Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/91533126-83d7-3399-8e3a-8d1baf4226fe.roa
File:                     91533126-83d7-3399-8e3a-8d1baf4226fe.roa (raw, json)
Hash identifier:          zv/ryxQszz2xno1InPTJlGZhyKJ3lVDIOpa1ZnVJV7k=
Subject key identifier:   C3:89:FF:F1:A4:2C:76:6F:75:C0:38:F9:0B:18:09:04:ED:66:8E:61
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E31CF0D286CF6328A75D9C700
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/91533126-83d7-3399-8e3a-8d1baf4226fe.roa
Signing time:             Tue 16 Jun 2026 21:00:12 +0000
ROA not before:           Tue 16 Jun 2026 21:00:12 +0000
ROA not after:            Mon 14 Sep 2026 21:00:12 +0000
asID:                     17497
IP address blocks:        64.32.144.0/24 maxlen: 24
                          64.32.145.0/24 maxlen: 24
                          64.32.146.0/24 maxlen: 24
                          64.32.147.0/24 maxlen: 24
                          64.32.151.0/24 maxlen: 24
                          64.32.164.0/24 maxlen: 24
                          64.32.165.0/24 maxlen: 24
                          64.32.166.0/24 maxlen: 24
                          64.32.167.0/24 maxlen: 24
                          207.145.156.0/24 maxlen: 24
                          207.145.157.0/24 maxlen: 24
                          207.145.188.0/24 maxlen: 24
                          207.145.189.0/24 maxlen: 24
                          207.145.249.0/24 maxlen: 24
                          207.145.250.0/24 maxlen: 24
                          207.145.252.0/24 maxlen: 24
                          207.145.253.0/24 maxlen: 24
                          207.145.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:31:cf:0d:28:6c:f6:32:8a:75:d9:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jun 16 21:00:12 2026 GMT
            Not After : Sep 14 21:00:12 2026 GMT
        Subject: CN=6ddab07f-d420-41f4-81b6-3b4851a8c281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:53:c7:be:14:22:99:d3:f7:a1:9a:1c:62:41:
                    6f:97:3d:5b:34:b2:73:e0:82:7b:d0:48:87:34:61:
                    16:81:4a:5f:ab:88:79:fc:22:d7:87:6b:75:26:b9:
                    d0:7d:f9:a2:ad:6e:90:fb:b8:b9:1d:45:14:a6:a3:
                    c1:08:b0:7d:51:47:85:76:5b:22:b5:bf:52:b1:62:
                    cd:c1:f4:4a:44:7a:0b:18:bc:1e:bc:34:05:4c:39:
                    08:b9:95:ff:ad:f1:ad:32:31:f2:1d:56:77:59:3a:
                    a6:9f:07:65:81:41:14:54:e2:2e:36:3c:bc:4b:3e:
                    ab:74:2d:36:19:68:2c:12:08:b5:c0:62:97:81:cd:
                    47:14:a1:fb:29:8d:cf:dc:29:43:0b:1a:30:8a:08:
                    9a:c9:df:76:ac:b3:6e:c7:9d:2b:cf:55:8f:2f:c0:
                    8e:84:6f:2d:77:f0:cb:d4:16:e4:cf:8c:b7:7a:44:
                    02:7c:00:65:23:78:39:cc:40:59:4d:2f:5d:14:f6:
                    b4:38:f8:b6:ab:72:ce:6c:27:aa:cc:70:42:7e:a7:
                    93:3b:ad:0b:8d:a3:ce:15:c7:10:22:c1:c9:f5:89:
                    93:90:ae:64:80:00:ba:97:41:33:9e:db:37:20:f6:
                    2d:2a:50:ea:7c:8a:41:8a:d2:db:c6:98:cc:bb:e3:
                    a7:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:89:FF:F1:A4:2C:76:6F:75:C0:38:F9:0B:18:09:04:ED:66:8E:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/91533126-83d7-3399-8e3a-8d1baf4226fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.32.144.0/22
                  64.32.151.0/24
                  64.32.164.0/22
                  207.145.156.0/23
                  207.145.188.0/23
                  207.145.249.0-207.145.250.255
                  207.145.252.0/23
                  207.145.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:b2:c3:66:d2:93:f5:d7:08:f1:5f:5e:ac:bf:3d:e5:d0:f0:
         03:28:e2:7f:f4:8f:ec:79:08:b3:89:31:09:31:69:49:dc:b1:
         7b:e8:4c:92:a3:1b:c9:1f:3d:83:db:e3:b0:c5:f6:ab:57:5e:
         0d:ea:14:3b:13:44:04:3d:00:40:b4:b4:90:eb:c1:31:d0:72:
         ee:f1:93:fb:b5:3b:3c:2b:f8:37:7d:1e:51:97:a8:19:dd:53:
         df:fb:cb:86:43:68:a2:55:69:77:39:c7:33:5f:0f:0c:f4:5f:
         ae:df:b3:fa:4d:c6:cf:24:ca:28:81:14:c2:3d:6c:b6:58:07:
         0f:6e:37:94:02:70:fe:09:9c:12:89:d1:2b:14:80:8c:0a:b5:
         d2:7a:f7:5b:79:37:b8:f1:41:b6:8c:27:6f:17:8d:d0:50:ac:
         ce:f4:f4:b4:b3:dc:6d:4a:38:66:21:59:16:84:60:b8:a2:7c:
         93:11:3c:a8:07:00:0f:48:25:21:43:24:fb:16:85:fc:53:c9:
         f7:56:20:61:1f:61:40:f8:4a:0b:cd:3f:65:cf:3b:b5:5d:a1:
         f7:9f:f6:3e:9d:b9:7a:dc:c7:84:2b:c9:3d:72:bb:8b:d7:74:
         41:b3:af:a2:9f:2a:86:1f:7f:4a:5c:01:10:4e:c2:29:c9:e4:
         01:f6:ba:b9
-----BEGIN CERTIFICATE-----
MIIGdTCCBV2gAwIBAgIUAQ0Mn0MoWE4xzw0obPYyinXZxwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDYxNjIxMDAxMloXDTI2MDkxNDIxMDAxMlowLzEtMCsGA1UEAxMk
NmRkYWIwN2YtZDQyMC00MWY0LTgxYjYtM2I0ODUxYThjMjgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1PHvhQimdP3oZocYkFvlz1bNLJz4IJ70EiH
NGEWgUpfq4h5/CLXh2t1JrnQffmirW6Q+7i5HUUUpqPBCLB9UUeFdlsitb9SsWLN
wfRKRHoLGLwevDQFTDkIuZX/rfGtMjHyHVZ3WTqmnwdlgUEUVOIuNjy8Sz6rdC02
GWgsEgi1wGKXgc1HFKH7KY3P3ClDCxowigiayd92rLNux50rz1WPL8COhG8td/DL
1Bbkz4y3ekQCfABlI3g5zEBZTS9dFPa0OPi2q3LObCeqzHBCfqeTO60LjaPOFccQ
IsHJ9YmTkK5kgAC6l0Eznts3IPYtKlDqfIpBitLbxpjMu+OnKwIDAQABo4IDhzCC
A4MwHQYDVR0OBBYEFMOJ//GkLHZvdcA4+QsYCQTtZo5hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOTE1MzMxMjYtODNkNy0z
Mzk5LThlM2EtOGQxYmFmNDIyNmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQCQCCQAwQA
QCCXAwQCQCCkAwQBz5GcAwQBz5G8MAwDBADPkfkDBADPkfoDBAHPkfwDBADPkf8w
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAxbLDZtKT9dcI8V9erL895dDwAyjif/SP7HkIs4kxCTFpSdyxe+hM
kqMbyR89g9vjsMX2q1deDeoUOxNEBD0AQLS0kOvBMdBy7vGT+7U7PCv4N30eUZeo
Gd1T3/vLhkNoolVpdznHM18PDPRfrt+z+k3GzyTKKIEUwj1stlgHD243lAJw/gmc
EonRKxSAjAq10nr3W3k3uPFBtownbxeN0FCszvT0tLPcbUo4ZiFZFoRguKJ8kxE8
qAcAD0glIUMk+xaF/FPJ91YgYR9hQPhKC80/Zc87tV2h95/2Pp25etzHhCvJPXK7
i9d0QbOvop8qhh9/SlwBEE7CKcnkAfa6uQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:33:16 2026 by rpki-client