Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/7f37d838-7ff6-3d1f-ada9-65965fc7a645.roa
File:                     7f37d838-7ff6-3d1f-ada9-65965fc7a645.roa (raw, json)
Hash identifier:          1TJP2EGH7yVAfJsetbXZjk5G6e3TIvuZYkq4uNHj34g=
Subject key identifier:   B3:17:73:1C:F4:29:16:0B:8F:A2:B7:AF:45:86:49:4F:A8:08:01:50
Certificate issuer:       /CN=954c01ba-d9ad-44e8-b48c-1a48f20d8b7d
Certificate serial:       010D0C9F4328584EA787F2802020B5F21465EF6E
Authority key identifier: 72:A8:3D:57:8C:66:88:34:8C:9E:2B:8E:F0:43:BD:E2:7C:A5:90:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/7f37d838-7ff6-3d1f-ada9-65965fc7a645.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     13876
IP address blocks:        64.186.128.0/20 maxlen: 24
                          66.102.224.0/20 maxlen: 24
                          67.204.0.0/19 maxlen: 24
                          158.41.16.0/21 maxlen: 24
                          2607:8300::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:f2:80:20:20:b5:f2:14:65:ef:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=954c01ba-d9ad-44e8-b48c-1a48f20d8b7d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b617a7f7-a06d-4470-9430-7a9199b49e78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:59:c8:35:3f:87:65:94:35:b1:2c:5f:ea:fc:
                    6e:82:9b:1d:15:84:cd:0c:94:d6:9e:9b:0a:01:50:
                    05:79:15:9b:6b:73:77:a0:88:c1:8b:b7:ba:c3:54:
                    05:47:6e:23:bf:d0:53:5c:e8:89:0a:b5:17:27:dc:
                    a8:09:fe:01:7d:b1:5c:85:0d:66:83:d4:28:8d:74:
                    a4:f8:6a:d8:e8:5c:cf:ae:1e:0a:7e:cd:c2:f3:09:
                    d8:f3:3d:d6:c1:5a:bd:de:bd:3b:e7:2b:ed:79:43:
                    6e:b0:43:a6:0b:51:18:b9:85:89:85:5d:50:8d:76:
                    33:47:38:96:aa:40:af:09:d7:29:a9:56:fe:da:19:
                    7d:73:6b:27:91:e3:c0:e1:26:02:2a:18:e2:34:71:
                    7f:bd:e5:ea:8a:5a:6e:11:f3:dc:6a:aa:0e:1f:f9:
                    b5:0d:ae:5e:cd:81:93:af:15:3f:62:d1:f4:a3:73:
                    a3:4d:9b:c4:d5:1a:bc:f5:92:ba:be:a9:e3:39:72:
                    3b:fa:7a:01:fc:db:66:e2:05:65:55:7c:4b:64:23:
                    fb:61:39:9b:54:32:fd:64:b3:79:31:46:b7:85:a6:
                    e6:b4:01:b1:8d:a2:d1:c7:a3:61:2e:cd:c8:e9:b4:
                    d5:4b:be:93:4f:25:40:5c:34:83:37:3b:42:73:d9:
                    2a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:17:73:1C:F4:29:16:0B:8F:A2:B7:AF:45:86:49:4F:A8:08:01:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/7f37d838-7ff6-3d1f-ada9-65965fc7a645.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.crl

            X509v3 Authority Key Identifier:
                keyid:72:A8:3D:57:8C:66:88:34:8C:9E:2B:8E:F0:43:BD:E2:7C:A5:90:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.186.128.0/20
                  66.102.224.0/20
                  67.204.0.0/19
                  158.41.16.0/21
                IPv6:
                  2607:8300::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:47:7b:35:fe:3e:d3:5c:f4:bf:e7:73:92:d9:a1:58:05:b9:
         a4:b0:0c:9e:8c:87:f4:c8:73:5b:55:68:68:e0:fc:49:89:e6:
         3a:fd:00:b5:bb:e4:7a:6d:d0:af:ed:6d:73:15:3c:c6:1d:7f:
         55:a5:e0:50:0d:99:a8:88:61:ea:9b:a1:f3:e1:be:29:3b:6c:
         c3:bb:97:1f:35:64:a1:81:23:2e:00:81:ec:78:0c:1d:4a:41:
         5b:ed:f5:9c:40:66:2b:e2:85:67:79:04:a3:85:4f:16:56:09:
         84:34:0c:9e:47:ff:e7:db:e1:83:6b:fd:0a:81:fe:bc:c4:f1:
         93:e4:9e:2d:04:3f:f9:74:01:39:10:d1:22:66:d7:0a:9d:09:
         9e:4e:05:02:79:5f:e0:f2:59:6e:84:1b:dc:e6:bb:d4:79:4d:
         7a:97:8b:de:7a:c9:58:d3:cf:75:2d:c6:39:ab:5a:9c:07:12:
         41:49:25:14:ab:5c:e2:eb:90:f0:66:c5:49:90:ac:d8:f5:4b:
         a0:63:75:b2:2a:ac:97:15:a7:99:69:24:99:f1:61:c3:23:14:
         84:4b:1c:8a:88:5b:66:af:45:e9:dc:b1:6c:06:b3:9c:db:f6:
         74:ba:83:86:55:fa:b0:75:bc:3e:76:04:ef:88:df:b2:23:d2:
         b8:ef:87:62
-----BEGIN CERTIFICATE-----
MIIGZDCCBUygAwIBAgIUAQ0Mn0MoWE6nh/KAICC18hRl724wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTU0YzAxYmEtZDlhZC00NGU4LWI0OGMtMWE0OGYyMGQ4
YjdkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
YjYxN2E3ZjctYTA2ZC00NDcwLTk0MzAtN2E5MTk5YjQ5ZTc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVnINT+HZZQ1sSxf6vxugpsdFYTNDJTWnpsK
AVAFeRWba3N3oIjBi7e6w1QFR24jv9BTXOiJCrUXJ9yoCf4BfbFchQ1mg9QojXSk
+GrY6FzPrh4Kfs3C8wnY8z3WwVq93r075yvteUNusEOmC1EYuYWJhV1QjXYzRziW
qkCvCdcpqVb+2hl9c2snkePA4SYCKhjiNHF/veXqilpuEfPcaqoOH/m1Da5ezYGT
rxU/YtH0o3OjTZvE1Rq89ZK6vqnjOXI7+noB/Ntm4gVlVXxLZCP7YTmbVDL9ZLN5
MUa3habmtAGxjaLRx6NhLs3I6bTVS76TTyVAXDSDNztCc9kqmwIDAQABo4IDdjCC
A3IwHQYDVR0OBBYEFLMXcxz0KRYLj6K3r0WGSU+oCAFQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85NTRj
MDFiYS1kOWFkLTQ0ZTgtYjQ4Yy0xYTQ4ZjIwZDhiN2QvN2YzN2Q4MzgtN2ZmNi0z
ZDFmLWFkYTktNjU5NjVmYzdhNjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOTU0YzAxYmEtZDlhZC00NGU4LWI0
OGMtMWE0OGYyMGQ4YjdkLzk1NGMwMWJhLWQ5YWQtNDRlOC1iNDhjLTFhNDhmMjBk
OGI3ZC5jcmwwHwYDVR0jBBgwFoAUcqg9V4xmiDSMniuO8EO94nylkNwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi85NTRjMDFiYS1kOWFkLTQ0ZTgtYjQ4Yy0xYTQ4
ZjIwZDhiN2QuY2VyMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQEQLqAAwQE
QmbgAwQFQ8wAAwQDnikQMA0EAgACMAcDBQAmB4MAMFQGA1UdIAEB/wRKMEgwRgYI
KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz
b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADFHezX+PtNc
9L/nc5LZoVgFuaSwDJ6Mh/TIc1tVaGjg/EmJ5jr9ALW75Hpt0K/tbXMVPMYdf1Wl
4FANmaiIYeqbofPhvik7bMO7lx81ZKGBIy4Agex4DB1KQVvt9ZxAZivihWd5BKOF
TxZWCYQ0DJ5H/+fb4YNr/QqB/rzE8ZPkni0EP/l0ATkQ0SJm1wqdCZ5OBQJ5X+Dy
WW6EG9zmu9R5TXqXi956yVjTz3UtxjmrWpwHEkFJJRSrXOLrkPBmxUmQrNj1S6Bj
dbIqrJcVp5lpJJnxYcMjFIRLHIqIW2avRencsWwGs5zb9nS6g4ZV+rB1vD52BO+I
37Ij0rjvh2I=
-----END CERTIFICATE-----
Generated at Fri Sep 11 06:51:20 2026 by rpki-client