Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a32c261-f39e-3286-869b-43723c58ff8a.roa
File:                     4a32c261-f39e-3286-869b-43723c58ff8a.roa (raw, json)
Hash identifier:          OMi32/ON6k9lBH7mfz3xRJsXdST80blHZlLvKqrINlI=
Subject key identifier:   0D:E8:06:A0:E7:F0:D6:40:48:CB:C2:A5:AC:4E:F1:1E:27:BE:E5:17
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E7CF453FC8857E9125C997D80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a32c261-f39e-3286-869b-43723c58ff8a.roa
Signing time:             Mon 13 Jul 2026 19:01:02 +0000
ROA not before:           Mon 13 Jul 2026 19:01:02 +0000
ROA not after:            Thu 13 Aug 2026 01:00:24 +0000
asID:                     20207
IP address blocks:        149.78.136.0/24 maxlen: 24
                          149.78.138.0/24 maxlen: 24
                          149.78.140.0/23 maxlen: 24
                          149.78.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7c:f4:53:fc:88:57:e9:12:5c:99:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jul 13 19:01:02 2026 GMT
            Not After : Aug 13 01:00:24 2026 GMT
        Subject: CN=e212ef71-ad33-42c7-bb19-3aa5a0c51e81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:15:af:28:7e:ef:f7:41:92:47:c9:b4:07:91:
                    fc:16:de:70:72:57:d6:ff:cd:e9:ad:bc:04:3d:d5:
                    a4:a5:29:5c:63:14:19:82:47:6a:69:5f:83:a3:44:
                    9c:76:78:3f:45:e7:75:6e:23:3a:08:63:42:b8:99:
                    5c:0a:b8:78:c0:a5:93:de:6b:24:d3:c4:0f:79:74:
                    3a:a5:fc:18:7b:5f:ee:42:7a:a7:fd:c3:b4:c6:75:
                    33:05:1e:ee:89:e1:d8:cc:1b:20:63:31:da:33:e2:
                    fe:eb:f1:c8:ba:3a:d2:09:bd:ce:9f:6d:ef:a7:66:
                    c5:62:40:c2:7b:56:d1:a3:af:ff:56:88:8d:0a:3c:
                    f0:06:7d:bf:2d:e9:f0:54:61:fb:4b:3a:be:53:3f:
                    77:5b:68:51:3f:6c:70:70:17:61:d5:b0:91:8e:05:
                    b7:7a:d9:fd:37:a9:d7:5d:f1:db:02:fd:ad:19:0d:
                    b8:b2:d7:e9:46:ce:79:50:4b:5c:a5:3f:23:ec:8a:
                    31:39:26:a4:34:a6:d1:f7:04:1f:04:f4:41:92:0f:
                    20:bb:bd:ec:0c:64:1f:ad:87:1e:14:30:c0:74:95:
                    06:f5:8d:a4:39:f0:2d:71:e0:e5:9a:d0:58:19:76:
                    66:af:90:21:c6:cb:ba:0c:62:1c:9f:f2:fc:52:db:
                    bd:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:E8:06:A0:E7:F0:D6:40:48:CB:C2:A5:AC:4E:F1:1E:27:BE:E5:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a32c261-f39e-3286-869b-43723c58ff8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.78.136.0/24
                  149.78.138.0/24
                  149.78.140.0/23
                  149.78.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:71:20:f9:35:5f:35:50:b5:67:8e:99:cd:1e:32:8c:25:b5:
         a9:2c:0e:c9:7d:9c:ec:cb:7e:f8:cd:70:7d:8a:4d:1c:0b:8b:
         b2:14:ab:ae:fe:d1:68:54:ba:0e:ed:f0:c8:18:15:f8:39:d8:
         4f:f4:b6:11:3e:e9:f3:3a:e4:e4:d5:cf:b8:48:27:e3:40:e9:
         65:4f:37:13:77:9c:61:cd:84:25:07:45:1f:63:48:02:de:df:
         1e:15:50:29:36:ec:ac:3c:99:4c:d0:6d:43:20:e5:71:59:54:
         cc:8a:53:60:01:17:9c:f9:fc:cf:6d:af:68:db:07:5b:d5:1e:
         e8:90:12:65:f4:16:53:3b:80:fb:77:96:07:49:b9:5a:75:9c:
         7f:ab:a7:ae:0c:c4:64:3b:3f:95:5f:de:46:8d:08:0b:e4:ff:
         b2:d8:c9:08:4e:f1:5a:e5:37:a3:f9:51:e9:d9:2c:56:c0:a9:
         cd:1a:4c:56:fb:31:9a:b4:a1:00:22:17:ff:89:fb:e3:49:ea:
         4e:46:fa:65:ba:59:79:43:51:11:68:07:2b:2e:a0:14:e6:76:
         f4:23:cf:3d:d5:e8:73:63:03:9b:67:d5:33:e3:27:bb:e3:c0:
         08:91:d8:6a:53:38:41:2b:fa:9a:6f:41:35:2a:cf:30:7d:44:
         c8:70:78:47
-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWE589FP8iFfpElyZfYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDcxMzE5MDEwMloXDTI2MDgxMzAxMDAyNFowLzEtMCsGA1UEAxMk
ZTIxMmVmNzEtYWQzMy00MmM3LWJiMTktM2FhNWEwYzUxZTgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRWvKH7v90GSR8m0B5H8Ft5wclfW/83prbwE
PdWkpSlcYxQZgkdqaV+Do0Scdng/Red1biM6CGNCuJlcCrh4wKWT3msk08QPeXQ6
pfwYe1/uQnqn/cO0xnUzBR7uieHYzBsgYzHaM+L+6/HIujrSCb3On23vp2bFYkDC
e1bRo6//VoiNCjzwBn2/LenwVGH7Szq+Uz93W2hRP2xwcBdh1bCRjgW3etn9N6nX
XfHbAv2tGQ24stfpRs55UEtcpT8j7IoxOSakNKbR9wQfBPRBkg8gu73sDGQfrYce
FDDAdJUG9Y2kOfAtceDlmtBYGXZmr5Ahxsu6DGIcn/L8Utu9NwIDAQABo4IDZzCC
A2MwHQYDVR0OBBYEFA3oBqDn8NZASMvCpaxO8R4nvuUXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNGEzMmMyNjEtZjM5ZS0z
Mjg2LTg2OWItNDM3MjNjNThmZjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAlU6IAwQA
lU6KAwQBlU6MAwQAlU7iMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr
BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz
Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBALtxIPk1XzVQtWeOmc0eMowltaksDsl9
nOzLfvjNcH2KTRwLi7IUq67+0WhUug7t8MgYFfg52E/0thE+6fM65OTVz7hIJ+NA
6WVPNxN3nGHNhCUHRR9jSALe3x4VUCk27Kw8mUzQbUMg5XFZVMyKU2ABF5z5/M9t
r2jbB1vVHuiQEmX0FlM7gPt3lgdJuVp1nH+rp64MxGQ7P5Vf3kaNCAvk/7LYyQhO
8VrlN6P5UenZLFbAqc0aTFb7MZq0oQAiF/+J++NJ6k5G+mW6WXlDURFoBysuoBTm
dvQjzz3V6HNjA5tn1TPjJ7vjwAiR2GpTOEEr+ppvQTUqzzB9RMhweEc=
-----END CERTIFICATE-----
Generated at Wed Jul 22 07:41:00 2026 by rpki-client