Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6/4329ba6e-6e0a-3138-98ed-2d011364b519.roa
File:                     4329ba6e-6e0a-3138-98ed-2d011364b519.roa (raw, json)
Hash identifier:          5mhHjyepQJM1/t0Y0VnnJd1n33/shs54EE5Z6MC0xvM=
Subject key identifier:   C5:48:C0:67:91:87:D7:22:94:CA:08:FE:8A:55:CE:19:0F:DC:23:6E
Certificate issuer:       /CN=7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6
Certificate serial:       010D0C9F4328584F3E47E9A13EA3EFAEA468BCC0
Authority key identifier: 3D:F8:45:F1:26:71:A6:9C:56:6C:DE:41:7A:35:28:C5:81:AF:52:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6/4329ba6e-6e0a-3138-98ed-2d011364b519.roa
Signing time:             Mon 21 Sep 2026 01:00:11 +0000
ROA not before:           Mon 21 Sep 2026 01:00:11 +0000
ROA not after:            Sun 20 Dec 2026 02:00:11 +0000
asID:                     10297
IP address blocks:        64.79.64.0/19 maxlen: 24
                          173.45.64.0/18 maxlen: 24
                          173.244.160.0/19 maxlen: 24
                          207.182.128.0/19 maxlen: 24
                          209.190.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6/7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6/7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3e:47:e9:a1:3e:a3:ef:ae:a4:68:bc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6
        Validity
            Not Before: Sep 21 01:00:11 2026 GMT
            Not After : Dec 20 02:00:11 2026 GMT
        Subject: CN=715a80fb-9a31-448c-bbef-edacec1eedb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:62:6b:cf:1b:b0:75:f5:4b:c4:e1:a8:e4:69:
                    89:92:42:91:a4:db:62:ce:78:13:bc:a9:8a:94:c4:
                    70:45:5b:be:20:9f:5f:67:fe:ea:c9:85:7b:12:4c:
                    6f:27:de:e4:79:61:94:98:fa:52:69:c8:62:2a:1d:
                    3e:9a:48:3f:98:86:66:ca:e5:f9:50:6f:e9:5b:f3:
                    c5:f5:05:5a:63:b7:ea:31:bf:c5:eb:b7:99:3a:fd:
                    fe:c7:24:ee:b6:a6:1d:05:d7:db:5e:ed:ef:07:c9:
                    5a:b5:5a:9b:f1:a1:ed:ef:57:a9:9e:88:c3:4a:ff:
                    65:f9:8f:52:93:3d:f2:b5:80:11:59:e5:c5:08:00:
                    3a:d9:ad:2b:46:d4:27:26:b0:c4:7a:6f:ff:ac:73:
                    e2:c7:80:74:8f:bd:e2:28:8c:eb:6d:11:54:3f:3b:
                    f9:c4:5a:1b:e3:45:40:b6:22:9c:7b:be:e2:35:e9:
                    a7:02:d4:ee:24:80:b3:de:b5:7a:5b:8a:9b:79:48:
                    b3:51:e8:ae:0d:0c:4d:72:4b:73:26:aa:33:41:90:
                    10:3d:4e:0b:89:98:ec:5c:de:10:2c:25:2e:7f:e5:
                    96:7b:6e:34:f6:77:51:89:f7:b9:13:75:c5:75:ee:
                    e6:2d:7a:37:ae:1c:56:be:34:6d:af:19:53:bd:ad:
                    7f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:48:C0:67:91:87:D7:22:94:CA:08:FE:8A:55:CE:19:0F:DC:23:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6/4329ba6e-6e0a-3138-98ed-2d011364b519.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6/7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6.crl

            X509v3 Authority Key Identifier:
                keyid:3D:F8:45:F1:26:71:A6:9C:56:6C:DE:41:7A:35:28:C5:81:AF:52:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.79.64.0/19
                  173.45.64.0/18
                  173.244.160.0/19
                  207.182.128.0/19
                  209.190.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:a7:d9:84:19:63:5b:c5:cd:eb:33:28:9b:fc:d2:ff:0a:0e:
         12:2b:e6:62:5a:2a:e0:59:3d:1f:20:57:24:c7:40:45:a3:dc:
         a0:aa:70:1e:54:3d:e3:3f:c3:3a:e0:2e:ad:50:59:7b:4b:eb:
         90:4d:35:b3:31:0d:71:b6:1f:ef:24:de:54:f6:54:0d:88:34:
         a5:09:63:2d:1b:4b:6d:34:fa:59:be:f6:6a:89:26:7c:f1:4a:
         42:68:74:fc:bf:9a:19:10:41:e1:b2:8d:96:3e:c7:ac:34:9f:
         c9:6b:71:f1:a6:34:8e:28:08:3a:a2:c9:d2:cc:c2:f7:47:bf:
         76:06:36:45:d2:1f:7c:85:9e:55:cc:a1:81:99:f0:e0:4d:b2:
         79:25:e6:c7:4d:2f:fd:da:09:f2:ab:e9:00:91:d0:1c:7d:34:
         b3:f6:62:f8:33:01:03:4b:16:41:e6:32:3e:c8:5c:c8:32:82:
         41:08:69:97:d6:2e:f9:d4:1a:10:6a:14:b8:5a:81:60:4a:43:
         84:7a:03:87:f1:48:e2:e5:f7:70:ab:ee:7b:69:c7:e0:5f:95:
         4a:17:f7:73:41:f7:67:2b:33:f3:b5:d1:c4:73:ca:41:7f:a8:
         3c:e7:ce:e1:5d:99:bc:1c:a3:fe:a7:66:27:ec:62:47:11:69:
         e3:a5:5e:d7
-----BEGIN CERTIFICATE-----
MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWE8+R+mhPqPvrqRovMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2Y1ZTRjYWEtMmVhNy00NjAyLWEzYjAtNWM5ZmNkMmU1
NGU2MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk
NzE1YTgwZmItOWEzMS00NDhjLWJiZWYtZWRhY2VjMWVlZGI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GJrzxuwdfVLxOGo5GmJkkKRpNtizngTvKmK
lMRwRVu+IJ9fZ/7qyYV7EkxvJ97keWGUmPpSachiKh0+mkg/mIZmyuX5UG/pW/PF
9QVaY7fqMb/F67eZOv3+xyTutqYdBdfbXu3vB8latVqb8aHt71epnojDSv9l+Y9S
kz3ytYARWeXFCAA62a0rRtQnJrDEem//rHPix4B0j73iKIzrbRFUPzv5xFob40VA
tiKce77iNemnAtTuJICz3rV6W4qbeUizUeiuDQxNcktzJqozQZAQPU4LiZjsXN4Q
LCUuf+WWe2409ndRife5E3XFde7mLXo3rhxWvjRtrxlTva1/3wIDAQABo4IDbTCC
A2kwHQYDVR0OBBYEFMVIwGeRh9cilMoI/opVzhkP3CNuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ZjVl
NGNhYS0yZWE3LTQ2MDItYTNiMC01YzlmY2QyZTU0ZTYvNDMyOWJhNmUtNmUwYS0z
MTM4LTk4ZWQtMmQwMTEzNjRiNTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2Y1ZTRjYWEtMmVhNy00NjAyLWEz
YjAtNWM5ZmNkMmU1NGU2LzdmNWU0Y2FhLTJlYTctNDYwMi1hM2IwLTVjOWZjZDJl
NTRlNi5jcmwwHwYDVR0jBBgwFoAUPfhF8SZxppxWbN5BejUoxYGvUmAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83ZjVlNGNhYS0yZWE3LTQ2MDItYTNiMC01Yzlm
Y2QyZTU0ZTYuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQFQE9AAwQG
rS1AAwQFrfSgAwQFz7aAAwQH0b4AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw
OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw
a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJ2n2YQZY1vFzeszKJv80v8K
DhIr5mJaKuBZPR8gVyTHQEWj3KCqcB5UPeM/wzrgLq1QWXtL65BNNbMxDXG2H+8k
3lT2VA2INKUJYy0bS200+lm+9mqJJnzxSkJodPy/mhkQQeGyjZY+x6w0n8lrcfGm
NI4oCDqiydLMwvdHv3YGNkXSH3yFnlXMoYGZ8OBNsnkl5sdNL/3aCfKr6QCR0Bx9
NLP2YvgzAQNLFkHmMj7IXMgygkEIaZfWLvnUGhBqFLhagWBKQ4R6A4fxSOLl93Cr
7ntpx+BflUoX93NB92crM/O10cRzykF/qDznzuFdmbwco/6nZifsYkcRaeOlXtc=
-----END CERTIFICATE-----
Generated at Sun Sep 27 21:11:25 2026 by rpki-client