Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/d0433cac-3517-3a4f-8792-a0944660a022.roa
File:                     d0433cac-3517-3a4f-8792-a0944660a022.roa (raw, json)
Hash identifier:          xPwB6H1WgED1E4Ybd8JjS1m/G2bPgTY5ahe0VaHfCXY=
Subject key identifier:   C4:4B:3B:83:6E:11:93:29:FD:23:88:9D:23:07:6A:99:DC:1B:F3:05
Certificate issuer:       /CN=8450660f-e06c-43ee-910d-d4b472fdc395
Certificate serial:       010D0C9F4328584ED9C73C209D9CD0563FD1E480
Authority key identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/d0433cac-3517-3a4f-8792-a0944660a022.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     395793
IP address blocks:        70.39.130.0/24 maxlen: 24
                          70.39.136.0/24 maxlen: 24
                          70.39.137.0/24 maxlen: 24
                          70.39.140.0/24 maxlen: 24
                          70.39.141.0/24 maxlen: 24
                          70.39.170.0/24 maxlen: 24
                          70.39.171.0/24 maxlen: 24
                          70.39.230.0/24 maxlen: 24
                          70.39.231.0/24 maxlen: 24
                          70.39.242.0/24 maxlen: 24
                          70.39.243.0/24 maxlen: 24
                          70.39.254.0/24 maxlen: 24
                          70.39.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:3c:20:9d:9c:d0:56:3f:d1:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8450660f-e06c-43ee-910d-d4b472fdc395
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=21036f7a-ed0f-4c61-9c65-056e15b7faea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d0:04:75:b4:ab:d2:73:ca:e3:d7:35:96:57:
                    0b:d5:6c:86:30:bf:4f:7f:12:54:94:44:63:bd:73:
                    d9:e3:7b:40:67:17:72:3d:e2:95:f0:a4:52:d6:f0:
                    1f:46:9c:6a:95:66:9d:de:44:fe:0d:df:4c:b7:02:
                    15:bf:49:cd:67:5f:80:ed:f2:89:f5:78:7c:6d:c8:
                    6f:2d:fe:ff:cc:a5:d9:f3:79:39:4f:9b:51:ae:d8:
                    7c:46:05:3e:41:93:78:c4:ac:9f:9e:dd:62:8d:80:
                    bd:f8:c0:4c:4b:cb:0c:a3:91:59:18:4e:d8:51:45:
                    3a:f2:36:24:6a:5a:ac:42:a6:0f:d5:0c:8b:27:d1:
                    f8:27:f0:b5:f7:21:e6:48:0d:af:17:62:52:0a:a9:
                    35:ea:94:1d:b5:99:8e:49:a9:5f:5c:1a:c4:e4:43:
                    ec:78:0c:d7:9d:f9:c7:9f:57:ed:93:5c:88:8f:45:
                    dd:e3:8d:cc:98:85:81:6f:ca:77:88:71:3e:ea:60:
                    de:ad:b3:45:f5:96:a5:96:25:f9:67:31:26:a4:15:
                    96:dc:32:d9:34:47:b9:e9:e2:49:cb:a2:4b:c0:1c:
                    a9:59:92:e1:d2:12:c4:9e:2f:eb:61:f5:42:00:61:
                    f2:18:09:22:ba:c7:99:01:0d:e7:76:cd:fa:f9:53:
                    89:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:4B:3B:83:6E:11:93:29:FD:23:88:9D:23:07:6A:99:DC:1B:F3:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/d0433cac-3517-3a4f-8792-a0944660a022.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl

            X509v3 Authority Key Identifier:
                keyid:69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.39.130.0/24
                  70.39.136.0/23
                  70.39.140.0/23
                  70.39.170.0/23
                  70.39.230.0/23
                  70.39.242.0/23
                  70.39.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:ea:aa:9a:18:81:38:43:0b:e1:c0:ad:56:18:f1:73:23:54:
         ac:2a:f5:7f:c9:f5:ea:a4:5d:16:13:a2:54:d3:61:f1:6c:ff:
         7a:74:c8:58:35:e2:25:a0:19:22:e3:be:f6:d4:52:12:84:3e:
         b8:ec:7a:1d:c9:b2:ba:24:f5:10:0a:e7:db:fa:88:29:d9:40:
         6b:6f:5e:29:f1:b5:2e:a7:77:00:0f:27:da:8f:c4:fd:de:07:
         8f:1a:15:03:da:cc:63:f4:8c:2b:94:f2:27:37:bf:19:9e:b8:
         18:f2:5d:36:6b:6f:7e:27:a7:2a:d6:b1:46:92:2f:33:79:41:
         06:75:f7:7b:47:d0:ff:12:76:ef:d3:bd:28:9e:fb:6d:19:cc:
         f7:36:34:27:96:57:44:fa:a8:cb:cf:e6:e6:b2:d6:30:73:fd:
         5c:02:0b:4e:b6:37:85:da:22:15:ba:df:18:30:91:de:49:81:
         15:e9:4c:96:a8:9a:26:9d:78:f7:1b:5a:a3:d0:e1:a8:53:bd:
         39:b1:02:60:49:17:47:7a:02:e2:b5:3f:29:0a:ff:0f:dc:46:
         43:6a:29:4b:0b:9f:03:1c:76:47:10:62:70:1e:da:51:02:4d:
         1f:ea:9f:f5:5b:fd:f0:9e:38:c2:39:ae:f7:c4:2b:4c:eb:51:
         d4:3a:78:5d
-----BEGIN CERTIFICATE-----
MIIGZzCCBU+gAwIBAgIUAQ0Mn0MoWE7ZxzwgnZzQVj/R5IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODQ1MDY2MGYtZTA2Yy00M2VlLTkxMGQtZDRiNDcyZmRj
Mzk1MB4XDTI2MDgxNjAxMDAxNFoXDTI2MTExNDAyMDAxNFowLzEtMCsGA1UEAxMk
MjEwMzZmN2EtZWQwZi00YzYxLTljNjUtMDU2ZTE1YjdmYWVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNAEdbSr0nPK49c1llcL1WyGML9PfxJUlERj
vXPZ43tAZxdyPeKV8KRS1vAfRpxqlWad3kT+Dd9MtwIVv0nNZ1+A7fKJ9Xh8bchv
Lf7/zKXZ83k5T5tRrth8RgU+QZN4xKyfnt1ijYC9+MBMS8sMo5FZGE7YUUU68jYk
alqsQqYP1QyLJ9H4J/C19yHmSA2vF2JSCqk16pQdtZmOSalfXBrE5EPseAzXnfnH
n1ftk1yIj0Xd443MmIWBb8p3iHE+6mDerbNF9ZalliX5ZzEmpBWW3DLZNEe56eJJ
y6JLwBypWZLh0hLEni/rYfVCAGHyGAkiuseZAQ3nds36+VOJfwIDAQABo4IDeTCC
A3UwHQYDVR0OBBYEFMRLO4NuEZMp/SOInSMHapncG/MFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84NDUw
NjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0NzJmZGMzOTUvZDA0MzNjYWMtMzUxNy0z
YTRmLTg3OTItYTA5NDQ2NjBhMDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODQ1MDY2MGYtZTA2Yy00M2VlLTkx
MGQtZDRiNDcyZmRjMzk1Lzg0NTA2NjBmLWUwNmMtNDNlZS05MTBkLWQ0YjQ3MmZk
YzM5NS5jcmwwHwYDVR0jBBgwFoAUaSV1dwQ7lbF+FkhyBO8jrAqogc0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS84NDUwNjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0
NzJmZGMzOTUuY2VyMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQARieCAwQB
RieIAwQBRieMAwQBRieqAwQBRifmAwQBRifyAwQBRif+MFQGA1UdIAEB/wRKMEgw
RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv
cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACHqqpoY
gThDC+HArVYY8XMjVKwq9X/J9eqkXRYTolTTYfFs/3p0yFg14iWgGSLjvvbUUhKE
Prjseh3Jsrok9RAK59v6iCnZQGtvXinxtS6ndwAPJ9qPxP3eB48aFQPazGP0jCuU
8ic3vxmeuBjyXTZrb34npyrWsUaSLzN5QQZ193tH0P8Sdu/TvSie+20ZzPc2NCeW
V0T6qMvP5uay1jBz/VwCC062N4XaIhW63xgwkd5JgRXpTJaomiadePcbWqPQ4ahT
vTmxAmBJF0d6AuK1PykK/w/cRkNqKUsLnwMcdkcQYnAe2lECTR/qn/Vb/fCeOMI5
rvfEK0zrUdQ6eF0=
-----END CERTIFICATE-----
Generated at Sat Sep 19 06:05:11 2026 by rpki-client