Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/90ad5afb-11a5-3a7e-af84-85ae08f294f7.roa
File:                     90ad5afb-11a5-3a7e-af84-85ae08f294f7.roa (raw, json)
Hash identifier:          UsJxuhc4M8CohTsQN0vA8ReRghPhnmJ6IAlJffaZ4xw=
Subject key identifier:   FD:78:31:9D:DC:36:A3:37:89:31:37:C6:BC:CE:A7:B2:59:5C:FF:BC
Certificate issuer:       /CN=3d21f741-fd91-4158-8853-7388dab3b3e3
Certificate serial:       010D0C9F4328584F119CFAC09173F7DA79008C80
Authority key identifier: A7:AF:BF:E1:62:39:AF:97:9B:56:A5:07:BE:38:09:30:7F:F3:BE:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/90ad5afb-11a5-3a7e-af84-85ae08f294f7.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     53274
IP address blocks:        162.255.168.0/22 maxlen: 24
                          199.168.200.0/22 maxlen: 24
                          199.168.204.0/24 maxlen: 24
                          199.168.205.0/24 maxlen: 24
                          199.168.206.0/24 maxlen: 24
                          199.168.207.0/24 maxlen: 24
                          204.48.56.0/23 maxlen: 24
                          204.48.58.0/23 maxlen: 24
                          2602:ff8f::/40 maxlen: 41
                          2602:ff8f:fff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9c:fa:c0:91:73:f7:da:79:00:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d21f741-fd91-4158-8853-7388dab3b3e3
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=9fbb2386-24e4-4a29-a44a-c8c468523f34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:29:6b:3b:0a:53:88:d1:fb:39:41:38:d4:80:
                    a0:54:c7:59:1c:ca:9f:54:35:d8:e6:93:02:29:aa:
                    dd:03:9e:d3:5a:0e:ea:a8:04:78:78:53:78:20:dc:
                    11:64:ec:46:b7:cb:8d:e6:8f:58:18:30:5d:39:40:
                    4d:4c:55:a2:fe:78:30:71:c4:e7:b8:f3:44:ca:f3:
                    50:3b:77:66:78:27:d5:cb:17:92:68:68:1a:78:1d:
                    1f:3d:08:01:4b:bd:31:77:96:42:72:82:96:e0:8a:
                    fc:0f:61:b9:bd:e7:5e:ac:45:21:89:bf:c0:0f:b9:
                    f2:e5:63:f8:ac:25:63:fa:38:8d:56:72:89:6d:60:
                    d5:a8:7d:f2:62:35:2d:bd:dc:6e:3c:f0:64:4e:31:
                    16:5b:3f:0e:76:2e:cf:ea:2c:ca:23:4e:96:dd:6a:
                    a6:fd:f5:68:f9:c0:c5:27:dc:f6:10:64:bc:70:1c:
                    71:17:99:7a:a4:75:5b:03:29:9a:e6:0b:66:30:1c:
                    dd:dd:8e:6a:f2:69:58:bd:1a:e5:2c:fe:9c:b3:48:
                    1e:65:f1:5c:b2:20:90:2a:a0:bf:f0:2f:46:0f:45:
                    6d:b2:53:39:fc:14:ca:16:cf:4d:0d:9f:67:b5:88:
                    4a:81:2a:38:14:2b:da:81:ae:1d:fd:4f:3e:fb:ba:
                    df:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:78:31:9D:DC:36:A3:37:89:31:37:C6:BC:CE:A7:B2:59:5C:FF:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/90ad5afb-11a5-3a7e-af84-85ae08f294f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.crl

            X509v3 Authority Key Identifier:
                keyid:A7:AF:BF:E1:62:39:AF:97:9B:56:A5:07:BE:38:09:30:7F:F3:BE:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.255.168.0/22
                  199.168.200.0/21
                  204.48.56.0/22
                IPv6:
                  2602:ff8f::/40
                  2602:ff8f:fff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:32:4b:d6:d6:4d:3d:01:eb:9c:aa:07:ed:49:46:24:dc:af:
         34:a9:18:5c:42:f3:b4:0f:08:3d:b4:ff:dc:dd:85:2b:3d:30:
         0e:4b:46:4e:06:1f:bc:f7:69:75:24:b1:bc:cd:28:13:f1:cb:
         b6:fe:78:d5:1a:e3:f3:48:2f:c9:78:f8:5b:1b:9a:c0:34:87:
         37:01:62:fd:e8:47:23:65:5b:69:52:31:ca:9f:4f:a6:ce:1d:
         07:24:f8:77:84:64:ed:de:c5:4f:83:14:bc:7e:46:83:9a:c7:
         c8:e6:36:10:ad:12:e6:f4:e3:ed:31:49:69:79:e0:2e:05:5e:
         92:0b:78:d0:13:de:14:a1:b1:ce:69:7e:fb:97:8b:0d:1c:03:
         21:31:fb:7c:20:c4:77:7c:77:ee:25:90:0b:5a:c6:a1:d5:a4:
         2f:05:f3:f3:40:a8:28:3c:f5:18:7b:e8:d2:ca:9d:cb:b8:3d:
         1c:6c:b2:3d:e4:5c:a4:1f:4e:72:96:e2:4f:2f:3c:b4:93:36:
         36:9a:c9:87:a8:66:b7:72:a5:0d:03:43:52:fb:ba:62:e4:ef:
         bf:1c:df:a9:7a:c2:31:19:1a:97:3b:81:18:03:18:ae:80:a5:
         cd:63:9f:3a:f3:a4:f6:88:cb:9c:dd:88:e1:70:a1:7e:e7:a1:
         0a:d8:d2:35
-----BEGIN CERTIFICATE-----
MIIGaDCCBVCgAwIBAgIUAQ0Mn0MoWE8RnPrAkXP32nkAjIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2QyMWY3NDEtZmQ5MS00MTU4LTg4NTMtNzM4OGRhYjNi
M2UzMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk
OWZiYjIzODYtMjRlNC00YTI5LWE0NGEtYzhjNDY4NTIzZjM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ClrOwpTiNH7OUE41ICgVMdZHMqfVDXY5pMC
KardA57TWg7qqAR4eFN4INwRZOxGt8uN5o9YGDBdOUBNTFWi/ngwccTnuPNEyvNQ
O3dmeCfVyxeSaGgaeB0fPQgBS70xd5ZCcoKW4Ir8D2G5vederEUhib/AD7ny5WP4
rCVj+jiNVnKJbWDVqH3yYjUtvdxuPPBkTjEWWz8Odi7P6izKI06W3Wqm/fVo+cDF
J9z2EGS8cBxxF5l6pHVbAyma5gtmMBzd3Y5q8mlYvRrlLP6cs0geZfFcsiCQKqC/
8C9GD0VtslM5/BTKFs9NDZ9ntYhKgSo4FCvaga4d/U8++7rfGwIDAQABo4IDejCC
A3YwHQYDVR0OBBYEFP14MZ3cNqM3iTE3xrzOp7JZXP+8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zZDIx
Zjc0MS1mZDkxLTQxNTgtODg1My03Mzg4ZGFiM2IzZTMvOTBhZDVhZmItMTFhNS0z
YTdlLWFmODQtODVhZTA4ZjI5NGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2QyMWY3NDEtZmQ5MS00MTU4LTg4
NTMtNzM4OGRhYjNiM2UzLzNkMjFmNzQxLWZkOTEtNDE1OC04ODUzLTczODhkYWIz
YjNlMy5jcmwwHwYDVR0jBBgwFoAUp6+/4WI5r5ebVqUHvjgJMH/zvhQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zZDIxZjc0MS1mZDkxLTQxNTgtODg1My03Mzg4
ZGFiM2IzZTMuY2VyMEQGCCsGAQUFBwEHAQH/BDUwMzAYBAIAATASAwQCov+oAwQD
x6jIAwQCzDA4MBcEAgACMBEDBgAmAv+PAAMHACYC/48P/zBUBgNVHSABAf8ESjBI
MEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0
L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBfMkvW
1k09AeucqgftSUYk3K80qRhcQvO0Dwg9tP/c3YUrPTAOS0ZOBh+892l1JLG8zSgT
8cu2/njVGuPzSC/JePhbG5rANIc3AWL96EcjZVtpUjHKn0+mzh0HJPh3hGTt3sVP
gxS8fkaDmsfI5jYQrRLm9OPtMUlpeeAuBV6SC3jQE94UobHOaX77l4sNHAMhMft8
IMR3fHfuJZALWsah1aQvBfPzQKgoPPUYe+jSyp3LuD0cbLI95FykH05yluJPLzy0
kzY2msmHqGa3cqUNA0NS+7pi5O+/HN+pesIxGRqXO4EYAxiugKXNY58686T2iMuc
3YjhcKF+56EK2NI1
-----END CERTIFICATE-----
Generated at Tue Oct 6 01:18:20 2026 by rpki-client