Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/c78da7e5-4a98-3cfc-a13f-e4a05b217297.roa
File:                     c78da7e5-4a98-3cfc-a13f-e4a05b217297.roa (raw, json)
Hash identifier:          3wqdoLX83728xU/MbyAZmzLTuZzUn9LdORTa4MOSm0I=
Subject key identifier:   61:4E:3A:4D:7A:82:12:C6:65:F5:BE:74:80:9C:EE:52:8D:3C:B8:53
Certificate issuer:       /CN=8450660f-e06c-43ee-910d-d4b472fdc395
Certificate serial:       010D0C9F4328584D300A40E37849B4D2E0F83F00
Authority key identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/c78da7e5-4a98-3cfc-a13f-e4a05b217297.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     5065
IP address blocks:        70.39.185.0/24 maxlen: 24
                          70.39.186.0/24 maxlen: 24
                          70.39.187.0/24 maxlen: 24
                          70.39.236.0/24 maxlen: 24
                          70.39.237.0/24 maxlen: 24
                          70.39.238.0/24 maxlen: 24
                          70.39.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:40:e3:78:49:b4:d2:e0:f8:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8450660f-e06c-43ee-910d-d4b472fdc395
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=c9c8929b-9fef-4fe4-85ba-b7820048d2ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:58:61:fd:53:6e:04:aa:27:ea:cb:64:e7:4b:
                    4d:31:a1:39:48:f9:54:80:ad:3c:32:ba:45:e0:81:
                    1a:77:09:ae:5d:be:4d:d2:0e:da:cf:3e:86:00:50:
                    7f:aa:f9:f0:c3:b2:d5:ba:05:36:c4:f8:38:81:19:
                    e2:a3:c6:bb:18:5b:36:01:ed:16:7e:1a:0c:84:5e:
                    27:7e:ed:a9:c5:e0:27:cf:85:f2:cd:fd:64:ed:e8:
                    3d:49:68:71:e2:c1:6a:46:d3:3c:f8:21:25:ed:2b:
                    8f:5f:d3:82:5e:d4:76:a3:51:27:27:c6:be:a6:90:
                    3a:3c:5d:37:28:39:78:c0:ec:69:0a:8e:f0:12:52:
                    91:8f:c3:62:d4:50:43:f7:1a:ce:09:6d:81:bb:a2:
                    11:80:fe:47:19:fb:1b:c8:cf:fd:44:7a:88:80:8b:
                    76:50:23:c3:b2:1f:24:b2:c4:a0:12:6a:2f:71:46:
                    c8:37:6b:27:42:1b:da:5e:fe:c4:fe:2c:0c:44:7e:
                    19:bb:13:6d:d9:1b:be:3d:0c:bf:8b:26:81:99:dc:
                    e6:ae:12:05:cb:a3:b1:4e:ea:14:62:8a:a3:42:8e:
                    ab:40:ff:5d:97:47:73:48:83:f5:28:cf:b1:67:cd:
                    e2:62:9c:47:09:33:9a:83:ae:ca:7b:49:ee:47:1d:
                    a3:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:4E:3A:4D:7A:82:12:C6:65:F5:BE:74:80:9C:EE:52:8D:3C:B8:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/c78da7e5-4a98-3cfc-a13f-e4a05b217297.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl

            X509v3 Authority Key Identifier:
                keyid:69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.39.185.0-70.39.187.255
                  70.39.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:cb:a6:c3:96:d2:04:65:fc:5f:dc:92:96:52:e3:f7:73:63:
         f9:36:7a:59:32:ba:35:df:ad:4b:b9:c2:49:1f:83:3d:9f:1c:
         16:ef:79:bb:60:42:51:17:d7:37:8b:07:61:65:5f:7f:72:be:
         04:54:68:6b:84:ff:01:a7:81:26:34:02:23:23:5f:9b:55:cf:
         a9:6c:9e:b2:e2:fa:9c:bb:81:35:65:76:22:22:cd:32:f1:12:
         7a:3a:0e:c8:07:00:2b:7b:2d:7a:37:9e:70:ca:5f:1e:e2:0e:
         fb:8a:15:56:09:60:53:8b:46:87:a6:31:30:bf:c0:cd:24:9f:
         f6:01:38:be:9e:cf:bc:41:d4:59:49:00:82:de:2e:3f:bf:53:
         67:fe:00:dd:a6:18:89:f3:6f:e7:d6:0a:f0:2d:dc:f9:0e:d7:
         a3:0e:aa:ab:de:d7:41:49:4a:fb:2b:b4:e4:54:0a:8b:23:9b:
         b2:e6:a7:58:4d:ea:79:c3:d5:4c:fd:d5:6a:5d:de:d0:bb:a4:
         11:9f:c4:8e:d9:15:26:0f:6b:a1:ca:cf:6f:d4:ff:39:94:45:
         d2:e5:18:b1:89:f5:fa:63:8f:c2:4c:1e:43:b6:5c:c6:e8:86:
         ef:2d:77:19:29:ff:43:ed:97:a9:22:0b:a1:2c:17:57:1a:02:
         83:c8:f6:d8
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWE0wCkDjeEm00uD4PwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODQ1MDY2MGYtZTA2Yy00M2VlLTkxMGQtZDRiNDcyZmRj
Mzk1MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk
YzljODkyOWItOWZlZi00ZmU0LTg1YmEtYjc4MjAwNDhkMmJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFhh/VNuBKon6stk50tNMaE5SPlUgK08MrpF
4IEadwmuXb5N0g7azz6GAFB/qvnww7LVugU2xPg4gRnio8a7GFs2Ae0WfhoMhF4n
fu2pxeAnz4Xyzf1k7eg9SWhx4sFqRtM8+CEl7SuPX9OCXtR2o1EnJ8a+ppA6PF03
KDl4wOxpCo7wElKRj8Ni1FBD9xrOCW2Bu6IRgP5HGfsbyM/9RHqIgIt2UCPDsh8k
ssSgEmovcUbIN2snQhvaXv7E/iwMRH4ZuxNt2Ru+PQy/iyaBmdzmrhIFy6OxTuoU
YoqjQo6rQP9dl0dzSIP1KM+xZ83iYpxHCTOag67Ke0nuRx2jKQIDAQABo4IDYzCC
A18wHQYDVR0OBBYEFGFOOk16ghLGZfW+dICc7lKNPLhTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84NDUw
NjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0NzJmZGMzOTUvYzc4ZGE3ZTUtNGE5OC0z
Y2ZjLWExM2YtZTRhMDViMjE3Mjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODQ1MDY2MGYtZTA2Yy00M2VlLTkx
MGQtZDRiNDcyZmRjMzk1Lzg0NTA2NjBmLWUwNmMtNDNlZS05MTBkLWQ0YjQ3MmZk
YzM5NS5jcmwwHwYDVR0jBBgwFoAUaSV1dwQ7lbF+FkhyBO8jrAqogc0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS84NDUwNjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0
NzJmZGMzOTUuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBABGJ7kD
BAJGJ7gDBAJGJ+wwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEAT8umw5bSBGX8X9ySllLj93Nj+TZ6WTK6Nd+t
S7nCSR+DPZ8cFu95u2BCURfXN4sHYWVff3K+BFRoa4T/AaeBJjQCIyNfm1XPqWye
suL6nLuBNWV2IiLNMvESejoOyAcAK3stejeecMpfHuIO+4oVVglgU4tGh6YxML/A
zSSf9gE4vp7PvEHUWUkAgt4uP79TZ/4A3aYYifNv59YK8C3c+Q7Xow6qq97XQUlK
+yu05FQKiyObsuanWE3qecPVTP3Val3e0LukEZ/EjtkVJg9rocrPb9T/OZRF0uUY
sYn1+mOPwkweQ7ZcxuiG7y13GSn/Q+2XqSILoSwXVxoCg8j22A==
-----END CERTIFICATE-----
Generated at Sat Mar 21 20:41:01 2026 by rpki-client