Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/80a87ebc-f0c6-3223-8156-73a966a5fbbd.roa
File:                     80a87ebc-f0c6-3223-8156-73a966a5fbbd.roa (raw, json)
Hash identifier:          SUzJvgsOMtv+zPQxdP9DCs4u+Ge27YM+rsYokhGRIRw=
Subject key identifier:   A2:E2:64:FE:32:C5:52:61:22:D6:45:54:1C:DA:D0:07:9A:63:BD:E6
Certificate issuer:       /CN=a95fce7e-65c2-466f-ae34-eadb8c72156b
Certificate serial:       010D0C9F4328584E376474D818DA5F38BC11EB00
Authority key identifier: 5F:8C:A6:E1:84:0F:A2:FE:BD:8D:DA:83:98:81:21:DF:CB:E0:65:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/80a87ebc-f0c6-3223-8156-73a966a5fbbd.roa
Signing time:             Thu 18 Jun 2026 21:00:12 +0000
ROA not before:           Thu 18 Jun 2026 21:00:12 +0000
ROA not after:            Wed 16 Sep 2026 21:00:12 +0000
asID:                     87
IP address blocks:        134.68.0.0/16 maxlen: 24
                          149.166.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/a95fce7e-65c2-466f-ae34-eadb8c72156b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/a95fce7e-65c2-466f-ae34-eadb8c72156b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:37:64:74:d8:18:da:5f:38:bc:11:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a95fce7e-65c2-466f-ae34-eadb8c72156b
        Validity
            Not Before: Jun 18 21:00:12 2026 GMT
            Not After : Sep 16 21:00:12 2026 GMT
        Subject: CN=93649b5e-7a59-4ebe-83da-c98ec1efa8a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7b:47:23:66:ba:c3:fa:5a:4e:1b:a2:13:c2:
                    37:f0:84:14:20:88:6b:ad:98:ef:60:fc:d8:3b:dd:
                    86:94:ea:a1:d2:6d:de:29:56:f9:47:0a:5c:d5:a9:
                    03:db:e8:83:a3:ec:3e:8c:54:04:74:8f:6a:06:ed:
                    5f:a4:b1:0d:53:13:9b:84:cb:af:e8:dc:5f:ea:4e:
                    39:4f:62:04:dd:fd:29:f6:1c:a2:9c:af:19:47:03:
                    78:11:4b:0b:ed:ed:94:d8:05:85:a0:8b:3d:3f:1c:
                    ee:72:6b:ea:37:94:9e:44:77:95:6c:5f:9e:26:6b:
                    ab:df:02:6e:92:c1:24:ee:d1:8e:e9:f7:d8:ce:87:
                    e1:2e:8d:dc:9a:d2:e5:8f:95:9f:dd:bf:ec:60:97:
                    03:fa:1a:7a:4f:f6:57:0f:f5:4f:af:dc:11:18:89:
                    77:08:9c:67:68:59:18:af:eb:60:92:51:67:33:d6:
                    03:71:26:ee:2e:73:2e:7e:18:cc:d7:44:d8:23:a5:
                    d8:68:95:ff:ab:b6:66:cc:72:08:2f:f6:d4:2a:44:
                    fe:6b:2c:83:4a:4a:20:3b:af:8d:0c:19:6e:6a:48:
                    12:eb:0e:bd:63:64:b3:0b:d9:f0:ce:8d:77:66:83:
                    3d:cf:b3:9e:14:10:64:4f:ab:56:54:4e:ae:b8:3d:
                    1e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:E2:64:FE:32:C5:52:61:22:D6:45:54:1C:DA:D0:07:9A:63:BD:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/80a87ebc-f0c6-3223-8156-73a966a5fbbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/a95fce7e-65c2-466f-ae34-eadb8c72156b.crl

            X509v3 Authority Key Identifier:
                keyid:5F:8C:A6:E1:84:0F:A2:FE:BD:8D:DA:83:98:81:21:DF:CB:E0:65:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.68.0.0/16
                  149.166.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:f3:86:e1:6f:e1:55:dc:d4:5b:2c:30:5f:77:3b:27:0c:bf:
         e8:50:21:8c:a2:04:e9:6b:a5:64:7a:62:dc:f5:af:11:b1:69:
         99:3f:76:b9:d3:1a:25:29:cb:8b:20:f3:74:87:5d:7b:86:75:
         ac:25:43:1c:51:23:4f:fa:5f:56:dc:47:c4:8d:f5:13:27:d8:
         95:a3:aa:5d:11:f9:94:40:8d:23:f1:20:55:32:13:46:5f:0c:
         47:a2:11:9d:7f:fe:ee:95:e9:3a:30:c5:2f:f7:62:69:66:ab:
         d7:08:9c:4f:38:a2:c1:52:0a:73:be:00:6c:07:c1:85:2c:1f:
         82:85:a1:b0:94:c9:8f:63:d3:90:e7:0d:76:bf:94:7b:0c:e7:
         5e:fa:ff:47:76:d2:57:37:3e:26:0f:d0:8b:22:a2:77:14:88:
         46:3c:d4:97:04:91:db:18:99:5e:27:ac:39:f5:ef:7d:0f:a9:
         e5:cc:40:f8:f3:04:0b:80:e0:ec:b5:2b:63:c1:bb:47:58:14:
         b7:6a:96:74:f0:65:49:39:c9:cc:f7:41:3d:3b:b2:0a:6d:54:
         9a:fc:ba:d6:50:80:ae:4b:e7:7a:e5:b8:7f:5f:95:a5:a7:37:
         5e:1a:03:a6:4e:37:26:30:f5:05:f1:cc:e9:27:57:3c:9c:99:
         2b:89:fa:42
-----BEGIN CERTIFICATE-----
MIIGRzCCBS+gAwIBAgIUAQ0Mn0MoWE43ZHTYGNpfOLwR6wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTk1ZmNlN2UtNjVjMi00NjZmLWFlMzQtZWFkYjhjNzIx
NTZiMB4XDTI2MDYxODIxMDAxMloXDTI2MDkxNjIxMDAxMlowLzEtMCsGA1UEAxMk
OTM2NDliNWUtN2E1OS00ZWJlLTgzZGEtYzk4ZWMxZWZhOGE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkntHI2a6w/paThuiE8I38IQUIIhrrZjvYPzY
O92GlOqh0m3eKVb5Rwpc1akD2+iDo+w+jFQEdI9qBu1fpLENUxObhMuv6Nxf6k45
T2IE3f0p9hyinK8ZRwN4EUsL7e2U2AWFoIs9PxzucmvqN5SeRHeVbF+eJmur3wJu
ksEk7tGO6ffYzofhLo3cmtLlj5Wf3b/sYJcD+hp6T/ZXD/VPr9wRGIl3CJxnaFkY
r+tgklFnM9YDcSbuLnMufhjM10TYI6XYaJX/q7ZmzHIIL/bUKkT+ayyDSkogO6+N
DBluakgS6w69Y2SzC9nwzo13ZoM9z7OeFBBkT6tWVE6uuD0eOwIDAQABo4IDWTCC
A1UwHQYDVR0OBBYEFKLiZP4yxVJhItZFVBza0AeaY73mMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hOTVm
Y2U3ZS02NWMyLTQ2NmYtYWUzNC1lYWRiOGM3MjE1NmIvODBhODdlYmMtZjBjNi0z
MjIzLTgxNTYtNzNhOTY2YTVmYmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTk1ZmNlN2UtNjVjMi00NjZmLWFl
MzQtZWFkYjhjNzIxNTZiL2E5NWZjZTdlLTY1YzItNDY2Zi1hZTM0LWVhZGI4Yzcy
MTU2Yi5jcmwwHwYDVR0jBBgwFoAUX4ym4YQPov69jdqDmIEh38vgZc4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9hOTVmY2U3ZS02NWMyLTQ2NmYtYWUzNC1lYWRi
OGM3MjE1NmIuY2VyMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAATAKAwMAhkQDAwCV
pjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz
Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3
DQEBCwUAA4IBAQAQ84bhb+FV3NRbLDBfdzsnDL/oUCGMogTpa6VkemLc9a8RsWmZ
P3a50xolKcuLIPN0h117hnWsJUMcUSNP+l9W3EfEjfUTJ9iVo6pdEfmUQI0j8SBV
MhNGXwxHohGdf/7ulek6MMUv92JpZqvXCJxPOKLBUgpzvgBsB8GFLB+ChaGwlMmP
Y9OQ5w12v5R7DOde+v9HdtJXNz4mD9CLIqJ3FIhGPNSXBJHbGJleJ6w59e99D6nl
zED48wQLgODstStjwbtHWBS3apZ08GVJOcnM90E9O7IKbVSa/LrWUICuS+d65bh/
X5WlpzdeGgOmTjcmMPUF8czpJ1c8nJkrifpC
-----END CERTIFICATE-----
Generated at Tue Jul 7 20:09:08 2026 by rpki-client