Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/ea9b1f11-cc10-3201-8210-2b8888464357.roa
File:                     ea9b1f11-cc10-3201-8210-2b8888464357.roa (raw, json)
Hash identifier:          Qr4VkRiBXowUswgLCM6tr+t5AjZqo9oWVY1UqE+Y9Go=
Subject key identifier:   CC:7E:A8:80:C6:27:B6:DE:0E:39:34:7B:59:A9:26:0E:52:53:72:25
Certificate issuer:       /CN=faf569a5-954e-480e-9904-712ec61652b7
Certificate serial:       010D0C9F4328584F268D0C300D61F207E2750300
Authority key identifier: 06:32:5E:FB:8B:27:C3:34:23:E2:86:F6:6C:02:1A:A9:B4:81:29:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/ea9b1f11-cc10-3201-8210-2b8888464357.roa
Signing time:             Sat 12 Sep 2026 13:00:13 +0000
ROA not before:           Sat 12 Sep 2026 13:00:13 +0000
ROA not after:            Fri 11 Dec 2026 14:00:13 +0000
asID:                     32034
IP address blocks:        70.35.146.0/24 maxlen: 24
                          70.35.147.0/24 maxlen: 24
                          70.35.148.0/24 maxlen: 24
                          70.35.149.0/24 maxlen: 24
                          70.35.150.0/24 maxlen: 24
                          70.35.151.0/24 maxlen: 24
                          70.35.158.0/24 maxlen: 24
                          204.14.40.0/24 maxlen: 24
                          204.14.41.0/24 maxlen: 24
                          204.14.42.0/24 maxlen: 24
                          204.14.43.0/24 maxlen: 24
                          204.14.44.0/24 maxlen: 24
                          204.14.45.0/24 maxlen: 24
                          204.14.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/faf569a5-954e-480e-9904-712ec61652b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/faf569a5-954e-480e-9904-712ec61652b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:26:8d:0c:30:0d:61:f2:07:e2:75:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faf569a5-954e-480e-9904-712ec61652b7
        Validity
            Not Before: Sep 12 13:00:13 2026 GMT
            Not After : Dec 11 14:00:13 2026 GMT
        Subject: CN=02f5b3a9-c7a9-442c-a883-918f01a0cae2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:95:09:2e:2c:9f:1c:40:a0:db:0f:e8:04:d9:
                    1d:af:e6:60:a5:52:f1:61:a6:d9:c7:09:87:07:90:
                    4c:af:64:b4:45:3d:52:bf:72:e7:0d:35:fe:73:48:
                    e9:79:52:76:3f:6a:03:c5:07:22:b4:cf:70:a0:3d:
                    f7:0f:7e:08:c3:bf:47:cb:02:c7:e9:18:f4:c8:2c:
                    e3:e1:ee:aa:ef:4e:20:0d:13:35:1d:21:dc:47:38:
                    06:7e:87:89:cb:ea:3b:ac:53:86:44:f5:a8:8d:a2:
                    6d:7f:d2:54:c8:78:bb:aa:a0:e1:2a:49:87:5f:e2:
                    8b:ab:c1:8f:c3:cd:ab:9c:a6:e1:d7:48:61:54:98:
                    17:82:50:01:a6:ca:13:8e:74:c9:0e:84:4c:b5:a6:
                    09:af:5d:c4:68:fa:ec:53:5e:71:ab:53:92:83:a6:
                    ef:b5:f1:a0:f1:4d:c8:18:e8:89:9f:79:87:bb:63:
                    9e:fd:30:03:c1:9e:c1:26:f5:7f:10:46:c8:44:ac:
                    09:7d:6c:16:0e:75:67:0f:3e:0a:c4:03:94:48:de:
                    c1:11:85:be:c3:1c:f1:bb:bc:e0:91:4d:ca:d7:aa:
                    ab:39:4f:e0:68:ad:f8:ce:0d:8f:4e:53:8d:5f:a7:
                    7c:fa:09:43:a0:f5:55:21:1d:87:83:c4:24:54:aa:
                    25:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:7E:A8:80:C6:27:B6:DE:0E:39:34:7B:59:A9:26:0E:52:53:72:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/ea9b1f11-cc10-3201-8210-2b8888464357.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/faf569a5-954e-480e-9904-712ec61652b7.crl

            X509v3 Authority Key Identifier:
                keyid:06:32:5E:FB:8B:27:C3:34:23:E2:86:F6:6C:02:1A:A9:B4:81:29:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.35.146.0-70.35.151.255
                  70.35.158.0/24
                  204.14.40.0-204.14.46.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d2:07:47:9c:9d:50:85:6c:92:fc:e6:1c:8f:c8:e8:9f:d3:1f:
         55:66:ec:a8:dd:9c:20:a7:42:f1:cf:2a:77:9d:31:22:fb:79:
         be:f5:9e:92:bd:52:f1:60:cf:c5:93:21:83:4a:69:44:5f:a6:
         8a:13:ab:35:65:8d:ac:e2:d1:c8:54:88:0e:bc:3e:fd:7a:bf:
         ac:cc:89:58:a1:53:1f:8d:b7:2d:09:b2:cc:b2:d2:e5:9f:e1:
         ac:74:58:ea:2e:d1:22:79:1e:58:72:e4:9b:6a:62:3d:be:7c:
         81:19:d3:c0:b9:5f:27:51:e6:3f:d6:40:30:68:0c:ed:5b:c2:
         ae:1a:de:6d:25:fa:bb:2c:8f:6e:34:3b:cc:df:9c:6b:04:a9:
         57:19:5f:ea:02:71:6c:f6:b2:93:6b:10:f3:e8:45:73:b0:f6:
         c9:3f:91:c3:c3:ef:51:50:30:df:31:c7:51:b5:b9:b7:6d:ab:
         6b:21:9a:fa:a7:ed:a8:14:f7:98:c2:a9:79:73:e8:29:c9:20:
         c7:c3:69:1c:a0:59:6e:f6:ad:bf:58:30:72:96:f6:dd:35:5d:
         1a:de:1a:4a:1b:21:14:00:03:c0:06:fd:00:54:80:ed:55:b2:
         cf:98:48:02:cb:5c:cb:ee:fe:f2:03:9d:55:93:77:b0:d1:9d:
         76:af:10:92
-----BEGIN CERTIFICATE-----
MIIGXzCCBUegAwIBAgIUAQ0Mn0MoWE8mjQwwDWHyB+J1AwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmFmNTY5YTUtOTU0ZS00ODBlLTk5MDQtNzEyZWM2MTY1
MmI3MB4XDTI2MDkxMjEzMDAxM1oXDTI2MTIxMTE0MDAxM1owLzEtMCsGA1UEAxMk
MDJmNWIzYTktYzdhOS00NDJjLWE4ODMtOTE4ZjAxYTBjYWUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJUJLiyfHECg2w/oBNkdr+ZgpVLxYabZxwmH
B5BMr2S0RT1Sv3LnDTX+c0jpeVJ2P2oDxQcitM9woD33D34Iw79HywLH6Rj0yCzj
4e6q704gDRM1HSHcRzgGfoeJy+o7rFOGRPWojaJtf9JUyHi7qqDhKkmHX+KLq8GP
w82rnKbh10hhVJgXglABpsoTjnTJDoRMtaYJr13EaPrsU15xq1OSg6bvtfGg8U3I
GOiJn3mHu2Oe/TADwZ7BJvV/EEbIRKwJfWwWDnVnDz4KxAOUSN7BEYW+wxzxu7zg
kU3K16qrOU/gaK34zg2PTlONX6d8+glDoPVVIR2Hg8QkVKolWwIDAQABo4IDcTCC
A20wHQYDVR0OBBYEFMx+qIDGJ7beDjk0e1mpJg5SU3IlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9mYWY1
NjlhNS05NTRlLTQ4MGUtOTkwNC03MTJlYzYxNjUyYjcvZWE5YjFmMTEtY2MxMC0z
MjAxLTgyMTAtMmI4ODg4NDY0MzU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZmFmNTY5YTUtOTU0ZS00ODBlLTk5
MDQtNzEyZWM2MTY1MmI3L2ZhZjU2OWE1LTk1NGUtNDgwZS05OTA0LTcxMmVjNjE2
NTJiNy5jcmwwHwYDVR0jBBgwFoAUBjJe+4snwzQj4ob2bAIaqbSBKUUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9mYWY1NjlhNS05NTRlLTQ4MGUtOTkwNC03MTJl
YzYxNjUyYjcuY2VyMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBAFGI5ID
BANGI5ADBABGI54wDAMEA8wOKAMEAMwOLjBUBgNVHSABAf8ESjBIMEYGCCsGAQUF
Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl
cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDSB0ecnVCFbJL85hyP
yOif0x9VZuyo3Zwgp0Lxzyp3nTEi+3m+9Z6SvVLxYM/FkyGDSmlEX6aKE6s1ZY2s
4tHIVIgOvD79er+szIlYoVMfjbctCbLMstLln+GsdFjqLtEieR5YcuSbamI9vnyB
GdPAuV8nUeY/1kAwaAztW8KuGt5tJfq7LI9uNDvM35xrBKlXGV/qAnFs9rKTaxDz
6EVzsPbJP5HDw+9RUDDfMcdRtbm3batrIZr6p+2oFPeYwql5c+gpySDHw2kcoFlu
9q2/WDBylvbdNV0a3hpKGyEUAAPABv0AVIDtVbLPmEgCy1zL7v7yA51Vk3ew0Z12
rxCS
-----END CERTIFICATE-----
Generated at Sun Sep 13 14:15:05 2026 by rpki-client