Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186/70c4a7e8-a06e-3c1e-9364-3fe51647ef0b.roa
File:                     70c4a7e8-a06e-3c1e-9364-3fe51647ef0b.roa (raw, json)
Hash identifier:          uJ6M0/jhln8O6ntqc5GBicmTwHYQgLxM2tGcsoYnpAk=
Subject key identifier:   D8:16:75:7D:3F:30:34:8D:37:E4:79:1D:B3:AF:CE:E0:51:21:9C:18
Certificate issuer:       /CN=bf5f7742-98f7-41ca-9c57-5b902bc4b186
Certificate serial:       010D0C9F4328584E4129DC2D3FE72DC2F1C0A980
Authority key identifier: 9D:7A:69:5B:92:56:C0:61:E1:91:03:52:70:A3:50:61:90:36:77:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186/70c4a7e8-a06e-3c1e-9364-3fe51647ef0b.roa
Signing time:             Mon 22 Jun 2026 09:00:11 +0000
ROA not before:           Mon 22 Jun 2026 09:00:11 +0000
ROA not after:            Sun 20 Sep 2026 09:00:11 +0000
asID:                     400633
IP address blocks:        23.226.160.0/20 maxlen: 24
                          64.190.44.0/22 maxlen: 24
                          168.100.48.0/20 maxlen: 24
                          216.246.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186/bf5f7742-98f7-41ca-9c57-5b902bc4b186.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186/bf5f7742-98f7-41ca-9c57-5b902bc4b186.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 24 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:41:29:dc:2d:3f:e7:2d:c2:f1:c0:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf5f7742-98f7-41ca-9c57-5b902bc4b186
        Validity
            Not Before: Jun 22 09:00:11 2026 GMT
            Not After : Sep 20 09:00:11 2026 GMT
        Subject: CN=773dd6d8-e802-41aa-8b15-63f6ec6df22c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ab:50:c8:6c:c7:94:7f:fc:3e:97:af:14:65:
                    33:a8:67:3c:bc:1c:e0:2b:73:00:da:57:1c:36:1b:
                    2d:8e:db:97:f0:77:b7:20:ea:5f:10:68:83:41:50:
                    fb:ba:f9:bf:ed:5b:a2:c4:f3:60:29:f2:e6:2e:6c:
                    d0:2f:d1:c7:53:a1:62:03:33:23:09:37:2a:78:47:
                    c0:35:6a:a7:f1:a7:30:c4:17:ec:f6:fd:ec:8f:78:
                    18:be:8a:5b:93:d1:0a:d4:a3:54:9f:7e:aa:20:a7:
                    b9:6f:07:d6:47:b8:55:cf:83:62:f6:15:d5:4f:f1:
                    87:99:48:ab:94:cc:a7:ec:b6:57:a5:69:cb:e5:1b:
                    54:f7:0d:1f:1b:84:fe:ab:46:ff:e1:71:98:11:a7:
                    b7:c5:2e:d4:22:f1:c2:86:e3:9e:13:ff:f2:b8:da:
                    33:eb:cf:2a:a0:b8:29:95:6b:3b:9c:b5:20:14:62:
                    f4:fb:df:94:a9:04:16:ff:40:e0:f4:95:c8:73:4f:
                    08:58:ad:61:2e:1f:20:46:6b:19:8a:e2:5f:d3:7c:
                    22:2a:ec:6f:4a:14:87:d5:72:2b:81:98:94:da:29:
                    d8:61:bf:07:6f:25:09:5e:86:ca:35:47:6a:d7:a5:
                    b4:11:e6:d1:29:37:c2:d9:7e:2f:e9:71:18:36:1e:
                    0d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:16:75:7D:3F:30:34:8D:37:E4:79:1D:B3:AF:CE:E0:51:21:9C:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186/70c4a7e8-a06e-3c1e-9364-3fe51647ef0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186/bf5f7742-98f7-41ca-9c57-5b902bc4b186.crl

            X509v3 Authority Key Identifier:
                keyid:9D:7A:69:5B:92:56:C0:61:E1:91:03:52:70:A3:50:61:90:36:77:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.226.160.0/20
                  64.190.44.0/22
                  168.100.48.0/20
                  216.246.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:7a:b9:d0:02:82:a0:e3:38:05:ac:63:85:b3:81:97:e7:ba:
         94:5e:39:d6:f7:05:70:70:19:ca:88:80:42:d0:64:75:1b:88:
         07:5d:dc:a0:f1:61:95:75:01:dc:5f:0f:0c:8e:b3:2a:cb:f2:
         38:55:e9:13:33:df:9c:91:5c:e9:54:63:f4:1d:b3:a6:9d:67:
         63:be:80:6f:c1:54:37:d3:38:82:2d:20:ca:a5:ec:29:c1:d3:
         11:22:ea:d3:f4:67:cf:67:84:96:9f:0b:20:3a:4f:5d:7a:d7:
         ad:d3:0e:92:12:11:28:bd:d6:c6:61:f2:eb:11:1b:03:1b:ed:
         3e:3f:d5:f9:db:28:56:61:a0:39:1d:a2:b9:97:34:6e:ae:48:
         a9:59:2f:00:75:79:1d:42:bc:f8:0a:52:67:b2:89:b6:fc:1f:
         26:5b:d4:9b:f2:0c:da:43:e1:57:5b:32:0a:ee:37:5d:72:7e:
         9a:8a:b1:8a:47:a2:74:0c:03:e5:fc:15:13:f6:f9:c3:5a:e6:
         0e:35:d6:b1:97:40:7b:fe:c6:64:fc:3e:0f:9e:36:b5:0f:ad:
         92:a5:28:22:62:1e:59:cf:db:54:a8:c6:a7:1a:a8:9c:a8:f9:
         81:88:16:fc:f7:ad:5c:8d:4c:4e:5c:6b:f6:9d:2f:22:14:cd:
         4a:c8:bd:12
-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWE5BKdwtP+ctwvHAqYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmY1Zjc3NDItOThmNy00MWNhLTljNTctNWI5MDJiYzRi
MTg2MB4XDTI2MDYyMjA5MDAxMVoXDTI2MDkyMDA5MDAxMVowLzEtMCsGA1UEAxMk
NzczZGQ2ZDgtZTgwMi00MWFhLThiMTUtNjNmNmVjNmRmMjJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtatQyGzHlH/8PpevFGUzqGc8vBzgK3MA2lcc
NhstjtuX8He3IOpfEGiDQVD7uvm/7VuixPNgKfLmLmzQL9HHU6FiAzMjCTcqeEfA
NWqn8acwxBfs9v3sj3gYvopbk9EK1KNUn36qIKe5bwfWR7hVz4Ni9hXVT/GHmUir
lMyn7LZXpWnL5RtU9w0fG4T+q0b/4XGYEae3xS7UIvHChuOeE//yuNoz688qoLgp
lWs7nLUgFGL0+9+UqQQW/0Dg9JXIc08IWK1hLh8gRmsZiuJf03wiKuxvShSH1XIr
gZiU2inYYb8HbyUJXobKNUdq16W0EebRKTfC2X4v6XEYNh4NzQIDAQABo4IDZzCC
A2MwHQYDVR0OBBYEFNgWdX0/MDSNN+R5HbOvzuBRIZwYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iZjVm
Nzc0Mi05OGY3LTQxY2EtOWM1Ny01YjkwMmJjNGIxODYvNzBjNGE3ZTgtYTA2ZS0z
YzFlLTkzNjQtM2ZlNTE2NDdlZjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmY1Zjc3NDItOThmNy00MWNhLTlj
NTctNWI5MDJiYzRiMTg2L2JmNWY3NzQyLTk4ZjctNDFjYS05YzU3LTViOTAyYmM0
YjE4Ni5jcmwwHwYDVR0jBBgwFoAUnXppW5JWwGHhkQNScKNQYZA2d2IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9iZjVmNzc0Mi05OGY3LTQxY2EtOWM1Ny01Yjkw
MmJjNGIxODYuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQEF+KgAwQC
QL4sAwQEqGQwAwQC2PbMMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr
BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz
Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAA56udACgqDjOAWsY4WzgZfnupReOdb3
BXBwGcqIgELQZHUbiAdd3KDxYZV1AdxfDwyOsyrL8jhV6RMz35yRXOlUY/Qds6ad
Z2O+gG/BVDfTOIItIMql7CnB0xEi6tP0Z89nhJafCyA6T116163TDpISESi91sZh
8usRGwMb7T4/1fnbKFZhoDkdormXNG6uSKlZLwB1eR1CvPgKUmeyibb8HyZb1Jvy
DNpD4VdbMgruN11yfpqKsYpHonQMA+X8FRP2+cNa5g411rGXQHv+xmT8Pg+eNrUP
rZKlKCJiHlnP21SoxqcaqJyo+YGIFvz3rVyNTE5ca/adLyIUzUrIvRI=
-----END CERTIFICATE-----
Generated at Mon Jun 22 22:55:13 2026 by rpki-client