Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/359dc5d4-050b-4341-b32a-923e8cb66e3a/39f2106c-0072-3364-bcfa-9eed839dd071.roa
File:                     39f2106c-0072-3364-bcfa-9eed839dd071.roa (raw, json)
Hash identifier:          7vAtK4Eafif6uMoNtfsa3zJVVqyPAKa86dgH8gLx/78=
Subject key identifier:   33:13:6C:9F:4C:7B:38:69:D5:70:D5:3E:6A:E3:8A:6B:39:11:83:6B
Certificate issuer:       /CN=359dc5d4-050b-4341-b32a-923e8cb66e3a
Certificate serial:       010D0C9F4328584EAD1C431B3296EB045B2616C0
Authority key identifier: 8F:A8:34:75:E4:4A:DF:8D:3D:57:E9:3E:7B:C2:F6:74:BB:F4:1B:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/359dc5d4-050b-4341-b32a-923e8cb66e3a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/359dc5d4-050b-4341-b32a-923e8cb66e3a/39f2106c-0072-3364-bcfa-9eed839dd071.roa
Signing time:             Fri 31 Jul 2026 01:00:11 +0000
ROA not before:           Fri 31 Jul 2026 01:00:11 +0000
ROA not after:            Thu 29 Oct 2026 01:00:11 +0000
asID:                     3999
IP address blocks:        66.71.0.0/17 maxlen: 24
                          75.102.64.0/18 maxlen: 24
                          104.38.0.0/15 maxlen: 24
                          128.118.0.0/16 maxlen: 24
                          130.203.0.0/16 maxlen: 24
                          146.186.0.0/16 maxlen: 24
                          192.5.157.0/24 maxlen: 24
                          192.5.158.0/24 maxlen: 24
                          192.5.159.0/24 maxlen: 24
                          192.5.160.0/24 maxlen: 24
                          192.5.161.0/24 maxlen: 24
                          192.112.253.0/24 maxlen: 24
                          2610:8::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/359dc5d4-050b-4341-b32a-923e8cb66e3a/359dc5d4-050b-4341-b32a-923e8cb66e3a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/359dc5d4-050b-4341-b32a-923e8cb66e3a/359dc5d4-050b-4341-b32a-923e8cb66e3a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/359dc5d4-050b-4341-b32a-923e8cb66e3a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ad:1c:43:1b:32:96:eb:04:5b:26:16:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359dc5d4-050b-4341-b32a-923e8cb66e3a
        Validity
            Not Before: Jul 31 01:00:11 2026 GMT
            Not After : Oct 29 01:00:11 2026 GMT
        Subject: CN=bcfe7785-3341-43d6-af94-6a9a571cbc5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f6:91:93:21:9b:ba:48:b3:67:a6:14:94:2d:
                    9a:2d:68:c9:47:77:51:1e:33:4c:b0:48:e2:bd:02:
                    53:0d:25:b8:2b:b4:ef:44:cb:c4:95:9c:f1:19:1b:
                    f9:96:77:df:ec:26:ba:25:7b:2a:ea:a7:36:bb:b6:
                    37:cd:ba:88:85:6d:07:3e:9a:1f:7d:0c:8e:ce:d0:
                    90:a0:7e:96:1c:96:66:fb:9d:98:f6:bb:99:d7:51:
                    e1:08:28:24:5b:3a:38:21:f6:03:a4:cd:dc:92:64:
                    b0:5e:03:19:3d:e5:ef:af:2f:d8:f3:f4:88:30:f1:
                    fb:b1:a4:82:37:7e:f1:37:dd:ca:4c:f6:7e:bf:e9:
                    51:df:83:be:55:45:5e:9f:fd:05:57:7d:26:d3:94:
                    49:25:01:72:71:18:1f:b5:4b:b3:6c:f0:ba:f8:e6:
                    b3:47:82:82:a5:d4:6f:5e:e4:6a:58:a7:af:88:47:
                    de:8f:0e:4a:2e:95:e7:78:38:d4:25:10:51:ae:d1:
                    a2:21:b6:13:6d:de:4a:33:e3:d7:14:ee:61:07:56:
                    1a:ca:fe:4d:66:99:60:4f:50:ff:b8:1c:ee:ec:e1:
                    99:22:f4:5d:c5:65:a2:40:32:b9:bd:a8:7e:47:e2:
                    dc:ac:d1:2d:5b:49:4f:53:45:1e:7e:61:b2:9c:c6:
                    a0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:13:6C:9F:4C:7B:38:69:D5:70:D5:3E:6A:E3:8A:6B:39:11:83:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/359dc5d4-050b-4341-b32a-923e8cb66e3a/39f2106c-0072-3364-bcfa-9eed839dd071.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/359dc5d4-050b-4341-b32a-923e8cb66e3a/359dc5d4-050b-4341-b32a-923e8cb66e3a.crl

            X509v3 Authority Key Identifier:
                keyid:8F:A8:34:75:E4:4A:DF:8D:3D:57:E9:3E:7B:C2:F6:74:BB:F4:1B:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/359dc5d4-050b-4341-b32a-923e8cb66e3a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.71.0.0/17
                  75.102.64.0/18
                  104.38.0.0/15
                  128.118.0.0/16
                  130.203.0.0/16
                  146.186.0.0/16
                  192.5.157.0-192.5.161.255
                  192.112.253.0/24
                IPv6:
                  2610:8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:3b:1b:31:51:ad:80:09:4f:c1:1b:69:a3:05:18:e6:1e:31:
         eb:91:22:0b:2b:96:42:d1:89:fd:36:50:31:f0:d5:8e:4c:01:
         1f:cb:61:d6:b2:f4:ec:5d:ca:cc:af:07:45:0c:97:d8:9a:05:
         df:eb:38:6f:f7:e2:1f:21:7f:a0:94:2a:73:e4:3d:9c:e1:1a:
         ab:b5:97:a9:53:e3:24:08:cc:42:11:c2:db:c9:19:09:b1:08:
         71:91:19:9a:41:cb:55:55:8b:b4:c4:9e:61:c4:18:3d:2c:98:
         30:3b:58:9d:95:90:56:8c:22:aa:6b:2b:9d:12:d8:ff:1c:60:
         d4:9c:23:95:8f:91:e3:15:32:77:df:8b:36:37:9b:01:0f:e9:
         dd:7d:af:47:5d:f4:a1:19:96:1a:86:a7:8b:5a:21:9b:18:69:
         98:77:c7:3a:2d:32:17:c1:de:a8:8c:d9:eb:96:20:ac:b4:12:
         7d:0f:3f:bd:eb:88:2f:cd:61:4a:ed:84:21:c6:8d:26:08:11:
         d8:93:41:bd:9a:6d:10:32:d5:e0:6c:26:bb:c3:b4:2d:38:3d:
         f2:c5:91:4f:41:07:0f:fa:b9:5f:ca:9b:ae:7e:ae:1e:a9:40:
         df:a3:a3:91:08:0a:2b:53:19:ef:48:a6:37:e7:c5:7d:30:34:
         12:36:3e:2c
-----BEGIN CERTIFICATE-----
MIIGgDCCBWigAwIBAgIUAQ0Mn0MoWE6tHEMbMpbrBFsmFsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzU5ZGM1ZDQtMDUwYi00MzQxLWIzMmEtOTIzZThjYjY2
ZTNhMB4XDTI2MDczMTAxMDAxMVoXDTI2MTAyOTAxMDAxMVowLzEtMCsGA1UEAxMk
YmNmZTc3ODUtMzM0MS00M2Q2LWFmOTQtNmE5YTU3MWNiYzVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/aRkyGbukizZ6YUlC2aLWjJR3dRHjNMsEji
vQJTDSW4K7TvRMvElZzxGRv5lnff7Ca6JXsq6qc2u7Y3zbqIhW0HPpoffQyOztCQ
oH6WHJZm+52Y9ruZ11HhCCgkWzo4IfYDpM3ckmSwXgMZPeXvry/Y8/SIMPH7saSC
N37xN93KTPZ+v+lR34O+VUVen/0FV30m05RJJQFycRgftUuzbPC6+OazR4KCpdRv
XuRqWKeviEfejw5KLpXneDjUJRBRrtGiIbYTbd5KM+PXFO5hB1Yayv5NZplgT1D/
uBzu7OGZIvRdxWWiQDK5vah+R+LcrNEtW0lPU0UefmGynMagMwIDAQABo4IDkjCC
A44wHQYDVR0OBBYEFDMTbJ9Mezhp1XDVPmrjims5EYNrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNTlk
YzVkNC0wNTBiLTQzNDEtYjMyYS05MjNlOGNiNjZlM2EvMzlmMjEwNmMtMDA3Mi0z
MzY0LWJjZmEtOWVlZDgzOWRkMDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMzU5ZGM1ZDQtMDUwYi00MzQxLWIz
MmEtOTIzZThjYjY2ZTNhLzM1OWRjNWQ0LTA1MGItNDM0MS1iMzJhLTkyM2U4Y2I2
NmUzYS5jcmwwHwYDVR0jBBgwFoAUj6g0deRK3409V+k+e8L2dLv0G0UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi8zNTlkYzVkNC0wNTBiLTQzNDEtYjMyYS05MjNl
OGNiNjZlM2EuY2VyMFwGCCsGAQUFBwEHAQH/BE0wSzA6BAIAATA0AwQHQkcAAwQG
S2ZAAwMBaCYDAwCAdgMDAILLAwMAkrowDAMEAMAFnQMEAcAFoAMEAMBw/TANBAIA
AjAHAwUAJhAACDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQDPOxsxUa2ACU/BG2mjBRjmHjHrkSILK5ZC0Yn9
NlAx8NWOTAEfy2HWsvTsXcrMrwdFDJfYmgXf6zhv9+IfIX+glCpz5D2c4RqrtZep
U+MkCMxCEcLbyRkJsQhxkRmaQctVVYu0xJ5hxBg9LJgwO1idlZBWjCKqayudEtj/
HGDUnCOVj5HjFTJ334s2N5sBD+ndfa9HXfShGZYahqeLWiGbGGmYd8c6LTIXwd6o
jNnrliCstBJ9Dz+964gvzWFK7YQhxo0mCBHYk0G9mm0QMtXgbCa7w7QtOD3yxZFP
QQcP+rlfypuufq4eqUDfo6ORCAorUxnvSKY358V9MDQSNj4s
-----END CERTIFICATE-----
Generated at Sat Sep 5 03:22:20 2026 by rpki-client