Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/78a35d59-5267-4ec6-965e-2346bd05cddd/e736234e-dc90-3e59-9245-a6a07d759011.roa
File:                     e736234e-dc90-3e59-9245-a6a07d759011.roa (raw, json)
Hash identifier:          66pgYnO/aiz0K3o5kBX98lWOgeylPYqQQlpCB2yso2k=
Subject key identifier:   ED:69:B1:1F:F4:FF:55:5D:30:5F:A5:5D:2B:7B:D2:C3:90:55:BA:AE
Certificate issuer:       /CN=78a35d59-5267-4ec6-965e-2346bd05cddd
Certificate serial:       010D0C9F4328584DA3E56257DE2B971F5DA42D20
Authority key identifier: 91:20:3B:BB:DC:6B:AC:2A:E6:DF:16:CC:27:B4:4C:31:44:09:9D:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/78a35d59-5267-4ec6-965e-2346bd05cddd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/78a35d59-5267-4ec6-965e-2346bd05cddd/e736234e-dc90-3e59-9245-a6a07d759011.roa
Signing time:             Mon 27 Apr 2026 01:00:24 +0000
ROA not before:           Mon 27 Apr 2026 01:00:24 +0000
ROA not after:            Sun 26 Jul 2026 01:00:24 +0000
asID:                     10750
IP address blocks:        64.111.35.0/24 maxlen: 24
                          64.111.42.0/23 maxlen: 23
                          64.111.44.0/24 maxlen: 24
                          64.111.58.0/23 maxlen: 23
                          64.111.61.0/24 maxlen: 24
                          65.255.134.0/24 maxlen: 24
                          67.221.200.0/22 maxlen: 22
                          67.221.204.0/23 maxlen: 23
                          67.221.206.0/24 maxlen: 24
                          69.27.192.0/24 maxlen: 24
                          69.27.197.0/24 maxlen: 24
                          130.51.36.0/22 maxlen: 22
                          199.127.48.0/21 maxlen: 21
                          209.152.155.0/24 maxlen: 24
                          216.145.145.0/24 maxlen: 24
                          216.145.148.0/23 maxlen: 23
                          216.145.150.0/24 maxlen: 24
                          216.145.155.0/24 maxlen: 24
                          216.146.253.0/24 maxlen: 24
                          2605:2940::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/78a35d59-5267-4ec6-965e-2346bd05cddd/78a35d59-5267-4ec6-965e-2346bd05cddd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/78a35d59-5267-4ec6-965e-2346bd05cddd/78a35d59-5267-4ec6-965e-2346bd05cddd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/78a35d59-5267-4ec6-965e-2346bd05cddd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a3:e5:62:57:de:2b:97:1f:5d:a4:2d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78a35d59-5267-4ec6-965e-2346bd05cddd
        Validity
            Not Before: Apr 27 01:00:24 2026 GMT
            Not After : Jul 26 01:00:24 2026 GMT
        Subject: CN=85a52f82-4223-4c3e-83b3-bce80037a08a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f2:20:42:32:58:15:d2:18:97:d3:ba:bb:c0:
                    8b:88:d2:58:87:64:df:14:5b:0c:ac:b7:e3:51:18:
                    47:ea:ef:ad:ed:00:1c:af:88:f1:20:0b:33:e7:95:
                    a5:39:fd:f7:59:48:23:5e:ee:39:b8:5f:e9:a9:ab:
                    c9:76:f9:a7:ad:75:55:85:2a:42:9f:4d:37:e7:26:
                    71:63:59:3b:81:ac:5a:73:f9:62:09:1b:5d:12:33:
                    d7:29:68:c2:34:a5:81:b0:e5:97:c2:3b:b9:99:df:
                    e0:13:09:aa:6d:53:3f:95:35:7c:64:3b:f1:10:67:
                    70:ba:97:3b:0a:3a:17:28:36:bf:5a:d4:ad:1c:69:
                    f5:13:3d:4a:d2:78:ce:09:f5:24:19:af:2a:30:5d:
                    86:8b:f4:26:ff:84:d6:b6:21:7c:b3:0e:94:cc:e2:
                    cf:f5:24:7f:3e:b3:90:10:f9:7c:50:7c:94:7d:04:
                    c8:ca:e9:b1:7c:f3:d9:17:6d:8c:f2:09:90:bb:f4:
                    b9:2f:c5:64:5b:92:a5:e6:ac:be:0c:51:11:07:9a:
                    3d:98:61:63:bc:d1:68:5e:6b:cd:85:93:1f:2d:9c:
                    b8:62:08:ce:8c:be:1b:68:49:cb:03:ad:17:2a:8a:
                    59:bf:2b:9f:be:1b:bf:05:2b:9f:4c:af:00:00:8b:
                    a4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:69:B1:1F:F4:FF:55:5D:30:5F:A5:5D:2B:7B:D2:C3:90:55:BA:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/78a35d59-5267-4ec6-965e-2346bd05cddd/e736234e-dc90-3e59-9245-a6a07d759011.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/78a35d59-5267-4ec6-965e-2346bd05cddd/78a35d59-5267-4ec6-965e-2346bd05cddd.crl

            X509v3 Authority Key Identifier:
                keyid:91:20:3B:BB:DC:6B:AC:2A:E6:DF:16:CC:27:B4:4C:31:44:09:9D:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/78a35d59-5267-4ec6-965e-2346bd05cddd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.111.35.0/24
                  64.111.42.0-64.111.44.255
                  64.111.58.0/23
                  64.111.61.0/24
                  65.255.134.0/24
                  67.221.200.0-67.221.206.255
                  69.27.192.0/24
                  69.27.197.0/24
                  130.51.36.0/22
                  199.127.48.0/21
                  209.152.155.0/24
                  216.145.145.0/24
                  216.145.148.0-216.145.150.255
                  216.145.155.0/24
                  216.146.253.0/24
                IPv6:
                  2605:2940::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:ec:5f:1c:f6:e1:33:33:41:11:c9:97:32:96:b4:a6:c2:63:
         10:58:05:c0:15:70:99:78:25:52:1c:08:cd:90:cf:c1:9c:18:
         34:2b:d1:88:90:42:cf:7e:f7:13:68:f8:c0:26:f2:da:3e:94:
         c3:68:41:1a:1c:92:76:1c:64:14:33:70:0a:b9:fb:c1:05:73:
         f1:83:9c:23:c2:40:16:82:64:22:42:fd:d6:05:e6:78:c6:56:
         fb:2b:2b:37:85:d2:b5:ea:d3:90:74:06:3a:fa:fc:6e:a0:e2:
         30:79:a1:c5:6d:17:35:94:5b:0e:7f:1f:51:d9:aa:bd:9c:a8:
         f0:d6:bb:1b:d4:7f:1d:d0:e3:18:52:70:96:5b:43:56:e1:51:
         df:23:1b:2e:78:c8:4a:48:c8:9f:63:d6:b7:af:51:0f:22:46:
         ca:e2:a2:01:f2:bc:f3:5a:e8:2f:a2:78:ad:c6:03:6d:75:9d:
         de:a6:bc:89:61:38:84:c5:3a:b7:39:00:66:4b:71:1a:9c:c5:
         7b:3d:c6:6c:44:7c:06:eb:bd:41:f7:db:50:92:62:61:a2:13:
         87:50:bd:88:73:69:0e:50:59:11:3f:36:70:20:cd:1e:df:96:
         bd:5d:db:66:d9:66:43:62:74:6d:8e:c2:e8:11:85:58:02:f5:
         2e:f1:2a:64
-----BEGIN CERTIFICATE-----
MIIGwTCCBamgAwIBAgIUAQ0Mn0MoWE2j5WJX3iuXH12kLSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzhhMzVkNTktNTI2Ny00ZWM2LTk2NWUtMjM0NmJkMDVj
ZGRkMB4XDTI2MDQyNzAxMDAyNFoXDTI2MDcyNjAxMDAyNFowLzEtMCsGA1UEAxMk
ODVhNTJmODItNDIyMy00YzNlLTgzYjMtYmNlODAwMzdhMDhhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/IgQjJYFdIYl9O6u8CLiNJYh2TfFFsMrLfj
URhH6u+t7QAcr4jxIAsz55WlOf33WUgjXu45uF/pqavJdvmnrXVVhSpCn0035yZx
Y1k7gaxac/liCRtdEjPXKWjCNKWBsOWXwju5md/gEwmqbVM/lTV8ZDvxEGdwupc7
CjoXKDa/WtStHGn1Ez1K0njOCfUkGa8qMF2Gi/Qm/4TWtiF8sw6UzOLP9SR/PrOQ
EPl8UHyUfQTIyumxfPPZF22M8gmQu/S5L8VkW5Kl5qy+DFERB5o9mGFjvNFoXmvN
hZMfLZy4YgjOjL4baEnLA60XKopZvyufvhu/BSufTK8AAIukBwIDAQABo4ID0zCC
A88wHQYDVR0OBBYEFO1psR/0/1VdMF+lXSt70sOQVbquMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83OGEz
NWQ1OS01MjY3LTRlYzYtOTY1ZS0yMzQ2YmQwNWNkZGQvZTczNjIzNGUtZGM5MC0z
ZTU5LTkyNDUtYTZhMDdkNzU5MDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzhhMzVkNTktNTI2Ny00ZWM2LTk2
NWUtMjM0NmJkMDVjZGRkLzc4YTM1ZDU5LTUyNjctNGVjNi05NjVlLTIzNDZiZDA1
Y2RkZC5jcmwwHwYDVR0jBBgwFoAUkSA7u9xrrCrm3xbMJ7RMMUQJnbowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83OGEzNWQ1OS01MjY3LTRlYzYtOTY1ZS0yMzQ2
YmQwNWNkZGQuY2VyMIGcBggrBgEFBQcBBwEB/wSBjDCBiTB4BAIAATByAwQAQG8j
MAwDBAFAbyoDBABAbywDBAFAbzoDBABAbz0DBABB/4YwDAMEA0PdyAMEAEPdzgME
AEUbwAMEAEUbxQMEAoIzJAMEA8d/MAMEANGYmwMEANiRkTAMAwQC2JGUAwQA2JGW
AwQA2JGbAwQA2JL9MA0EAgACMAcDBQAmBSlAMFQGA1UdIAEB/wRKMEgwRgYIKwYB
BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy
Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABjsXxz24TMzQRHJ
lzKWtKbCYxBYBcAVcJl4JVIcCM2Qz8GcGDQr0YiQQs9+9xNo+MAm8to+lMNoQRoc
knYcZBQzcAq5+8EFc/GDnCPCQBaCZCJC/dYF5njGVvsrKzeF0rXq05B0Bjr6/G6g
4jB5ocVtFzWUWw5/H1HZqr2cqPDWuxvUfx3Q4xhScJZbQ1bhUd8jGy54yEpIyJ9j
1revUQ8iRsriogHyvPNa6C+ieK3GA211nd6mvIlhOITFOrc5AGZLcRqcxXs9xmxE
fAbrvUH321CSYmGiE4dQvYhzaQ5QWRE/NnAgzR7flr1d22bZZkNidG2OwugRhVgC
9S7xKmQ=
-----END CERTIFICATE-----
Generated at Wed May 13 11:37:08 2026 by rpki-client