Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/8f5eda80-bc10-3624-b2a3-e6ffeaf6fc3d.roa
File:                     8f5eda80-bc10-3624-b2a3-e6ffeaf6fc3d.roa (raw, json)
Hash identifier:          rsr61oRkzCNkjpsSxYxXnDCMY8zwz8aWqbRGduJsxDs=
Subject key identifier:   9D:A6:5C:40:2B:A1:5A:69:E2:88:57:0C:C3:97:7D:8E:97:46:18:B3
Certificate issuer:       /CN=928cccc8-4c1d-457b-a709-2f2c5d83c939
Certificate serial:       010D0C9F4328584E3E5F350F78ADBB3B5D4D7480
Authority key identifier: E7:48:CF:EC:DF:A9:17:0F:AE:79:4A:FB:3E:33:6D:B0:4A:C5:88:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/8f5eda80-bc10-3624-b2a3-e6ffeaf6fc3d.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     14618
IP address blocks:        67.226.220.0/24 maxlen: 24
                          67.226.222.0/24 maxlen: 24
                          204.110.221.0/24 maxlen: 24
                          204.110.222.0/24 maxlen: 24
                          204.110.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/928cccc8-4c1d-457b-a709-2f2c5d83c939.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/928cccc8-4c1d-457b-a709-2f2c5d83c939.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:35:0f:78:ad:bb:3b:5d:4d:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=928cccc8-4c1d-457b-a709-2f2c5d83c939
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=f87040aa-5871-4305-8116-a5a9494bb934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b1:26:c3:ba:a8:0d:24:b5:80:bd:ab:68:89:
                    dd:c1:14:4d:87:84:54:78:9c:a1:cb:4a:b6:1c:6d:
                    48:48:94:55:5a:00:10:bc:77:53:ef:8a:6a:96:4c:
                    09:d6:44:4a:3a:a7:1b:59:13:de:f4:4f:70:77:c6:
                    4c:5a:22:5f:96:89:e0:33:dd:5a:64:6d:6e:79:5c:
                    c2:80:b6:d4:ff:b7:9c:7d:c6:c9:46:31:de:4d:ef:
                    db:68:6c:d5:e9:d0:12:73:27:ce:4b:4b:87:65:ad:
                    22:73:e3:eb:fc:1d:01:fc:66:b5:7d:a1:b1:9a:67:
                    1d:ac:ba:1f:6b:e5:31:f5:54:51:5c:af:97:40:55:
                    4d:2f:a5:d4:7e:3d:08:9b:de:5f:dd:d5:03:2e:b4:
                    bf:d6:15:7e:dc:58:f7:57:65:8d:b3:ef:5f:16:c4:
                    51:dd:8a:a7:db:88:7c:d2:fc:43:77:22:ab:dd:e9:
                    62:46:b4:02:2c:f3:33:18:23:11:06:88:a2:6d:93:
                    36:c0:e2:4a:57:4d:a9:af:c3:a9:23:26:a6:ee:c8:
                    20:68:9a:15:81:c3:3d:2a:55:ae:e8:25:6d:95:e7:
                    06:1f:5a:c7:5c:7b:a7:2f:d4:3b:cd:df:71:f6:14:
                    11:98:2c:8a:30:2a:36:83:51:f3:f4:be:73:10:51:
                    1b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:A6:5C:40:2B:A1:5A:69:E2:88:57:0C:C3:97:7D:8E:97:46:18:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/8f5eda80-bc10-3624-b2a3-e6ffeaf6fc3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/928cccc8-4c1d-457b-a709-2f2c5d83c939.crl

            X509v3 Authority Key Identifier:
                keyid:E7:48:CF:EC:DF:A9:17:0F:AE:79:4A:FB:3E:33:6D:B0:4A:C5:88:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.226.220.0/24
                  67.226.222.0/24
                  204.110.221.0-204.110.223.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:8a:c9:91:9f:df:60:89:86:79:07:27:5d:c5:50:ee:41:d8:
         2e:07:c5:53:d7:c6:4e:3d:44:f7:d9:89:7a:27:97:86:a0:ca:
         99:33:33:f3:8d:94:78:78:ca:66:d3:a3:13:7b:f7:a9:cc:74:
         81:ed:1d:65:2f:3a:99:df:61:7e:7c:dc:ee:f6:0a:9e:98:84:
         cb:48:99:da:0d:d8:56:9d:7c:b9:d4:67:c6:97:4f:f0:8f:25:
         49:86:26:24:5c:a4:f4:e0:ec:fd:a2:93:aa:80:8b:73:bc:bf:
         42:53:39:bd:59:21:df:83:80:39:7d:35:34:25:e1:f7:a6:7c:
         61:58:0e:70:ab:3c:57:71:f5:44:79:2e:a2:e2:2d:76:02:c7:
         0a:9c:3d:82:85:52:e0:dc:7e:fa:76:32:71:60:85:64:63:62:
         0c:80:1d:6c:64:d9:b7:68:ab:76:68:52:d6:d7:03:03:a8:2e:
         f8:96:89:98:69:d2:74:a9:d4:48:64:9e:45:47:86:a3:4c:5a:
         29:e5:42:4a:54:59:6f:e2:de:a8:40:a3:b0:bb:f7:8d:9d:9d:
         c2:4e:cc:b4:aa:e6:a5:ec:0e:2b:2a:aa:46:c7:54:72:53:b7:
         f7:50:3b:82:e8:18:02:0d:4e:3b:ed:74:8d:54:31:7e:2a:10:
         80:12:97:4e
-----BEGIN CERTIFICATE-----
MIIGVzCCBT+gAwIBAgIUAQ0Mn0MoWE4+XzUPeK27O11NdIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTI4Y2NjYzgtNGMxZC00NTdiLWE3MDktMmYyYzVkODNj
OTM5MB4XDTI2MDYyMTA5MDAxMloXDTI2MDkxOTA5MDAxMlowLzEtMCsGA1UEAxMk
Zjg3MDQwYWEtNTg3MS00MzA1LTgxMTYtYTVhOTQ5NGJiOTM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7Emw7qoDSS1gL2raIndwRRNh4RUeJyhy0q2
HG1ISJRVWgAQvHdT74pqlkwJ1kRKOqcbWRPe9E9wd8ZMWiJflongM91aZG1ueVzC
gLbU/7ecfcbJRjHeTe/baGzV6dAScyfOS0uHZa0ic+Pr/B0B/Ga1faGxmmcdrLof
a+Ux9VRRXK+XQFVNL6XUfj0Im95f3dUDLrS/1hV+3Fj3V2WNs+9fFsRR3Yqn24h8
0vxDdyKr3eliRrQCLPMzGCMRBoiibZM2wOJKV02pr8OpIyam7sggaJoVgcM9KlWu
6CVtlecGH1rHXHunL9Q7zd9x9hQRmCyKMCo2g1Hz9L5zEFEbFwIDAQABo4IDaTCC
A2UwHQYDVR0OBBYEFJ2mXEAroVpp4ohXDMOXfY6XRhizMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85Mjhj
Y2NjOC00YzFkLTQ1N2ItYTcwOS0yZjJjNWQ4M2M5MzkvOGY1ZWRhODAtYmMxMC0z
NjI0LWIyYTMtZTZmZmVhZjZmYzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTI4Y2NjYzgtNGMxZC00NTdiLWE3
MDktMmYyYzVkODNjOTM5LzkyOGNjY2M4LTRjMWQtNDU3Yi1hNzA5LTJmMmM1ZDgz
YzkzOS5jcmwwHwYDVR0jBBgwFoAU50jP7N+pFw+ueUr7PjNtsErFiKgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85MjhjY2NjOC00YzFkLTQ1N2ItYTcwOS0yZjJj
NWQ4M2M5MzkuY2VyMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAQ+LcAwQA
Q+LeMAwDBADMbt0DBAXMbsAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG
CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j
cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAjYrJkZ/fYImGeQcnXcVQ7kHYLgfF
U9fGTj1E99mJeieXhqDKmTMz842UeHjKZtOjE3v3qcx0ge0dZS86md9hfnzc7vYK
npiEy0iZ2g3YVp18udRnxpdP8I8lSYYmJFyk9ODs/aKTqoCLc7y/QlM5vVkh34OA
OX01NCXh96Z8YVgOcKs8V3H1RHkuouItdgLHCpw9goVS4Nx++nYycWCFZGNiDIAd
bGTZt2irdmhS1tcDA6gu+JaJmGnSdKnUSGSeRUeGo0xaKeVCSlRZb+LeqECjsLv3
jZ2dwk7MtKrmpewOKyqqRsdUclO391A7gugYAg1OO+10jVQxfioQgBKXTg==
-----END CERTIFICATE-----
Generated at Mon Jul 6 18:18:04 2026 by rpki-client