Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/658f8956-451b-3b57-883e-5ede69e83e94.roa
File:                     658f8956-451b-3b57-883e-5ede69e83e94.roa (raw, json)
Hash identifier:          4hIy6Snom4fealXHahycoP7IjUtwiM2nwjl35xpF9ms=
Subject key identifier:   67:2F:6F:81:88:E3:00:4C:42:F4:4F:1D:71:6B:01:10:82:D6:91:01
Certificate issuer:       /CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff
Certificate serial:       010D0C9F4328584E3A2F27FACEB629456F375D70
Authority key identifier: D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/658f8956-451b-3b57-883e-5ede69e83e94.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     3737
IP address blocks:        204.186.0.0/16 maxlen: 24
                          209.50.128.0/19 maxlen: 24
                          209.173.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:27:fa:ce:b6:29:45:6f:37:5d:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=87017ded-10b1-4ad7-baf6-1f91078f0d79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ff:9a:e2:49:1e:bf:c1:81:80:7d:71:2d:2b:
                    1f:99:b8:00:e2:f8:e3:f6:23:25:43:25:2d:84:ae:
                    b1:e2:5d:a7:68:2b:fa:f8:6d:f7:10:1c:c0:ec:68:
                    0e:5f:03:4d:96:2b:98:38:48:8f:87:f1:20:02:ed:
                    3c:7c:89:b8:83:ea:48:13:d2:54:ea:ca:a4:77:78:
                    66:63:3d:f6:37:f1:88:c3:f2:6b:80:6f:73:f0:f1:
                    1a:24:cf:d4:53:09:7f:73:5a:82:81:ec:bb:60:b7:
                    dc:88:fc:8c:d8:87:55:62:41:5a:6f:e9:54:7f:a9:
                    77:d3:ca:72:2a:84:be:a7:84:5c:32:bc:f2:3f:92:
                    dd:df:7f:c2:fa:06:a6:69:69:52:de:6c:f7:8f:dd:
                    0c:ec:25:5a:60:33:7f:21:61:c8:cd:bd:40:ea:2c:
                    c6:c2:42:40:06:9b:ef:07:a0:06:57:2d:af:39:c5:
                    01:6f:33:8b:9b:00:22:80:77:b0:81:fa:8e:43:f6:
                    65:c4:19:f8:1e:e2:09:82:c5:96:d9:91:82:f0:56:
                    5a:34:f8:6e:a1:30:d4:23:d3:6c:0f:98:cd:73:95:
                    65:3b:17:9a:a6:d0:32:6a:6c:11:af:33:c3:1e:7d:
                    77:0c:c8:87:6c:be:e8:d7:b6:42:2c:a7:70:ae:ef:
                    16:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:2F:6F:81:88:E3:00:4C:42:F4:4F:1D:71:6B:01:10:82:D6:91:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/658f8956-451b-3b57-883e-5ede69e83e94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl

            X509v3 Authority Key Identifier:
                keyid:D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.186.0.0/16
                  209.50.128.0/19
                  209.173.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:25:f9:91:d7:09:95:ac:02:cd:79:01:aa:f8:66:c1:d7:59:
         f3:2e:35:71:3f:ef:ed:ea:40:b7:e7:6e:44:33:9d:31:ed:dd:
         42:51:5e:3a:f2:f9:44:1a:7d:65:86:15:b8:7a:83:83:25:76:
         18:fa:50:7f:78:16:6c:0d:50:15:1a:d0:dc:8d:57:6c:c1:8c:
         ad:20:ae:8e:e9:16:67:2d:50:3c:dc:a6:11:ce:86:61:f3:45:
         42:cb:97:23:92:90:35:2d:96:b9:f5:18:84:f4:1e:85:73:1a:
         c3:0e:96:ed:ee:ce:b9:d4:3a:26:24:c3:5f:92:36:ea:60:23:
         a3:54:b8:0a:9b:e1:b0:35:64:1f:67:46:70:ef:ea:1b:7b:13:
         ee:37:dd:e8:5c:e6:2d:0f:9a:41:51:17:fd:ee:1d:3c:22:98:
         6a:4f:71:9b:b3:c5:aa:e8:6f:51:ba:ae:47:58:99:1b:3d:9b:
         23:8e:55:fc:6b:c5:e0:ea:49:77:6a:b4:26:19:65:c2:93:f9:
         4f:ae:af:9c:b6:5f:1c:06:2c:84:54:3f:73:07:c6:1d:bd:d6:
         b5:52:6e:88:16:e8:8e:f9:3c:23:9b:42:bf:5d:17:c7:e8:a7:
         b2:04:fe:96:39:b5:bc:f0:a8:f9:0c:dc:1c:5f:77:03:e3:cc:
         9a:79:38:9f
-----BEGIN CERTIFICATE-----
MIIGTjCCBTagAwIBAgIUAQ0Mn0MoWE46Lyf6zrYpRW83XXAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDVkZmZjZWYtZDdkOC00YjU4LWI0ZjUtYmJlY2M2OTVi
YWZmMB4XDTI2MDYxOTIxMDAxMloXDTI2MDkxNzIxMDAxMlowLzEtMCsGA1UEAxMk
ODcwMTdkZWQtMTBiMS00YWQ3LWJhZjYtMWY5MTA3OGYwZDc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuP+a4kkev8GBgH1xLSsfmbgA4vjj9iMlQyUt
hK6x4l2naCv6+G33EBzA7GgOXwNNliuYOEiPh/EgAu08fIm4g+pIE9JU6sqkd3hm
Yz32N/GIw/JrgG9z8PEaJM/UUwl/c1qCgey7YLfciPyM2IdVYkFab+lUf6l308py
KoS+p4RcMrzyP5Ld33/C+gamaWlS3mz3j90M7CVaYDN/IWHIzb1A6izGwkJABpvv
B6AGVy2vOcUBbzOLmwAigHewgfqOQ/ZlxBn4HuIJgsWW2ZGC8FZaNPhuoTDUI9Ns
D5jNc5VlOxeaptAyamwRrzPDHn13DMiHbL7o17ZCLKdwru8WlwIDAQABo4IDYDCC
A1wwHQYDVR0OBBYEFGcvb4GI4wBMQvRPHXFrARCC1pEBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NWRm
ZmNlZi1kN2Q4LTRiNTgtYjRmNS1iYmVjYzY5NWJhZmYvNjU4Zjg5NTYtNDUxYi0z
YjU3LTg4M2UtNWVkZTY5ZTgzZTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDVkZmZjZWYtZDdkOC00YjU4LWI0
ZjUtYmJlY2M2OTViYWZmLzQ1ZGZmY2VmLWQ3ZDgtNGI1OC1iNGY1LWJiZWNjNjk1
YmFmZi5jcmwwHwYDVR0jBBgwFoAU2Ian5EHiWu1c+gv6GSKHe+hhYv4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS80NWRmZmNlZi1kN2Q4LTRiNTgtYjRmNS1iYmVj
YzY5NWJhZmYuY2VyMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAATARAwMAzLoDBAXR
MoADBAXRrQAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB
FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN
BgkqhkiG9w0BAQsFAAOCAQEAoCX5kdcJlawCzXkBqvhmwddZ8y41cT/v7epAt+du
RDOdMe3dQlFeOvL5RBp9ZYYVuHqDgyV2GPpQf3gWbA1QFRrQ3I1XbMGMrSCujukW
Zy1QPNymEc6GYfNFQsuXI5KQNS2WufUYhPQehXMaww6W7e7OudQ6JiTDX5I26mAj
o1S4CpvhsDVkH2dGcO/qG3sT7jfd6FzmLQ+aQVEX/e4dPCKYak9xm7PFquhvUbqu
R1iZGz2bI45V/GvF4OpJd2q0JhllwpP5T66vnLZfHAYshFQ/cwfGHb3WtVJuiBbo
jvk8I5tCv10Xx+insgT+ljm1vPCo+QzcHF93A+PMmnk4nw==
-----END CERTIFICATE-----
Generated at Tue Jul 7 21:54:17 2026 by rpki-client