Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/6f7b8dbb-a610-30c8-8866-b5f97e9bf152.roa
File:                     6f7b8dbb-a610-30c8-8866-b5f97e9bf152.roa (raw, json)
Hash identifier:          0lgLel2yv7EuP7iMkmJ9ehwsHY/N5iQ/wL5hvFGhy/M=
Subject key identifier:   0A:D5:B6:88:C5:83:49:4E:25:06:40:93:53:5D:55:5E:33:76:DC:0D
Certificate issuer:       /CN=a7e64b66-84df-4665-a4fb-eb3b8add365e
Certificate serial:       010D0C9F4328584D9E501A0208E7E25E6CF04780
Authority key identifier: 44:3F:7C:2A:02:E3:81:66:DD:29:43:80:CF:73:20:89:BF:C3:18:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/6f7b8dbb-a610-30c8-8866-b5f97e9bf152.roa
Signing time:             Sat 25 Apr 2026 01:00:24 +0000
ROA not before:           Sat 25 Apr 2026 01:00:24 +0000
ROA not after:            Fri 24 Jul 2026 01:00:24 +0000
asID:                     16580
IP address blocks:        131.232.3.0/24 maxlen: 24
                          131.232.4.0/24 maxlen: 24
                          131.232.5.0/24 maxlen: 24
                          131.232.6.0/24 maxlen: 24
                          131.232.11.0/24 maxlen: 24
                          131.232.12.0/24 maxlen: 24
                          131.232.13.0/24 maxlen: 24
                          131.232.14.0/24 maxlen: 24
                          131.232.17.0/24 maxlen: 24
                          131.232.28.0/24 maxlen: 24
                          131.232.33.0/24 maxlen: 24
                          131.232.38.0/24 maxlen: 24
                          131.232.51.0/24 maxlen: 24
                          131.232.52.0/22 maxlen: 22
                          131.232.56.0/24 maxlen: 24
                          131.232.57.0/24 maxlen: 24
                          131.232.68.0/24 maxlen: 24
                          131.232.73.0/24 maxlen: 24
                          131.232.80.0/22 maxlen: 22
                          131.232.88.0/22 maxlen: 22
                          131.232.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/a7e64b66-84df-4665-a4fb-eb3b8add365e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/a7e64b66-84df-4665-a4fb-eb3b8add365e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9e:50:1a:02:08:e7:e2:5e:6c:f0:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7e64b66-84df-4665-a4fb-eb3b8add365e
        Validity
            Not Before: Apr 25 01:00:24 2026 GMT
            Not After : Jul 24 01:00:24 2026 GMT
        Subject: CN=9907dca9-3155-40af-951f-dbd2822e6784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9f:fb:1f:58:bd:ba:5b:c5:8a:7f:15:74:ef:
                    e6:0d:c9:e2:b9:ae:58:a9:6f:2f:ef:db:67:92:cd:
                    34:28:ba:70:88:d7:77:b7:22:01:46:8e:78:8d:0d:
                    fe:3a:8e:7b:96:e9:db:69:dd:76:40:ad:eb:3d:f1:
                    75:6d:cc:72:da:12:07:cd:eb:f0:dc:ff:aa:fd:66:
                    b7:23:39:a4:83:ce:2c:c7:9f:1d:ef:b1:30:15:75:
                    04:6f:c9:c5:3d:53:b0:58:3a:d5:4d:e4:31:13:19:
                    33:d4:20:07:4a:fd:80:1b:b0:4c:09:fe:0b:1d:81:
                    8d:ff:01:14:c0:99:28:2c:80:b7:7f:d0:62:ec:b0:
                    80:8e:cd:a9:09:9e:06:c4:51:a4:0e:9d:eb:6a:2f:
                    d7:24:68:23:dc:fe:74:00:bb:9d:8e:78:2e:c1:97:
                    a4:f5:a8:b8:65:dd:2e:0f:33:44:4c:0a:27:fe:42:
                    e9:63:b9:0f:da:bf:d8:8d:c8:1b:11:22:3e:6f:48:
                    e8:67:ee:c1:a0:fd:fb:8a:c5:1c:11:95:23:e6:dc:
                    56:9b:67:03:35:dc:17:28:d5:71:37:d1:94:8c:78:
                    06:17:a7:d2:0c:70:6a:cf:ba:0e:40:05:f7:bb:e1:
                    97:2a:19:f0:26:82:38:72:c0:9b:f5:e2:3f:93:08:
                    3c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:D5:B6:88:C5:83:49:4E:25:06:40:93:53:5D:55:5E:33:76:DC:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/6f7b8dbb-a610-30c8-8866-b5f97e9bf152.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/a7e64b66-84df-4665-a4fb-eb3b8add365e.crl

            X509v3 Authority Key Identifier:
                keyid:44:3F:7C:2A:02:E3:81:66:DD:29:43:80:CF:73:20:89:BF:C3:18:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.232.3.0-131.232.6.255
                  131.232.11.0-131.232.14.255
                  131.232.17.0/24
                  131.232.28.0/24
                  131.232.33.0/24
                  131.232.38.0/24
                  131.232.51.0-131.232.57.255
                  131.232.68.0/24
                  131.232.73.0/24
                  131.232.80.0/22
                  131.232.88.0/22
                  131.232.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:a2:6a:d0:94:b1:e9:22:36:21:a1:71:76:de:b6:8f:fb:15:
         47:0c:96:0e:fc:f2:cd:cd:20:1d:bd:bd:d0:a5:90:1b:dc:37:
         99:87:aa:a6:ca:5d:ca:20:da:bc:a0:3f:22:a9:92:99:4a:26:
         98:3e:c0:18:f1:17:96:aa:d9:f5:3a:92:94:36:8f:2a:7b:9b:
         08:76:38:72:ba:7f:62:84:5f:b7:c6:49:75:6f:e1:12:e2:f9:
         48:d8:dc:09:eb:15:c5:e4:94:76:76:d8:ab:08:de:1a:22:91:
         93:2b:cf:77:c6:41:f0:f3:02:6b:20:62:6a:d3:2f:89:75:6b:
         7d:fe:2d:6f:45:24:6f:79:1c:c3:5c:9d:ea:ae:82:08:68:65:
         f2:9e:4c:a6:c1:3a:38:9a:d2:18:c4:e6:f5:5f:2d:22:bd:de:
         07:8f:47:90:04:99:cb:b6:b7:e7:12:c1:ca:1b:ca:89:46:f6:
         85:bc:ce:df:2b:b0:ac:a8:76:05:28:c7:14:2e:5f:23:9c:5b:
         22:fe:8d:3f:84:de:a9:75:ca:51:bd:02:13:18:20:45:2e:e5:
         44:8d:85:04:0c:86:62:65:c1:e4:b5:dc:71:5e:f1:d1:ef:88:
         d7:e3:98:15:67:4d:89:dd:0c:60:10:88:45:ce:cd:42:8a:6e:
         56:d4:ec:75
-----BEGIN CERTIFICATE-----
MIIGnTCCBYWgAwIBAgIUAQ0Mn0MoWE2eUBoCCOfiXmzwR4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTdlNjRiNjYtODRkZi00NjY1LWE0ZmItZWIzYjhhZGQz
NjVlMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk
OTkwN2RjYTktMzE1NS00MGFmLTk1MWYtZGJkMjgyMmU2Nzg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5/7H1i9ulvFin8VdO/mDcniua5YqW8v79tn
ks00KLpwiNd3tyIBRo54jQ3+Oo57lunbad12QK3rPfF1bcxy2hIHzevw3P+q/Wa3
Izmkg84sx58d77EwFXUEb8nFPVOwWDrVTeQxExkz1CAHSv2AG7BMCf4LHYGN/wEU
wJkoLIC3f9Bi7LCAjs2pCZ4GxFGkDp3rai/XJGgj3P50ALudjnguwZek9ai4Zd0u
DzNETAon/kLpY7kP2r/YjcgbESI+b0joZ+7BoP37isUcEZUj5txWm2cDNdwXKNVx
N9GUjHgGF6fSDHBqz7oOQAX3u+GXKhnwJoI4csCb9eI/kwg8dQIDAQABo4IDrzCC
A6swHQYDVR0OBBYEFArVtojFg0lOJQZAk1NdVV4zdtwNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hN2U2
NGI2Ni04NGRmLTQ2NjUtYTRmYi1lYjNiOGFkZDM2NWUvNmY3YjhkYmItYTYxMC0z
MGM4LTg4NjYtYjVmOTdlOWJmMTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTdlNjRiNjYtODRkZi00NjY1LWE0
ZmItZWIzYjhhZGQzNjVlL2E3ZTY0YjY2LTg0ZGYtNDY2NS1hNGZiLWViM2I4YWRk
MzY1ZS5jcmwwHwYDVR0jBBgwFoAURD98KgLjgWbdKUOAz3Mgib/DGEAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hN2U2NGI2Ni04NGRmLTQ2NjUtYTRmYi1lYjNi
OGFkZDM2NWUuY2VyMHkGCCsGAQUFBwEHAQH/BGowaDBmBAIAATBgMAwDBACD6AMD
BACD6AYwDAMEAIPoCwMEAIPoDgMEAIPoEQMEAIPoHAMEAIPoIQMEAIPoJjAMAwQA
g+gzAwQBg+g4AwQAg+hEAwQAg+hJAwQCg+hQAwQCg+hYAwQCg+hoMFQGA1UdIAEB
/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp
bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB
AKuiatCUsekiNiGhcXbeto/7FUcMlg788s3NIB29vdClkBvcN5mHqqbKXcog2ryg
PyKpkplKJpg+wBjxF5aq2fU6kpQ2jyp7mwh2OHK6f2KEX7fGSXVv4RLi+UjY3Anr
FcXklHZ22KsI3hoikZMrz3fGQfDzAmsgYmrTL4l1a33+LW9FJG95HMNcnequggho
ZfKeTKbBOjia0hjE5vVfLSK93gePR5AEmcu2t+cSwcobyolG9oW8zt8rsKyodgUo
xxQuXyOcWyL+jT+E3ql1ylG9AhMYIEUu5USNhQQMhmJlweS13HFe8dHviNfjmBVn
TYndDGAQiEXOzUKKblbU7HU=
-----END CERTIFICATE-----
Generated at Sun May 3 17:51:22 2026 by rpki-client