Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/bde58f87-486e-3511-a7ec-9f8ee003a894.roa
File:                     bde58f87-486e-3511-a7ec-9f8ee003a894.roa (raw, json)
Hash identifier:          G4NLKdmGxRRpVrgojorF/+wW3nlmnzfyoovxxrnNz6I=
Subject key identifier:   FC:A9:F8:48:11:5F:97:A9:30:F6:6C:B2:89:4B:FE:E4:55:A4:6A:25
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F4328584E577F563F33E917D931FB5900
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/bde58f87-486e-3511-a7ec-9f8ee003a894.roa
Signing time:             Tue 30 Jun 2026 09:00:12 +0000
ROA not before:           Tue 30 Jun 2026 09:00:12 +0000
ROA not after:            Mon 28 Sep 2026 09:00:12 +0000
asID:                     19886
IP address blocks:        171.162.48.0/20 maxlen: 20
                          171.162.48.0/24 maxlen: 24
                          171.162.49.0/24 maxlen: 24
                          171.162.50.0/24 maxlen: 24
                          171.162.51.0/24 maxlen: 24
                          171.162.52.0/24 maxlen: 24
                          171.162.53.0/24 maxlen: 24
                          171.162.54.0/24 maxlen: 24
                          171.162.55.0/24 maxlen: 24
                          171.162.56.0/24 maxlen: 24
                          171.162.57.0/24 maxlen: 24
                          171.162.58.0/24 maxlen: 24
                          171.162.59.0/24 maxlen: 24
                          171.162.60.0/24 maxlen: 24
                          171.162.61.0/24 maxlen: 24
                          171.162.62.0/24 maxlen: 24
                          171.162.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:57:7f:56:3f:33:e9:17:d9:31:fb:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Jun 30 09:00:12 2026 GMT
            Not After : Sep 28 09:00:12 2026 GMT
        Subject: CN=c7c1bed0-7402-4c25-8487-9399c45b99af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d5:5b:1e:41:17:51:11:b4:ba:65:27:90:d9:
                    07:b0:d7:cf:f0:59:52:37:9d:03:11:53:75:d7:3b:
                    e7:b1:be:32:4d:3b:ae:40:ed:02:36:7e:e8:fa:99:
                    db:14:6d:3e:6b:89:7c:61:e4:7a:14:a6:ff:25:77:
                    2c:6e:2a:69:a0:c6:00:bc:c9:f8:ac:02:d9:3c:fd:
                    fc:11:27:f4:64:47:0c:b2:ae:be:ee:d0:c1:33:01:
                    5d:cc:66:d6:ee:be:3d:b3:b7:c4:3f:af:cd:1e:ed:
                    e9:6d:e3:3a:be:ff:7c:9c:19:02:45:2a:6b:82:3f:
                    5c:23:7b:cd:76:fe:13:b9:9d:77:d6:48:92:ad:d3:
                    70:fd:3c:dc:43:0a:c8:9d:ce:ef:f3:b5:ae:e9:3d:
                    fa:3a:4e:e9:ae:62:fb:5c:10:2d:c7:e9:90:c9:d2:
                    22:50:88:f2:b3:87:30:0b:b2:d5:70:0f:74:5d:09:
                    01:40:80:a6:91:13:93:64:0f:54:2a:b7:d7:06:63:
                    0d:b7:37:0c:ce:7f:19:57:db:ea:59:4e:b0:ae:90:
                    c9:85:75:77:fd:6c:01:f9:8d:8e:48:37:20:37:2a:
                    91:be:0e:b7:02:78:b6:7c:b8:08:f5:c6:57:4a:a4:
                    8f:0a:41:c3:ea:7a:d0:20:4d:a7:b2:79:49:7a:b0:
                    c8:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:A9:F8:48:11:5F:97:A9:30:F6:6C:B2:89:4B:FE:E4:55:A4:6A:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/bde58f87-486e-3511-a7ec-9f8ee003a894.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.162.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:18:ed:74:07:2b:10:d1:77:b2:48:d4:05:50:a7:c8:87:e7:
         48:ac:ed:3a:ab:bd:8e:a8:ab:7c:40:28:9f:0c:dc:9e:de:2e:
         18:a7:75:e8:12:f2:29:fe:5d:8f:ed:80:44:4c:3d:43:86:6c:
         ea:8c:b0:20:46:f1:2a:af:9b:56:a5:de:f3:4f:24:d5:ad:15:
         9a:72:fc:f1:46:c9:5d:9f:ba:b1:75:81:5e:8f:8d:dc:ba:cd:
         88:db:9f:3e:51:07:7d:fc:30:e6:85:a3:13:84:c0:00:f1:c5:
         c4:c2:f0:c5:a6:45:d0:9c:43:ed:3b:6e:a7:46:bb:b9:a4:a7:
         fc:51:aa:4f:6d:8f:ea:3d:58:89:50:7a:65:f2:c0:65:45:55:
         6e:01:c9:a1:44:54:46:04:04:01:b9:58:74:e0:ee:e3:c0:89:
         b1:ab:ac:4a:18:bf:6f:41:e6:a7:2f:1f:ac:ab:ed:3d:ab:15:
         45:98:86:d5:de:0e:67:a9:64:d5:5b:45:a3:7c:5a:d7:fc:3e:
         dd:75:75:57:08:bc:3a:cb:79:85:b0:6d:8b:d6:a1:c7:d6:02:
         da:7a:c9:db:c4:35:1c:ac:39:46:42:3d:58:48:45:78:c6:1f:
         91:4e:54:cd:a8:ef:50:11:7e:b8:52:18:10:85:c2:18:7d:2a:
         b4:f7:f5:30
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5Xf1Y/M+kX2TH7WQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh
MWEwMB4XDTI2MDYzMDA5MDAxMloXDTI2MDkyODA5MDAxMlowLzEtMCsGA1UEAxMk
YzdjMWJlZDAtNzQwMi00YzI1LTg0ODctOTM5OWM0NWI5OWFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNVbHkEXURG0umUnkNkHsNfP8FlSN50DEVN1
1zvnsb4yTTuuQO0CNn7o+pnbFG0+a4l8YeR6FKb/JXcsbippoMYAvMn4rALZPP38
ESf0ZEcMsq6+7tDBMwFdzGbW7r49s7fEP6/NHu3pbeM6vv98nBkCRSprgj9cI3vN
dv4TuZ131kiSrdNw/TzcQwrInc7v87Wu6T36Ok7prmL7XBAtx+mQydIiUIjys4cw
C7LVcA90XQkBQICmkROTZA9UKrfXBmMNtzcMzn8ZV9vqWU6wrpDJhXV3/WwB+Y2O
SDcgNyqRvg63Ani2fLgI9cZXSqSPCkHD6nrQIE2nsnlJerDIXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPyp+EgRX5epMPZssolL/uRVpGolMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5
YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvYmRlNThmODctNDg2ZS0z
NTExLWE3ZWMtOWY4ZWUwMDNhODk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm
MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi
YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm
YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEq6IwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF8Y7XQHKxDRd7JI1AVQp8iH50is7TqrvY6oq3xAKJ8M3J7eLhindegS
8in+XY/tgERMPUOGbOqMsCBG8Sqvm1al3vNPJNWtFZpy/PFGyV2furF1gV6Pjdy6
zYjbnz5RB338MOaFoxOEwADxxcTC8MWmRdCcQ+07bqdGu7mkp/xRqk9tj+o9WIlQ
emXywGVFVW4ByaFEVEYEBAG5WHTg7uPAibGrrEoYv29B5qcvH6yr7T2rFUWYhtXe
DmepZNVbRaN8Wtf8Pt11dVcIvDrLeYWwbYvWocfWAtp6ydvENRysOUZCPVhIRXjG
H5FOVM2o71ARfrhSGBCFwhh9KrT39TA=
-----END CERTIFICATE-----
Generated at Thu Jul 16 20:52:57 2026 by rpki-client