Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ac0ea4e2-e63b-46cd-93e8-df596b5aa776/adbc214f-b83c-30b5-8b0c-25de89c179a3.roa
File:                     adbc214f-b83c-30b5-8b0c-25de89c179a3.roa (raw, json)
Hash identifier:          lYOY8TKu90gwMRV8ZtBI9x4TSEIjkxLVBXKOSk2vBOI=
Subject key identifier:   FC:16:E9:DC:81:DF:E2:81:E6:EF:57:08:6E:10:63:4E:79:BB:73:C1
Certificate issuer:       /CN=ac0ea4e2-e63b-46cd-93e8-df596b5aa776
Certificate serial:       010D0C9F4328584DD516B1D9D3BFA66B17F56C80
Authority key identifier: 45:37:40:A5:3A:77:D5:5C:4A:AF:00:BB:9F:B3:BE:E8:58:E8:51:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ac0ea4e2-e63b-46cd-93e8-df596b5aa776.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ac0ea4e2-e63b-46cd-93e8-df596b5aa776/adbc214f-b83c-30b5-8b0c-25de89c179a3.roa
Signing time:             Thu 14 May 2026 15:54:29 +0000
ROA not before:           Thu 14 May 2026 15:54:29 +0000
ROA not after:            Wed 12 Aug 2026 15:54:29 +0000
asID:                     20058
IP address blocks:        108.161.0.0/20 maxlen: 20
                          108.161.0.0/24 maxlen: 24
                          108.161.1.0/24 maxlen: 24
                          108.161.2.0/24 maxlen: 24
                          108.161.3.0/24 maxlen: 24
                          108.161.4.0/24 maxlen: 24
                          108.161.5.0/24 maxlen: 24
                          108.161.6.0/23 maxlen: 23
                          108.161.6.0/24 maxlen: 24
                          108.161.7.0/24 maxlen: 24
                          108.161.8.0/24 maxlen: 24
                          108.161.9.0/24 maxlen: 24
                          108.161.10.0/24 maxlen: 24
                          108.161.11.0/24 maxlen: 24
                          108.161.12.0/24 maxlen: 24
                          108.161.13.0/24 maxlen: 24
                          108.161.14.0/24 maxlen: 24
                          108.161.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ac0ea4e2-e63b-46cd-93e8-df596b5aa776/ac0ea4e2-e63b-46cd-93e8-df596b5aa776.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ac0ea4e2-e63b-46cd-93e8-df596b5aa776/ac0ea4e2-e63b-46cd-93e8-df596b5aa776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ac0ea4e2-e63b-46cd-93e8-df596b5aa776.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 16 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d5:16:b1:d9:d3:bf:a6:6b:17:f5:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac0ea4e2-e63b-46cd-93e8-df596b5aa776
        Validity
            Not Before: May 14 15:54:29 2026 GMT
            Not After : Aug 12 15:54:29 2026 GMT
        Subject: CN=d6267077-5ee9-4746-bbbe-352b964c278a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2c:d0:6d:65:b1:b7:57:8e:3d:ed:a7:e6:70:
                    5f:ac:fb:ab:06:ff:aa:a4:47:e7:f6:28:fc:56:ed:
                    4e:a3:67:f4:29:7c:0d:b3:6b:af:cc:cc:ac:e1:70:
                    c4:90:b8:7f:ea:3c:13:73:d3:66:84:bb:33:4e:a3:
                    76:94:1e:48:57:2b:20:38:8c:88:36:8c:61:1a:13:
                    36:66:95:43:58:28:07:c3:4f:0b:b4:06:68:ae:93:
                    2f:c5:91:6f:63:39:ed:36:48:20:3c:a8:18:0f:3c:
                    7f:33:45:d3:34:ec:d8:de:f6:a5:96:79:08:c8:58:
                    95:82:21:1b:8c:66:a4:38:d4:26:32:bb:d7:b6:b3:
                    29:88:cf:f2:68:99:06:aa:01:4b:de:87:ab:07:33:
                    7a:20:e3:1c:98:a7:62:9e:01:e8:a5:ab:7b:5a:21:
                    2c:d9:07:86:aa:56:d0:46:cc:42:c1:15:df:d0:19:
                    25:42:30:0b:4f:77:d9:95:e8:1b:34:8c:cb:c6:bc:
                    32:72:9b:e7:f1:e0:df:1f:73:d8:0f:00:c7:3a:d9:
                    91:b6:30:d6:1b:f7:46:8a:f4:ce:49:1a:a4:29:a7:
                    54:8a:c7:f7:b8:38:39:50:52:93:fa:6d:99:81:4d:
                    31:f0:61:2f:f0:a6:81:13:f8:90:9a:a4:02:ea:f8:
                    67:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:16:E9:DC:81:DF:E2:81:E6:EF:57:08:6E:10:63:4E:79:BB:73:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ac0ea4e2-e63b-46cd-93e8-df596b5aa776/adbc214f-b83c-30b5-8b0c-25de89c179a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ac0ea4e2-e63b-46cd-93e8-df596b5aa776/ac0ea4e2-e63b-46cd-93e8-df596b5aa776.crl

            X509v3 Authority Key Identifier:
                keyid:45:37:40:A5:3A:77:D5:5C:4A:AF:00:BB:9F:B3:BE:E8:58:E8:51:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ac0ea4e2-e63b-46cd-93e8-df596b5aa776.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.161.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:82:44:eb:33:8a:a4:3f:4c:ac:76:b9:96:63:f8:72:27:9b:
         c6:23:9d:79:87:14:32:da:49:96:95:52:ea:d4:5d:7f:11:09:
         a9:59:ea:16:4b:7b:e2:8f:4b:c0:4a:51:39:1c:32:8c:fd:7c:
         3d:9f:fd:4f:df:81:02:b6:65:ec:80:4e:b0:75:d2:51:c4:5b:
         66:d1:16:a5:52:37:e0:29:e4:eb:85:31:4a:7e:b1:ab:85:04:
         81:e0:f7:bd:ab:9b:2e:13:a5:a4:6a:44:6d:f7:74:1c:33:a5:
         ce:3d:15:0e:ba:d5:63:ad:a6:b9:45:5a:b0:bb:63:5a:97:d4:
         58:22:fe:2a:85:9e:af:14:17:2b:ff:0e:4c:97:53:83:36:7d:
         aa:4e:b4:ac:2e:e1:a5:fa:e4:77:36:df:9b:5d:c1:29:38:b2:
         e0:8f:46:77:30:dd:dd:f5:13:43:18:59:1b:0a:65:66:eb:93:
         a1:95:05:e7:62:a9:9a:96:fd:b3:e4:60:58:fc:c8:10:48:d8:
         d7:30:6a:46:e2:5f:f3:fc:4c:0e:59:8f:59:e0:2f:be:0b:e6:
         47:5a:69:97:3a:71:48:8b:64:eb:7e:0c:2a:b3:c3:8b:5f:77:
         0c:2f:86:39:a6:93:b0:df:35:82:4b:a2:9c:cb:f3:e8:eb:23:
         f4:33:aa:32
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3VFrHZ07+maxf1bIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWMwZWE0ZTItZTYzYi00NmNkLTkzZTgtZGY1OTZiNWFh
Nzc2MB4XDTI2MDUxNDE1NTQyOVoXDTI2MDgxMjE1NTQyOVowLzEtMCsGA1UEAxMk
ZDYyNjcwNzctNWVlOS00NzQ2LWJiYmUtMzUyYjk2NGMyNzhhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCzQbWWxt1eOPe2n5nBfrPurBv+qpEfn9ij8
Vu1Oo2f0KXwNs2uvzMys4XDEkLh/6jwTc9NmhLszTqN2lB5IVysgOIyINoxhGhM2
ZpVDWCgHw08LtAZorpMvxZFvYzntNkggPKgYDzx/M0XTNOzY3vallnkIyFiVgiEb
jGakONQmMrvXtrMpiM/yaJkGqgFL3oerBzN6IOMcmKdingHopat7WiEs2QeGqlbQ
RsxCwRXf0BklQjALT3fZlegbNIzLxrwycpvn8eDfH3PYDwDHOtmRtjDWG/dGivTO
SRqkKadUisf3uDg5UFKT+m2ZgU0x8GEv8KaBE/iQmqQC6vhnKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPwW6dyB3+KB5u9XCG4QY055u3PBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9hYzBl
YTRlMi1lNjNiLTQ2Y2QtOTNlOC1kZjU5NmI1YWE3NzYvYWRiYzIxNGYtYjgzYy0z
MGI1LThiMGMtMjVkZTg5YzE3OWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYWMwZWE0ZTItZTYzYi00NmNkLTkz
ZTgtZGY1OTZiNWFhNzc2L2FjMGVhNGUyLWU2M2ItNDZjZC05M2U4LWRmNTk2YjVh
YTc3Ni5jcmwwHwYDVR0jBBgwFoAURTdApTp31VxKrwC7n7O+6FjoUVMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi9hYzBlYTRlMi1lNjNiLTQ2Y2QtOTNlOC1kZjU5
NmI1YWE3NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEbKEAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACGCROsziqQ/TKx2uZZj+HInm8YjnXmHFDLaSZaVUurUXX8RCalZ6hZL
e+KPS8BKUTkcMoz9fD2f/U/fgQK2ZeyATrB10lHEW2bRFqVSN+Ap5OuFMUp+sauF
BIHg972rmy4TpaRqRG33dBwzpc49FQ661WOtprlFWrC7Y1qX1Fgi/iqFnq8UFyv/
DkyXU4M2fapOtKwu4aX65Hc235tdwSk4suCPRncw3d31E0MYWRsKZWbrk6GVBedi
qZqW/bPkYFj8yBBI2NcwakbiX/P8TA5Zj1ngL74L5kdaaZc6cUiLZOt+DCqzw4tf
dwwvhjmmk7DfNYJLopzL8+jrI/QzqjI=
-----END CERTIFICATE-----
Generated at Fri May 15 06:14:39 2026 by rpki-client