Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3/aacdbaa6-ec6f-3a9c-bd9d-b1785fba835f.roa
File:                     aacdbaa6-ec6f-3a9c-bd9d-b1785fba835f.roa (raw, json)
Hash identifier:          O6QKLFgRYmDoHF+tx6i8ebLaS60Ltkv//Qbas79TMTc=
Subject key identifier:   70:D1:67:9F:DC:CB:B9:82:14:19:39:FB:B7:60:57:CA:69:47:EA:79
Certificate issuer:       /CN=e78d9e3b-7aed-4f65-85b4-120ec0a9ede3
Certificate serial:       010D0C9F4328584F3FAD317BF69E1EB8CF113540
Authority key identifier: CB:31:32:7B:67:42:3C:B0:C4:2D:66:22:9B:33:A1:EC:77:FA:9C:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3/aacdbaa6-ec6f-3a9c-bd9d-b1785fba835f.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     11059
IP address blocks:        64.234.228.0/22 maxlen: 24
                          136.175.64.0/23 maxlen: 24
                          199.202.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:31:7b:f6:9e:1e:b8:cf:11:35:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e78d9e3b-7aed-4f65-85b4-120ec0a9ede3
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=a492bbdf-e58b-4fb5-b31f-04be78f7c0a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e2:dd:88:2e:ce:c6:1f:28:f7:f7:f2:e5:b1:
                    49:56:c3:04:9b:df:9a:da:89:fe:12:5b:f1:0a:95:
                    d7:f8:91:64:4f:af:c5:7e:73:a1:b4:b1:d1:83:78:
                    76:9e:73:69:f8:8c:62:d0:6b:0a:97:b8:9d:2f:0b:
                    4c:a8:d8:38:da:a1:90:f6:8f:da:2d:93:a5:04:96:
                    6e:13:3b:a2:55:75:78:f4:30:e4:a5:61:35:c9:79:
                    8c:06:73:30:71:ae:97:eb:b0:45:05:09:e1:91:b5:
                    1f:85:58:d5:4a:d0:a1:3f:ea:7e:90:f3:e1:56:79:
                    22:9c:e5:b5:c9:95:bf:a7:ed:cd:b1:35:d1:59:17:
                    31:0f:14:33:c1:4f:2b:51:04:c5:05:ae:24:9e:7c:
                    72:26:09:6c:28:3b:3f:a1:9a:8e:ed:16:26:39:9f:
                    ff:90:e9:cf:b4:53:ee:03:88:09:7c:f6:95:81:7c:
                    2d:80:be:a7:77:2b:9e:c7:f0:dd:23:38:05:e5:e1:
                    de:04:19:3a:38:c9:4d:81:03:8a:8e:47:e5:8b:a7:
                    01:85:47:a8:34:d5:7c:78:b9:94:1e:cc:ab:5d:17:
                    5d:da:dc:28:4f:30:0a:5c:bd:22:6d:c0:15:fc:0e:
                    bb:f8:d3:3c:16:d7:d2:31:b3:3c:d7:2c:ec:cf:91:
                    be:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:D1:67:9F:DC:CB:B9:82:14:19:39:FB:B7:60:57:CA:69:47:EA:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3/aacdbaa6-ec6f-3a9c-bd9d-b1785fba835f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3.crl

            X509v3 Authority Key Identifier:
                keyid:CB:31:32:7B:67:42:3C:B0:C4:2D:66:22:9B:33:A1:EC:77:FA:9C:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.234.228.0/22
                  136.175.64.0/23
                  199.202.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:1a:19:0f:79:db:2b:5a:27:8d:43:43:dd:d5:32:67:dd:fd:
         ec:6f:08:36:15:b9:84:60:7d:fe:09:80:05:c5:ec:c1:8f:8d:
         ea:e2:91:ad:1b:93:b3:54:b6:95:d5:21:5d:2d:47:22:8c:41:
         72:a8:a2:9c:c4:f8:51:b4:db:62:9c:49:41:46:ab:2a:bd:2c:
         7a:ca:72:aa:f9:eb:eb:78:e7:39:0d:82:0d:a1:db:b4:75:69:
         d6:6f:bf:6c:7f:fe:ff:b8:c2:3f:4c:dd:4a:a6:39:d3:5d:44:
         f8:0b:57:6d:1c:aa:0b:19:d0:1d:3a:fa:1f:e1:30:b9:ea:a0:
         92:be:ef:e1:49:22:1b:6a:13:73:16:24:c6:50:e8:ab:55:5a:
         b9:7b:14:b6:bf:37:f2:8c:ad:91:6a:52:3b:c4:a1:ec:4e:20:
         5b:ff:dc:0d:be:46:b2:a9:ef:2c:16:1e:bd:a7:64:4c:af:38:
         0f:e7:7b:19:bb:22:da:54:71:9b:6b:45:5b:d4:1a:b6:c4:81:
         eb:9e:2e:88:fd:da:84:02:10:04:d1:2a:42:61:6a:9f:ca:b6:
         b7:c6:18:bd:e7:74:f5:69:25:c2:61:61:4f:c7:6c:79:db:57:
         8e:9e:da:f0:11:70:db:0a:8d:83:59:0b:dc:df:30:72:7c:69:
         98:24:86:a4
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE8/rTF79p4euM8RNUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTc4ZDllM2ItN2FlZC00ZjY1LTg1YjQtMTIwZWMwYTll
ZGUzMB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk
YTQ5MmJiZGYtZTU4Yi00ZmI1LWIzMWYtMDRiZTc4ZjdjMGE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuLdiC7Oxh8o9/fy5bFJVsMEm9+a2on+Elvx
CpXX+JFkT6/FfnOhtLHRg3h2nnNp+Ixi0GsKl7idLwtMqNg42qGQ9o/aLZOlBJZu
EzuiVXV49DDkpWE1yXmMBnMwca6X67BFBQnhkbUfhVjVStChP+p+kPPhVnkinOW1
yZW/p+3NsTXRWRcxDxQzwU8rUQTFBa4knnxyJglsKDs/oZqO7RYmOZ//kOnPtFPu
A4gJfPaVgXwtgL6ndyuex/DdIzgF5eHeBBk6OMlNgQOKjkfli6cBhUeoNNV8eLmU
HsyrXRdd2twoTzAKXL0ibcAV/A67+NM8FtfSMbM81yzsz5G++wIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFHDRZ5/cy7mCFBk5+7dgV8ppR+p5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lNzhk
OWUzYi03YWVkLTRmNjUtODViNC0xMjBlYzBhOWVkZTMvYWFjZGJhYTYtZWM2Zi0z
YTljLWJkOWQtYjE3ODVmYmE4MzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTc4ZDllM2ItN2FlZC00ZjY1LTg1
YjQtMTIwZWMwYTllZGUzL2U3OGQ5ZTNiLTdhZWQtNGY2NS04NWI0LTEyMGVjMGE5
ZWRlMy5jcmwwHwYDVR0jBBgwFoAUyzEye2dCPLDELWYimzOh7Hf6nB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lNzhkOWUzYi03YWVkLTRmNjUtODViNC0xMjBl
YzBhOWVkZTMuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCQOrkAwQB
iK9AAwQCx8rgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAGkaGQ952ytaJ41DQ93VMmfd/exvCDYVuYRgff4J
gAXF7MGPjerika0bk7NUtpXVIV0tRyKMQXKoopzE+FG022KcSUFGqyq9LHrKcqr5
6+t45zkNgg2h27R1adZvv2x//v+4wj9M3UqmOdNdRPgLV20cqgsZ0B06+h/hMLnq
oJK+7+FJIhtqE3MWJMZQ6KtVWrl7FLa/N/KMrZFqUjvEoexOIFv/3A2+RrKp7ywW
Hr2nZEyvOA/nexm7ItpUcZtrRVvUGrbEgeueLoj92oQCEATRKkJhap/KtrfGGL3n
dPVpJcJhYU/HbHnbV46e2vARcNsKjYNZC9zfMHJ8aZgkhqQ=
-----END CERTIFICATE-----
Generated at Sat Sep 26 11:07:29 2026 by rpki-client