Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/919acf53-1694-3fd1-b408-20238c84adf0.roa
File:                     919acf53-1694-3fd1-b408-20238c84adf0.roa (raw, json)
Hash identifier:          0qLkVZoxqepamsoeDvY1jpCeT9353p3k1mKN0Buzwao=
Subject key identifier:   A4:56:5A:1C:16:53:B1:A8:77:86:E4:D0:14:60:5D:61:FA:9D:BA:49
Certificate issuer:       /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
Certificate serial:       010D0C9F4328584D8EF57579622A3B2C7700F800
Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/919acf53-1694-3fd1-b408-20238c84adf0.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     13830
IP address blocks:        142.202.220.0/22 maxlen: 24
                          161.129.152.0/22 maxlen: 24
                          163.123.204.0/22 maxlen: 24
                          192.34.100.0/22 maxlen: 24
                          208.99.4.0/22 maxlen: 24
                          2001:506:30::/48 maxlen: 48
                          2604:fbc0::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:75:79:62:2a:3b:2c:77:00:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=d1eb02f1-781e-4446-a2ee-b43079db8ada
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:af:fc:e5:82:87:54:bb:a2:e3:af:e9:57:97:
                    a0:2b:4c:7e:a1:96:5d:03:37:98:47:e8:a6:ef:fd:
                    90:ac:cb:f1:f2:e9:74:9b:58:d7:9f:1e:55:00:9d:
                    70:b2:16:41:30:ec:c5:be:5c:e7:6a:18:d9:3a:ae:
                    aa:8e:9e:d7:da:2e:d3:90:d1:aa:11:b4:10:04:3c:
                    c5:6e:6f:f4:c7:a5:13:6e:85:2a:6b:d8:49:e1:ef:
                    3b:36:5a:ed:f1:46:ce:12:91:0c:4d:b4:e9:60:98:
                    ba:55:39:bf:70:4e:18:75:e2:c4:ef:7f:36:5c:07:
                    03:25:cd:7c:27:56:de:e7:fe:a9:74:66:2f:0c:4f:
                    e0:e7:71:1e:68:92:f4:58:fa:c1:7f:e8:04:a9:68:
                    b3:a0:f9:75:17:f3:0a:c1:f1:d0:25:00:4e:fb:2b:
                    ec:a5:86:04:2c:08:01:3f:37:13:54:f1:15:d7:c5:
                    c2:dc:7f:03:ca:e9:af:ef:7d:8f:2f:1a:55:dc:c8:
                    89:80:bb:f6:f3:4a:db:cc:59:90:26:4c:fb:8c:59:
                    1b:b7:f9:85:02:a8:ba:e6:83:ea:1f:d4:6a:d5:b8:
                    bb:99:cb:a1:d7:eb:8f:88:69:ab:de:cf:e3:56:3c:
                    75:cb:e0:92:62:bd:ef:77:0d:76:1d:2b:62:d5:e9:
                    e9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:56:5A:1C:16:53:B1:A8:77:86:E4:D0:14:60:5D:61:FA:9D:BA:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/919acf53-1694-3fd1-b408-20238c84adf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl

            X509v3 Authority Key Identifier:
                keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.220.0/22
                  161.129.152.0/22
                  163.123.204.0/22
                  192.34.100.0/22
                  208.99.4.0/22
                IPv6:
                  2001:506:30::/48
                  2604:fbc0::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:09:44:9d:21:37:dd:90:86:a2:8f:6a:5d:0b:9c:31:6e:ee:
         33:19:5e:1b:07:b1:d0:43:b9:72:b7:f2:03:38:cb:3a:45:33:
         d7:55:6e:1c:bb:a9:18:6b:cd:bd:02:17:03:c2:8b:33:35:ea:
         79:2c:18:60:a3:e8:c2:07:7d:57:06:c6:4a:14:69:c7:80:98:
         9a:8e:77:77:98:f7:63:a2:d6:d9:12:a5:16:10:0f:8e:ca:33:
         51:f7:95:ed:20:0c:67:90:cb:6c:d2:dc:a6:30:2e:9c:b9:9a:
         73:1a:07:b3:07:2a:76:4c:82:62:45:8d:90:6e:26:08:e8:9d:
         e9:ed:4e:8f:b4:fb:ef:df:81:c2:19:1d:da:c8:5d:c2:8b:a4:
         25:7a:e7:41:f2:cd:c5:31:86:a3:a5:3e:6b:40:6c:06:3b:f2:
         62:43:63:4f:e5:56:a6:b5:ce:80:4e:33:0e:18:7c:d6:d6:68:
         51:23:41:1d:4a:ba:cc:e4:0d:ad:d9:97:51:00:c9:28:c1:5d:
         a6:01:d2:8c:8f:55:72:d5:85:e4:f8:a1:69:98:64:c5:06:6f:
         87:14:ce:5b:f9:3b:36:f5:7a:fe:05:48:08:ed:07:42:52:d4:
         2a:f8:c2:04:ae:d8:b8:ac:74:7c:b7:69:fb:5d:72:55:00:78:
         6a:14:ee:de
-----BEGIN CERTIFICATE-----
MIIGdDCCBVygAwIBAgIUAQ0Mn0MoWE2O9XV5Yio7LHcA+AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWMxOWEyNDYtZDlmYS00ODFhLWE0ZDctMDEwYWY4YzEz
MmIzMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk
ZDFlYjAyZjEtNzgxZS00NDQ2LWEyZWUtYjQzMDc5ZGI4YWRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6a/85YKHVLui46/pV5egK0x+oZZdAzeYR+im
7/2QrMvx8ul0m1jXnx5VAJ1wshZBMOzFvlznahjZOq6qjp7X2i7TkNGqEbQQBDzF
bm/0x6UTboUqa9hJ4e87Nlrt8UbOEpEMTbTpYJi6VTm/cE4YdeLE7382XAcDJc18
J1be5/6pdGYvDE/g53EeaJL0WPrBf+gEqWizoPl1F/MKwfHQJQBO+yvspYYELAgB
PzcTVPEV18XC3H8Dyumv732PLxpV3MiJgLv280rbzFmQJkz7jFkbt/mFAqi65oPq
H9Rq1bi7mcuh1+uPiGmr3s/jVjx1y+CSYr3vdw12HSti1enp7QIDAQABo4IDhjCC
A4IwHQYDVR0OBBYEFKRWWhwWU7God4bk0BRgXWH6nbpJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YzE5
YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBhZjhjMTMyYjMvOTE5YWNmNTMtMTY5NC0z
ZmQxLWI0MDgtMjAyMzhjODRhZGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWMxOWEyNDYtZDlmYS00ODFhLWE0
ZDctMDEwYWY4YzEzMmIzLzVjMTlhMjQ2LWQ5ZmEtNDgxYS1hNGQ3LTAxMGFmOGMx
MzJiMy5jcmwwHwYDVR0jBBgwFoAUGBmr0BGL/MK+/l1zc0BDuuWTrnAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS81YzE5YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBh
ZjhjMTMyYjMuY2VyMFAGCCsGAQUFBwEHAQH/BEEwPzAkBAIAATAeAwQCjsrcAwQC
oYGYAwQCo3vMAwQCwCJkAwQC0GMEMBcEAgACMBEDBwAgAQUGADADBgQmBPvAADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCrCUSdITfdkIaij2pdC5wxbu4zGV4bB7HQQ7lyt/IDOMs6RTPXVW4c
u6kYa829AhcDwoszNep5LBhgo+jCB31XBsZKFGnHgJiajnd3mPdjotbZEqUWEA+O
yjNR95XtIAxnkMts0tymMC6cuZpzGgezByp2TIJiRY2QbiYI6J3p7U6PtPvv34HC
GR3ayF3Ci6QleudB8s3FMYajpT5rQGwGO/JiQ2NP5Vamtc6ATjMOGHzW1mhRI0Ed
SrrM5A2t2ZdRAMkowV2mAdKMj1Vy1YXk+KFpmGTFBm+HFM5b+Ts29Xr+BUgI7QdC
UtQq+MIErti4rHR8t2n7XXJVAHhqFO7e
-----END CERTIFICATE-----
Generated at Wed Apr 22 06:45:56 2026 by rpki-client