Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/d5ed1c68-c170-38bc-a6ec-5f8c2987fe4f.roa
File:                     d5ed1c68-c170-38bc-a6ec-5f8c2987fe4f.roa (raw, json)
Hash identifier:          M41CKrHqbvN0uX5NQX3HEBPUWdmEHlYiXjHK88ZMBso=
Subject key identifier:   46:96:98:37:97:75:8E:08:A0:A9:81:CE:5C:47:37:32:97:2D:11:ED
Certificate issuer:       /CN=a05c180d-6db0-4307-bc39-264e11bb765c
Certificate serial:       010D0C9F4328584D0BDD0B6D50C4EB7519059640
Authority key identifier: FA:96:F4:82:9C:8D:63:83:5B:FB:C0:EA:74:85:60:F5:E9:31:65:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/d5ed1c68-c170-38bc-a6ec-5f8c2987fe4f.roa
Signing time:             Tue 03 Mar 2026 14:00:40 +0000
ROA not before:           Tue 03 Mar 2026 14:00:40 +0000
ROA not after:            Mon 01 Jun 2026 13:00:40 +0000
asID:                     12956
IP address blocks:        66.119.64.0/19 maxlen: 19
                          66.201.160.0/19 maxlen: 19
                          66.249.192.0/19 maxlen: 19
                          198.52.248.0/21 maxlen: 21
                          216.184.96.0/19 maxlen: 19
                          2001:1820::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/a05c180d-6db0-4307-bc39-264e11bb765c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/a05c180d-6db0-4307-bc39-264e11bb765c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0b:dd:0b:6d:50:c4:eb:75:19:05:96:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a05c180d-6db0-4307-bc39-264e11bb765c
        Validity
            Not Before: Mar  3 14:00:40 2026 GMT
            Not After : Jun  1 13:00:40 2026 GMT
        Subject: CN=ef537255-c0da-43bd-87f8-bf15b3b2e25d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:03:50:aa:b3:f8:20:a2:3f:dd:7e:ae:72:14:
                    a8:98:4f:2a:aa:da:fa:6b:5b:cc:21:1c:68:e3:ea:
                    c5:60:0c:22:5d:20:61:81:57:61:c6:21:ec:d1:32:
                    38:e9:ac:93:bf:93:ce:20:b4:0d:52:ed:a2:86:f6:
                    a6:b4:1d:aa:30:d6:08:34:6c:26:a5:71:c2:7e:d4:
                    d8:08:8d:99:84:16:f4:03:c9:2a:02:7a:37:67:42:
                    12:2d:d9:00:c1:fe:9d:2d:44:83:10:78:eb:f3:76:
                    69:8c:37:de:b0:fa:7b:2c:99:f7:47:ca:2a:2b:54:
                    d0:52:45:36:06:50:56:47:87:0a:95:69:b6:37:cc:
                    5b:d6:34:e7:26:dc:ce:0b:3a:5b:8d:75:ec:61:83:
                    79:55:b4:6d:5e:b1:69:3d:ef:e5:d8:c6:8b:a4:30:
                    50:86:90:5b:45:e4:10:65:4c:80:6f:3e:ca:94:7b:
                    c3:9c:71:e9:67:87:44:6a:e0:c5:71:3d:7e:c1:a9:
                    7a:66:36:c5:88:55:86:b6:e7:f7:46:a3:1f:73:4b:
                    29:2f:e0:cc:5c:ff:cb:3d:72:12:aa:72:2f:be:40:
                    ca:f0:3e:88:73:d4:54:fa:32:d5:aa:fb:3d:de:5b:
                    99:4b:27:d5:54:eb:e2:77:54:be:c0:22:96:db:da:
                    52:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:96:98:37:97:75:8E:08:A0:A9:81:CE:5C:47:37:32:97:2D:11:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/d5ed1c68-c170-38bc-a6ec-5f8c2987fe4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/a05c180d-6db0-4307-bc39-264e11bb765c.crl

            X509v3 Authority Key Identifier:
                keyid:FA:96:F4:82:9C:8D:63:83:5B:FB:C0:EA:74:85:60:F5:E9:31:65:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.119.64.0/19
                  66.201.160.0/19
                  66.249.192.0/19
                  198.52.248.0/21
                  216.184.96.0/19
                IPv6:
                  2001:1820::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:ac:31:74:11:a8:9c:98:da:be:c9:d8:44:8c:73:f9:a0:12:
         61:2e:29:4e:df:9b:57:4f:90:d8:4f:fa:53:a2:59:61:0a:77:
         da:07:66:66:cb:ec:ff:20:da:d7:9a:63:cb:07:49:f6:26:a9:
         66:d0:b6:8e:7b:6a:2b:36:bb:66:b3:5a:55:36:91:e0:59:01:
         2d:78:0a:c3:82:49:e0:99:18:8d:02:0d:62:64:01:a7:49:51:
         12:ff:7d:cd:78:56:c6:9e:8b:7e:c0:99:cc:d1:b2:99:c2:e9:
         53:ff:1b:ef:5a:20:90:f0:01:8a:f7:fd:6d:ff:52:ff:a6:d4:
         c9:e4:91:ab:42:47:a5:71:47:5c:d2:06:4a:f5:39:5b:1f:ce:
         0a:e2:e6:ae:61:c3:3e:8e:88:8e:4a:76:81:28:cd:1e:40:2b:
         ec:68:9a:41:a4:3c:63:1c:a9:cd:8f:85:0c:81:f8:f2:57:fe:
         2c:b0:92:8f:cb:e8:79:e4:65:3f:5c:cf:0f:7b:a0:a5:81:2a:
         cf:51:f2:34:7b:cc:85:15:81:55:6a:cf:b2:f1:db:7b:2c:bc:
         6b:00:52:0f:79:1b:7c:4c:1c:50:4c:5e:cc:d5:8d:3d:52:30:
         3c:04:a3:58:73:e4:70:77:86:e8:c2:4b:47:1b:ce:28:bd:77:
         42:3b:9d:35
-----BEGIN CERTIFICATE-----
MIIGajCCBVKgAwIBAgIUAQ0Mn0MoWE0L3QttUMTrdRkFlkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTA1YzE4MGQtNmRiMC00MzA3LWJjMzktMjY0ZTExYmI3
NjVjMB4XDTI2MDMwMzE0MDA0MFoXDTI2MDYwMTEzMDA0MFowLzEtMCsGA1UEAxMk
ZWY1MzcyNTUtYzBkYS00M2JkLTg3ZjgtYmYxNWIzYjJlMjVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjANQqrP4IKI/3X6uchSomE8qqtr6a1vMIRxo
4+rFYAwiXSBhgVdhxiHs0TI46ayTv5POILQNUu2ihvamtB2qMNYINGwmpXHCftTY
CI2ZhBb0A8kqAno3Z0ISLdkAwf6dLUSDEHjr83ZpjDfesPp7LJn3R8oqK1TQUkU2
BlBWR4cKlWm2N8xb1jTnJtzOCzpbjXXsYYN5VbRtXrFpPe/l2MaLpDBQhpBbReQQ
ZUyAbz7KlHvDnHHpZ4dEauDFcT1+wal6ZjbFiFWGtuf3RqMfc0spL+DMXP/LPXIS
qnIvvkDK8D6Ic9RU+jLVqvs93luZSyfVVOvid1S+wCKW29pSoQIDAQABo4IDfDCC
A3gwHQYDVR0OBBYEFEaWmDeXdY4IoKmBzlxHNzKXLRHtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMDVj
MTgwZC02ZGIwLTQzMDctYmMzOS0yNjRlMTFiYjc2NWMvZDVlZDFjNjgtYzE3MC0z
OGJjLWE2ZWMtNWY4YzI5ODdmZTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTA1YzE4MGQtNmRiMC00MzA3LWJj
MzktMjY0ZTExYmI3NjVjL2EwNWMxODBkLTZkYjAtNDMwNy1iYzM5LTI2NGUxMWJi
NzY1Yy5jcmwwHwYDVR0jBBgwFoAU+pb0gpyNY4Nb+8DqdIVg9ekxZVgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hMDVjMTgwZC02ZGIwLTQzMDctYmMzOS0yNjRl
MTFiYjc2NWMuY2VyMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQFQndAAwQF
QsmgAwQFQvnAAwQDxjT4AwQF2LhgMA0EAgACMAcDBQAgARggMFQGA1UdIAEB/wRK
MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u
ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEys
MXQRqJyY2r7J2ESMc/mgEmEuKU7fm1dPkNhP+lOiWWEKd9oHZmbL7P8g2teaY8sH
SfYmqWbQto57ais2u2azWlU2keBZAS14CsOCSeCZGI0CDWJkAadJURL/fc14Vsae
i37AmczRspnC6VP/G+9aIJDwAYr3/W3/Uv+m1MnkkatCR6VxR1zSBkr1OVsfzgri
5q5hwz6OiI5KdoEozR5AK+xomkGkPGMcqc2PhQyB+PJX/iywko/L6HnkZT9czw97
oKWBKs9R8jR7zIUVgVVqz7Lx23ssvGsAUg95G3xMHFBMXszVjT1SMDwEo1hz5HB3
hujCS0cbzii9d0I7nTU=
-----END CERTIFICATE-----
Generated at Tue Mar 10 17:55:44 2026 by rpki-client