Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb/6bbc85fd-c9a6-3fe6-a0ad-ac878b243f76.roa
File:                     6bbc85fd-c9a6-3fe6-a0ad-ac878b243f76.roa (raw, json)
Hash identifier:          /HisL/i9e/Q+sPSGk+GK5WoNXDdwj019p3mxvMIN/WY=
Subject key identifier:   DE:46:DA:DD:08:79:67:CB:3D:7F:35:24:78:A7:76:03:9C:98:1E:4B
Certificate issuer:       /CN=33097e36-cef3-418b-a895-cacb797d1eeb
Certificate serial:       010D0C9F4328584E9D4A62D465A595D085477880
Authority key identifier: F3:D2:56:2B:76:FF:3B:36:71:0B:45:B0:C7:99:53:16:86:A7:8F:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb/6bbc85fd-c9a6-3fe6-a0ad-ac878b243f76.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     10958
IP address blocks:        147.161.4.0/22 maxlen: 32
                          162.216.108.0/22 maxlen: 32
                          162.216.208.0/21 maxlen: 32
                          198.62.181.0/24 maxlen: 32
                          208.68.56.0/22 maxlen: 32
                          208.80.144.0/21 maxlen: 32
                          208.91.176.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb/33097e36-cef3-418b-a895-cacb797d1eeb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb/33097e36-cef3-418b-a895-cacb797d1eeb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:62:d4:65:a5:95:d0:85:47:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33097e36-cef3-418b-a895-cacb797d1eeb
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=e9a82cbf-b6f0-4e00-b723-aad6da1eaf70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a7:f4:17:f5:c8:65:c1:01:71:49:0a:6f:b1:
                    95:5c:eb:7d:ee:64:30:3b:44:58:f7:e8:4a:58:47:
                    c3:fe:13:4a:89:19:83:58:1d:bd:96:7d:5b:d2:20:
                    ab:bf:42:8c:27:9d:f1:39:98:de:79:36:12:64:63:
                    87:45:5f:c0:e5:86:d2:e9:3b:95:b2:36:7f:b5:49:
                    c8:d9:c2:05:5c:3f:76:c8:cc:c3:4b:fa:86:66:91:
                    31:6e:ba:d3:bd:88:ee:b9:ae:0b:c7:9c:10:a2:da:
                    87:17:02:b7:65:5b:ce:ba:74:b6:52:ba:5d:63:b4:
                    e2:28:e0:fc:0b:5e:78:f6:d9:24:59:36:4c:05:89:
                    70:92:c9:56:13:06:98:c3:01:07:09:ed:56:23:0c:
                    8e:5a:37:27:01:43:98:9d:b1:a8:8d:58:8c:62:a5:
                    f4:fb:4a:1d:b3:13:a3:fd:dc:13:8d:66:1a:2e:cc:
                    0b:e4:7d:7c:7b:64:37:bc:94:96:66:8c:a3:79:56:
                    ce:f7:de:f0:1f:11:38:3b:06:a0:e3:94:3c:86:d0:
                    47:30:31:d7:d1:06:f9:0f:36:b6:96:79:24:9d:9f:
                    f5:73:f1:44:2c:5a:32:1f:98:ea:94:3f:c3:cf:66:
                    7b:7e:c9:18:dc:af:dd:35:45:38:64:e5:c1:d9:3f:
                    b6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:46:DA:DD:08:79:67:CB:3D:7F:35:24:78:A7:76:03:9C:98:1E:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb/6bbc85fd-c9a6-3fe6-a0ad-ac878b243f76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb/33097e36-cef3-418b-a895-cacb797d1eeb.crl

            X509v3 Authority Key Identifier:
                keyid:F3:D2:56:2B:76:FF:3B:36:71:0B:45:B0:C7:99:53:16:86:A7:8F:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.161.4.0/22
                  162.216.108.0/22
                  162.216.208.0/21
                  198.62.181.0/24
                  208.68.56.0/22
                  208.80.144.0/21
                  208.91.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:8b:92:fd:de:17:14:cc:3c:79:26:1e:87:b7:f7:4c:c5:03:
         ec:9b:53:4e:b5:af:39:51:7f:f5:4d:a9:0b:9f:47:83:51:e0:
         63:27:eb:65:5f:dd:90:20:4d:0d:40:6a:65:1a:0e:31:a2:04:
         f2:8a:b9:16:22:3d:22:16:23:d2:5c:b2:7e:92:86:d7:d2:33:
         c2:00:6d:96:f2:f0:ce:03:ec:7f:f4:c0:c1:c0:45:bf:81:19:
         3a:94:94:44:c9:7b:87:37:56:28:01:a1:9b:36:e2:5b:3b:ab:
         78:f4:90:6b:86:dc:62:7d:3b:dd:c4:20:41:bb:b7:39:10:af:
         99:d1:80:27:d6:db:f3:9e:57:27:88:58:ae:47:43:a6:f2:71:
         f1:50:79:25:f4:1e:eb:34:49:e8:1b:25:52:09:07:52:71:bb:
         1f:de:0a:a9:55:62:c4:6b:43:5e:0c:bc:dd:0a:1d:d9:bd:65:
         68:c9:ea:f2:fe:4a:6c:b1:52:09:12:a5:af:21:2d:09:12:dc:
         a6:95:1b:a5:af:95:b5:40:46:b6:20:52:2e:20:a3:68:29:0b:
         a7:19:5a:6d:53:bf:f2:33:cb:63:93:7b:4b:b3:86:02:58:4e:
         87:02:2e:b7:7d:70:92:9c:e5:9d:16:b2:8c:cb:2e:77:18:c1:
         4c:1a:cf:93
-----BEGIN CERTIFICATE-----
MIIGZzCCBU+gAwIBAgIUAQ0Mn0MoWE6dSmLUZaWV0IVHeIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzMwOTdlMzYtY2VmMy00MThiLWE4OTUtY2FjYjc5N2Qx
ZWViMB4XDTI2MDcyNTA5MDAxMVoXDTI2MTAyMzA5MDAxMVowLzEtMCsGA1UEAxMk
ZTlhODJjYmYtYjZmMC00ZTAwLWI3MjMtYWFkNmRhMWVhZjcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqf0F/XIZcEBcUkKb7GVXOt97mQwO0RY9+hK
WEfD/hNKiRmDWB29ln1b0iCrv0KMJ53xOZjeeTYSZGOHRV/A5YbS6TuVsjZ/tUnI
2cIFXD92yMzDS/qGZpExbrrTvYjuua4Lx5wQotqHFwK3ZVvOunS2UrpdY7TiKOD8
C1549tkkWTZMBYlwkslWEwaYwwEHCe1WIwyOWjcnAUOYnbGojViMYqX0+0odsxOj
/dwTjWYaLswL5H18e2Q3vJSWZoyjeVbO997wHxE4Owag45Q8htBHMDHX0Qb5Dza2
lnkknZ/1c/FELFoyH5jqlD/Dz2Z7fskY3K/dNUU4ZOXB2T+2JwIDAQABo4IDeTCC
A3UwHQYDVR0OBBYEFN5G2t0IeWfLPX81JHindgOcmB5LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zMzA5
N2UzNi1jZWYzLTQxOGItYTg5NS1jYWNiNzk3ZDFlZWIvNmJiYzg1ZmQtYzlhNi0z
ZmU2LWEwYWQtYWM4NzhiMjQzZjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzMwOTdlMzYtY2VmMy00MThiLWE4
OTUtY2FjYjc5N2QxZWViLzMzMDk3ZTM2LWNlZjMtNDE4Yi1hODk1LWNhY2I3OTdk
MWVlYi5jcmwwHwYDVR0jBBgwFoAU89JWK3b/OzZxC0Wwx5lTFoanj/IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zMzA5N2UzNi1jZWYzLTQxOGItYTg5NS1jYWNi
Nzk3ZDFlZWIuY2VyMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQCk6EEAwQC
othsAwQDotjQAwQAxj61AwQC0EQ4AwQD0FCQAwQD0FuwMFQGA1UdIAEB/wRKMEgw
RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv
cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABiLkv3e
FxTMPHkmHoe390zFA+ybU061rzlRf/VNqQufR4NR4GMn62Vf3ZAgTQ1AamUaDjGi
BPKKuRYiPSIWI9Jcsn6ShtfSM8IAbZby8M4D7H/0wMHARb+BGTqUlETJe4c3VigB
oZs24ls7q3j0kGuG3GJ9O93EIEG7tzkQr5nRgCfW2/OeVyeIWK5HQ6bycfFQeSX0
Hus0SegbJVIJB1Jxux/eCqlVYsRrQ14MvN0KHdm9ZWjJ6vL+SmyxUgkSpa8hLQkS
3KaVG6WvlbVARrYgUi4go2gpC6cZWm1Tv/Izy2OTe0uzhgJYTocCLrd9cJKc5Z0W
sozLLncYwUwaz5M=
-----END CERTIFICATE-----
Generated at Wed Jul 29 11:32:22 2026 by rpki-client