Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a/49950327-e458-3c3a-8593-2cea9f0380f0.roa
File:                     49950327-e458-3c3a-8593-2cea9f0380f0.roa (raw, json)
Hash identifier:          y5Jh/u+eZtyP7fhxsCqvxYzS8BCv7mUjSi4Zy4Pjhxk=
Subject key identifier:   88:39:48:09:F7:D8:9A:BA:EC:25:13:91:2D:E0:11:6B:8B:43:AB:FA
Certificate issuer:       /CN=35c465ca-0a44-43ea-a23f-e0d2de220e1a
Certificate serial:       010D0C9F4328584D59EA6347E939E8155EA7F980
Authority key identifier: B7:37:30:1E:20:83:CB:C9:14:43:9B:7C:6E:43:4A:B7:7A:42:42:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a/49950327-e458-3c3a-8593-2cea9f0380f0.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     3737
IP address blocks:        24.55.128.0/19 maxlen: 24
                          24.102.128.0/17 maxlen: 24
                          24.115.0.0/16 maxlen: 24
                          24.152.192.0/18 maxlen: 24
                          24.229.0.0/16 maxlen: 24
                          24.238.32.0/19 maxlen: 24
                          24.238.64.0/19 maxlen: 24
                          24.246.224.0/19 maxlen: 24
                          50.29.128.0/17 maxlen: 24
                          64.67.0.0/16 maxlen: 24
                          69.12.12.0/22 maxlen: 24
                          70.15.0.0/16 maxlen: 24
                          70.44.0.0/16 maxlen: 24
                          75.97.0.0/16 maxlen: 24
                          104.36.124.0/22 maxlen: 24
                          216.49.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a/35c465ca-0a44-43ea-a23f-e0d2de220e1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a/35c465ca-0a44-43ea-a23f-e0d2de220e1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:63:47:e9:39:e8:15:5e:a7:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35c465ca-0a44-43ea-a23f-e0d2de220e1a
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=2e690bde-a34d-44ce-8a18-cdd88476f60e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a4:f7:1c:7e:63:f6:b6:99:f3:e2:e6:4f:83:
                    03:f2:70:74:a7:55:9f:aa:20:1e:4b:7e:c0:6a:ad:
                    67:d2:b8:40:75:5e:ca:4c:67:22:06:79:e0:13:e2:
                    51:c3:21:a0:61:69:cc:6d:eb:2b:55:6e:69:4a:8b:
                    07:7d:63:6c:95:0e:0e:80:bb:81:38:42:45:15:ca:
                    ec:00:3c:18:0d:e0:7b:d2:c7:a8:e4:0e:ee:5e:13:
                    f5:12:9e:27:e0:07:83:98:4c:84:f5:0b:81:41:83:
                    04:80:67:93:0b:42:5d:a4:7e:2f:45:89:c6:c2:42:
                    99:9f:13:14:79:b8:83:6e:74:47:df:59:d2:77:a7:
                    25:e8:bd:a3:4b:64:41:f0:aa:8c:fd:7a:bd:00:3d:
                    b8:80:c9:d7:14:f1:4a:99:06:e4:db:46:c7:32:8c:
                    96:da:9f:2c:c2:53:57:bc:02:75:14:93:8a:71:13:
                    bf:49:d2:ef:bb:be:98:e2:ff:67:8a:3e:fa:b6:2b:
                    7c:75:97:7b:38:2e:35:f4:43:18:48:95:3b:b7:d8:
                    4d:fb:59:d8:d8:77:58:4c:84:c1:fb:97:0a:2e:a1:
                    92:95:82:89:99:30:94:50:79:13:50:01:68:81:25:
                    d3:43:e1:33:bc:53:7d:38:2b:32:af:e7:a5:0d:9a:
                    22:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:39:48:09:F7:D8:9A:BA:EC:25:13:91:2D:E0:11:6B:8B:43:AB:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a/49950327-e458-3c3a-8593-2cea9f0380f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a/35c465ca-0a44-43ea-a23f-e0d2de220e1a.crl

            X509v3 Authority Key Identifier:
                keyid:B7:37:30:1E:20:83:CB:C9:14:43:9B:7C:6E:43:4A:B7:7A:42:42:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.55.128.0/19
                  24.102.128.0/17
                  24.115.0.0/16
                  24.152.192.0/18
                  24.229.0.0/16
                  24.238.32.0-24.238.95.255
                  24.246.224.0/19
                  50.29.128.0/17
                  64.67.0.0/16
                  69.12.12.0/22
                  70.15.0.0/16
                  70.44.0.0/16
                  75.97.0.0/16
                  104.36.124.0/22
                  216.49.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:56:c3:e4:ca:7b:5f:0d:e1:10:ad:df:2c:77:39:48:5f:70:
         36:b8:93:c6:37:72:f6:af:c9:7f:34:e3:5e:c1:9b:c2:dd:78:
         48:15:aa:59:14:3b:70:05:b0:24:51:fa:8b:5c:4b:2f:e7:d9:
         f7:ea:2e:a6:8d:f2:7e:bc:08:64:ad:d3:05:eb:f6:a6:e1:4a:
         f0:4a:08:83:1a:de:59:ed:53:af:9a:fa:9f:8e:0d:c9:8d:6d:
         3d:21:30:1d:62:a6:6c:00:04:99:04:35:1d:aa:dd:22:da:46:
         9b:07:54:87:41:6d:ee:cc:4e:c2:0c:bf:31:3f:42:7c:6c:03:
         5f:da:42:0e:d8:24:00:34:8f:d1:af:84:1b:8c:b7:23:c3:ef:
         d8:f2:54:48:12:35:6d:4c:7f:12:0d:52:45:31:04:18:8a:17:
         04:c2:71:6a:20:8b:2f:62:1c:ce:bb:78:c4:7e:f6:4f:ca:9c:
         73:9e:9e:f1:75:23:22:50:ea:16:d0:ac:1e:af:0e:34:e8:ff:
         b0:b2:a4:11:98:b8:01:8f:0b:45:78:1f:82:3f:fa:f1:c7:d0:
         a7:7c:d8:78:12:23:c1:37:76:7f:db:50:83:45:30:39:9c:10:
         44:fd:77:eb:f8:ef:a5:1a:ef:6b:2a:8c:6f:41:78:92:ee:cb:
         7a:79:ea:7e
-----BEGIN CERTIFICATE-----
MIIGmTCCBYGgAwIBAgIUAQ0Mn0MoWE1Z6mNH6TnoFV6n+YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzVjNDY1Y2EtMGE0NC00M2VhLWEyM2YtZTBkMmRlMjIw
ZTFhMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk
MmU2OTBiZGUtYTM0ZC00NGNlLThhMTgtY2RkODg0NzZmNjBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqT3HH5j9raZ8+LmT4MD8nB0p1WfqiAeS37A
aq1n0rhAdV7KTGciBnngE+JRwyGgYWnMbesrVW5pSosHfWNslQ4OgLuBOEJFFcrs
ADwYDeB70seo5A7uXhP1Ep4n4AeDmEyE9QuBQYMEgGeTC0JdpH4vRYnGwkKZnxMU
ebiDbnRH31nSd6cl6L2jS2RB8KqM/Xq9AD24gMnXFPFKmQbk20bHMoyW2p8swlNX
vAJ1FJOKcRO/SdLvu76Y4v9nij76tit8dZd7OC419EMYSJU7t9hN+1nY2HdYTITB
+5cKLqGSlYKJmTCUUHkTUAFogSXTQ+EzvFN9OCsyr+elDZoiwwIDAQABo4IDqzCC
A6cwHQYDVR0OBBYEFIg5SAn32Jq67CUTkS3gEWuLQ6v6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNWM0
NjVjYS0wYTQ0LTQzZWEtYTIzZi1lMGQyZGUyMjBlMWEvNDk5NTAzMjctZTQ1OC0z
YzNhLTg1OTMtMmNlYTlmMDM4MGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzVjNDY1Y2EtMGE0NC00M2VhLWEy
M2YtZTBkMmRlMjIwZTFhLzM1YzQ2NWNhLTBhNDQtNDNlYS1hMjNmLWUwZDJkZTIy
MGUxYS5jcmwwHwYDVR0jBBgwFoAUtzcwHiCDy8kUQ5t8bkNKt3pCQi8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNWM0NjVjYS0wYTQ0LTQzZWEtYTIzZi1lMGQy
ZGUyMjBlMWEuY2VyMHUGCCsGAQUFBwEHAQH/BGYwZDBiBAIAATBcAwQFGDeAAwQH
GGaAAwMAGHMDBAYYmMADAwAY5TAMAwQFGO4gAwQFGO5AAwQFGPbgAwQHMh2AAwMA
QEMDBAJFDAwDAwBGDwMDAEYsAwMAS2EDBAJoJHwDBAbYMQAwVAYDVR0gAQH/BEow
SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l
dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAQVbD
5Mp7Xw3hEK3fLHc5SF9wNriTxjdy9q/JfzTjXsGbwt14SBWqWRQ7cAWwJFH6i1xL
L+fZ9+oupo3yfrwIZK3TBev2puFK8EoIgxreWe1Tr5r6n44NyY1tPSEwHWKmbAAE
mQQ1HardItpGmwdUh0Ft7sxOwgy/MT9CfGwDX9pCDtgkADSP0a+EG4y3I8Pv2PJU
SBI1bUx/Eg1SRTEEGIoXBMJxaiCLL2Iczrt4xH72T8qcc56e8XUjIlDqFtCsHq8O
NOj/sLKkEZi4AY8LRXgfgj/68cfQp3zYeBIjwTd2f9tQg0UwOZwQRP136/jvpRrv
ayqMb0F4ku7Lennqfg==
-----END CERTIFICATE-----
Generated at Wed Apr 15 11:34:23 2026 by rpki-client