Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1c018303-b5eb-46a0-9637-c56d85f005da/62abdddd-9c57-3557-9b6f-37ec0464fda0.roa
File:                     62abdddd-9c57-3557-9b6f-37ec0464fda0.roa (raw, json)
Hash identifier:          y48o8wbZnwvxWVs6M/PBvM+QdniEr/VqCEpZtw+8Tx0=
Subject key identifier:   0A:AB:22:7D:5D:9C:A2:4F:23:72:17:2B:E8:D7:EE:6F:0F:8A:E6:76
Certificate issuer:       /CN=1c018303-b5eb-46a0-9637-c56d85f005da
Certificate serial:       010D0C9F4328584EB416EDEC1A95C788847D34A0
Authority key identifier: 28:C8:4D:60:13:82:73:F2:F7:24:15:59:39:80:1E:9C:88:25:D5:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1c018303-b5eb-46a0-9637-c56d85f005da.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1c018303-b5eb-46a0-9637-c56d85f005da/62abdddd-9c57-3557-9b6f-37ec0464fda0.roa
Signing time:             Sun 02 Aug 2026 13:00:12 +0000
ROA not before:           Sun 02 Aug 2026 13:00:12 +0000
ROA not after:            Sat 31 Oct 2026 13:00:12 +0000
asID:                     393775
IP address blocks:        131.149.240.0/22 maxlen: 24
                          192.196.0.0/24 maxlen: 24
                          207.38.72.0/21 maxlen: 24
                          208.90.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1c018303-b5eb-46a0-9637-c56d85f005da/1c018303-b5eb-46a0-9637-c56d85f005da.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1c018303-b5eb-46a0-9637-c56d85f005da/1c018303-b5eb-46a0-9637-c56d85f005da.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1c018303-b5eb-46a0-9637-c56d85f005da.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b4:16:ed:ec:1a:95:c7:88:84:7d:34:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c018303-b5eb-46a0-9637-c56d85f005da
        Validity
            Not Before: Aug  2 13:00:12 2026 GMT
            Not After : Oct 31 13:00:12 2026 GMT
        Subject: CN=3fb5b779-bea8-4091-a534-9c67b086a3b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:71:21:a7:e7:af:78:7f:31:ae:ea:62:24:e4:
                    f2:d0:f8:a0:41:2b:f4:99:a1:2b:9b:81:c1:d0:af:
                    02:89:4b:98:78:19:e6:a0:a0:8e:81:e7:3c:3d:40:
                    46:1a:33:cf:8d:da:17:99:c2:df:81:50:7f:7d:e9:
                    00:bd:5b:94:64:0c:65:bb:e5:cd:53:50:dc:0a:21:
                    d9:71:47:ed:18:56:6d:22:c2:2f:3d:ed:07:76:e4:
                    67:ea:41:02:85:89:34:5a:e0:d4:05:31:c6:9c:89:
                    94:88:d9:00:44:e8:0c:b6:de:ff:35:94:07:07:1f:
                    94:98:e7:9c:fe:f2:64:86:36:07:59:1b:93:78:56:
                    97:4b:cf:72:fd:4c:4f:d8:65:83:10:0b:02:e5:ab:
                    9a:51:ee:a4:80:f4:7d:e1:86:81:d4:90:43:ee:98:
                    32:6c:69:4a:6e:ee:10:5f:4b:17:fe:39:9a:11:85:
                    c2:8b:1d:24:79:97:31:64:76:19:88:bc:b7:05:90:
                    13:3d:31:e9:49:cd:3b:07:74:3b:6c:3f:a0:5c:b4:
                    83:77:9d:5d:e3:13:97:8c:98:10:3b:ed:f5:84:93:
                    12:a6:81:ad:9d:9b:83:3a:fa:85:f2:b4:54:b9:99:
                    fb:48:ab:77:04:20:17:e3:b8:c2:ef:dc:6d:7c:8c:
                    a7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:AB:22:7D:5D:9C:A2:4F:23:72:17:2B:E8:D7:EE:6F:0F:8A:E6:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1c018303-b5eb-46a0-9637-c56d85f005da/62abdddd-9c57-3557-9b6f-37ec0464fda0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1c018303-b5eb-46a0-9637-c56d85f005da/1c018303-b5eb-46a0-9637-c56d85f005da.crl

            X509v3 Authority Key Identifier:
                keyid:28:C8:4D:60:13:82:73:F2:F7:24:15:59:39:80:1E:9C:88:25:D5:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1c018303-b5eb-46a0-9637-c56d85f005da.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.149.240.0/22
                  192.196.0.0/24
                  207.38.72.0/21
                  208.90.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:f7:1c:24:2d:34:4b:50:f0:76:40:3c:5f:c9:2c:5a:33:a9:
         f0:8c:af:db:f1:03:52:56:09:eb:87:e5:4c:80:04:d5:ab:73:
         73:f7:92:34:69:ab:bb:f2:f4:b6:7c:0c:ee:30:c7:d6:e7:80:
         7d:6e:e4:68:95:fe:b0:59:44:cf:6e:6a:ff:2b:59:47:5b:01:
         d1:f5:73:ea:e4:c4:8f:21:c3:fc:f1:76:10:3c:bd:c8:13:e1:
         ce:a3:07:6b:72:cd:a2:86:3c:fa:25:4b:62:f5:49:b8:cb:dd:
         54:cf:c8:5e:99:bd:98:eb:37:3d:81:d8:28:04:7d:7c:ed:57:
         2a:97:d5:5f:33:51:a5:4e:fe:a3:2b:a5:d8:ee:40:0a:ba:ba:
         bc:92:98:cf:35:69:8b:65:45:26:fc:a5:e9:c0:12:64:9f:c4:
         14:d9:78:30:f0:af:ef:6a:2f:78:1b:83:42:77:50:33:ff:54:
         13:ce:60:f5:98:3f:7b:ae:43:93:a0:5e:3f:a4:72:aa:3e:23:
         32:6f:d5:f7:73:7c:70:d8:49:ec:b2:85:16:24:93:94:b9:95:
         d5:03:95:bc:26:7c:fd:3b:f9:6c:6c:89:f3:26:86:88:22:91:
         ae:b3:2e:0e:60:d4:59:e9:eb:8c:ed:23:f1:79:70:f4:4c:90:
         72:c2:54:ec
-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWE60Fu3sGpXHiIR9NKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWMwMTgzMDMtYjVlYi00NmEwLTk2MzctYzU2ZDg1ZjAw
NWRhMB4XDTI2MDgwMjEzMDAxMloXDTI2MTAzMTEzMDAxMlowLzEtMCsGA1UEAxMk
M2ZiNWI3NzktYmVhOC00MDkxLWE1MzQtOWM2N2IwODZhM2I2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXEhp+eveH8xrupiJOTy0PigQSv0maErm4HB
0K8CiUuYeBnmoKCOgec8PUBGGjPPjdoXmcLfgVB/fekAvVuUZAxlu+XNU1DcCiHZ
cUftGFZtIsIvPe0HduRn6kEChYk0WuDUBTHGnImUiNkAROgMtt7/NZQHBx+UmOec
/vJkhjYHWRuTeFaXS89y/UxP2GWDEAsC5auaUe6kgPR94YaB1JBD7pgybGlKbu4Q
X0sX/jmaEYXCix0keZcxZHYZiLy3BZATPTHpSc07B3Q7bD+gXLSDd51d4xOXjJgQ
O+31hJMSpoGtnZuDOvqF8rRUuZn7SKt3BCAX47jC79xtfIynHQIDAQABo4IDZzCC
A2MwHQYDVR0OBBYEFAqrIn1dnKJPI3IXK+jX7m8PiuZ2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8xYzAx
ODMwMy1iNWViLTQ2YTAtOTYzNy1jNTZkODVmMDA1ZGEvNjJhYmRkZGQtOWM1Ny0z
NTU3LTliNmYtMzdlYzA0NjRmZGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMWMwMTgzMDMtYjVlYi00NmEwLTk2
MzctYzU2ZDg1ZjAwNWRhLzFjMDE4MzAzLWI1ZWItNDZhMC05NjM3LWM1NmQ4NWYw
MDVkYS5jcmwwHwYDVR0jBBgwFoAUKMhNYBOCc/L3JBVZOYAenIgl1b0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi8xYzAxODMwMy1iNWViLTQ2YTAtOTYzNy1jNTZk
ODVmMDA1ZGEuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCg5XwAwQA
wMQAAwQDzyZIAwQC0Fq8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr
BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz
Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBACT3HCQtNEtQ8HZAPF/JLFozqfCMr9vx
A1JWCeuH5UyABNWrc3P3kjRpq7vy9LZ8DO4wx9bngH1u5GiV/rBZRM9uav8rWUdb
AdH1c+rkxI8hw/zxdhA8vcgT4c6jB2tyzaKGPPolS2L1SbjL3VTPyF6ZvZjrNz2B
2CgEfXztVyqX1V8zUaVO/qMrpdjuQAq6urySmM81aYtlRSb8penAEmSfxBTZeDDw
r+9qL3gbg0J3UDP/VBPOYPWYP3uuQ5OgXj+kcqo+IzJv1fdzfHDYSeyyhRYkk5S5
ldUDlbwmfP07+WxsifMmhogika6zLg5g1Fnp64ztI/F5cPRMkHLCVOw=
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:09:10 2026 by rpki-client