Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/91533126-83d7-3399-8e3a-8d1baf4226fe.roa
File:                     91533126-83d7-3399-8e3a-8d1baf4226fe.roa (raw, json)
Hash identifier:          m0OlVL8BY8Eou/2SasavtMmVEedl12dBjoBF+4w/ZYw=
Subject key identifier:   01:1C:16:BF:B4:84:73:6E:39:B5:52:CB:BF:FA:72:BF:F2:B6:1E:1D
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F7782E28D62126C7E4B226D80
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/91533126-83d7-3399-8e3a-8d1baf4226fe.roa
Signing time:             Sun 11 Oct 2026 13:00:12 +0000
ROA not before:           Sun 11 Oct 2026 13:00:12 +0000
ROA not after:            Sat 09 Jan 2027 14:00:12 +0000
asID:                     17497
IP address blocks:        64.32.144.0/24 maxlen: 24
                          64.32.145.0/24 maxlen: 24
                          64.32.146.0/24 maxlen: 24
                          64.32.147.0/24 maxlen: 24
                          64.32.151.0/24 maxlen: 24
                          64.32.164.0/24 maxlen: 24
                          64.32.165.0/24 maxlen: 24
                          64.32.166.0/24 maxlen: 24
                          64.32.167.0/24 maxlen: 24
                          207.145.156.0/24 maxlen: 24
                          207.145.157.0/24 maxlen: 24
                          207.145.188.0/24 maxlen: 24
                          207.145.189.0/24 maxlen: 24
                          207.145.249.0/24 maxlen: 24
                          207.145.250.0/24 maxlen: 24
                          207.145.252.0/24 maxlen: 24
                          207.145.253.0/24 maxlen: 24
                          207.145.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:77:82:e2:8d:62:12:6c:7e:4b:22:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Oct 11 13:00:12 2026 GMT
            Not After : Jan  9 14:00:12 2027 GMT
        Subject: CN=c3af142b-1f65-473e-a467-77f40043ab46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b0:07:d4:c7:b2:b0:d5:af:92:dc:09:67:e5:
                    e8:1f:ae:02:54:a8:6d:95:22:4d:c5:58:38:a9:22:
                    a4:f1:69:38:7f:fe:2d:81:56:c8:89:bc:06:df:79:
                    40:10:23:07:d5:73:3d:36:f4:3b:70:c2:10:5d:46:
                    6c:65:92:c4:47:ca:0a:af:eb:a4:47:71:a3:b8:4e:
                    a2:ff:b4:92:6f:a2:c1:0e:72:4d:90:87:f2:ba:ec:
                    95:91:6b:df:a3:3e:bc:24:0d:b5:37:ed:18:9b:ae:
                    e0:a3:63:ad:5e:18:43:a0:a9:30:cf:ae:d6:bb:0c:
                    15:75:64:00:2c:15:4d:cf:3b:0c:94:55:e2:1b:b8:
                    8b:b2:5a:b0:87:af:ea:44:09:df:4e:ff:de:c5:a9:
                    39:b8:4b:08:32:8b:9c:43:9e:37:2c:73:5e:43:87:
                    f9:6e:6b:73:ab:ff:a6:b5:cc:12:1c:45:97:d8:49:
                    1a:b2:bc:90:a6:2c:fc:4b:3d:91:00:42:f2:ec:0e:
                    8f:6b:9b:54:aa:e0:62:1b:b0:da:6c:03:9b:d9:af:
                    5a:93:39:27:63:5f:97:ad:f9:d2:13:db:d6:76:f4:
                    b3:3c:de:19:1e:2a:c6:de:8d:37:15:0b:0c:a3:6e:
                    9d:4a:b8:9c:0d:72:cd:87:ab:2d:63:4a:78:47:73:
                    aa:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:1C:16:BF:B4:84:73:6E:39:B5:52:CB:BF:FA:72:BF:F2:B6:1E:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/91533126-83d7-3399-8e3a-8d1baf4226fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.32.144.0/22
                  64.32.151.0/24
                  64.32.164.0/22
                  207.145.156.0/23
                  207.145.188.0/23
                  207.145.249.0-207.145.250.255
                  207.145.252.0/23
                  207.145.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:05:e1:1c:06:8b:a8:c0:50:de:72:5c:5d:94:fb:cf:12:60:
         d3:0e:8a:40:f7:74:3f:48:5d:01:ea:3a:8d:ed:b0:7c:9c:df:
         8d:06:50:ea:29:2e:9f:d8:05:04:a8:c3:32:fc:41:cc:0f:0c:
         00:27:92:fa:af:78:4c:38:b3:ed:9b:b9:0d:fb:b6:34:d8:31:
         80:1f:29:77:a6:ca:ef:eb:1b:09:9e:21:86:26:1f:87:f4:a3:
         77:8a:5e:35:57:53:8d:bb:fa:c0:73:f6:74:d9:b5:4a:93:f7:
         cd:91:e2:6b:8a:e0:3b:fe:ba:f9:ce:69:31:4b:1a:e7:03:2f:
         85:d8:87:a6:25:4b:a4:8b:08:c8:84:a2:01:ed:3d:76:89:bb:
         3e:99:d3:87:d7:a8:c8:08:39:e3:ad:43:8e:2f:4f:6a:66:f2:
         c3:a2:a8:91:50:d7:ab:0a:e9:55:5f:a6:2c:ad:cf:03:fe:a4:
         49:2f:18:53:21:68:2a:bb:b5:5c:e4:8a:57:e2:d2:07:e9:47:
         1f:b8:99:64:21:c3:bd:72:fb:4e:f5:2a:bd:2b:06:49:6b:01:
         e3:e6:7e:32:55:ba:94:b5:b1:5f:f0:2f:1a:97:8b:b2:6e:ea:
         8c:59:f8:59:e8:a8:fc:61:86:ac:9d:69:a6:40:da:fa:70:35:
         aa:54:8e:8f
-----BEGIN CERTIFICATE-----
MIIGdTCCBV2gAwIBAgIUAQ0Mn0MoWE93guKNYhJsfksibYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk
YzNhZjE0MmItMWY2NS00NzNlLWE0NjctNzdmNDAwNDNhYjQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLAH1MeysNWvktwJZ+XoH64CVKhtlSJNxVg4
qSKk8Wk4f/4tgVbIibwG33lAECMH1XM9NvQ7cMIQXUZsZZLER8oKr+ukR3GjuE6i
/7SSb6LBDnJNkIfyuuyVkWvfoz68JA21N+0Ym67go2OtXhhDoKkwz67WuwwVdWQA
LBVNzzsMlFXiG7iLslqwh6/qRAnfTv/exak5uEsIMoucQ543LHNeQ4f5bmtzq/+m
tcwSHEWX2EkasryQpiz8Sz2RAELy7A6Pa5tUquBiG7DabAOb2a9akzknY1+XrfnS
E9vWdvSzPN4ZHirG3o03FQsMo26dSricDXLNh6stY0p4R3Oq9QIDAQABo4IDhzCC
A4MwHQYDVR0OBBYEFAEcFr+0hHNuObVSy7/6cr/yth4dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOTE1MzMxMjYtODNkNy0z
Mzk5LThlM2EtOGQxYmFmNDIyNmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQCQCCQAwQA
QCCXAwQCQCCkAwQBz5GcAwQBz5G8MAwDBADPkfkDBADPkfoDBAHPkfwDBADPkf8w
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEANwXhHAaLqMBQ3nJcXZT7zxJg0w6KQPd0P0hdAeo6je2wfJzfjQZQ
6ikun9gFBKjDMvxBzA8MACeS+q94TDiz7Zu5Dfu2NNgxgB8pd6bK7+sbCZ4hhiYf
h/Sjd4peNVdTjbv6wHP2dNm1SpP3zZHia4rgO/66+c5pMUsa5wMvhdiHpiVLpIsI
yISiAe09dom7PpnTh9eoyAg5461Dji9Pambyw6KokVDXqwrpVV+mLK3PA/6kSS8Y
UyFoKru1XOSKV+LSB+lHH7iZZCHDvXL7TvUqvSsGSWsB4+Z+MlW6lLWxX/AvGpeL
sm7qjFn4Weio/GGGrJ1ppkDa+nA1qlSOjw==
-----END CERTIFICATE-----
Generated at Tue Oct 27 15:23:37 2026 by rpki-client