Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a224a52c-0b36-43ad-80f7-e96d9b52004f/4497831b-0a96-3420-a0da-0a32684e52cc.roa
File:                     4497831b-0a96-3420-a0da-0a32684e52cc.roa (raw, json)
Hash identifier:          ImhfILukauT+N18Z8oqxwYCmwlKz6P8B/XNcaRa4Mos=
Subject key identifier:   95:62:06:60:D2:A8:9A:E4:12:21:5A:A6:C3:54:72:C5:16:D8:30:61
Certificate issuer:       /CN=a224a52c-0b36-43ad-80f7-e96d9b52004f
Certificate serial:       010D0C9F4328584E6743A1B8DC942721F8A51F80
Authority key identifier: 3B:FD:CB:9F:85:A1:11:B1:DE:91:1B:33:52:9A:DB:28:9D:D9:2D:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a224a52c-0b36-43ad-80f7-e96d9b52004f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a224a52c-0b36-43ad-80f7-e96d9b52004f/4497831b-0a96-3420-a0da-0a32684e52cc.roa
Signing time:             Mon 06 Jul 2026 00:33:03 +0000
ROA not before:           Mon 06 Jul 2026 00:33:03 +0000
ROA not after:            Sun 04 Oct 2026 00:33:03 +0000
asID:                     16843
IP address blocks:        104.218.76.0/22 maxlen: 22
                          141.193.216.0/23 maxlen: 23
                          141.193.255.0/24 maxlen: 24
                          147.160.54.0/24 maxlen: 24
                          147.160.140.0/23 maxlen: 23
                          147.185.178.0/24 maxlen: 24
                          148.59.156.0/22 maxlen: 22
                          148.59.236.0/22 maxlen: 22
                          199.74.228.0/24 maxlen: 24
                          206.166.198.0/24 maxlen: 24
                          208.52.138.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a224a52c-0b36-43ad-80f7-e96d9b52004f/a224a52c-0b36-43ad-80f7-e96d9b52004f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a224a52c-0b36-43ad-80f7-e96d9b52004f/a224a52c-0b36-43ad-80f7-e96d9b52004f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a224a52c-0b36-43ad-80f7-e96d9b52004f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:67:43:a1:b8:dc:94:27:21:f8:a5:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a224a52c-0b36-43ad-80f7-e96d9b52004f
        Validity
            Not Before: Jul  6 00:33:03 2026 GMT
            Not After : Oct  4 00:33:03 2026 GMT
        Subject: CN=0c8533d4-f59e-49e7-93bf-7d8c737f8893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:31:f0:00:b6:b3:e3:9e:b8:61:dc:81:ae:3d:
                    13:f0:1f:50:0f:99:26:7b:15:d4:b8:81:01:f2:73:
                    ec:d0:53:d4:94:a3:da:1f:4d:e2:9b:7c:30:83:eb:
                    71:cf:6c:31:1e:8f:6a:4b:5c:07:00:72:02:ab:0c:
                    c9:e7:b7:d5:a8:33:7d:b6:50:af:18:e9:dc:f5:e4:
                    d3:4e:15:ae:e8:4e:18:fd:20:f7:69:1f:fc:db:ac:
                    d8:2b:a7:ad:8b:c4:22:f0:9f:b1:8e:e3:b3:c4:66:
                    53:2a:ba:6f:73:fc:34:7a:1b:7e:52:91:9d:66:7a:
                    f2:2f:c8:c7:40:7b:0d:12:78:fb:1e:e5:42:26:86:
                    ab:c7:69:cf:38:33:4a:8d:48:2a:25:52:70:b7:dd:
                    bc:1c:c9:ce:57:10:fb:bd:53:ac:9b:be:36:74:5a:
                    8c:4e:ec:b0:5e:ac:eb:56:4a:8c:95:79:2f:c3:38:
                    86:e9:2f:d1:1e:9b:c7:91:23:78:99:31:6c:bd:50:
                    f2:a4:c1:55:ef:60:0d:b6:71:9a:ed:19:8c:92:f7:
                    06:d6:4f:86:a4:29:83:ef:c9:6c:35:9d:87:1e:8f:
                    74:b4:2e:64:5e:d8:38:e9:48:20:07:f4:93:57:9e:
                    c7:a4:b6:e6:0e:b5:e7:df:b6:ee:e1:97:87:5e:37:
                    a5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:62:06:60:D2:A8:9A:E4:12:21:5A:A6:C3:54:72:C5:16:D8:30:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a224a52c-0b36-43ad-80f7-e96d9b52004f/4497831b-0a96-3420-a0da-0a32684e52cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a224a52c-0b36-43ad-80f7-e96d9b52004f/a224a52c-0b36-43ad-80f7-e96d9b52004f.crl

            X509v3 Authority Key Identifier:
                keyid:3B:FD:CB:9F:85:A1:11:B1:DE:91:1B:33:52:9A:DB:28:9D:D9:2D:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a224a52c-0b36-43ad-80f7-e96d9b52004f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.76.0/22
                  141.193.216.0/23
                  141.193.255.0/24
                  147.160.54.0/24
                  147.160.140.0/23
                  147.185.178.0/24
                  148.59.156.0/22
                  148.59.236.0/22
                  199.74.228.0/24
                  206.166.198.0/24
                  208.52.138.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:d6:4a:75:d3:4b:8a:20:43:91:19:25:16:e4:a0:61:fb:56:
         c3:46:64:af:ef:e3:09:b4:03:0e:55:ea:97:65:6d:46:8d:69:
         c7:3d:3a:3e:71:7b:dd:7e:9c:73:35:39:af:bb:fd:b0:7b:8d:
         88:75:76:d9:b5:d4:a1:4f:dd:9b:f5:0e:28:28:4f:38:f2:a5:
         cc:8b:da:b5:f3:b1:16:74:62:bc:9c:ab:68:09:cc:93:35:dd:
         42:c8:5d:90:86:5e:2c:cb:4d:20:a6:b3:ce:5a:f3:1b:f6:b3:
         80:e7:c0:f6:22:b8:75:93:bc:d8:9d:2b:47:a6:4a:42:3d:36:
         b7:08:4d:db:b8:35:81:65:31:76:7c:58:5c:ae:2e:f3:31:18:
         80:0a:0c:38:30:0a:7c:44:ed:e9:95:d9:18:14:ed:ee:bf:08:
         bf:cd:8b:0a:ba:ba:12:80:a0:a0:ad:b1:45:de:64:5f:a8:50:
         e3:69:73:2b:49:bd:ae:4a:4e:94:6c:88:10:1d:e6:45:ea:af:
         41:f4:bd:90:01:b4:df:86:98:f5:ff:cb:92:5a:85:b3:55:60:
         c7:39:9d:6a:a0:5e:84:51:1a:6e:5f:be:e1:75:4a:c3:0a:c2:
         53:c2:5c:2b:dc:f8:71:26:b7:a1:56:93:97:23:a8:65:da:6f:
         b0:1d:97:e6
-----BEGIN CERTIFICATE-----
MIIGfzCCBWegAwIBAgIUAQ0Mn0MoWE5nQ6G43JQnIfilH4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTIyNGE1MmMtMGIzNi00M2FkLTgwZjctZTk2ZDliNTIw
MDRmMB4XDTI2MDcwNjAwMzMwM1oXDTI2MTAwNDAwMzMwM1owLzEtMCsGA1UEAxMk
MGM4NTMzZDQtZjU5ZS00OWU3LTkzYmYtN2Q4YzczN2Y4ODkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDHwALaz4564YdyBrj0T8B9QD5kmexXUuIEB
8nPs0FPUlKPaH03im3wwg+txz2wxHo9qS1wHAHICqwzJ57fVqDN9tlCvGOnc9eTT
ThWu6E4Y/SD3aR/826zYK6eti8Qi8J+xjuOzxGZTKrpvc/w0eht+UpGdZnryL8jH
QHsNEnj7HuVCJoarx2nPODNKjUgqJVJwt928HMnOVxD7vVOsm742dFqMTuywXqzr
VkqMlXkvwziG6S/RHpvHkSN4mTFsvVDypMFV72ANtnGa7RmMkvcG1k+GpCmD78ls
NZ2HHo90tC5kXtg46UggB/STV57HpLbmDrXn37bu4ZeHXjelGwIDAQABo4IDkTCC
A40wHQYDVR0OBBYEFJViBmDSqJrkEiFapsNUcsUW2DBhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9hMjI0
YTUyYy0wYjM2LTQzYWQtODBmNy1lOTZkOWI1MjAwNGYvNDQ5NzgzMWItMGE5Ni0z
NDIwLWEwZGEtMGEzMjY4NGU1MmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYTIyNGE1MmMtMGIzNi00M2FkLTgw
ZjctZTk2ZDliNTIwMDRmL2EyMjRhNTJjLTBiMzYtNDNhZC04MGY3LWU5NmQ5YjUy
MDA0Zi5jcmwwHwYDVR0jBBgwFoAUO/3Ln4WhEbHekRszUprbKJ3ZLTkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi9hMjI0YTUyYy0wYjM2LTQzYWQtODBmNy1lOTZk
OWI1MjAwNGYuY2VyMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQCaNpMAwQB
jcHYAwQAjcH/AwQAk6A2AwQBk6CMAwQAk7myAwQClDucAwQClDvsAwQAx0rkAwQA
zqbGAwQB0DSKMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAHHWSnXTS4ogQ5EZJRbkoGH7VsNGZK/v4wm0Aw5V
6pdlbUaNacc9Oj5xe91+nHM1Oa+7/bB7jYh1dtm11KFP3Zv1DigoTzjypcyL2rXz
sRZ0Yrycq2gJzJM13ULIXZCGXizLTSCms85a8xv2s4DnwPYiuHWTvNidK0emSkI9
NrcITdu4NYFlMXZ8WFyuLvMxGIAKDDgwCnxE7emV2RgU7e6/CL/Niwq6uhKAoKCt
sUXeZF+oUONpcytJva5KTpRsiBAd5kXqr0H0vZABtN+GmPX/y5JahbNVYMc5nWqg
XoRRGm5fvuF1SsMKwlPCXCvc+HEmt6FWk5cjqGXab7Adl+Y=
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:56:58 2026 by rpki-client