Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9f5524fb-427a-4258-864d-80d99ebf694c/ba36c661-fc65-3b28-95d6-3fd2abd933be.roa
File:                     ba36c661-fc65-3b28-95d6-3fd2abd933be.roa (raw, json)
Hash identifier:          xQJmdYFuKSH9CWjUIawjRn4rayDRIptviHHbOfjof44=
Subject key identifier:   56:A2:84:40:17:89:ED:76:2B:01:A3:2D:87:E0:E8:A0:1A:46:18:2C
Certificate issuer:       /CN=9f5524fb-427a-4258-864d-80d99ebf694c
Certificate serial:       010D0C9F4328584E90BA570CFB2A57DD3CD29750
Authority key identifier: C1:AB:39:ED:07:87:F0:26:DB:C6:59:90:B3:93:77:B7:25:E6:F5:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9f5524fb-427a-4258-864d-80d99ebf694c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9f5524fb-427a-4258-864d-80d99ebf694c/ba36c661-fc65-3b28-95d6-3fd2abd933be.roa
Signing time:             Mon 20 Jul 2026 21:00:11 +0000
ROA not before:           Mon 20 Jul 2026 21:00:11 +0000
ROA not after:            Sun 18 Oct 2026 21:00:11 +0000
asID:                     19435
IP address blocks:        64.85.176.0/24 maxlen: 24
                          64.85.177.0/24 maxlen: 24
                          64.85.182.0/24 maxlen: 24
                          64.85.183.0/24 maxlen: 24
                          64.85.184.0/24 maxlen: 24
                          64.85.191.0/24 maxlen: 24
                          184.171.128.0/24 maxlen: 24
                          184.171.129.0/24 maxlen: 24
                          184.171.131.0/24 maxlen: 24
                          184.171.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9f5524fb-427a-4258-864d-80d99ebf694c/9f5524fb-427a-4258-864d-80d99ebf694c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9f5524fb-427a-4258-864d-80d99ebf694c/9f5524fb-427a-4258-864d-80d99ebf694c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9f5524fb-427a-4258-864d-80d99ebf694c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:90:ba:57:0c:fb:2a:57:dd:3c:d2:97:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f5524fb-427a-4258-864d-80d99ebf694c
        Validity
            Not Before: Jul 20 21:00:11 2026 GMT
            Not After : Oct 18 21:00:11 2026 GMT
        Subject: CN=6d82978b-02fe-4a7f-b038-df1df1ecc749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:50:cd:04:af:8b:e4:0a:69:1e:36:02:8b:2a:
                    47:33:fe:55:60:8f:76:4a:9f:ef:84:5c:ee:08:c3:
                    b5:61:e7:9c:2d:73:01:1a:32:85:bc:cd:2e:d5:37:
                    29:8a:51:91:a0:e8:71:f9:03:e3:07:51:89:a6:82:
                    69:f6:7d:48:10:97:40:21:40:9d:dc:86:cf:3f:f0:
                    cd:bb:df:b8:a8:54:cf:d3:3e:fa:13:4e:2a:76:c7:
                    4e:52:6f:1e:fe:1b:a9:ff:e7:d5:70:b7:1c:a4:f1:
                    3a:f2:9a:cc:09:89:4e:41:f2:d9:bc:4d:51:04:73:
                    4a:a2:43:b0:e4:58:62:6a:ff:79:8d:99:87:a6:ea:
                    bd:2b:42:b8:c1:2d:eb:1b:d5:1b:d6:40:c2:90:84:
                    f0:73:b0:57:80:ee:c1:ea:40:9b:cf:35:a9:4d:0b:
                    96:dd:1c:43:0f:7d:d5:7b:29:28:af:56:3b:70:51:
                    b4:c2:20:98:78:49:3e:b5:68:f2:44:2a:35:a5:ec:
                    cb:33:7d:36:ca:d5:04:d9:ad:dd:24:ab:3d:96:ff:
                    5b:65:30:7f:36:18:12:b3:9e:be:7e:7d:3b:5c:ce:
                    e4:cb:ac:82:b9:c6:0e:73:02:4f:ed:c5:80:62:02:
                    fd:7d:2b:1e:3e:a3:bb:8d:2b:b3:a3:23:73:52:a3:
                    28:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:A2:84:40:17:89:ED:76:2B:01:A3:2D:87:E0:E8:A0:1A:46:18:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9f5524fb-427a-4258-864d-80d99ebf694c/ba36c661-fc65-3b28-95d6-3fd2abd933be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9f5524fb-427a-4258-864d-80d99ebf694c/9f5524fb-427a-4258-864d-80d99ebf694c.crl

            X509v3 Authority Key Identifier:
                keyid:C1:AB:39:ED:07:87:F0:26:DB:C6:59:90:B3:93:77:B7:25:E6:F5:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9f5524fb-427a-4258-864d-80d99ebf694c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.85.176.0/23
                  64.85.182.0-64.85.184.255
                  64.85.191.0/24
                  184.171.128.0/23
                  184.171.131.0/24
                  184.171.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:75:f8:fb:36:4a:b1:7c:a7:30:ad:38:0f:f2:ee:0e:ef:10:
         8d:d0:16:a4:d6:ab:03:f0:04:be:f5:c7:25:59:34:d4:56:99:
         c9:49:fa:9a:8e:47:43:5c:41:fa:0e:9f:70:40:bc:3d:f0:0f:
         d0:02:3f:e8:95:34:14:97:a1:a4:3e:6b:7e:f0:ed:62:8a:d5:
         92:dc:76:e4:9b:1a:08:9d:7d:1b:95:54:f7:ec:fd:b3:05:80:
         c9:38:aa:b0:e0:69:73:43:5e:0c:3e:e5:58:12:e5:17:97:a9:
         73:cd:83:39:c4:0e:fb:89:ee:aa:df:39:44:84:9b:54:36:8f:
         52:1b:08:62:eb:bf:48:63:b0:a2:18:73:a2:73:55:bb:5e:e7:
         da:b0:9f:4a:3a:86:a3:a2:7e:3b:1e:3b:4b:28:12:fa:41:43:
         54:42:26:0a:d7:e8:0c:82:ef:b1:33:bc:a0:00:83:5d:cc:f5:
         3a:5b:80:50:57:cf:90:2e:d4:0c:eb:e2:2e:d1:ba:b0:fe:6f:
         4b:27:b9:40:75:16:07:d1:35:da:ee:04:46:50:3b:af:2c:26:
         71:b2:a1:ce:39:14:3c:9f:e4:8c:62:95:5b:b9:bc:b5:06:b3:
         5c:62:ab:d0:b5:76:f3:96:23:7a:e6:b8:d5:f2:1e:f0:11:4b:
         ef:cd:e1:aa
-----BEGIN CERTIFICATE-----
MIIGaTCCBVGgAwIBAgIUAQ0Mn0MoWE6QulcM+ypX3TzSl1AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWY1NTI0ZmItNDI3YS00MjU4LTg2NGQtODBkOTllYmY2
OTRjMB4XDTI2MDcyMDIxMDAxMVoXDTI2MTAxODIxMDAxMVowLzEtMCsGA1UEAxMk
NmQ4Mjk3OGItMDJmZS00YTdmLWIwMzgtZGYxZGYxZWNjNzQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVDNBK+L5AppHjYCiypHM/5VYI92Sp/vhFzu
CMO1YeecLXMBGjKFvM0u1TcpilGRoOhx+QPjB1GJpoJp9n1IEJdAIUCd3IbPP/DN
u9+4qFTP0z76E04qdsdOUm8e/hup/+fVcLccpPE68prMCYlOQfLZvE1RBHNKokOw
5Fhiav95jZmHpuq9K0K4wS3rG9Ub1kDCkITwc7BXgO7B6kCbzzWpTQuW3RxDD33V
eykor1Y7cFG0wiCYeEk+tWjyRCo1pezLM302ytUE2a3dJKs9lv9bZTB/NhgSs56+
fn07XM7ky6yCucYOcwJP7cWAYgL9fSsePqO7jSuzoyNzUqMoawIDAQABo4IDezCC
A3cwHQYDVR0OBBYEFFaihEAXie12KwGjLYfg6KAaRhgsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi85ZjU1
MjRmYi00MjdhLTQyNTgtODY0ZC04MGQ5OWViZjY5NGMvYmEzNmM2NjEtZmM2NS0z
YjI4LTk1ZDYtM2ZkMmFiZDkzM2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOWY1NTI0ZmItNDI3YS00MjU4LTg2
NGQtODBkOTllYmY2OTRjLzlmNTUyNGZiLTQyN2EtNDI1OC04NjRkLTgwZDk5ZWJm
Njk0Yy5jcmwwHwYDVR0jBBgwFoAUwas57QeH8CbbxlmQs5N3tyXm9UswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi85ZjU1MjRmYi00MjdhLTQyNTgtODY0ZC04MGQ5
OWViZjY5NGMuY2VyMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQBQFWwMAwD
BAFAVbYDBABAVbgDBABAVb8DBAG4q4ADBAC4q4MDBAC4q4wwVAYDVR0gAQH/BEow
SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l
dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEADXX4
+zZKsXynMK04D/LuDu8QjdAWpNarA/AEvvXHJVk01FaZyUn6mo5HQ1xB+g6fcEC8
PfAP0AI/6JU0FJehpD5rfvDtYorVktx25JsaCJ19G5VU9+z9swWAyTiqsOBpc0Ne
DD7lWBLlF5epc82DOcQO+4nuqt85RISbVDaPUhsIYuu/SGOwohhzonNVu17n2rCf
SjqGo6J+Ox47SygS+kFDVEImCtfoDILvsTO8oACDXcz1OluAUFfPkC7UDOviLtG6
sP5vSye5QHUWB9E12u4ERlA7rywmcbKhzjkUPJ/kjGKVW7m8tQazXGKr0LV285Yj
eua41fIe8BFL783hqg==
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:51:01 2026 by rpki-client