Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/030f5ddd-29fc-3a0d-9fbb-b2ad17427418.roa
File:                     030f5ddd-29fc-3a0d-9fbb-b2ad17427418.roa (raw, json)
Hash identifier:          KQNOcPqcCTg2EbUvn4Qht/f3XzwXrkG1kdkZGHcMfaw=
Subject key identifier:   04:12:35:09:17:9F:35:9F:A8:31:A8:C6:CF:D6:49:E0:70:42:5F:2A
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F19FCEAD0D798E9BC2B335580
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/030f5ddd-29fc-3a0d-9fbb-b2ad17427418.roa
Signing time:             Tue 08 Sep 2026 01:00:12 +0000
ROA not before:           Tue 08 Sep 2026 01:00:12 +0000
ROA not after:            Mon 07 Dec 2026 02:00:12 +0000
asID:                     142622
IP address blocks:        64.145.13.0/24 maxlen: 24
                          66.80.1.0/24 maxlen: 24
                          66.80.3.0/24 maxlen: 24
                          67.102.177.0/24 maxlen: 24
                          67.102.181.0/24 maxlen: 24
                          207.145.6.0/24 maxlen: 24
                          216.133.156.0/24 maxlen: 24
                          216.254.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:19:fc:ea:d0:d7:98:e9:bc:2b:33:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep  8 01:00:12 2026 GMT
            Not After : Dec  7 02:00:12 2026 GMT
        Subject: CN=f87b3e00-bc59-4aa2-aa2b-3584dbd36e16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:2d:41:ef:3e:1b:eb:26:03:1a:90:19:ad:8c:
                    dc:37:d3:42:45:10:91:f1:4d:86:b6:da:64:f4:d3:
                    fc:d7:af:d5:a6:4a:52:5d:66:66:04:09:0b:de:61:
                    33:96:cc:56:72:15:46:82:bb:00:c6:26:52:5d:53:
                    2a:aa:f2:54:f5:84:72:15:3e:8f:9d:7b:94:2e:df:
                    89:31:e3:1e:75:a4:7f:08:ed:7b:12:6f:59:92:15:
                    c2:ed:e2:e7:75:30:7e:51:d1:09:dc:41:3d:f6:7e:
                    6a:b6:bf:ba:e5:02:b7:a4:51:1f:ca:4f:95:29:90:
                    3f:5f:83:39:49:c2:83:22:52:7e:0e:62:92:ee:9e:
                    f8:dc:99:ba:2b:3e:07:ab:43:d0:d9:16:56:c3:eb:
                    2a:d9:e3:9c:84:f3:00:5f:ca:32:d0:7b:af:7c:ac:
                    2d:f2:ce:c6:80:44:e5:39:dc:da:5d:57:55:c2:83:
                    e8:4e:56:bc:e1:00:82:f2:0c:66:3e:f0:1a:59:af:
                    ee:0d:e4:53:0a:18:8b:a6:a0:c4:23:36:0c:47:69:
                    9d:79:61:b4:2e:bf:84:9e:ba:6e:3a:9c:ef:18:7d:
                    58:be:89:6d:24:a2:fe:85:a0:e9:b6:de:e5:75:dc:
                    70:c9:93:f7:6f:10:9e:20:c9:81:f4:09:1a:54:b1:
                    72:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:12:35:09:17:9F:35:9F:A8:31:A8:C6:CF:D6:49:E0:70:42:5F:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/030f5ddd-29fc-3a0d-9fbb-b2ad17427418.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.145.13.0/24
                  66.80.1.0/24
                  66.80.3.0/24
                  67.102.177.0/24
                  67.102.181.0/24
                  207.145.6.0/24
                  216.133.156.0/24
                  216.254.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:d8:9e:f9:82:98:25:86:bf:7f:51:61:47:1a:e5:0a:8f:a1:
         4a:84:c1:8a:0e:68:30:47:56:3c:32:4d:cf:70:21:67:29:24:
         61:1d:ab:03:71:9a:64:a2:a7:7f:99:b1:7f:49:0b:dc:4a:39:
         48:44:a0:3e:15:1a:fa:24:3b:85:98:ed:c7:a6:38:66:66:e8:
         69:2d:82:32:6c:db:f6:20:5c:42:db:2b:1f:3e:bd:cd:a5:74:
         46:38:a9:74:b0:88:18:46:6b:47:47:63:0b:ca:c8:9d:a6:ad:
         cd:29:92:b2:08:d2:2d:6f:c8:56:83:24:8a:8c:d7:34:f9:21:
         f1:a6:96:9e:c9:f0:20:91:28:04:9d:b7:7d:e6:fc:3a:df:6f:
         c8:c0:78:a2:ca:72:30:09:b0:63:02:b5:40:8d:22:f5:f7:d5:
         1b:bd:c2:6c:69:89:c9:ed:e4:a8:f4:87:8c:29:69:cc:4d:aa:
         40:04:8b:12:fe:6b:fa:27:a6:15:d1:3f:a5:79:99:59:04:39:
         2d:e0:10:3f:0e:ca:e3:c1:8a:b3:fd:76:7d:cc:52:d2:6c:cf:
         ec:c6:97:ba:43:1a:78:84:64:eb:ab:15:4d:b7:95:46:d5:b3:
         72:15:f8:8c:15:8c:09:06:a7:a9:3a:e1:df:82:db:77:73:7b:
         19:7d:4b:e8
-----BEGIN CERTIFICATE-----
MIIGbTCCBVWgAwIBAgIUAQ0Mn0MoWE8Z/OrQ15jpvCszVYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDkwODAxMDAxMloXDTI2MTIwNzAyMDAxMlowLzEtMCsGA1UEAxMk
Zjg3YjNlMDAtYmM1OS00YWEyLWFhMmItMzU4NGRiZDM2ZTE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4S1B7z4b6yYDGpAZrYzcN9NCRRCR8U2Gttpk
9NP816/VpkpSXWZmBAkL3mEzlsxWchVGgrsAxiZSXVMqqvJU9YRyFT6PnXuULt+J
MeMedaR/CO17Em9ZkhXC7eLndTB+UdEJ3EE99n5qtr+65QK3pFEfyk+VKZA/X4M5
ScKDIlJ+DmKS7p743Jm6Kz4Hq0PQ2RZWw+sq2eOchPMAX8oy0HuvfKwt8s7GgETl
OdzaXVdVwoPoTla84QCC8gxmPvAaWa/uDeRTChiLpqDEIzYMR2mdeWG0Lr+Enrpu
OpzvGH1YvoltJKL+haDptt7lddxwyZP3bxCeIMmB9AkaVLFysQIDAQABo4IDfzCC
A3swHQYDVR0OBBYEFAQSNQkXnzWfqDGoxs/WSeBwQl8qMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMDMwZjVkZGQtMjlmYy0z
YTBkLTlmYmItYjJhZDE3NDI3NDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAQJENAwQA
QlABAwQAQlADAwQAQ2axAwQAQ2a1AwQAz5EGAwQA2IWcAwQA2P4CMFQGA1UdIAEB
/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp
bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB
AJHYnvmCmCWGv39RYUca5QqPoUqEwYoOaDBHVjwyTc9wIWcpJGEdqwNxmmSip3+Z
sX9JC9xKOUhEoD4VGvokO4WY7cemOGZm6GktgjJs2/YgXELbKx8+vc2ldEY4qXSw
iBhGa0dHYwvKyJ2mrc0pkrII0i1vyFaDJIqM1zT5IfGmlp7J8CCRKASdt33m/Drf
b8jAeKLKcjAJsGMCtUCNIvX31Ru9wmxpicnt5Kj0h4wpacxNqkAEixL+a/onphXR
P6V5mVkEOS3gED8OyuPBirP9dn3MUtJsz+zGl7pDGniEZOurFU23lUbVs3IV+IwV
jAkGp6k64d+C23dzexl9S+g=
-----END CERTIFICATE-----
Generated at Sun Sep 27 06:34:17 2026 by rpki-client