Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/8fbee004-d77c-3406-a15c-51548b9eb616.roa
File:                     8fbee004-d77c-3406-a15c-51548b9eb616.roa (raw, json)
Hash identifier:          wSlf/1XwqZF71eyWsFAiObe074ue/VHzo1Chxi//o2o=
Subject key identifier:   34:54:D4:D3:53:6D:02:4A:42:05:B5:2E:F2:E1:8B:1E:43:80:14:44
Certificate issuer:       /CN=253c1f46-e2ad-4547-8b1c-5935addeddb5
Certificate serial:       010D0C9F4328584EC20C62BE8B651FBBB14B7F3C
Authority key identifier: 80:1D:43:D8:F7:17:16:B0:69:AB:08:47:B2:A9:15:13:40:32:69:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/8fbee004-d77c-3406-a15c-51548b9eb616.roa
Signing time:             Fri 07 Aug 2026 13:00:11 +0000
ROA not before:           Fri 07 Aug 2026 13:00:11 +0000
ROA not after:            Thu 05 Nov 2026 14:00:11 +0000
asID:                     17012
IP address blocks:        64.4.240.0/21 maxlen: 24
                          64.4.248.0/22 maxlen: 24
                          66.211.168.0/22 maxlen: 24
                          173.0.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 31 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:0c:62:be:8b:65:1f:bb:b1:4b:7f:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=253c1f46-e2ad-4547-8b1c-5935addeddb5
        Validity
            Not Before: Aug  7 13:00:11 2026 GMT
            Not After : Nov  5 14:00:11 2026 GMT
        Subject: CN=47099bd9-422d-4b32-a415-8e960ab28d3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:92:a0:a8:03:71:ab:ee:c8:55:93:e1:c3:a2:
                    df:17:70:3b:b0:3d:fa:06:ea:d7:7e:a2:86:ab:f9:
                    3c:84:2e:e5:3a:46:99:96:2e:5b:91:2c:af:4c:4c:
                    71:d3:52:71:0a:f0:27:d6:76:c1:56:20:51:fd:25:
                    47:25:5f:fe:db:3f:c0:a0:5d:8b:d6:6e:f6:b4:2a:
                    16:37:3c:9d:79:18:ed:5c:4a:47:14:d5:96:2b:e5:
                    8b:1a:cb:60:96:a0:12:57:92:70:47:cb:36:03:cd:
                    b6:86:ae:f8:ee:aa:78:97:94:c1:50:8a:33:8d:94:
                    5d:b4:76:81:9d:32:5a:c5:44:17:f5:6c:c4:c4:a2:
                    a1:c4:61:8b:50:d4:c0:6c:bd:86:a1:ba:56:f0:07:
                    ee:60:28:a8:80:9e:df:95:df:07:aa:45:c2:23:ba:
                    6a:b6:b8:8c:09:e5:71:e7:b4:fb:6b:8f:31:00:db:
                    be:90:fc:40:c1:9c:f7:12:91:f9:a2:42:79:1f:f4:
                    87:5d:85:c1:97:ea:ba:14:38:85:be:83:f8:52:3c:
                    3c:b6:67:6a:ad:a8:b6:86:2b:59:16:26:7d:a7:82:
                    09:f2:0f:41:31:e9:2b:0c:e5:32:35:fe:b9:41:e3:
                    15:a8:92:67:d1:da:ea:15:f6:24:be:91:67:8f:c0:
                    56:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:54:D4:D3:53:6D:02:4A:42:05:B5:2E:F2:E1:8B:1E:43:80:14:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/8fbee004-d77c-3406-a15c-51548b9eb616.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.crl

            X509v3 Authority Key Identifier:
                keyid:80:1D:43:D8:F7:17:16:B0:69:AB:08:47:B2:A9:15:13:40:32:69:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.4.240.0-64.4.251.255
                  66.211.168.0/22
                  173.0.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:47:4f:f4:61:bf:5d:a7:aa:17:e9:db:39:61:3e:62:ea:2c:
         ed:f3:3b:1a:53:7a:8a:1c:82:01:0b:6e:7a:22:92:dc:58:ca:
         fe:5f:d5:a1:cb:09:f1:05:07:db:85:9e:9c:e8:0d:e4:b1:b1:
         32:47:76:e4:19:df:d1:c4:31:c7:4e:91:fa:05:5d:1c:00:a5:
         cd:2c:f8:98:02:1e:e0:70:35:6b:14:ab:35:a1:0f:0c:6f:f8:
         e7:b8:ac:1f:34:f8:2f:e8:d4:a0:ce:c0:33:21:cc:fd:12:c3:
         12:a9:39:69:3f:52:59:9b:2a:34:ad:94:8d:e7:35:4d:39:e1:
         2a:ff:24:28:cc:7f:25:af:96:91:65:f1:21:0c:69:08:cc:06:
         d1:c3:d4:02:0c:e0:1e:6f:78:9a:1f:1f:5a:7a:c6:e6:f9:d0:
         8c:a4:11:99:2a:58:16:a4:27:a1:4f:31:49:97:87:0b:6f:64:
         1d:a3:47:17:36:03:b1:74:5d:0a:04:b4:fe:ee:c6:38:ad:19:
         37:7b:25:08:b9:18:fb:37:bf:a2:45:c5:55:d0:31:68:33:87:
         cc:f8:cc:00:c6:63:56:d2:5b:bb:94:ee:02:fd:97:e6:9b:86:
         5b:bc:f3:de:17:71:b0:fa:04:e3:79:79:95:7b:a5:99:cb:a1:
         2f:fe:0c:62
-----BEGIN CERTIFICATE-----
MIIGVzCCBT+gAwIBAgIUAQ0Mn0MoWE7CDGK+i2Ufu7FLfzwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjUzYzFmNDYtZTJhZC00NTQ3LThiMWMtNTkzNWFkZGVk
ZGI1MB4XDTI2MDgwNzEzMDAxMVoXDTI2MTEwNTE0MDAxMVowLzEtMCsGA1UEAxMk
NDcwOTliZDktNDIyZC00YjMyLWE0MTUtOGU5NjBhYjI4ZDNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJKgqANxq+7IVZPhw6LfF3A7sD36BurXfqKG
q/k8hC7lOkaZli5bkSyvTExx01JxCvAn1nbBViBR/SVHJV/+2z/AoF2L1m72tCoW
NzydeRjtXEpHFNWWK+WLGstglqASV5JwR8s2A822hq747qp4l5TBUIozjZRdtHaB
nTJaxUQX9WzExKKhxGGLUNTAbL2GobpW8AfuYCiogJ7fld8HqkXCI7pqtriMCeVx
57T7a48xANu+kPxAwZz3EpH5okJ5H/SHXYXBl+q6FDiFvoP4Ujw8tmdqrai2hitZ
FiZ9p4IJ8g9BMekrDOUyNf65QeMVqJJn0drqFfYkvpFnj8BW6wIDAQABo4IDaTCC
A2UwHQYDVR0OBBYEFDRU1NNTbQJKQgW1LvLhix5DgBREMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNTNj
MWY0Ni1lMmFkLTQ1NDctOGIxYy01OTM1YWRkZWRkYjUvOGZiZWUwMDQtZDc3Yy0z
NDA2LWExNWMtNTE1NDhiOWViNjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjUzYzFmNDYtZTJhZC00NTQ3LThi
MWMtNTkzNWFkZGVkZGI1LzI1M2MxZjQ2LWUyYWQtNDU0Ny04YjFjLTU5MzVhZGRl
ZGRiNS5jcmwwHwYDVR0jBBgwFoAUgB1D2PcXFrBpqwhHsqkVE0AyaWYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNTNjMWY0Ni1lMmFkLTQ1NDctOGIxYy01OTM1
YWRkZWRkYjUuY2VyMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBARABPAD
BAJABPgDBAJC06gDBAStAFAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG
CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j
cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEADEdP9GG/XaeqF+nbOWE+Yuos7fM7
GlN6ihyCAQtueiKS3FjK/l/VocsJ8QUH24WenOgN5LGxMkd25Bnf0cQxx06R+gVd
HAClzSz4mAIe4HA1axSrNaEPDG/457isHzT4L+jUoM7AMyHM/RLDEqk5aT9SWZsq
NK2Ujec1TTnhKv8kKMx/Ja+WkWXxIQxpCMwG0cPUAgzgHm94mh8fWnrG5vnQjKQR
mSpYFqQnoU8xSZeHC29kHaNHFzYDsXRdCgS0/u7GOK0ZN3slCLkY+ze/okXFVdAx
aDOHzPjMAMZjVtJbu5TuAv2X5puGW7zz3hdxsPoE43l5lXulmcuhL/4MYg==
-----END CERTIFICATE-----
Generated at Sat Aug 29 07:39:38 2026 by rpki-client