Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4bf9628-af4d-4afa-ae79-ac51e8655d32/de847a06-de42-39bb-b42d-d6634e0c9a95.roa
File:                     de847a06-de42-39bb-b42d-d6634e0c9a95.roa (raw, json)
Hash identifier:          znxdLOuBLz33uMpf5x5BsYiOJUg9BkxQx1cG7eOdJAI=
Subject key identifier:   9A:CA:81:37:B0:7B:79:C2:57:2F:E4:4F:92:FC:CF:D2:B9:FE:E8:E7
Certificate issuer:       /CN=a4bf9628-af4d-4afa-ae79-ac51e8655d32
Certificate serial:       010D0C9F4328584DD4C07E350EED14EDAD10ED60
Authority key identifier: 9A:7A:27:DE:EA:74:07:A6:4B:92:F9:BF:8F:35:A2:E8:71:65:A4:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4bf9628-af4d-4afa-ae79-ac51e8655d32.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4bf9628-af4d-4afa-ae79-ac51e8655d32/de847a06-de42-39bb-b42d-d6634e0c9a95.roa
Signing time:             Thu 14 May 2026 13:00:31 +0000
ROA not before:           Thu 14 May 2026 13:00:31 +0000
ROA not after:            Wed 12 Aug 2026 13:00:31 +0000
asID:                     40214
IP address blocks:        124.197.0.0/20 maxlen: 24
                          185.111.200.0/22 maxlen: 24
                          2607:ee40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4bf9628-af4d-4afa-ae79-ac51e8655d32/a4bf9628-af4d-4afa-ae79-ac51e8655d32.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4bf9628-af4d-4afa-ae79-ac51e8655d32/a4bf9628-af4d-4afa-ae79-ac51e8655d32.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4bf9628-af4d-4afa-ae79-ac51e8655d32.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d4:c0:7e:35:0e:ed:14:ed:ad:10:ed:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4bf9628-af4d-4afa-ae79-ac51e8655d32
        Validity
            Not Before: May 14 13:00:31 2026 GMT
            Not After : Aug 12 13:00:31 2026 GMT
        Subject: CN=e0079568-77f4-4664-a3c5-b0c5b50d272c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:44:85:de:f3:ca:b0:7c:88:ca:a8:cd:33:92:
                    a1:31:58:6c:9e:a2:d7:b7:e3:0a:3b:06:02:45:09:
                    cb:a8:de:40:fc:1a:90:92:96:c8:2b:c3:ba:dd:47:
                    1b:95:c5:b0:97:6e:9c:5c:04:80:c2:3b:85:d7:79:
                    60:68:88:ca:01:1a:8f:8f:ae:b6:0e:60:f1:47:25:
                    48:5b:da:cc:a1:05:82:e3:56:6a:92:c2:ab:b4:fa:
                    ed:d0:4a:7a:b9:5e:f2:bc:35:92:99:b3:e5:fe:46:
                    df:0d:23:9f:0b:ee:d0:e9:7b:bc:bb:1e:84:52:57:
                    d5:fa:55:ab:c1:cf:fc:27:f4:e3:60:32:3e:a7:34:
                    de:a5:11:7d:cf:c1:a3:c0:4f:fd:8a:8f:d2:f7:81:
                    75:36:68:1f:9f:43:54:40:c6:ad:d7:a8:4c:9e:96:
                    2e:2a:c0:c6:0b:da:8f:ea:01:f4:3a:7c:16:b2:25:
                    05:3c:57:a4:cc:51:4d:94:c2:f5:34:83:e9:54:41:
                    b7:99:38:77:6c:43:fb:3e:d0:19:e4:c8:b4:63:50:
                    6d:6c:1c:57:f8:95:87:3c:ec:6d:b5:01:a7:2b:39:
                    fb:2a:7f:1f:56:5c:0b:91:a3:64:2b:14:fe:8c:18:
                    8a:a0:aa:17:f7:7d:96:74:60:28:34:d1:29:98:65:
                    bc:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:CA:81:37:B0:7B:79:C2:57:2F:E4:4F:92:FC:CF:D2:B9:FE:E8:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4bf9628-af4d-4afa-ae79-ac51e8655d32/de847a06-de42-39bb-b42d-d6634e0c9a95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4bf9628-af4d-4afa-ae79-ac51e8655d32/a4bf9628-af4d-4afa-ae79-ac51e8655d32.crl

            X509v3 Authority Key Identifier:
                keyid:9A:7A:27:DE:EA:74:07:A6:4B:92:F9:BF:8F:35:A2:E8:71:65:A4:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4bf9628-af4d-4afa-ae79-ac51e8655d32.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.197.0.0/20
                  185.111.200.0/22
                IPv6:
                  2607:ee40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:14:b9:08:e4:9f:14:10:ad:8f:b7:8e:d3:78:16:48:81:ee:
         02:d2:3a:29:e6:29:2f:3e:63:57:63:81:0d:4a:4a:5a:7d:0e:
         9b:1e:6b:f7:b8:ab:f5:39:e7:48:42:d6:9c:2d:5d:a5:e4:77:
         0a:95:18:84:e7:90:c2:25:ed:50:9b:7f:e9:b1:43:e4:0f:ef:
         5a:66:70:8c:ed:08:fe:41:b7:df:51:82:2a:a7:6c:45:05:0d:
         21:00:db:32:e8:34:40:01:42:0c:6b:78:20:2f:77:60:52:fe:
         be:fb:0e:b8:ef:4e:22:0f:37:1d:3e:ca:71:c8:89:df:cf:ac:
         ed:d6:81:00:18:f2:70:d4:16:f5:8d:eb:29:ce:3f:f4:30:c5:
         b5:c9:99:f0:5b:f6:46:0f:9c:3b:c0:03:7e:ba:03:e4:3a:46:
         cd:55:b6:9b:e3:50:d8:51:75:96:e2:90:62:3e:34:b0:cf:45:
         b7:9b:1b:64:c9:71:c9:c9:7b:cb:d0:a6:d0:31:64:77:a5:7f:
         d3:60:87:8b:bd:0a:e8:8b:7f:55:d6:ca:87:ac:6c:87:7c:72:
         b3:67:b8:9c:0c:c6:df:8c:25:a5:09:1e:0e:59:89:b7:e5:5d:
         ff:64:cd:10:a1:97:c7:0a:0e:de:e5:94:a7:2b:53:a5:6b:2a:
         06:0b:46:70
-----BEGIN CERTIFICATE-----
MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWE3UwH41Du0U7a0Q7WAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTRiZjk2MjgtYWY0ZC00YWZhLWFlNzktYWM1MWU4NjU1
ZDMyMB4XDTI2MDUxNDEzMDAzMVoXDTI2MDgxMjEzMDAzMVowLzEtMCsGA1UEAxMk
ZTAwNzk1NjgtNzdmNC00NjY0LWEzYzUtYjBjNWI1MGQyNzJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgESF3vPKsHyIyqjNM5KhMVhsnqLXt+MKOwYC
RQnLqN5A/BqQkpbIK8O63UcblcWwl26cXASAwjuF13lgaIjKARqPj662DmDxRyVI
W9rMoQWC41ZqksKrtPrt0Ep6uV7yvDWSmbPl/kbfDSOfC+7Q6Xu8ux6EUlfV+lWr
wc/8J/TjYDI+pzTepRF9z8GjwE/9io/S94F1Nmgfn0NUQMat16hMnpYuKsDGC9qP
6gH0OnwWsiUFPFekzFFNlML1NIPpVEG3mTh3bEP7PtAZ5Mi0Y1BtbBxX+JWHPOxt
tQGnKzn7Kn8fVlwLkaNkKxT+jBiKoKoX932WdGAoNNEpmGW8iwIDAQABo4IDajCC
A2YwHQYDVR0OBBYEFJrKgTewe3nCVy/kT5L8z9K5/ujnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNGJm
OTYyOC1hZjRkLTRhZmEtYWU3OS1hYzUxZTg2NTVkMzIvZGU4NDdhMDYtZGU0Mi0z
OWJiLWI0MmQtZDY2MzRlMGM5YTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTRiZjk2MjgtYWY0ZC00YWZhLWFl
NzktYWM1MWU4NjU1ZDMyL2E0YmY5NjI4LWFmNGQtNGFmYS1hZTc5LWFjNTFlODY1
NWQzMi5jcmwwHwYDVR0jBBgwFoAUmnon3up0B6ZLkvm/jzWi6HFlpMIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNGJmOTYyOC1hZjRkLTRhZmEtYWU3OS1hYzUx
ZTg2NTVkMzIuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEfMUAAwQC
uW/IMA0EAgACMAcDBQAmB+5AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFsUuQjknxQQrY+3jtN4FkiB7gLS
OinmKS8+Y1djgQ1KSlp9Dpsea/e4q/U550hC1pwtXaXkdwqVGITnkMIl7VCbf+mx
Q+QP71pmcIztCP5Bt99RgiqnbEUFDSEA2zLoNEABQgxreCAvd2BS/r77DrjvTiIP
Nx0+ynHIid/PrO3WgQAY8nDUFvWN6ynOP/QwxbXJmfBb9kYPnDvAA366A+Q6Rs1V
tpvjUNhRdZbikGI+NLDPRbebG2TJccnJe8vQptAxZHelf9Ngh4u9CuiLf1XWyoes
bId8crNnuJwMxt+MJaUJHg5ZibflXf9kzRChl8cKDt7llKcrU6VrKgYLRnA=
-----END CERTIFICATE-----
Generated at Thu May 28 13:41:35 2026 by rpki-client