Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2fdc8275-d744-466c-9984-83e7ed5d5ed5/01708dac-e47e-3f77-ba8c-04a9d8493ee7.roa
File:                     01708dac-e47e-3f77-ba8c-04a9d8493ee7.roa (raw, json)
Hash identifier:          wDM8b6N6cslWR4A+GqX35OOmEGB2K6f3PH8B9sM8U3w=
Subject key identifier:   1F:0B:AE:E6:70:0E:11:61:0F:3F:32:9F:36:00:F5:EA:E9:15:2F:D1
Certificate issuer:       /CN=2fdc8275-d744-466c-9984-83e7ed5d5ed5
Certificate serial:       010D0C9F4328584E90BA4798BAA4A7671C24B640
Authority key identifier: 4A:50:3B:DE:3B:94:38:B1:17:BE:F7:0C:C3:25:62:93:D3:32:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2fdc8275-d744-466c-9984-83e7ed5d5ed5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2fdc8275-d744-466c-9984-83e7ed5d5ed5/01708dac-e47e-3f77-ba8c-04a9d8493ee7.roa
Signing time:             Mon 20 Jul 2026 21:00:11 +0000
ROA not before:           Mon 20 Jul 2026 21:00:11 +0000
ROA not after:            Sun 18 Oct 2026 21:00:11 +0000
asID:                     906
IP address blocks:        64.186.224.0/20 maxlen: 24
                          64.186.240.0/20 maxlen: 24
                          69.63.192.0/20 maxlen: 24
                          69.63.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2fdc8275-d744-466c-9984-83e7ed5d5ed5/2fdc8275-d744-466c-9984-83e7ed5d5ed5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2fdc8275-d744-466c-9984-83e7ed5d5ed5/2fdc8275-d744-466c-9984-83e7ed5d5ed5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2fdc8275-d744-466c-9984-83e7ed5d5ed5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:90:ba:47:98:ba:a4:a7:67:1c:24:b6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fdc8275-d744-466c-9984-83e7ed5d5ed5
        Validity
            Not Before: Jul 20 21:00:11 2026 GMT
            Not After : Oct 18 21:00:11 2026 GMT
        Subject: CN=0fe60035-4df4-4fce-a5b1-b3d6d480f582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:cf:5a:2c:c9:e5:e0:ac:e6:f5:26:c5:e5:38:
                    f3:4a:8e:e7:a3:83:db:76:dd:cf:43:66:3b:e8:6c:
                    1a:d1:59:95:30:9e:0d:93:1c:d5:55:e6:63:5a:ae:
                    8b:20:89:1d:fc:22:eb:80:ac:09:ec:21:60:4e:62:
                    83:a6:ed:fc:b7:e2:5d:f7:ce:ed:84:d1:f2:a9:2d:
                    21:81:b8:37:a7:57:4d:fd:ed:4e:11:6a:b7:28:d8:
                    d2:1b:fb:5d:07:a6:14:b7:6d:f8:8a:e3:f8:c8:51:
                    dc:11:6a:72:3c:62:71:b9:af:d5:41:91:19:9d:1d:
                    12:2d:fa:0d:e4:f0:38:46:10:82:10:85:b9:27:f9:
                    a5:3c:f4:2e:ef:d0:6b:6e:fe:db:11:50:a2:28:ab:
                    f7:3c:93:4a:cc:f6:48:51:85:6e:40:16:3b:18:55:
                    b7:76:dd:aa:a8:ba:3c:75:36:79:19:f4:4a:a5:87:
                    72:dc:7c:10:ae:56:07:c7:54:54:ea:a0:59:eb:70:
                    bd:a9:73:61:0a:1a:8f:4c:43:f0:4f:c2:61:6c:2f:
                    2e:57:aa:f4:9e:da:6c:3b:95:23:4d:7a:62:bd:d1:
                    02:03:8c:b5:6d:49:68:94:e4:54:89:4e:eb:cb:9b:
                    1e:7c:1b:00:0b:12:ec:15:0c:62:a5:ae:d3:70:a6:
                    b5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:0B:AE:E6:70:0E:11:61:0F:3F:32:9F:36:00:F5:EA:E9:15:2F:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2fdc8275-d744-466c-9984-83e7ed5d5ed5/01708dac-e47e-3f77-ba8c-04a9d8493ee7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2fdc8275-d744-466c-9984-83e7ed5d5ed5/2fdc8275-d744-466c-9984-83e7ed5d5ed5.crl

            X509v3 Authority Key Identifier:
                keyid:4A:50:3B:DE:3B:94:38:B1:17:BE:F7:0C:C3:25:62:93:D3:32:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2fdc8275-d744-466c-9984-83e7ed5d5ed5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.186.224.0/19
                  69.63.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:f7:aa:69:5d:c1:54:28:69:48:c0:7b:0c:9c:11:c2:0e:c6:
         37:16:f3:2d:7e:08:cb:02:9c:70:c7:c3:0d:bb:e1:b3:26:ce:
         29:59:bb:0a:dc:49:b9:87:f8:1f:2e:c7:3c:1e:73:c5:ef:93:
         1c:8a:06:65:e4:6c:16:dd:d7:d2:23:92:26:dc:f5:1b:a9:74:
         30:18:5b:8a:af:12:db:0a:9d:6b:03:97:47:e5:6a:6e:aa:31:
         6e:db:9d:30:a9:73:55:29:e8:6a:b3:ab:a3:d7:0e:2e:d8:9d:
         e8:d9:46:77:82:1f:d7:a8:cf:a1:a3:e3:a7:62:c9:73:54:e4:
         21:50:49:19:db:2d:d3:ef:ba:dd:f2:46:0f:1e:50:c1:9b:a5:
         b5:72:d5:ad:e2:ba:46:1a:b4:28:10:af:22:db:51:bd:ce:03:
         17:e1:88:da:61:ae:70:d4:16:d5:2b:91:5c:fe:b1:2a:58:81:
         30:01:8a:27:6a:67:77:1b:b3:5e:eb:0e:eb:89:28:23:00:8a:
         a1:02:49:cc:dc:ff:ee:fa:1c:02:fe:59:bb:2b:ce:cb:49:fa:
         e8:e4:3f:77:c2:55:af:26:11:22:bd:c4:c8:91:2b:ef:74:c0:
         08:99:46:fe:bf:4c:13:bc:8f:7d:81:c0:fb:16:42:e9:35:44:
         04:53:02:a2
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE6QukeYuqSnZxwktkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmZkYzgyNzUtZDc0NC00NjZjLTk5ODQtODNlN2VkNWQ1
ZWQ1MB4XDTI2MDcyMDIxMDAxMVoXDTI2MTAxODIxMDAxMVowLzEtMCsGA1UEAxMk
MGZlNjAwMzUtNGRmNC00ZmNlLWE1YjEtYjNkNmQ0ODBmNTgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApc9aLMnl4Kzm9SbF5TjzSo7no4Pbdt3PQ2Y7
6Gwa0VmVMJ4NkxzVVeZjWq6LIIkd/CLrgKwJ7CFgTmKDpu38t+Jd987thNHyqS0h
gbg3p1dN/e1OEWq3KNjSG/tdB6YUt234iuP4yFHcEWpyPGJxua/VQZEZnR0SLfoN
5PA4RhCCEIW5J/mlPPQu79Brbv7bEVCiKKv3PJNKzPZIUYVuQBY7GFW3dt2qqLo8
dTZ5GfRKpYdy3HwQrlYHx1RU6qBZ63C9qXNhChqPTEPwT8JhbC8uV6r0ntpsO5Uj
TXpivdECA4y1bUlolORUiU7ry5sefBsACxLsFQxipa7TcKa1nQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFB8LruZwDhFhDz8ynzYA9erpFS/RMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8yZmRj
ODI3NS1kNzQ0LTQ2NmMtOTk4NC04M2U3ZWQ1ZDVlZDUvMDE3MDhkYWMtZTQ3ZS0z
Zjc3LWJhOGMtMDRhOWQ4NDkzZWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMmZkYzgyNzUtZDc0NC00NjZjLTk5
ODQtODNlN2VkNWQ1ZWQ1LzJmZGM4Mjc1LWQ3NDQtNDY2Yy05OTg0LTgzZTdlZDVk
NWVkNS5jcmwwHwYDVR0jBBgwFoAUSlA73juUOLEXvvcMwyVik9Myv54wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi8yZmRjODI3NS1kNzQ0LTQ2NmMtOTk4NC04M2U3
ZWQ1ZDVlZDUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFQLrgAwQF
RT/AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAFL3qmldwVQoaUjAewycEcIOxjcW8y1+CMsCnHDHww274bMm
zilZuwrcSbmH+B8uxzwec8XvkxyKBmXkbBbd19Ijkibc9RupdDAYW4qvEtsKnWsD
l0flam6qMW7bnTCpc1Up6Gqzq6PXDi7YnejZRneCH9eoz6Gj46diyXNU5CFQSRnb
LdPvut3yRg8eUMGbpbVy1a3iukYatCgQryLbUb3OAxfhiNphrnDUFtUrkVz+sSpY
gTABiidqZ3cbs17rDuuJKCMAiqECSczc/+76HAL+WbsrzstJ+ujkP3fCVa8mESK9
xMiRK+90wAiZRv6/TBO8j32BwPsWQuk1RARTAqI=
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:02:34 2026 by rpki-client