Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/8ccc1071-20f1-3c32-b565-0625b4e43cfb.roa
File:                     8ccc1071-20f1-3c32-b565-0625b4e43cfb.roa (raw, json)
Hash identifier:          6RkLLjFysotw0/fLjAHa3akZs3N83+btf4pLmoB6V1I=
Subject key identifier:   B9:FB:A9:F9:A2:82:32:97:CB:A8:6C:F7:75:8B:7B:F0:4E:87:FA:11
Certificate issuer:       /CN=f59a5af4-2483-44fd-8539-cacfd54edc45
Certificate serial:       010D0C9F4328584D9E50303A4F41CAB2A0FF3700
Authority key identifier: 6C:D3:07:8B:48:B6:21:C8:CB:18:75:C5:23:65:DE:84:63:AF:1B:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/8ccc1071-20f1-3c32-b565-0625b4e43cfb.roa
Signing time:             Sat 25 Apr 2026 01:00:24 +0000
ROA not before:           Sat 25 Apr 2026 01:00:24 +0000
ROA not after:            Fri 24 Jul 2026 01:00:24 +0000
asID:                     19523
IP address blocks:        64.203.64.0/24 maxlen: 24
                          64.203.65.0/24 maxlen: 24
                          64.203.66.0/24 maxlen: 24
                          64.203.67.0/24 maxlen: 24
                          64.203.68.0/24 maxlen: 24
                          64.203.69.0/24 maxlen: 24
                          64.203.72.0/24 maxlen: 24
                          64.203.73.0/24 maxlen: 24
                          64.203.74.0/24 maxlen: 24
                          64.203.76.0/24 maxlen: 24
                          64.203.77.0/24 maxlen: 24
                          64.203.78.0/24 maxlen: 24
                          64.203.79.0/24 maxlen: 24
                          64.203.80.0/24 maxlen: 24
                          64.203.81.0/24 maxlen: 24
                          64.203.82.0/24 maxlen: 24
                          64.203.83.0/24 maxlen: 24
                          64.203.84.0/24 maxlen: 24
                          64.203.85.0/24 maxlen: 24
                          64.203.86.0/24 maxlen: 24
                          64.203.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/f59a5af4-2483-44fd-8539-cacfd54edc45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/f59a5af4-2483-44fd-8539-cacfd54edc45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9e:50:30:3a:4f:41:ca:b2:a0:ff:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f59a5af4-2483-44fd-8539-cacfd54edc45
        Validity
            Not Before: Apr 25 01:00:24 2026 GMT
            Not After : Jul 24 01:00:24 2026 GMT
        Subject: CN=0a32aab5-391e-456e-987d-aa9fcce9ade1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f9:ad:66:aa:fc:78:06:b9:55:6c:74:dd:ce:
                    52:44:d2:c0:74:b8:b6:b7:fd:9f:e9:30:bd:b5:24:
                    6d:18:8e:85:5f:f9:dc:12:61:cc:10:5d:7d:b3:18:
                    79:18:ac:1e:09:8c:5c:e2:cd:1b:bb:fd:3e:67:7f:
                    cc:ab:b0:59:9f:63:78:64:a1:b3:9b:5e:b6:b0:93:
                    36:35:7f:99:da:31:a1:d7:9c:de:0d:f6:3d:cb:c7:
                    2e:74:9f:21:4e:e2:29:88:29:7a:9e:bb:cc:16:3e:
                    2c:86:ad:7c:f8:1a:c2:5d:4f:39:b4:bc:ae:a4:07:
                    e8:bd:ed:ce:db:ab:67:7e:32:60:63:34:fe:60:23:
                    d9:48:44:e5:0d:94:ca:8f:60:15:18:34:40:c8:01:
                    15:53:7d:d6:12:49:99:4c:56:8c:0b:cd:5b:72:80:
                    19:e9:cb:54:03:16:d5:9f:f7:5f:65:16:22:55:fe:
                    88:71:b5:7b:d4:15:12:cc:12:71:55:0b:bf:da:df:
                    e9:01:19:36:61:34:ff:f3:2d:cf:ee:0e:d8:84:ce:
                    b6:08:70:ed:17:77:9c:47:93:ce:fc:d8:7d:8e:28:
                    f2:17:af:ce:3a:70:2d:32:27:9c:ff:1b:43:2f:59:
                    57:c3:a3:3d:7c:0b:12:3b:7e:5d:29:48:4c:3a:9a:
                    fb:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:FB:A9:F9:A2:82:32:97:CB:A8:6C:F7:75:8B:7B:F0:4E:87:FA:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/8ccc1071-20f1-3c32-b565-0625b4e43cfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/f59a5af4-2483-44fd-8539-cacfd54edc45.crl

            X509v3 Authority Key Identifier:
                keyid:6C:D3:07:8B:48:B6:21:C8:CB:18:75:C5:23:65:DE:84:63:AF:1B:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.203.64.0-64.203.69.255
                  64.203.72.0-64.203.74.255
                  64.203.76.0-64.203.87.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:19:48:ef:d5:d5:2f:58:10:ab:82:36:40:7e:15:f1:40:75:
         d0:ef:20:a8:64:f3:78:69:80:36:30:0d:00:29:66:21:72:70:
         59:5f:ce:a4:93:c3:ec:04:c2:da:82:20:55:03:be:5c:b0:0b:
         a6:b6:33:3d:18:45:be:94:7b:0c:30:cb:48:d6:65:76:47:12:
         67:86:1a:b6:92:a7:c7:a1:5c:4a:3e:58:36:fe:b5:7c:28:db:
         fc:55:ce:d6:a3:23:0e:9f:28:89:69:56:ae:ec:b9:07:4a:58:
         63:ea:4d:e6:74:3f:a5:eb:84:79:fd:bb:75:22:43:e9:3b:15:
         f1:ac:f3:25:01:fa:26:d2:7a:5d:ff:1c:2f:a6:25:92:1a:1e:
         da:da:21:98:4b:39:da:c4:ea:8d:55:e9:7a:49:14:ef:5d:fa:
         7b:8c:37:3f:21:72:f5:f4:09:f6:27:0e:8d:06:09:02:d8:02:
         21:9d:6c:20:85:ab:45:05:61:72:72:37:57:96:b6:ac:19:a7:
         01:2b:ac:78:03:ae:0c:0f:b4:a0:4b:23:df:aa:70:05:cb:8e:
         aa:2a:5f:8a:c1:f6:4e:10:ba:d6:63:bf:69:5e:f4:c3:92:12:
         fd:d7:61:39:7d:3f:ed:37:11:fb:81:98:53:06:de:a7:b3:5c:
         72:8d:05:43
-----BEGIN CERTIFICATE-----
MIIGZzCCBU+gAwIBAgIUAQ0Mn0MoWE2eUDA6T0HKsqD/NwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjU5YTVhZjQtMjQ4My00NGZkLTg1MzktY2FjZmQ1NGVk
YzQ1MB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk
MGEzMmFhYjUtMzkxZS00NTZlLTk4N2QtYWE5ZmNjZTlhZGUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPmtZqr8eAa5VWx03c5SRNLAdLi2t/2f6TC9
tSRtGI6FX/ncEmHMEF19sxh5GKweCYxc4s0bu/0+Z3/Mq7BZn2N4ZKGzm162sJM2
NX+Z2jGh15zeDfY9y8cudJ8hTuIpiCl6nrvMFj4shq18+BrCXU85tLyupAfove3O
26tnfjJgYzT+YCPZSETlDZTKj2AVGDRAyAEVU33WEkmZTFaMC81bcoAZ6ctUAxbV
n/dfZRYiVf6IcbV71BUSzBJxVQu/2t/pARk2YTT/8y3P7g7YhM62CHDtF3ecR5PO
/Nh9jijyF6/OOnAtMiec/xtDL1lXw6M9fAsSO35dKUhMOpr7dwIDAQABo4IDeTCC
A3UwHQYDVR0OBBYEFLn7qfmigjKXy6hs93WLe/BOh/oRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9mNTlh
NWFmNC0yNDgzLTQ0ZmQtODUzOS1jYWNmZDU0ZWRjNDUvOGNjYzEwNzEtMjBmMS0z
YzMyLWI1NjUtMDYyNWI0ZTQzY2ZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZjU5YTVhZjQtMjQ4My00NGZkLTg1
MzktY2FjZmQ1NGVkYzQ1L2Y1OWE1YWY0LTI0ODMtNDRmZC04NTM5LWNhY2ZkNTRl
ZGM0NS5jcmwwHwYDVR0jBBgwFoAUbNMHi0i2IcjLGHXFI2XehGOvG78wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS9mNTlhNWFmNC0yNDgzLTQ0ZmQtODUzOS1jYWNm
ZDU0ZWRjNDUuY2VyMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqMAwDBAZAy0AD
BAFAy0QwDAMEA0DLSAMEAEDLSjAMAwQCQMtMAwQDQMtQMFQGA1UdIAEB/wRKMEgw
RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv
cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACkZSO/V
1S9YEKuCNkB+FfFAddDvIKhk83hpgDYwDQApZiFycFlfzqSTw+wEwtqCIFUDvlyw
C6a2Mz0YRb6Uewwwy0jWZXZHEmeGGraSp8ehXEo+WDb+tXwo2/xVztajIw6fKIlp
Vq7suQdKWGPqTeZ0P6XrhHn9u3UiQ+k7FfGs8yUB+ibSel3/HC+mJZIaHtraIZhL
OdrE6o1V6XpJFO9d+nuMNz8hcvX0CfYnDo0GCQLYAiGdbCCFq0UFYXJyN1eWtqwZ
pwErrHgDrgwPtKBLI9+qcAXLjqoqX4rB9k4QutZjv2le9MOSEv3XYTl9P+03EfuB
mFMG3qezXHKNBUM=
-----END CERTIFICATE-----
Generated at Wed May 13 06:55:00 2026 by rpki-client