Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/1c930bb0-f1b9-3e1b-938d-bd72734a009e.roa
File:                     1c930bb0-f1b9-3e1b-938d-bd72734a009e.roa (raw, json)
Hash identifier:          KxOvxTAlR89zomtdpcJbOoJQmtmnXEhr/gHxEruEhQA=
Subject key identifier:   36:A4:20:FD:A2:F4:E4:7B:60:ED:17:C5:6D:B6:B1:38:A8:24:4D:72
Certificate issuer:       /CN=0699cec8-3851-41f8-aee8-2e225865699c
Certificate serial:       010D0C9F4328584F4F07EDA222945C5600264E00
Authority key identifier: 04:3A:13:A4:9A:F1:19:6C:60:B7:74:79:3E:AA:82:F6:12:4B:E6:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/1c930bb0-f1b9-3e1b-938d-bd72734a009e.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     22260
IP address blocks:        167.222.38.0/24 maxlen: 24
                          170.61.134.0/23 maxlen: 23
                          170.61.136.0/23 maxlen: 23
                          170.61.138.0/24 maxlen: 24
                          170.61.144.0/23 maxlen: 23
                          170.61.146.0/23 maxlen: 23
                          170.61.148.0/23 maxlen: 23
                          170.61.150.0/24 maxlen: 24
                          170.61.152.0/24 maxlen: 24
                          170.61.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/0699cec8-3851-41f8-aee8-2e225865699c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/0699cec8-3851-41f8-aee8-2e225865699c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:07:ed:a2:22:94:5c:56:00:26:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0699cec8-3851-41f8-aee8-2e225865699c
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=e4621fa1-c503-458a-8171-f3a9f0329269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:35:dd:6c:06:11:42:81:42:74:1c:e0:56:8c:
                    ec:89:92:47:fa:c8:37:a3:2d:ff:69:9c:48:7a:cd:
                    bd:dd:ca:ae:7d:22:84:75:f8:9a:c5:32:2b:c9:01:
                    53:a5:0c:15:a6:a6:76:6b:87:00:8b:bd:52:05:35:
                    9c:a3:6d:51:7d:3c:47:1e:30:82:34:15:be:ef:42:
                    41:7c:3c:6b:a9:67:24:6a:a4:37:fb:a1:af:41:76:
                    92:1e:17:25:54:09:06:26:22:fc:3b:d4:9a:e8:78:
                    52:03:f1:fa:d2:d3:98:ca:9e:e3:fd:4e:df:d3:a5:
                    c6:e6:36:7e:ef:f0:d1:0f:dc:ed:a9:67:36:01:8f:
                    57:1c:f4:47:9b:35:80:43:69:58:9b:1e:f4:ff:49:
                    99:70:47:1f:b8:74:d6:c1:d0:a1:ea:8c:d6:5a:e8:
                    35:bd:a9:66:16:95:b8:98:e2:a6:58:de:56:61:1e:
                    36:c1:84:64:26:25:93:fd:98:6a:66:de:e6:b5:49:
                    55:6d:54:dc:90:3c:1d:d2:f3:2f:a1:08:c5:00:76:
                    9f:8d:7f:0e:40:ab:e5:c2:dd:d3:96:76:c2:ea:0e:
                    56:73:b2:6b:df:b4:fa:19:6c:25:66:e2:e3:41:02:
                    d0:54:bf:0f:54:d4:23:c5:46:09:f0:58:93:2e:96:
                    af:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:A4:20:FD:A2:F4:E4:7B:60:ED:17:C5:6D:B6:B1:38:A8:24:4D:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/1c930bb0-f1b9-3e1b-938d-bd72734a009e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/0699cec8-3851-41f8-aee8-2e225865699c.crl

            X509v3 Authority Key Identifier:
                keyid:04:3A:13:A4:9A:F1:19:6C:60:B7:74:79:3E:AA:82:F6:12:4B:E6:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.222.38.0/24
                  170.61.134.0-170.61.138.255
                  170.61.144.0-170.61.150.255
                  170.61.152.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:4e:df:3c:a5:3e:94:ea:30:39:f2:f0:c1:cf:fc:11:f1:f7:
         d3:66:25:2b:bc:5b:dc:cf:5c:ab:04:81:e8:a8:c4:46:e2:bc:
         24:bb:54:8c:1d:3f:72:ef:94:c5:24:96:d3:e6:3c:d8:b1:b3:
         ae:7d:8e:d9:01:b2:ec:23:cb:f0:89:03:35:ed:87:17:e2:17:
         3b:7f:66:1b:79:09:58:a1:82:ae:62:5f:80:e6:68:6d:cf:54:
         10:fa:6e:fc:9b:db:d2:04:74:b0:e9:76:e4:80:f4:8e:9a:99:
         e4:30:16:74:8a:67:c0:51:a4:f6:ea:59:99:17:82:9c:04:4d:
         a3:5b:2b:e5:c1:7b:22:10:bd:75:25:e5:92:d2:77:48:1a:ca:
         05:4b:29:c2:de:d0:8d:2a:06:94:ab:44:7f:e9:42:85:73:cc:
         fc:45:aa:71:01:77:6d:4c:00:fd:08:80:60:ec:f1:f9:b1:fd:
         ae:59:a7:e0:df:5e:6e:75:6d:2f:20:76:9a:ec:a9:23:ff:7b:
         5e:d3:63:63:e1:12:dc:97:71:6f:46:47:e3:99:89:e0:5e:d4:
         02:a8:8a:10:3c:20:34:e5:c7:9e:dc:d5:20:43:2b:60:fc:73:
         97:50:e6:17:a5:31:2b:29:c4:d3:e1:2e:65:ed:f3:fb:07:85:
         ba:23:92:2f
-----BEGIN CERTIFICATE-----
MIIGZTCCBU2gAwIBAgIUAQ0Mn0MoWE9PB+2iIpRcVgAmTgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDY5OWNlYzgtMzg1MS00MWY4LWFlZTgtMmUyMjU4NjU2
OTljMB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk
ZTQ2MjFmYTEtYzUwMy00NThhLTgxNzEtZjNhOWYwMzI5MjY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjXdbAYRQoFCdBzgVozsiZJH+sg3oy3/aZxI
es293cqufSKEdfiaxTIryQFTpQwVpqZ2a4cAi71SBTWco21RfTxHHjCCNBW+70JB
fDxrqWckaqQ3+6GvQXaSHhclVAkGJiL8O9Sa6HhSA/H60tOYyp7j/U7f06XG5jZ+
7/DRD9ztqWc2AY9XHPRHmzWAQ2lYmx70/0mZcEcfuHTWwdCh6ozWWug1valmFpW4
mOKmWN5WYR42wYRkJiWT/ZhqZt7mtUlVbVTckDwd0vMvoQjFAHafjX8OQKvlwt3T
lnbC6g5Wc7Jr37T6GWwlZuLjQQLQVL8PVNQjxUYJ8FiTLpavzwIDAQABo4IDdzCC
A3MwHQYDVR0OBBYEFDakIP2i9OR7YO0XxW22sTioJE1yMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8wNjk5
Y2VjOC0zODUxLTQxZjgtYWVlOC0yZTIyNTg2NTY5OWMvMWM5MzBiYjAtZjFiOS0z
ZTFiLTkzOGQtYmQ3MjczNGEwMDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMDY5OWNlYzgtMzg1MS00MWY4LWFl
ZTgtMmUyMjU4NjU2OTljLzA2OTljZWM4LTM4NTEtNDFmOC1hZWU4LTJlMjI1ODY1
Njk5Yy5jcmwwHwYDVR0jBBgwFoAUBDoTpJrxGWxgt3R5PqqC9hJL5p0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi8wNjk5Y2VjOC0zODUxLTQxZjgtYWVlOC0yZTIy
NTg2NTY5OWMuY2VyMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoAwQAp94mMAwD
BAGqPYYDBACqPYowDAMEBKo9kAMEAKo9lgMEAao9mDBUBgNVHSABAf8ESjBIMEYG
CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl
c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB9Tt88pT6U
6jA58vDBz/wR8ffTZiUrvFvcz1yrBIHoqMRG4rwku1SMHT9y75TFJJbT5jzYsbOu
fY7ZAbLsI8vwiQM17YcX4hc7f2YbeQlYoYKuYl+A5mhtz1QQ+m78m9vSBHSw6Xbk
gPSOmpnkMBZ0imfAUaT26lmZF4KcBE2jWyvlwXsiEL11JeWS0ndIGsoFSynC3tCN
KgaUq0R/6UKFc8z8RapxAXdtTAD9CIBg7PH5sf2uWafg315udW0vIHaa7Kkj/3te
02Nj4RLcl3FvRkfjmYngXtQCqIoQPCA05cee3NUgQytg/HOXUOYXpTErKcTT4S5l
7fP7B4W6I5Iv
-----END CERTIFICATE-----
Generated at Tue Oct 27 16:37:48 2026 by rpki-client