Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea/ff845c46-b8ce-3427-9c47-95a32c11df5c.roa
File:                     ff845c46-b8ce-3427-9c47-95a32c11df5c.roa (raw, json)
Hash identifier:          rzM/lTR7vVN1Y0BYxQEBId/alxfbZa9R4ksEh9gW+Qk=
Subject key identifier:   9A:57:70:4D:5C:3E:52:5B:D6:69:26:F0:4A:1D:A3:FA:F3:52:5D:C0
Certificate issuer:       /CN=d49cd804-3f4b-4772-bcbd-c7238e36bdea
Certificate serial:       010D0C9F4328584E7BCA3967BE5EEAF84C214620
Authority key identifier: 0C:42:CE:FA:22:4C:5A:5F:9B:51:F8:96:16:2A:72:54:BE:83:B1:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea/ff845c46-b8ce-3427-9c47-95a32c11df5c.roa
Signing time:             Mon 13 Jul 2026 09:00:12 +0000
ROA not before:           Mon 13 Jul 2026 09:00:12 +0000
ROA not after:            Sun 11 Oct 2026 09:00:12 +0000
asID:                     1299
IP address blocks:        64.77.213.0/24 maxlen: 24
                          64.77.216.0/23 maxlen: 24
                          64.77.218.0/24 maxlen: 24
                          72.14.97.0/24 maxlen: 24
                          72.14.119.0/24 maxlen: 24
                          72.14.126.0/24 maxlen: 24
                          97.75.255.0/24 maxlen: 24
                          208.101.227.0/24 maxlen: 24
                          208.101.234.0/23 maxlen: 24
                          208.101.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea/d49cd804-3f4b-4772-bcbd-c7238e36bdea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea/d49cd804-3f4b-4772-bcbd-c7238e36bdea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7b:ca:39:67:be:5e:ea:f8:4c:21:46:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d49cd804-3f4b-4772-bcbd-c7238e36bdea
        Validity
            Not Before: Jul 13 09:00:12 2026 GMT
            Not After : Oct 11 09:00:12 2026 GMT
        Subject: CN=9fd9b95e-fd10-4319-bfe2-f952f68e8fca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6d:10:cd:25:c4:ed:51:ff:97:53:11:18:e2:
                    ad:b0:81:15:e8:e1:2e:4a:4a:13:e1:c2:1a:96:cb:
                    a8:70:52:ba:77:41:3e:e4:33:e4:c8:7e:f3:20:c0:
                    a2:ac:83:8e:f9:76:0a:76:f6:4b:35:47:90:73:ab:
                    9e:81:3c:ac:4d:05:c6:11:cf:cc:e4:dd:0a:11:27:
                    00:df:d1:38:20:b6:70:28:83:76:85:83:d6:b0:3c:
                    cd:20:55:cb:bc:bb:b9:72:d7:e3:f3:c7:fd:2e:5f:
                    8f:1e:c0:32:2a:10:64:42:aa:54:93:90:91:2e:4b:
                    b9:3c:e8:72:54:ad:cb:78:e7:69:84:20:a7:73:5a:
                    44:b0:26:90:de:5f:0b:ab:22:07:ad:47:81:e4:97:
                    a6:61:6e:b6:62:d6:5e:64:32:3a:cc:49:2b:52:20:
                    e6:5a:36:50:73:a6:9e:c4:c1:6a:35:eb:65:4c:0a:
                    d6:eb:5b:c8:aa:39:62:8d:40:cb:c6:67:cb:54:32:
                    28:e3:9d:ef:5d:86:11:6b:fa:05:60:09:4e:e5:9e:
                    4e:43:18:15:65:98:cb:b1:bc:f6:64:7e:48:4e:db:
                    45:37:6b:e1:9a:7c:8c:95:90:2e:9d:0e:c0:be:43:
                    ab:21:3c:0b:3a:98:da:10:4f:8e:bf:be:f3:bf:57:
                    c8:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:57:70:4D:5C:3E:52:5B:D6:69:26:F0:4A:1D:A3:FA:F3:52:5D:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea/ff845c46-b8ce-3427-9c47-95a32c11df5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea/d49cd804-3f4b-4772-bcbd-c7238e36bdea.crl

            X509v3 Authority Key Identifier:
                keyid:0C:42:CE:FA:22:4C:5A:5F:9B:51:F8:96:16:2A:72:54:BE:83:B1:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.77.213.0/24
                  64.77.216.0-64.77.218.255
                  72.14.97.0/24
                  72.14.119.0/24
                  72.14.126.0/24
                  97.75.255.0/24
                  208.101.227.0/24
                  208.101.234.0-208.101.236.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:7d:49:d0:e7:c9:ae:eb:5a:af:67:f9:d9:bf:ac:f4:b3:77:
         42:e1:10:4a:af:c6:ca:15:81:c7:a1:05:64:5e:4b:77:b7:2c:
         af:67:8d:c5:07:f2:25:52:a1:93:0b:92:80:75:12:99:da:03:
         ce:94:07:e1:85:5f:4e:b9:15:30:99:10:8c:96:d1:d4:ad:c2:
         cb:cd:c7:25:08:41:be:b1:60:42:3c:9e:4e:33:9b:83:71:7f:
         ea:90:2b:9d:cf:4e:67:1d:8b:d5:b6:f0:11:39:e0:79:28:e3:
         3e:59:18:69:6c:4e:5d:0f:04:b0:ef:c1:f9:98:5a:17:5b:32:
         ff:6e:06:fb:45:48:0f:7d:ce:22:ae:58:68:e8:4f:05:44:18:
         8c:f7:d3:47:5a:4c:b6:16:9d:97:d3:fb:87:be:91:7d:e5:1a:
         9d:de:f6:1c:89:19:08:eb:d0:a7:7b:19:4c:97:33:44:47:4d:
         d3:e2:aa:80:a8:f6:62:ac:c0:d6:ce:6d:4d:f7:b4:69:d8:73:
         2e:22:d0:3d:85:a5:54:ae:98:ba:ef:13:68:3b:f4:4b:ba:fe:
         ec:15:97:e6:26:12:9a:3a:46:4f:de:19:5a:f3:fc:e0:be:84:
         07:07:7e:8f:5a:d2:bd:bf:dc:ee:d8:0e:4b:c9:b0:e6:5d:ca:
         b5:36:57:b6
-----BEGIN CERTIFICATE-----
MIIGfTCCBWWgAwIBAgIUAQ0Mn0MoWE57yjlnvl7q+EwhRiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDQ5Y2Q4MDQtM2Y0Yi00NzcyLWJjYmQtYzcyMzhlMzZi
ZGVhMB4XDTI2MDcxMzA5MDAxMloXDTI2MTAxMTA5MDAxMlowLzEtMCsGA1UEAxMk
OWZkOWI5NWUtZmQxMC00MzE5LWJmZTItZjk1MmY2OGU4ZmNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnG0QzSXE7VH/l1MRGOKtsIEV6OEuSkoT4cIa
lsuocFK6d0E+5DPkyH7zIMCirIOO+XYKdvZLNUeQc6uegTysTQXGEc/M5N0KEScA
39E4ILZwKIN2hYPWsDzNIFXLvLu5ctfj88f9Ll+PHsAyKhBkQqpUk5CRLku5POhy
VK3LeOdphCCnc1pEsCaQ3l8LqyIHrUeB5JemYW62YtZeZDI6zEkrUiDmWjZQc6ae
xMFqNetlTArW61vIqjlijUDLxmfLVDIo453vXYYRa/oFYAlO5Z5OQxgVZZjLsbz2
ZH5ITttFN2vhmnyMlZAunQ7AvkOrITwLOpjaEE+Ov77zv1fIyQIDAQABo4IDjzCC
A4swHQYDVR0OBBYEFJpXcE1cPlJb1mkm8Eodo/rzUl3AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kNDlj
ZDgwNC0zZjRiLTQ3NzItYmNiZC1jNzIzOGUzNmJkZWEvZmY4NDVjNDYtYjhjZS0z
NDI3LTljNDctOTVhMzJjMTFkZjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZDQ5Y2Q4MDQtM2Y0Yi00NzcyLWJj
YmQtYzcyMzhlMzZiZGVhL2Q0OWNkODA0LTNmNGItNDc3Mi1iY2JkLWM3MjM4ZTM2
YmRlYS5jcmwwHwYDVR0jBBgwFoAUDELO+iJMWl+bUfiWFipyVL6DsT4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS9kNDljZDgwNC0zZjRiLTQ3NzItYmNiZC1jNzIz
OGUzNmJkZWEuY2VyMFkGCCsGAQUFBwEHAQH/BEowSDBGBAIAATBAAwQAQE3VMAwD
BANATdgDBABATdoDBABIDmEDBABIDncDBABIDn4DBABhS/8DBADQZeMwDAMEAdBl
6gMEANBl7DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW
LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G
CSqGSIb3DQEBCwUAA4IBAQB4fUnQ58mu61qvZ/nZv6z0s3dC4RBKr8bKFYHHoQVk
Xkt3tyyvZ43FB/IlUqGTC5KAdRKZ2gPOlAfhhV9OuRUwmRCMltHUrcLLzcclCEG+
sWBCPJ5OM5uDcX/qkCudz05nHYvVtvAROeB5KOM+WRhpbE5dDwSw78H5mFoXWzL/
bgb7RUgPfc4irlho6E8FRBiM99NHWky2Fp2X0/uHvpF95Rqd3vYciRkI69CnexlM
lzNER03T4qqAqPZirMDWzm1N97Rp2HMuItA9haVUrpi67xNoO/RLuv7sFZfmJhKa
OkZP3hla8/zgvoQHB36PWtK9v9zu2A5LybDmXcq1Nle2
-----END CERTIFICATE-----
Generated at Fri Jul 17 05:14:23 2026 by rpki-client