Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d/6de7239f-6a57-39d4-bd65-a97148b222c8.roa
File:                     6de7239f-6a57-39d4-bd65-a97148b222c8.roa (raw, json)
Hash identifier:          uF476446A/ow4b6VeAm+qP51Ie36oS6mLyrlF3TVfDU=
Subject key identifier:   03:C3:C9:B8:C4:1B:C9:87:32:04:E2:6E:8B:A3:D5:82:01:E1:64:E1
Certificate issuer:       /CN=4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d
Certificate serial:       010D0C9F4328584E8C8A3FC627691250B6F3E5C0
Authority key identifier: 77:05:42:3A:27:84:58:52:46:16:9F:93:86:71:AF:A7:C1:01:F6:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d/6de7239f-6a57-39d4-bd65-a97148b222c8.roa
Signing time:             Sun 19 Jul 2026 09:00:11 +0000
ROA not before:           Sun 19 Jul 2026 09:00:11 +0000
ROA not after:            Sat 17 Oct 2026 09:00:11 +0000
asID:                     36008
IP address blocks:        162.220.191.0/24 maxlen: 24
                          216.19.84.0/24 maxlen: 24
                          216.19.86.0/24 maxlen: 24
                          216.19.92.0/24 maxlen: 24
                          216.19.95.0/24 maxlen: 24
                          2620:a::/48 maxlen: 48
                          2620:a:d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8c:8a:3f:c6:27:69:12:50:b6:f3:e5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d
        Validity
            Not Before: Jul 19 09:00:11 2026 GMT
            Not After : Oct 17 09:00:11 2026 GMT
        Subject: CN=d258d284-dd2a-4994-9ee7-c8f314947c9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d4:fc:d5:54:68:71:2a:6a:a4:e4:e4:d7:c5:
                    c7:ab:3b:e0:85:a1:2f:70:72:08:3a:13:e4:12:a4:
                    be:87:6d:e8:b1:b8:ce:93:c6:9f:a3:9c:ad:b9:48:
                    37:6d:f0:0c:34:6a:e9:6e:86:e2:35:8a:b7:70:d7:
                    df:39:ac:24:d2:ef:ed:47:c4:cd:55:23:f0:ff:42:
                    99:68:f7:3a:65:da:18:50:11:2d:03:f6:e2:dc:48:
                    00:75:9b:1c:95:19:4f:ef:a0:15:b9:7e:d1:30:94:
                    d6:9c:9e:df:0e:01:a4:b2:2a:c0:38:c4:f3:89:ab:
                    e8:6c:b8:9a:f6:1e:43:ed:b5:76:b3:9c:a0:66:29:
                    8e:c4:c1:30:8a:dc:fd:78:bc:26:35:93:34:60:57:
                    61:73:52:8c:5b:9a:fc:73:25:cc:77:ba:cb:bd:33:
                    0d:16:e9:f4:a8:be:fe:21:7e:8a:25:eb:42:2d:56:
                    29:2e:1d:79:c0:89:c9:e7:db:de:ee:04:53:3c:12:
                    4a:64:f2:d1:ba:04:68:e5:0e:c1:03:9d:98:2f:c5:
                    27:87:e8:ab:85:23:d5:51:f9:34:3e:f2:57:75:fc:
                    af:c3:cd:0e:7a:11:62:61:92:13:c2:30:72:10:6c:
                    c0:5b:78:2c:8c:16:85:6e:5c:39:46:b6:0a:fb:2d:
                    02:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C3:C9:B8:C4:1B:C9:87:32:04:E2:6E:8B:A3:D5:82:01:E1:64:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d/6de7239f-6a57-39d4-bd65-a97148b222c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d.crl

            X509v3 Authority Key Identifier:
                keyid:77:05:42:3A:27:84:58:52:46:16:9F:93:86:71:AF:A7:C1:01:F6:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.220.191.0/24
                  216.19.84.0/24
                  216.19.86.0/24
                  216.19.92.0/24
                  216.19.95.0/24
                IPv6:
                  2620:a::/48
                  2620:a:d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:6e:69:4e:9d:0b:d4:42:7b:b7:a2:10:1f:68:37:7a:74:ee:
         0d:83:a3:a0:cd:5b:8c:3b:34:4b:8a:31:37:d7:c6:52:2c:d1:
         ac:0d:43:38:fe:4c:c5:8f:96:45:3e:dd:a7:22:13:20:4e:78:
         6c:43:93:01:39:48:0b:40:91:c2:c8:5e:54:5a:5c:a0:69:2b:
         f8:65:75:79:3e:6b:cd:9a:f7:f3:17:1c:33:6f:7f:e4:e3:0b:
         f7:5a:66:f4:a5:98:ef:4a:bf:bf:67:0a:2d:05:bd:f8:63:78:
         19:96:96:2a:93:e4:d6:7f:55:5e:67:07:b0:bd:1c:f2:fc:bf:
         39:dd:d3:9f:49:c4:cd:d4:3f:59:16:20:8c:95:d3:48:13:5e:
         af:ac:8f:41:d3:1f:b4:57:39:f8:cf:b2:68:37:3a:a4:d7:eb:
         df:e7:7b:2f:5c:9e:86:a9:b9:ab:4a:a3:69:e3:19:5b:d6:31:
         5b:0d:f0:5c:2b:88:be:cd:1f:b0:3b:3a:50:ee:74:70:5e:a2:
         7b:1b:d8:e9:f0:41:f2:74:7d:41:a8:3c:60:a4:91:5c:3d:c2:
         18:58:9b:73:87:97:25:2b:d7:91:e6:05:b2:34:76:3b:7c:54:
         8b:4a:e3:b2:62:a3:ec:fb:61:38:d2:6a:ea:4e:c4:23:8d:ab:
         42:1c:05:04
-----BEGIN CERTIFICATE-----
MIIGdTCCBV2gAwIBAgIUAQ0Mn0MoWE6Mij/GJ2kSULbz5cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGRjYzZhM2EtMGU0Zi00OGMxLTkxMTQtNWRkZGYyZDdk
YjlkMB4XDTI2MDcxOTA5MDAxMVoXDTI2MTAxNzA5MDAxMVowLzEtMCsGA1UEAxMk
ZDI1OGQyODQtZGQyYS00OTk0LTllZTctYzhmMzE0OTQ3YzljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4tT81VRocSpqpOTk18XHqzvghaEvcHIIOhPk
EqS+h23osbjOk8afo5ytuUg3bfAMNGrpbobiNYq3cNffOawk0u/tR8TNVSPw/0KZ
aPc6ZdoYUBEtA/bi3EgAdZsclRlP76AVuX7RMJTWnJ7fDgGksirAOMTziavobLia
9h5D7bV2s5ygZimOxMEwitz9eLwmNZM0YFdhc1KMW5r8cyXMd7rLvTMNFun0qL7+
IX6KJetCLVYpLh15wInJ59ve7gRTPBJKZPLRugRo5Q7BA52YL8Unh+irhSPVUfk0
PvJXdfyvw80OehFiYZITwjByEGzAW3gsjBaFblw5RrYK+y0CFQIDAQABo4IDhzCC
A4MwHQYDVR0OBBYEFAPDybjEG8mHMgTibouj1YIB4WThMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZGNj
NmEzYS0wZTRmLTQ4YzEtOTExNC01ZGRkZjJkN2RiOWQvNmRlNzIzOWYtNmE1Ny0z
OWQ0LWJkNjUtYTk3MTQ4YjIyMmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGRjYzZhM2EtMGU0Zi00OGMxLTkx
MTQtNWRkZGYyZDdkYjlkLzRkY2M2YTNhLTBlNGYtNDhjMS05MTE0LTVkZGRmMmQ3
ZGI5ZC5jcmwwHwYDVR0jBBgwFoAUdwVCOieEWFJGFp+ThnGvp8EB9m4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZGNjNmEzYS0wZTRmLTQ4YzEtOTExNC01ZGRk
ZjJkN2RiOWQuY2VyMFEGCCsGAQUFBwEHAQH/BEIwQDAkBAIAATAeAwQAoty/AwQA
2BNUAwQA2BNWAwQA2BNcAwQA2BNfMBgEAgACMBIDBwAmIAAKAAADBwAmIAAKAA0w
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEARm5pTp0L1EJ7t6IQH2g3enTuDYOjoM1bjDs0S4oxN9fGUizRrA1D
OP5MxY+WRT7dpyITIE54bEOTATlIC0CRwsheVFpcoGkr+GV1eT5rzZr38xccM29/
5OML91pm9KWY70q/v2cKLQW9+GN4GZaWKpPk1n9VXmcHsL0c8vy/Od3Tn0nEzdQ/
WRYgjJXTSBNer6yPQdMftFc5+M+yaDc6pNfr3+d7L1yehqm5q0qjaeMZW9YxWw3w
XCuIvs0fsDs6UO50cF6iexvY6fBB8nR9Qag8YKSRXD3CGFibc4eXJSvXkeYFsjR2
O3xUi0rjsmKj7PthONJq6k7EI42rQhwFBA==
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:44:51 2026 by rpki-client