Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/edc4d5df-d459-3a48-842a-38fdbe6d709e.roa
File:                     edc4d5df-d459-3a48-842a-38fdbe6d709e.roa (raw, json)
Hash identifier:          SfqAWcQibcD8NDBlWlMV72pMlnR2B2nOR7a1W240FlE=
Subject key identifier:   30:62:C8:33:2B:A6:15:D5:4B:94:EC:E8:01:CF:1E:33:1C:DD:28:AC
Certificate issuer:       /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial:       010D0C9F4328584D91C004C032D6558823FF32D0
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/edc4d5df-d459-3a48-842a-38fdbe6d709e.roa
Signing time:             Mon 20 Apr 2026 13:00:33 +0000
ROA not before:           Mon 20 Apr 2026 13:00:33 +0000
ROA not after:            Sun 19 Jul 2026 13:00:33 +0000
asID:                     46261
IP address blocks:        216.158.192.0/24 maxlen: 24
                          216.158.194.0/24 maxlen: 24
                          216.158.195.0/24 maxlen: 24
                          216.158.196.0/24 maxlen: 24
                          216.158.197.0/24 maxlen: 24
                          216.158.199.0/24 maxlen: 24
                          216.158.200.0/24 maxlen: 24
                          216.158.201.0/24 maxlen: 24
                          216.158.202.0/24 maxlen: 24
                          216.158.203.0/24 maxlen: 24
                          216.158.204.0/24 maxlen: 24
                          216.158.206.0/24 maxlen: 24
                          216.158.208.0/24 maxlen: 24
                          216.158.209.0/24 maxlen: 24
                          216.158.212.0/24 maxlen: 24
                          216.158.213.0/24 maxlen: 24
                          216.158.216.0/24 maxlen: 24
                          216.158.217.0/24 maxlen: 24
                          216.158.218.0/24 maxlen: 24
                          216.158.221.0/24 maxlen: 24
                          216.158.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:91:c0:04:c0:32:d6:55:88:23:ff:32:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
        Validity
            Not Before: Apr 20 13:00:33 2026 GMT
            Not After : Jul 19 13:00:33 2026 GMT
        Subject: CN=5e283540-cb3c-4f98-80d3-37a93ba3a177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:08:ec:29:1f:8c:2c:5c:e7:9a:8a:6d:ad:ae:
                    82:3c:6a:95:c4:9c:65:00:e2:32:9a:dc:7e:4a:e3:
                    29:60:60:31:dd:ca:c1:e2:5e:39:ad:60:85:bd:c7:
                    e1:64:14:71:6a:8a:7a:7f:4b:78:1d:04:36:e1:a1:
                    1b:3c:d8:43:94:bc:7f:08:b2:06:99:07:15:c9:2a:
                    39:6c:be:ff:e9:72:af:bc:32:2b:d0:62:a8:ef:0b:
                    af:d6:36:55:d4:e9:4a:c8:73:27:67:ac:1b:49:98:
                    95:07:36:92:6d:e7:de:03:2d:31:aa:8d:e3:47:2b:
                    62:c0:cb:04:49:4a:cf:43:01:de:a9:af:d2:fd:1a:
                    eb:9b:cc:3d:f1:ad:67:6f:5c:7c:e2:88:2e:3b:f3:
                    be:af:c8:00:82:31:f1:bb:54:e2:87:12:ec:7d:8e:
                    79:44:6f:f5:84:b8:2f:b2:93:c1:b3:cf:0e:bc:88:
                    03:a9:5b:61:84:5b:e5:e9:85:90:20:69:e1:0c:66:
                    1b:1d:26:9a:af:36:cc:a3:ba:db:12:38:70:c3:b5:
                    7e:26:f6:49:4f:66:40:75:99:0a:1d:8a:a5:35:5a:
                    4f:a0:87:23:06:a5:c8:31:4d:86:49:8c:11:85:8f:
                    fc:66:08:b5:79:65:88:f1:21:38:8f:1d:a5:9b:e9:
                    42:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:62:C8:33:2B:A6:15:D5:4B:94:EC:E8:01:CF:1E:33:1C:DD:28:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/edc4d5df-d459-3a48-842a-38fdbe6d709e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.158.192.0/24
                  216.158.194.0-216.158.197.255
                  216.158.199.0-216.158.204.255
                  216.158.206.0/24
                  216.158.208.0/23
                  216.158.212.0/23
                  216.158.216.0-216.158.218.255
                  216.158.221.0-216.158.222.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:a3:34:17:23:7c:cd:d8:0c:d2:07:68:05:d5:c6:9c:07:c6:
         00:23:f6:8f:94:c8:4e:9e:bd:46:cf:d7:78:58:37:04:67:ed:
         65:70:dd:75:54:c2:1c:2f:c6:31:16:11:b3:d3:24:b2:5b:03:
         7b:ae:4d:58:95:e5:26:3a:79:04:35:cb:d2:13:6b:8e:3d:7e:
         41:ce:80:f6:03:7a:fb:ee:59:28:f8:5d:2d:3f:e9:5b:ee:2a:
         94:ae:69:e4:f6:a3:09:8a:68:60:6b:1b:c7:8b:fc:23:1c:7b:
         e4:5b:7b:4b:ab:72:c2:ed:2f:f8:d7:2e:d0:a8:28:49:e6:7e:
         40:dd:77:f1:47:50:96:0a:64:c3:20:a2:14:79:a3:4c:10:3d:
         49:44:22:17:c7:f0:2c:dd:f0:d9:b2:3c:3b:bd:89:81:99:5c:
         0c:e4:3b:64:64:47:f4:79:66:bf:fc:38:15:7c:19:84:2a:4f:
         6c:4f:ad:26:48:13:8c:49:dc:63:75:f1:a7:3c:a1:74:96:4d:
         a5:58:1d:5c:c4:81:a7:cf:a7:7a:59:21:18:cb:f6:64:d7:46:
         2a:e2:0c:21:c1:ad:52:a3:de:6a:3b:48:48:c9:c7:7a:4d:0b:
         aa:9c:06:6e:74:52:cb:b3:4e:76:83:ba:bf:6d:81:07:c3:6e:
         c5:d9:1a:21
-----BEGIN CERTIFICATE-----
MIIGjTCCBXWgAwIBAgIUAQ0Mn0MoWE2RwATAMtZViCP/MtAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDY5NjQxMmYtNTdkNy00OWJhLWI1MTQtNmIxYzZhYjQz
M2E0MB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk
NWUyODM1NDAtY2IzYy00Zjk4LTgwZDMtMzdhOTNiYTNhMTc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5QjsKR+MLFznmoptra6CPGqVxJxlAOIymtx+
SuMpYGAx3crB4l45rWCFvcfhZBRxaop6f0t4HQQ24aEbPNhDlLx/CLIGmQcVySo5
bL7/6XKvvDIr0GKo7wuv1jZV1OlKyHMnZ6wbSZiVBzaSbefeAy0xqo3jRytiwMsE
SUrPQwHeqa/S/Rrrm8w98a1nb1x84oguO/O+r8gAgjHxu1TihxLsfY55RG/1hLgv
spPBs88OvIgDqVthhFvl6YWQIGnhDGYbHSaarzbMo7rbEjhww7V+JvZJT2ZAdZkK
HYqlNVpPoIcjBqXIMU2GSYwRhY/8Zgi1eWWI8SE4jx2lm+lCAwIDAQABo4IDnzCC
A5swHQYDVR0OBBYEFDBiyDMrphXVS5Ts6AHPHjMc3SisMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2
NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFjNmFiNDMzYTQvZWRjNGQ1ZGYtZDQ1OS0z
YTQ4LTg0MmEtMzhmZGJlNmQ3MDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDY5NjQxMmYtNTdkNy00OWJhLWI1
MTQtNmIxYzZhYjQzM2E0LzQ2OTY0MTJmLTU3ZDctNDliYS1iNTE0LTZiMWM2YWI0
MzNhNC5jcmwwHwYDVR0jBBgwFoAUDEqUiZ1mzw8ZEo8f9lmkgUdYNdgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFj
NmFiNDMzYTQuY2VyMGkGCCsGAQUFBwEHAQH/BFowWDBWBAIAATBQAwQA2J7AMAwD
BAHYnsIDBAHYnsQwDAMEANiexwMEANiezAMEANiezgMEAdie0AMEAdie1DAMAwQD
2J7YAwQA2J7aMAwDBADYnt0DBADYnt4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO
AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv
cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEADqM0FyN8zdgM0gdoBdXG
nAfGACP2j5TITp69Rs/XeFg3BGftZXDddVTCHC/GMRYRs9MkslsDe65NWJXlJjp5
BDXL0hNrjj1+Qc6A9gN6++5ZKPhdLT/pW+4qlK5p5PajCYpoYGsbx4v8Ixx75Ft7
S6tywu0v+Ncu0KgoSeZ+QN138UdQlgpkwyCiFHmjTBA9SUQiF8fwLN3w2bI8O72J
gZlcDOQ7ZGRH9Hlmv/w4FXwZhCpPbE+tJkgTjEncY3XxpzyhdJZNpVgdXMSBp8+n
elkhGMv2ZNdGKuIMIcGtUqPeajtISMnHek0LqpwGbnRSy7NOdoO6v22BB8Nuxdka
IQ==
-----END CERTIFICATE-----
Generated at Wed Apr 22 13:23:21 2026 by rpki-client