Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/f5c6de41-323b-3b99-9404-398b289b5319.roa
File:                     f5c6de41-323b-3b99-9404-398b289b5319.roa (raw, json)
Hash identifier:          bY/Sj1QvfShI8OthJGrjIgUQxlpGgFrMrsYld4ZKW6c=
Subject key identifier:   4C:D1:8A:83:27:5A:1B:36:F5:5D:36:A6:F8:8F:EC:5C:E0:5A:FE:DC
Certificate issuer:       /CN=e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a
Certificate serial:       010D0C9F4328584D20AF54511408CA7C5A1F4E00
Authority key identifier: 4E:6B:2C:DE:04:7A:9D:BE:6D:A4:92:3D:62:DD:65:18:18:1C:B8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/f5c6de41-323b-3b99-9404-398b289b5319.roa
Signing time:             Wed 11 Mar 2026 01:00:32 +0000
ROA not before:           Wed 11 Mar 2026 01:00:32 +0000
ROA not after:            Tue 09 Jun 2026 01:00:32 +0000
asID:                     397803
IP address blocks:        66.102.48.0/20 maxlen: 20
                          167.100.32.0/19 maxlen: 19
                          209.105.180.0/22 maxlen: 22
                          209.105.184.0/22 maxlen: 22
                          216.227.40.0/21 maxlen: 21
                          216.227.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:20:af:54:51:14:08:ca:7c:5a:1f:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a
        Validity
            Not Before: Mar 11 01:00:32 2026 GMT
            Not After : Jun  9 01:00:32 2026 GMT
        Subject: CN=17dd5185-5511-4845-850d-455d53b849f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9e:fc:44:3a:9d:53:c6:4b:e8:95:96:52:d3:
                    63:8b:aa:f6:2e:63:02:9d:d5:e2:06:8c:ad:bb:eb:
                    52:77:86:ba:9d:66:75:a1:eb:42:c4:64:f5:d9:ff:
                    af:e3:62:e2:ac:25:fb:fd:e6:d7:c8:3c:39:1f:ec:
                    f5:dc:96:40:d5:bc:06:63:78:e6:b0:5f:73:e3:ae:
                    93:14:50:bf:7c:1c:33:aa:2e:15:e1:35:36:5b:0e:
                    41:51:ba:4b:28:85:86:65:d3:67:4d:b0:4d:17:f3:
                    3f:b0:3f:a7:70:88:bb:af:dd:94:46:7a:80:ab:30:
                    05:71:ac:df:6f:91:1b:5b:7a:bb:12:e4:1d:b0:f1:
                    a3:ae:3e:c0:65:80:11:97:46:74:ef:40:76:8d:30:
                    b9:b8:fe:39:53:0e:d0:5d:4c:5f:2c:78:b1:1f:ab:
                    f5:14:5d:10:95:a4:fb:a2:f4:d1:8d:5a:56:97:a8:
                    b2:87:0c:f8:42:20:4e:61:b3:a6:bc:26:23:a3:92:
                    a2:b4:78:6c:d7:71:b6:e8:59:87:04:cf:97:ef:2d:
                    14:7d:22:fc:90:d1:2b:95:d0:f6:75:c2:ea:e9:ca:
                    5a:f9:5f:1b:e3:ff:a3:60:09:24:4d:b8:19:38:9e:
                    ba:7a:23:84:d5:b3:96:57:7e:5f:24:0b:44:85:4a:
                    22:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:D1:8A:83:27:5A:1B:36:F5:5D:36:A6:F8:8F:EC:5C:E0:5A:FE:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/f5c6de41-323b-3b99-9404-398b289b5319.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.crl

            X509v3 Authority Key Identifier:
                keyid:4E:6B:2C:DE:04:7A:9D:BE:6D:A4:92:3D:62:DD:65:18:18:1C:B8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.102.48.0/20
                  167.100.32.0/19
                  209.105.180.0-209.105.187.255
                  216.227.40.0-216.227.51.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:97:ed:01:f2:02:65:d9:2c:d3:83:a2:1a:3d:e4:ab:98:62:
         9a:2b:ec:5e:26:61:a8:d1:61:55:c8:7d:89:d5:d9:06:8f:60:
         88:d7:9a:7b:6e:95:68:e6:da:5c:a4:36:96:1a:ef:d0:a3:7d:
         35:98:32:19:2d:de:d3:89:cd:93:3d:e1:03:0c:70:85:cd:df:
         bf:a5:67:83:e5:65:08:69:b3:80:4c:67:13:24:49:c0:ba:43:
         ad:14:cd:ab:4b:8e:79:db:7b:c9:e4:96:d6:9f:14:e1:39:11:
         98:88:30:1b:9b:ad:a6:af:b0:3d:aa:33:33:02:f0:a4:a5:10:
         cc:e2:a1:dc:d6:f1:aa:a8:0f:3e:46:ee:ed:5d:49:14:78:8b:
         3f:8e:89:a0:dc:a1:57:53:27:fb:77:b9:5e:61:12:8e:0f:b3:
         b3:e4:b9:da:a4:cc:57:62:f0:6d:7e:48:20:1b:d8:15:f0:55:
         80:d6:a5:d3:a3:74:e7:84:a7:5c:b6:ff:06:d8:a9:7b:b9:38:
         45:87:00:41:55:cc:c7:aa:68:2e:5b:44:34:b7:59:df:56:26:
         ac:a0:07:12:eb:99:76:21:ab:f6:18:39:f0:03:a3:2f:a2:b1:
         b2:d4:ed:60:62:19:2d:d0:c2:a6:6e:f8:e7:0f:27:16:c4:8b:
         a3:6d:c6:1c
-----BEGIN CERTIFICATE-----
MIIGZTCCBU2gAwIBAgIUAQ0Mn0MoWE0gr1RRFAjKfFofTgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYzM2I0YjEtYzJiMi00NGQ1LWExZWMtM2ZlOGUxZjk3
NzNhMB4XDTI2MDMxMTAxMDAzMloXDTI2MDYwOTAxMDAzMlowLzEtMCsGA1UEAxMk
MTdkZDUxODUtNTUxMS00ODQ1LTg1MGQtNDU1ZDUzYjg0OWYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZ78RDqdU8ZL6JWWUtNji6r2LmMCndXiBoyt
u+tSd4a6nWZ1oetCxGT12f+v42LirCX7/ebXyDw5H+z13JZA1bwGY3jmsF9z466T
FFC/fBwzqi4V4TU2Ww5BUbpLKIWGZdNnTbBNF/M/sD+ncIi7r92URnqAqzAFcazf
b5EbW3q7EuQdsPGjrj7AZYARl0Z070B2jTC5uP45Uw7QXUxfLHixH6v1FF0QlaT7
ovTRjVpWl6iyhwz4QiBOYbOmvCYjo5KitHhs13G26FmHBM+X7y0UfSL8kNErldD2
dcLq6cpa+V8b4/+jYAkkTbgZOJ66eiOE1bOWV35fJAtEhUoitQIDAQABo4IDdzCC
A3MwHQYDVR0OBBYEFEzRioMnWhs29V02pviP7FzgWv7cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lNjMz
YjRiMS1jMmIyLTQ0ZDUtYTFlYy0zZmU4ZTFmOTc3M2EvZjVjNmRlNDEtMzIzYi0z
Yjk5LTk0MDQtMzk4YjI4OWI1MzE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTYzM2I0YjEtYzJiMi00NGQ1LWEx
ZWMtM2ZlOGUxZjk3NzNhL2U2MzNiNGIxLWMyYjItNDRkNS1hMWVjLTNmZThlMWY5
NzczYS5jcmwwHwYDVR0jBBgwFoAUTmss3gR6nb5tpJI9Yt1lGBgcuKowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lNjMzYjRiMS1jMmIyLTQ0ZDUtYTFlYy0zZmU4
ZTFmOTc3M2EuY2VyMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoAwQEQmYwAwQF
p2QgMAwDBALRabQDBALRabgwDAMEA9jjKAMEAtjjMDBUBgNVHSABAf8ESjBIMEYG
CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl
c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDXl+0B8gJl
2SzTg6IaPeSrmGKaK+xeJmGo0WFVyH2J1dkGj2CI15p7bpVo5tpcpDaWGu/Qo301
mDIZLd7Tic2TPeEDDHCFzd+/pWeD5WUIabOATGcTJEnAukOtFM2rS45523vJ5JbW
nxThORGYiDAbm62mr7A9qjMzAvCkpRDM4qHc1vGqqA8+Ru7tXUkUeIs/jomg3KFX
Uyf7d7leYRKOD7Oz5LnapMxXYvBtfkggG9gV8FWA1qXTo3TnhKdctv8G2Kl7uThF
hwBBVczHqmguW0Q0t1nfViasoAcS65l2Iav2GDnwA6MvorGy1O1gYhkt0MKmbvjn
DycWxIujbcYc
-----END CERTIFICATE-----
Generated at Sun Mar 22 09:30:58 2026 by rpki-client