcJX3peAtHdqTdPTacLUj35iOculH0bc39AH6cRxvs/jLQFZ7QkoO60etiOJ
+HLIVOCFxuisMX/IylHGW0Hd71to6Rc=
-----END CERTIFICATE-----
Generated at Fri Mar 27 08:13:01 2026 by rpki-client