Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/1b3ab811-ab8f-33b2-b367-243b80e6cf4e.roa
File:                     1b3ab811-ab8f-33b2-b367-243b80e6cf4e.roa (raw, json)
Hash identifier:          3BC6wBq9Mr7J9hOinmZDLXwO7PJ8bzZ0sM1lwXZ11GQ=
Subject key identifier:   2D:B3:B1:D5:43:F3:07:8F:D1:8A:C9:4F:A8:AF:56:65:59:92:A3:1B
Certificate issuer:       /CN=ee74c799-7d4c-4df3-b711-296c34338ef5
Certificate serial:       010D0C9F4328584DFA707F418986A1CC68D8A2C0
Authority key identifier: 6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/1b3ab811-ab8f-33b2-b367-243b80e6cf4e.roa
Signing time:             Thu 28 May 2026 01:00:10 +0000
ROA not before:           Thu 28 May 2026 01:00:10 +0000
ROA not after:            Wed 26 Aug 2026 01:00:10 +0000
asID:                     53264
IP address blocks:        64.79.96.0/20 maxlen: 24
                          74.117.236.0/22 maxlen: 24
                          74.121.180.0/22 maxlen: 24
                          74.122.192.0/21 maxlen: 24
                          173.243.112.0/20 maxlen: 24
                          192.208.176.0/21 maxlen: 24
                          192.208.184.0/22 maxlen: 24
                          192.208.188.0/23 maxlen: 24
                          192.208.190.0/24 maxlen: 24
                          198.50.24.0/21 maxlen: 24
                          199.16.8.0/21 maxlen: 24
                          199.192.200.0/21 maxlen: 24
                          216.107.144.0/20 maxlen: 24
                          216.231.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 31 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fa:70:7f:41:89:86:a1:cc:68:d8:a2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee74c799-7d4c-4df3-b711-296c34338ef5
        Validity
            Not Before: May 28 01:00:10 2026 GMT
            Not After : Aug 26 01:00:10 2026 GMT
        Subject: CN=fc6a3432-a4cd-4012-8e4c-aa92458d6d70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0f:82:5e:e5:d2:02:65:1a:2e:7e:ba:8e:f5:
                    3f:71:30:35:66:ee:ae:77:a6:91:01:0f:b5:87:75:
                    b8:34:f9:66:f7:5b:a7:34:93:96:d3:83:e9:f6:94:
                    a6:b1:a0:2c:96:9f:dc:ff:af:65:8a:b5:39:b4:0f:
                    e5:73:e9:6e:fc:1a:dd:12:60:2d:7a:2a:40:cf:85:
                    dd:e5:ae:af:81:2b:04:f9:34:aa:4e:3c:56:6c:e1:
                    61:1c:1c:a7:40:ba:1f:2a:91:99:f9:85:6e:f9:88:
                    dc:44:d5:aa:0a:36:7e:eb:39:10:e2:18:57:8f:60:
                    7c:ef:37:98:1e:6b:0d:63:3d:55:8c:58:ed:5b:fe:
                    3a:dd:47:f5:84:9a:7f:cb:7c:95:13:74:18:f5:48:
                    74:7c:d4:07:76:66:be:d4:d6:c9:8e:0f:0a:81:9b:
                    4d:05:ff:74:ee:ae:ef:6b:f9:9d:b2:71:b1:46:08:
                    af:05:7f:30:6a:50:ef:34:eb:9a:a5:30:7c:65:82:
                    40:5c:67:10:c4:59:ea:08:b9:c1:17:6a:f9:0d:50:
                    81:2a:19:a5:2c:57:ae:fd:60:d7:b0:ab:ff:fe:ba:
                    10:33:67:c8:01:fa:84:0d:7c:9f:84:d5:85:f3:78:
                    41:29:a0:f9:40:a4:25:97:c2:14:94:ef:fd:21:46:
                    58:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:B3:B1:D5:43:F3:07:8F:D1:8A:C9:4F:A8:AF:56:65:59:92:A3:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/1b3ab811-ab8f-33b2-b367-243b80e6cf4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl

            X509v3 Authority Key Identifier:
                keyid:6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.79.96.0/20
                  74.117.236.0/22
                  74.121.180.0/22
                  74.122.192.0/21
                  173.243.112.0/20
                  192.208.176.0-192.208.190.255
                  198.50.24.0/21
                  199.16.8.0/21
                  199.192.200.0/21
                  216.107.144.0/20
                  216.231.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:fd:8e:41:9f:75:01:cc:e6:26:55:96:d8:8d:78:8c:69:1f:
         82:00:d7:71:04:db:22:2a:c1:9b:87:8b:82:a5:a4:4a:b7:99:
         fc:26:ac:b6:a4:72:3f:c2:9a:01:55:1d:f3:a0:21:56:dd:55:
         04:16:3b:9a:a8:e3:ca:71:c8:1a:ba:f5:0f:70:2b:4b:12:39:
         d3:e4:0d:4f:8f:a6:97:83:72:38:b6:3a:9f:74:21:11:d4:49:
         94:99:1f:62:6f:20:08:42:c7:98:2d:69:09:67:f7:06:96:73:
         05:ad:ba:82:fd:35:d0:2b:e8:49:0c:76:35:d2:37:e7:40:39:
         8d:09:21:48:f0:2f:4e:be:82:73:89:de:46:13:6c:57:0d:51:
         77:73:68:4d:1b:66:cc:3c:bf:f7:48:74:84:7d:64:69:e5:4c:
         5d:cf:b2:07:2d:d5:84:31:26:6c:b1:66:34:bc:8e:51:5d:61:
         71:5a:94:89:44:34:6d:00:b7:1f:c8:6c:e7:c4:22:07:5c:c4:
         aa:4a:6f:a7:be:9f:54:86:ad:e1:d0:b7:4f:e9:97:00:e2:9a:
         76:df:07:f7:20:db:a0:25:bb:98:f7:4c:bd:4f:87:19:05:d2:
         e4:62:da:69:29:6c:c9:fc:0a:78:04:d4:5a:22:7c:6b:06:be:
         ec:fc:7e:0e
-----BEGIN CERTIFICATE-----
MIIGhzCCBW+gAwIBAgIUAQ0Mn0MoWE36cH9BiYahzGjYosAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWU3NGM3OTktN2Q0Yy00ZGYzLWI3MTEtMjk2YzM0MzM4
ZWY1MB4XDTI2MDUyODAxMDAxMFoXDTI2MDgyNjAxMDAxMFowLzEtMCsGA1UEAxMk
ZmM2YTM0MzItYTRjZC00MDEyLThlNGMtYWE5MjQ1OGQ2ZDcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQ+CXuXSAmUaLn66jvU/cTA1Zu6ud6aRAQ+1
h3W4NPlm91unNJOW04Pp9pSmsaAslp/c/69lirU5tA/lc+lu/BrdEmAteipAz4Xd
5a6vgSsE+TSqTjxWbOFhHBynQLofKpGZ+YVu+YjcRNWqCjZ+6zkQ4hhXj2B87zeY
HmsNYz1VjFjtW/463Uf1hJp/y3yVE3QY9Uh0fNQHdma+1NbJjg8KgZtNBf907q7v
a/mdsnGxRgivBX8walDvNOuapTB8ZYJAXGcQxFnqCLnBF2r5DVCBKhmlLFeu/WDX
sKv//roQM2fIAfqEDXyfhNWF83hBKaD5QKQll8IUlO/9IUZYIwIDAQABo4IDmTCC
A5UwHQYDVR0OBBYEFC2zsdVD8weP0YrJT6ivVmVZkqMbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lZTc0
Yzc5OS03ZDRjLTRkZjMtYjcxMS0yOTZjMzQzMzhlZjUvMWIzYWI4MTEtYWI4Zi0z
M2IyLWIzNjctMjQzYjgwZTZjZjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZWU3NGM3OTktN2Q0Yy00ZGYzLWI3
MTEtMjk2YzM0MzM4ZWY1L2VlNzRjNzk5LTdkNGMtNGRmMy1iNzExLTI5NmMzNDMz
OGVmNS5jcmwwHwYDVR0jBBgwFoAUbNfgDzg2OujJMgu3w5YFtxms98QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9lZTc0Yzc5OS03ZDRjLTRkZjMtYjcxMS0yOTZj
MzQzMzhlZjUuY2VyMGMGCCsGAQUFBwEHAQH/BFQwUjBQBAIAATBKAwQEQE9gAwQC
SnXsAwQCSnm0AwQDSnrAAwQErfNwMAwDBATA0LADBADA0L4DBAPGMhgDBAPHEAgD
BAPHwMgDBATYa5ADBATY54AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG
CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j
cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAuf2OQZ91AczmJlWW2I14jGkfggDX
cQTbIirBm4eLgqWkSreZ/CastqRyP8KaAVUd86AhVt1VBBY7mqjjynHIGrr1D3Ar
SxI50+QNT4+ml4NyOLY6n3QhEdRJlJkfYm8gCELHmC1pCWf3BpZzBa26gv010Cvo
SQx2NdI350A5jQkhSPAvTr6Cc4neRhNsVw1Rd3NoTRtmzDy/90h0hH1kaeVMXc+y
By3VhDEmbLFmNLyOUV1hcVqUiUQ0bQC3H8hs58QiB1zEqkpvp76fVIat4dC3T+mX
AOKadt8H9yDboCW7mPdMvU+HGQXS5GLaaSlsyfwKeATUWiJ8awa+7Px+Dg==
-----END CERTIFICATE-----
Generated at Fri May 29 16:24:54 2026 by rpki-client