Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/56674e3d-c474-35ab-b193-4e0eee208b57.roa
File:                     56674e3d-c474-35ab-b193-4e0eee208b57.roa (raw, json)
Hash identifier:          MBHE0ApkurVoI9c2BgCttXin3Lt96FXJZowS6edFPz4=
Subject key identifier:   50:33:30:5A:C3:A2:A0:9B:20:8C:B4:20:74:CC:68:42:95:03:05:72
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584EEEB779FCD5C813A143CBFC00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/56674e3d-c474-35ab-b193-4e0eee208b57.roa
Signing time:             Sun 23 Aug 2026 13:00:12 +0000
ROA not before:           Sun 23 Aug 2026 13:00:12 +0000
ROA not after:            Sat 21 Nov 2026 14:00:12 +0000
asID:                     3320
IP address blocks:        64.8.232.0/23 maxlen: 23
                          64.105.212.0/23 maxlen: 23
                          64.105.214.0/23 maxlen: 23
                          64.105.216.0/23 maxlen: 23
                          64.105.220.0/23 maxlen: 23
                          64.105.222.0/23 maxlen: 23
                          64.105.234.0/23 maxlen: 23
                          64.105.236.0/23 maxlen: 23
                          64.139.32.0/23 maxlen: 23
                          64.139.34.0/23 maxlen: 23
                          209.166.0.0/23 maxlen: 23
                          209.166.2.0/23 maxlen: 23
                          209.166.6.0/23 maxlen: 23
                          209.166.10.0/23 maxlen: 23
                          209.166.16.0/23 maxlen: 23
                          209.166.18.0/23 maxlen: 23
                          209.166.20.0/23 maxlen: 23
                          209.166.22.0/23 maxlen: 23
                          209.166.24.0/23 maxlen: 23
                          209.166.26.0/23 maxlen: 23
                          209.166.28.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ee:b7:79:fc:d5:c8:13:a1:43:cb:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Aug 23 13:00:12 2026 GMT
            Not After : Nov 21 14:00:12 2026 GMT
        Subject: CN=0a6de01e-f862-479a-bf0d-73118314ff58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:52:9e:15:13:fc:71:90:35:30:bc:66:f0:57:
                    cb:bd:17:c5:b0:05:33:fa:6b:64:99:26:45:e0:e0:
                    bd:65:67:db:8c:d5:e0:e5:0f:ca:65:d2:5e:4c:78:
                    ef:45:b0:31:d6:88:6a:11:76:61:85:5a:9f:ba:2a:
                    2b:a2:09:b8:0e:c5:40:47:0e:1f:27:f1:3b:a5:d5:
                    0c:6e:07:b9:a9:d3:ad:97:62:98:ef:e8:df:bf:fe:
                    02:25:0b:42:1c:e9:dc:e6:ed:3e:ad:f2:cc:0b:72:
                    2d:1a:a5:fd:15:92:bf:bd:8c:c6:aa:fd:34:53:82:
                    a9:23:fe:bf:97:0d:88:c8:7a:5b:34:60:b8:7a:3e:
                    88:ba:34:ab:5d:57:0b:03:21:70:30:15:5e:09:d2:
                    27:53:5f:71:41:fd:3d:15:0e:28:48:ed:84:da:cf:
                    d0:da:60:36:c1:eb:2e:93:f4:bd:0a:2f:a9:f2:5a:
                    30:3d:e9:bf:87:f2:7d:7c:1f:cd:81:01:6c:e1:00:
                    76:47:2e:c6:a0:21:76:56:0d:85:7d:85:ee:ef:e5:
                    be:56:be:8d:cb:51:78:d7:ad:ac:dd:bb:f0:1b:5e:
                    3c:fd:1e:d6:39:10:a1:37:cf:24:5b:92:b2:5d:69:
                    0a:d4:a5:85:33:86:d9:20:41:ff:e2:bc:22:4a:2b:
                    94:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:33:30:5A:C3:A2:A0:9B:20:8C:B4:20:74:CC:68:42:95:03:05:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/56674e3d-c474-35ab-b193-4e0eee208b57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.8.232.0/23
                  64.105.212.0-64.105.217.255
                  64.105.220.0/22
                  64.105.234.0-64.105.237.255
                  64.139.32.0/22
                  209.166.0.0/22
                  209.166.6.0/23
                  209.166.10.0/23
                  209.166.16.0-209.166.29.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:4a:b4:5c:47:1f:0f:41:71:d6:8c:9d:ed:39:7f:90:21:8a:
         cc:18:68:20:e8:70:c7:f7:c1:e9:fb:bf:b8:c1:9a:42:4f:ad:
         92:d5:e2:c1:e6:9c:b5:32:4d:cc:36:2e:a4:30:8e:16:34:22:
         96:fc:ce:48:69:ad:1f:c4:84:cb:fd:97:49:97:17:e3:0e:ea:
         d8:9b:25:5b:0b:bd:9b:6f:cd:df:8b:37:4d:d4:ff:e0:26:c7:
         94:d5:fc:aa:30:ed:20:e3:5c:96:8d:8f:1b:df:96:b5:22:1a:
         d5:b8:05:07:17:63:6a:99:1e:51:69:68:44:cb:41:84:9c:08:
         cf:27:b1:ea:27:8e:3d:99:3c:67:b2:51:4c:35:ca:7c:b4:db:
         f2:18:5d:b6:7a:53:79:1b:70:a1:95:bc:6a:85:39:06:16:1e:
         b8:19:65:6b:1c:de:37:a5:4b:89:a5:24:71:f4:09:1d:38:56:
         90:c7:52:32:12:cf:06:03:20:c1:8c:5d:51:64:f0:50:0c:97:
         ef:fc:9d:0f:61:af:e0:12:f4:1c:eb:37:eb:7d:23:f6:a8:83:
         a4:8f:67:1e:df:86:dd:07:2f:20:d6:63:9d:3d:80:40:f4:27:
         76:c2:58:b3:45:da:36:c4:cd:f0:e8:59:16:62:d9:83:23:b1:
         34:49:97:01
-----BEGIN CERTIFICATE-----
MIIGizCCBXOgAwIBAgIUAQ0Mn0MoWE7ut3n81cgToUPL/AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDgyMzEzMDAxMloXDTI2MTEyMTE0MDAxMlowLzEtMCsGA1UEAxMk
MGE2ZGUwMWUtZjg2Mi00NzlhLWJmMGQtNzMxMTgzMTRmZjU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1KeFRP8cZA1MLxm8FfLvRfFsAUz+mtkmSZF
4OC9ZWfbjNXg5Q/KZdJeTHjvRbAx1ohqEXZhhVqfuiorogm4DsVARw4fJ/E7pdUM
bge5qdOtl2KY7+jfv/4CJQtCHOnc5u0+rfLMC3ItGqX9FZK/vYzGqv00U4KpI/6/
lw2IyHpbNGC4ej6IujSrXVcLAyFwMBVeCdInU19xQf09FQ4oSO2E2s/Q2mA2wesu
k/S9Ci+p8lowPem/h/J9fB/NgQFs4QB2Ry7GoCF2Vg2FfYXu7+W+Vr6Ny1F4162s
3bvwG148/R7WORChN88kW5KyXWkK1KWFM4bZIEH/4rwiSiuUWwIDAQABo4IDnTCC
A5kwHQYDVR0OBBYEFFAzMFrDoqCbIIy0IHTMaEKVAwVyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNTY2NzRlM2QtYzQ3NC0z
NWFiLWIxOTMtNGUwZWVlMjA4YjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQBQAjoMAwD
BAJAadQDBAFAadgDBAJAadwwDAMEAUBp6gMEAUBp7AMEAkCLIAMEAtGmAAMEAdGm
BgMEAdGmCjAMAwQE0aYQAwQB0aYcMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw
OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw
a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAL5KtFxHHw9BcdaMne05f5Ah
iswYaCDocMf3wen7v7jBmkJPrZLV4sHmnLUyTcw2LqQwjhY0Ipb8zkhprR/EhMv9
l0mXF+MO6tibJVsLvZtvzd+LN03U/+Amx5TV/Kow7SDjXJaNjxvflrUiGtW4BQcX
Y2qZHlFpaETLQYScCM8nseonjj2ZPGeyUUw1yny02/IYXbZ6U3kbcKGVvGqFOQYW
HrgZZWsc3jelS4mlJHH0CR04VpDHUjISzwYDIMGMXVFk8FAMl+/8nQ9hr+AS9Bzr
N+t9I/aog6SPZx7fht0HLyDWY509gED0J3bCWLNF2jbEzfDoWRZi2YMjsTRJlwE=
-----END CERTIFICATE-----
Generated at Tue Sep 29 15:07:58 2026 by rpki-client