Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/1b852b6c-9aa4-3df4-a821-ac1748d70801.roa
File:                     1b852b6c-9aa4-3df4-a821-ac1748d70801.roa (raw, json)
Hash identifier:          8xqu+n+O/6R47TvLtdg50TYuS+Mrf28h4bw5u4epADo=
Subject key identifier:   C4:E5:B4:D1:6B:8C:52:83:22:A0:54:19:21:5B:3C:24:12:08:52:6A
Certificate issuer:       /CN=a91fff12-f74d-4a80-9a5d-f225534bc527
Certificate serial:       010D0C9F4328584EA2DFBBB0C77020EC098F1480
Authority key identifier: 02:B8:42:01:E2:A4:2E:85:E9:E4:88:63:7D:3A:92:9E:0F:C1:C4:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/1b852b6c-9aa4-3df4-a821-ac1748d70801.roa
Signing time:             Mon 27 Jul 2026 09:00:12 +0000
ROA not before:           Mon 27 Jul 2026 09:00:12 +0000
ROA not after:            Sun 25 Oct 2026 09:00:12 +0000
asID:                     46595
IP address blocks:        64.35.144.0/20 maxlen: 24
                          104.37.76.0/23 maxlen: 24
                          104.37.78.0/24 maxlen: 24
                          174.137.64.0/20 maxlen: 24
                          216.255.192.0/19 maxlen: 24
                          2600:b000::/28 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/a91fff12-f74d-4a80-9a5d-f225534bc527.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/a91fff12-f74d-4a80-9a5d-f225534bc527.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a2:df:bb:b0:c7:70:20:ec:09:8f:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a91fff12-f74d-4a80-9a5d-f225534bc527
        Validity
            Not Before: Jul 27 09:00:12 2026 GMT
            Not After : Oct 25 09:00:12 2026 GMT
        Subject: CN=e5faf486-38de-4d21-ad9d-b1a3c1d4a1c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4c:9d:bf:87:f9:62:dc:79:fe:f4:fa:5e:32:
                    e4:92:c7:04:2a:7e:f7:9c:9f:69:d8:f7:6a:19:36:
                    89:93:6a:ce:dd:47:d7:13:78:ca:d0:f4:1b:c8:00:
                    45:74:0c:26:0b:db:32:c8:dd:42:68:09:9b:9f:f0:
                    e8:d8:d2:04:c5:0f:87:20:82:67:9e:5c:64:fb:c7:
                    c1:45:a0:00:77:aa:90:de:0d:ec:85:5a:59:83:66:
                    e8:db:8f:c0:ad:a4:ad:60:5e:79:f4:42:10:4a:f1:
                    cb:ef:69:41:1c:40:fa:8e:a1:b7:92:5e:51:27:5a:
                    68:d1:35:b3:d3:82:aa:7d:f2:5f:09:32:9b:9a:d4:
                    d8:eb:5c:bb:bb:70:07:0e:64:7c:d8:8e:bd:bb:9c:
                    1b:6a:be:e7:55:4b:2c:6f:dc:39:c0:3b:24:50:2f:
                    ff:51:c0:b9:ec:4a:fb:24:cb:0d:c0:c4:e4:34:ba:
                    3a:55:da:5e:ce:79:47:47:1c:f7:cb:98:79:ff:3f:
                    7f:89:ea:7a:af:91:59:bb:5d:c3:71:1f:fe:5c:68:
                    92:ae:cf:61:ef:60:40:93:23:b3:ea:e1:0f:6d:41:
                    05:fa:3a:26:47:8c:60:6a:0e:66:74:06:34:f2:54:
                    2f:7c:9a:1a:95:ca:1b:56:b5:c2:29:a7:5d:a3:f9:
                    04:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:E5:B4:D1:6B:8C:52:83:22:A0:54:19:21:5B:3C:24:12:08:52:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/1b852b6c-9aa4-3df4-a821-ac1748d70801.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/a91fff12-f74d-4a80-9a5d-f225534bc527.crl

            X509v3 Authority Key Identifier:
                keyid:02:B8:42:01:E2:A4:2E:85:E9:E4:88:63:7D:3A:92:9E:0F:C1:C4:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.35.144.0/20
                  104.37.76.0-104.37.78.255
                  174.137.64.0/20
                  216.255.192.0/19
                IPv6:
                  2600:b000::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:c1:7e:73:b6:83:45:d6:f8:ef:45:ab:4d:59:18:be:ae:94:
         49:6d:8f:bd:24:a7:07:87:99:e7:01:01:6b:6b:28:3d:d7:55:
         f3:b0:cb:47:16:dc:74:10:2f:13:26:cd:ea:ec:40:91:45:05:
         41:2a:b7:5d:81:88:2b:7e:53:90:c7:70:61:6d:61:54:f0:10:
         de:46:c9:cb:d5:03:ec:b5:ff:5d:47:fb:5b:77:b2:11:ec:4f:
         65:0f:86:f1:72:16:ba:4d:90:2c:31:7c:0a:26:2b:a8:65:39:
         92:be:d8:d8:5e:ab:d4:6e:29:8a:e1:c1:8a:4b:6f:22:a7:56:
         22:97:a0:0a:12:2d:12:05:52:66:47:45:8b:8f:12:20:4f:a1:
         61:43:c4:e6:68:aa:6d:ff:cd:0b:55:6b:dd:59:7b:05:ce:ec:
         c3:e2:58:09:e1:b9:01:63:c1:a6:78:8e:a5:bb:2d:88:4d:d5:
         2b:e1:ac:0c:87:ba:84:53:c2:7b:70:fa:50:92:6d:db:d1:c8:
         15:ff:89:29:eb:19:7c:cf:7b:ca:e6:ef:53:cf:75:9a:d8:c9:
         10:23:73:7f:57:b9:be:03:1b:cc:19:56:7b:eb:5b:72:da:20:
         3b:a5:54:41:d2:02:58:24:f8:fc:70:ad:65:e1:44:2c:55:89:
         9f:7c:bf:a3
-----BEGIN CERTIFICATE-----
MIIGbDCCBVSgAwIBAgIUAQ0Mn0MoWE6i37uwx3Ag7AmPFIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTkxZmZmMTItZjc0ZC00YTgwLTlhNWQtZjIyNTUzNGJj
NTI3MB4XDTI2MDcyNzA5MDAxMloXDTI2MTAyNTA5MDAxMlowLzEtMCsGA1UEAxMk
ZTVmYWY0ODYtMzhkZS00ZDIxLWFkOWQtYjFhM2MxZDRhMWM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0ydv4f5Ytx5/vT6XjLkkscEKn73nJ9p2Pdq
GTaJk2rO3UfXE3jK0PQbyABFdAwmC9syyN1CaAmbn/Do2NIExQ+HIIJnnlxk+8fB
RaAAd6qQ3g3shVpZg2bo24/AraStYF559EIQSvHL72lBHED6jqG3kl5RJ1po0TWz
04KqffJfCTKbmtTY61y7u3AHDmR82I69u5wbar7nVUssb9w5wDskUC//UcC57Er7
JMsNwMTkNLo6VdpeznlHRxz3y5h5/z9/iep6r5FZu13DcR/+XGiSrs9h72BAkyOz
6uEPbUEF+jomR4xgag5mdAY08lQvfJoalcobVrXCKaddo/kEDQIDAQABo4IDfjCC
A3owHQYDVR0OBBYEFMTltNFrjFKDIqBUGSFbPCQSCFJqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hOTFm
ZmYxMi1mNzRkLTRhODAtOWE1ZC1mMjI1NTM0YmM1MjcvMWI4NTJiNmMtOWFhNC0z
ZGY0LWE4MjEtYWMxNzQ4ZDcwODAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTkxZmZmMTItZjc0ZC00YTgwLTlh
NWQtZjIyNTUzNGJjNTI3L2E5MWZmZjEyLWY3NGQtNGE4MC05YTVkLWYyMjU1MzRi
YzUyNy5jcmwwHwYDVR0jBBgwFoAUArhCAeKkLoXp5IhjfTqSng/BxOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9hOTFmZmYxMi1mNzRkLTRhODAtOWE1ZC1mMjI1
NTM0YmM1MjcuY2VyMEgGCCsGAQUFBwEHAQH/BDkwNzAmBAIAATAgAwQEQCOQMAwD
BAJoJUwDBABoJU4DBASuiUADBAXY/8AwDQQCAAIwBwMFBCYAsAAwVAYDVR0gAQH/
BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu
Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA
V8F+c7aDRdb470WrTVkYvq6USW2PvSSnB4eZ5wEBa2soPddV87DLRxbcdBAvEybN
6uxAkUUFQSq3XYGIK35TkMdwYW1hVPAQ3kbJy9UD7LX/XUf7W3eyEexPZQ+G8XIW
uk2QLDF8CiYrqGU5kr7Y2F6r1G4piuHBiktvIqdWIpegChItEgVSZkdFi48SIE+h
YUPE5miqbf/NC1Vr3Vl7Bc7sw+JYCeG5AWPBpniOpbstiE3VK+GsDIe6hFPCe3D6
UJJt29HIFf+JKesZfM97yubvU891mtjJECNzf1e5vgMbzBlWe+tbctogO6VUQdIC
WCT4/HCtZeFELFWJn3y/ow==
-----END CERTIFICATE-----
Generated at Wed Jul 29 22:50:09 2026 by rpki-client