Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/d63d2c69-1581-3042-9e40-e504ec9f86b2.roa
File:                     d63d2c69-1581-3042-9e40-e504ec9f86b2.roa (raw, json)
Hash identifier:          kXoPSIKfyahWAq1SIOTAgOeBVxOFaRnzGYZQmrNwmfI=
Subject key identifier:   87:E3:C4:58:5F:C9:5E:B1:4F:C1:07:35:8D:AA:BD:B2:79:8A:66:42
Certificate issuer:       /CN=4e653f37-4b22-40a3-a8bd-e70f208c0efb
Certificate serial:       010D0C9F4328584ED9C749785B76ADFD2C981400
Authority key identifier: 22:23:96:FF:0D:17:D5:60:EB:0B:E3:91:7A:56:9A:74:92:80:C1:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/d63d2c69-1581-3042-9e40-e504ec9f86b2.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     15128
IP address blocks:        104.250.64.0/19 maxlen: 24
                          147.194.0.0/16 maxlen: 24
                          192.235.128.0/17 maxlen: 24
                          209.163.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/4e653f37-4b22-40a3-a8bd-e70f208c0efb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/4e653f37-4b22-40a3-a8bd-e70f208c0efb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:49:78:5b:76:ad:fd:2c:98:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e653f37-4b22-40a3-a8bd-e70f208c0efb
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=3239ac0e-fe2e-49eb-8a98-63add19fe750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:02:72:bf:fe:69:44:01:64:f1:a1:c2:17:40:
                    ee:6b:38:9f:6c:09:43:d2:f3:6b:28:6e:b0:c8:39:
                    59:20:1b:d8:90:50:1f:dc:89:ad:d2:68:f1:df:ef:
                    a9:3d:91:1f:c6:4c:9c:93:2d:ae:42:1a:2b:39:1a:
                    82:9d:d9:25:5a:65:e6:f4:00:bd:6e:9e:64:1c:b7:
                    a0:14:98:a7:ed:50:07:29:8a:25:7c:09:94:b2:6f:
                    b7:0c:52:f4:c5:0c:42:ab:62:28:c4:71:d6:ee:a6:
                    9f:03:19:d9:84:c2:bb:69:be:37:1e:c4:4a:ed:b0:
                    79:ff:bb:5c:49:11:59:f5:7a:72:82:04:b7:4d:a3:
                    83:74:2f:c5:d3:1c:75:dc:98:2a:2b:31:26:e2:5f:
                    54:ce:48:ed:18:93:b1:ed:98:c8:6c:3b:1b:a8:2c:
                    d3:a5:74:dc:87:59:6d:fa:9b:3d:33:e3:8c:59:72:
                    78:28:5d:05:91:5a:87:dd:b1:7b:2a:29:df:52:ba:
                    da:a1:d8:20:26:78:4e:19:74:87:26:fd:1d:53:df:
                    e8:e4:0d:a4:7e:b9:9b:36:6c:70:44:fd:16:e3:b0:
                    d8:5c:7b:04:66:08:d3:a3:31:c0:1e:2d:58:46:a1:
                    b7:fe:07:c7:a6:26:fc:35:94:c2:c2:d7:2d:42:bf:
                    b4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:E3:C4:58:5F:C9:5E:B1:4F:C1:07:35:8D:AA:BD:B2:79:8A:66:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/d63d2c69-1581-3042-9e40-e504ec9f86b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/4e653f37-4b22-40a3-a8bd-e70f208c0efb.crl

            X509v3 Authority Key Identifier:
                keyid:22:23:96:FF:0D:17:D5:60:EB:0B:E3:91:7A:56:9A:74:92:80:C1:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.250.64.0/19
                  147.194.0.0/16
                  192.235.128.0/17
                  209.163.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:31:ee:83:5a:69:48:3e:01:32:01:77:fc:e1:f4:43:05:74:
         ac:56:97:50:56:91:bb:04:5f:be:ea:20:c3:de:e9:e7:0d:5e:
         51:2f:44:e0:21:b6:99:0d:61:b8:a7:dc:a7:42:71:e4:9e:7a:
         6c:35:5e:64:2d:66:4e:33:93:45:bc:6c:e5:e3:0b:1f:ac:7c:
         6e:69:cd:1a:26:76:cd:b4:b9:81:74:84:ae:3d:d9:b2:9b:fe:
         b4:01:4f:7f:7c:9c:cb:ea:cc:03:77:78:88:fd:b1:86:f4:73:
         29:3f:8b:00:64:14:69:3e:8f:6c:45:b8:8c:9b:d3:b7:0a:ae:
         ee:00:72:22:ee:ad:5e:31:23:17:01:da:af:60:9f:7a:bc:b4:
         95:49:4c:4f:6e:d8:89:23:98:f9:72:ee:94:cc:e7:d8:1a:5b:
         df:f0:76:d7:48:27:c4:0f:82:20:d4:1b:f7:c2:b4:fe:ef:58:
         e6:75:02:e6:20:8f:10:61:51:00:46:58:c7:24:07:f9:b3:9d:
         07:c1:91:f8:e1:d9:56:a4:c8:87:44:93:bf:e3:5b:19:a6:b2:
         b0:c2:79:ca:c7:04:f8:ee:1f:b9:f8:7b:55:81:d7:52:a6:56:
         3e:cd:55:e6:64:c2:ea:73:fe:2a:12:56:32:73:65:91:18:08:
         d7:36:1e:01
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE7Zx0l4W3at/SyYFAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU2NTNmMzctNGIyMi00MGEzLWE4YmQtZTcwZjIwOGMw
ZWZiMB4XDTI2MDgxNjAxMDAxNFoXDTI2MTExNDAyMDAxNFowLzEtMCsGA1UEAxMk
MzIzOWFjMGUtZmUyZS00OWViLThhOTgtNjNhZGQxOWZlNzUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwJyv/5pRAFk8aHCF0DuazifbAlD0vNrKG6w
yDlZIBvYkFAf3Imt0mjx3++pPZEfxkycky2uQhorORqCndklWmXm9AC9bp5kHLeg
FJin7VAHKYolfAmUsm+3DFL0xQxCq2IoxHHW7qafAxnZhMK7ab43HsRK7bB5/7tc
SRFZ9XpyggS3TaODdC/F0xx13JgqKzEm4l9UzkjtGJOx7ZjIbDsbqCzTpXTch1lt
+ps9M+OMWXJ4KF0FkVqH3bF7KinfUrraodggJnhOGXSHJv0dU9/o5A2kfrmbNmxw
RP0W47DYXHsEZgjTozHAHi1YRqG3/gfHpib8NZTCwtctQr+0gQIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFIfjxFhfyV6xT8EHNY2qvbJ5imZCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80ZTY1
M2YzNy00YjIyLTQwYTMtYThiZC1lNzBmMjA4YzBlZmIvZDYzZDJjNjktMTU4MS0z
MDQyLTllNDAtZTUwNGVjOWY4NmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNGU2NTNmMzctNGIyMi00MGEzLWE4
YmQtZTcwZjIwOGMwZWZiLzRlNjUzZjM3LTRiMjItNDBhMy1hOGJkLWU3MGYyMDhj
MGVmYi5jcmwwHwYDVR0jBBgwFoAUIiOW/w0X1WDrC+ORelaadJKAwRgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS80ZTY1M2YzNy00YjIyLTQwYTMtYThiZC1lNzBm
MjA4YzBlZmIuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAdBAIAATAXAwQFaPpAAwMA
k8IDBAfA64ADBAXRo0AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAlDHug1ppSD4BMgF3/OH0QwV0rFaXUFaR
uwRfvuogw97p5w1eUS9E4CG2mQ1huKfcp0Jx5J56bDVeZC1mTjOTRbxs5eMLH6x8
bmnNGiZ2zbS5gXSErj3Zspv+tAFPf3ycy+rMA3d4iP2xhvRzKT+LAGQUaT6PbEW4
jJvTtwqu7gByIu6tXjEjFwHar2Cfery0lUlMT27YiSOY+XLulMzn2Bpb3/B210gn
xA+CINQb98K0/u9Y5nUC5iCPEGFRAEZYxyQH+bOdB8GR+OHZVqTIh0STv+NbGaay
sMJ5yscE+O4fufh7VYHXUqZWPs1V5mTC6nP+KhJWMnNlkRgI1zYeAQ==
-----END CERTIFICATE-----
Generated at Fri Aug 21 01:43:21 2026 by rpki-client