Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/d63d2c69-1581-3042-9e40-e504ec9f86b2.roa
File:                     d63d2c69-1581-3042-9e40-e504ec9f86b2.roa (raw, json)
Hash identifier:          QK+764cyS6mHbhW1gxOWGP2H5mUdkhcTbpzNNENmhuA=
Subject key identifier:   F5:4B:66:86:E9:80:B4:29:49:35:79:03:B0:54:61:3A:92:FC:09:EB
Certificate issuer:       /CN=4e653f37-4b22-40a3-a8bd-e70f208c0efb
Certificate serial:       010D0C9F4328584E37646CBFA5C2EEC0D695D300
Authority key identifier: 22:23:96:FF:0D:17:D5:60:EB:0B:E3:91:7A:56:9A:74:92:80:C1:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/d63d2c69-1581-3042-9e40-e504ec9f86b2.roa
Signing time:             Thu 18 Jun 2026 21:00:12 +0000
ROA not before:           Thu 18 Jun 2026 21:00:12 +0000
ROA not after:            Wed 16 Sep 2026 21:00:12 +0000
asID:                     15128
IP address blocks:        104.250.64.0/19 maxlen: 24
                          147.194.0.0/16 maxlen: 24
                          192.235.128.0/17 maxlen: 24
                          209.163.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/4e653f37-4b22-40a3-a8bd-e70f208c0efb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/4e653f37-4b22-40a3-a8bd-e70f208c0efb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:37:64:6c:bf:a5:c2:ee:c0:d6:95:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e653f37-4b22-40a3-a8bd-e70f208c0efb
        Validity
            Not Before: Jun 18 21:00:12 2026 GMT
            Not After : Sep 16 21:00:12 2026 GMT
        Subject: CN=c5035262-0f8f-4c5d-a6f0-27a3f91aebda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:5b:3b:c1:ca:14:e3:b7:8f:39:3c:a6:99:a9:
                    4e:51:dd:d2:8b:bc:d7:18:d1:6b:5d:06:b3:66:31:
                    69:0b:23:ad:a0:a3:9e:ec:c1:56:d7:31:51:4e:16:
                    e4:7e:ff:8a:ec:6e:d9:99:d4:07:d0:9a:77:70:2a:
                    f9:57:a3:97:18:25:fd:e7:15:a9:d1:17:41:26:d0:
                    09:df:64:63:2b:26:28:18:e3:ef:6d:8e:63:fc:cd:
                    f6:b1:65:0b:42:64:02:56:05:68:f7:ea:a0:9a:87:
                    71:f8:3a:8f:85:ef:b6:5c:4f:3b:c1:88:94:74:b1:
                    b9:ba:d2:77:80:76:d0:f4:00:32:70:45:4c:cd:9f:
                    b9:57:75:57:ca:27:18:15:b5:08:6a:3b:83:e8:78:
                    e4:0d:f9:7b:5c:ab:e6:6a:17:2b:29:81:c8:87:32:
                    e2:b2:87:18:80:ce:99:af:09:6b:4b:1d:83:cd:f3:
                    f8:b2:14:cd:c7:18:c0:a0:ae:4d:30:8c:0c:58:b2:
                    69:d8:cf:d0:5c:bb:9c:d7:c0:11:1f:ca:61:af:e5:
                    c0:8a:e1:7d:ca:fd:35:fd:84:a1:2c:65:39:15:db:
                    8f:40:8f:fb:7a:73:2b:ec:28:18:b4:bd:94:95:7d:
                    7c:5c:c9:7b:8e:fd:c2:9f:df:58:fd:77:e8:5e:64:
                    71:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:4B:66:86:E9:80:B4:29:49:35:79:03:B0:54:61:3A:92:FC:09:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/d63d2c69-1581-3042-9e40-e504ec9f86b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/4e653f37-4b22-40a3-a8bd-e70f208c0efb.crl

            X509v3 Authority Key Identifier:
                keyid:22:23:96:FF:0D:17:D5:60:EB:0B:E3:91:7A:56:9A:74:92:80:C1:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.250.64.0/19
                  147.194.0.0/16
                  192.235.128.0/17
                  209.163.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:67:09:ab:da:4f:34:cc:bc:1b:99:41:16:c0:bb:fe:ca:3d:
         b6:fb:79:2d:f7:28:e4:a3:63:a5:06:8b:56:0a:2d:4e:20:90:
         cf:4f:9a:0f:f7:f6:dd:0f:e1:bb:0b:19:3b:18:b6:28:c2:0f:
         62:8b:a2:1d:5c:d5:de:53:2e:7d:a5:d9:d1:37:2f:f5:25:6e:
         bf:cb:92:b4:95:0c:f3:31:ab:f6:ab:5d:29:36:08:cf:02:23:
         4b:2c:6b:6b:28:d6:6f:9d:af:b0:d9:90:49:52:a0:f8:6e:48:
         13:9c:c7:72:c6:6b:65:4e:7c:b4:3d:d4:f6:5a:3f:72:69:13:
         ec:2f:6e:1b:d1:8e:55:3e:fe:2f:1b:6a:e2:fb:f6:ea:82:d3:
         18:bc:51:02:39:b5:f0:38:60:ca:b3:96:85:22:b8:83:11:e7:
         99:19:69:34:d5:57:d7:47:83:87:bf:c9:03:f4:25:a8:a9:89:
         50:a9:2a:dd:74:85:d4:e8:60:58:1d:91:c5:3d:f5:3b:1f:70:
         01:fe:14:09:13:a1:fb:49:88:c2:0f:3c:4e:75:8b:dd:5b:d9:
         53:87:80:c8:50:25:88:7e:58:2d:b8:a4:2b:30:ef:d2:18:b8:
         de:47:4d:29:eb:e9:d9:fa:d6:ce:8b:03:2f:a4:08:80:13:ab:
         4c:ff:07:38
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE43ZGy/pcLuwNaV0wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU2NTNmMzctNGIyMi00MGEzLWE4YmQtZTcwZjIwOGMw
ZWZiMB4XDTI2MDYxODIxMDAxMloXDTI2MDkxNjIxMDAxMlowLzEtMCsGA1UEAxMk
YzUwMzUyNjItMGY4Zi00YzVkLWE2ZjAtMjdhM2Y5MWFlYmRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhls7wcoU47ePOTymmalOUd3Si7zXGNFrXQaz
ZjFpCyOtoKOe7MFW1zFRThbkfv+K7G7ZmdQH0Jp3cCr5V6OXGCX95xWp0RdBJtAJ
32RjKyYoGOPvbY5j/M32sWULQmQCVgVo9+qgmodx+DqPhe+2XE87wYiUdLG5utJ3
gHbQ9AAycEVMzZ+5V3VXyicYFbUIajuD6HjkDfl7XKvmahcrKYHIhzLisocYgM6Z
rwlrSx2DzfP4shTNxxjAoK5NMIwMWLJp2M/QXLuc18ARH8phr+XAiuF9yv01/YSh
LGU5FduPQI/7enMr7CgYtL2UlX18XMl7jv3Cn99Y/XfoXmRx4QIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFPVLZobpgLQpSTV5A7BUYTqS/AnrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80ZTY1
M2YzNy00YjIyLTQwYTMtYThiZC1lNzBmMjA4YzBlZmIvZDYzZDJjNjktMTU4MS0z
MDQyLTllNDAtZTUwNGVjOWY4NmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNGU2NTNmMzctNGIyMi00MGEzLWE4
YmQtZTcwZjIwOGMwZWZiLzRlNjUzZjM3LTRiMjItNDBhMy1hOGJkLWU3MGYyMDhj
MGVmYi5jcmwwHwYDVR0jBBgwFoAUIiOW/w0X1WDrC+ORelaadJKAwRgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS80ZTY1M2YzNy00YjIyLTQwYTMtYThiZC1lNzBm
MjA4YzBlZmIuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAdBAIAATAXAwQFaPpAAwMA
k8IDBAfA64ADBAXRo0AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEArWcJq9pPNMy8G5lBFsC7/so9tvt5Lfco
5KNjpQaLVgotTiCQz0+aD/f23Q/huwsZOxi2KMIPYouiHVzV3lMufaXZ0Tcv9SVu
v8uStJUM8zGr9qtdKTYIzwIjSyxrayjWb52vsNmQSVKg+G5IE5zHcsZrZU58tD3U
9lo/cmkT7C9uG9GOVT7+Lxtq4vv26oLTGLxRAjm18DhgyrOWhSK4gxHnmRlpNNVX
10eDh7/JA/QlqKmJUKkq3XSF1OhgWB2RxT31Ox9wAf4UCROh+0mIwg88TnWL3VvZ
U4eAyFAliH5YLbikKzDv0hi43kdNKevp2frWzosDL6QIgBOrTP8HOA==
-----END CERTIFICATE-----
Generated at Sat Jul 4 04:30:33 2026 by rpki-client