Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/4e01cf1c-b427-3d56-ab85-07dbd2ce44c5.roa
File:                     4e01cf1c-b427-3d56-ab85-07dbd2ce44c5.roa (raw, json)
Hash identifier:          ATLy6kXzKQTbF5LkaWrDaGJv/dGYvJfQebaiN6+5+iw=
Subject key identifier:   AC:11:62:D2:4A:56:2E:C5:E0:2D:ED:64:BE:B5:B1:0C:C3:C3:6F:B2
Certificate issuer:       /CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb
Certificate serial:       010D0C9F4328584EA0152DEEABDDD8A90126E900
Authority key identifier: EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/4e01cf1c-b427-3d56-ab85-07dbd2ce44c5.roa
Signing time:             Sun 26 Jul 2026 09:00:12 +0000
ROA not before:           Sun 26 Jul 2026 09:00:12 +0000
ROA not after:            Sat 24 Oct 2026 09:00:12 +0000
asID:                     44486
IP address blocks:        134.65.192.0/22 maxlen: 22
                          164.152.160.0/22 maxlen: 22
                          169.155.44.0/22 maxlen: 22
                          169.155.168.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a0:15:2d:ee:ab:dd:d8:a9:01:26:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb
        Validity
            Not Before: Jul 26 09:00:12 2026 GMT
            Not After : Oct 24 09:00:12 2026 GMT
        Subject: CN=011b77a6-ac8f-4d73-ad77-47838404276e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:63:fa:a3:00:2e:98:41:4c:f4:cf:27:e4:fd:
                    2b:d1:fa:09:fe:c8:b2:97:e6:23:60:45:ef:77:2e:
                    f9:2c:6d:f8:9f:74:15:4a:a6:3c:dc:e2:e0:6e:39:
                    d2:2d:89:7c:b0:0c:c6:0d:92:1c:6e:b6:4f:c1:b2:
                    ce:ac:2a:07:0c:92:da:fe:2f:a0:24:fd:68:b5:72:
                    a1:28:17:90:d8:cc:e5:c5:7c:17:b8:30:a1:de:de:
                    59:57:6a:e3:bf:48:fa:56:1c:1a:a1:23:dd:16:c5:
                    2e:25:1d:63:e7:4d:bd:d5:a2:c0:bb:83:0a:4f:50:
                    d6:9f:1a:37:d0:ba:7d:4f:fb:0d:a5:f9:41:8e:9f:
                    d9:af:05:62:89:bd:cf:fa:0e:4e:d0:72:91:b9:ac:
                    a2:23:6b:80:67:de:e2:da:f8:25:9b:60:2a:e2:fd:
                    c1:72:48:55:07:ca:59:a7:65:99:45:f4:29:b6:ed:
                    a0:9f:83:69:d5:28:9c:3c:99:be:31:21:41:51:e8:
                    31:1d:2e:d7:d1:6f:2e:77:e7:91:84:35:13:05:67:
                    66:d8:46:52:b9:18:d1:a4:97:46:9e:ef:73:f7:69:
                    aa:90:a1:15:71:21:5b:31:25:35:d5:12:db:33:57:
                    77:3f:75:e6:81:66:5d:65:42:48:f3:03:d9:f2:29:
                    e7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:11:62:D2:4A:56:2E:C5:E0:2D:ED:64:BE:B5:B1:0C:C3:C3:6F:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/4e01cf1c-b427-3d56-ab85-07dbd2ce44c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl

            X509v3 Authority Key Identifier:
                keyid:EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.65.192.0/22
                  164.152.160.0/22
                  169.155.44.0/22
                  169.155.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:e0:e9:59:3b:37:07:9e:62:30:c6:40:e8:f8:81:2c:09:bc:
         6d:96:38:cf:e5:96:1f:6b:3f:c1:1f:7d:52:38:e6:12:f8:e0:
         66:62:c4:6b:42:2c:f6:f0:2e:80:4c:a2:81:5e:0b:8e:e4:7f:
         d2:85:41:44:ef:f9:7e:77:c8:2e:ad:49:f5:d9:49:1a:06:3c:
         62:1c:43:be:ee:28:07:cf:04:b2:e0:6e:d4:a6:e6:bd:6f:75:
         90:5d:42:ca:6b:6c:29:40:e4:75:e0:cd:2d:a3:40:dd:9d:5d:
         44:9a:47:f7:1b:f8:e7:c0:d4:a4:cc:ec:c0:8d:b5:25:1f:fe:
         27:47:50:27:15:88:7c:19:b4:5f:02:d9:c3:c9:1e:72:b3:ff:
         3d:d6:25:60:5a:df:fc:4b:13:be:36:71:a5:9d:82:4a:07:3b:
         cb:79:f0:ee:70:32:3d:5a:89:85:24:94:7b:7f:73:18:53:33:
         7a:94:bb:0c:b1:8e:ff:e1:6b:aa:a5:50:b9:ba:aa:e4:ec:b1:
         80:a3:39:3e:ab:a7:38:81:4d:e3:a2:fd:0d:42:87:cb:1c:da:
         d4:0c:77:9c:a7:f5:0a:3d:05:f8:c4:66:de:cc:0d:fd:cc:b6:
         cc:28:4a:56:6c:ba:09:32:72:65:00:b5:4a:8d:30:af:e6:e4:
         5a:83:34:6d
-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWE6gFS3uq93YqQEm6QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzkwY2ViMWUtMzhmMC00NjkwLThlMTItZmRlZjBkYzBl
ZGRiMB4XDTI2MDcyNjA5MDAxMloXDTI2MTAyNDA5MDAxMlowLzEtMCsGA1UEAxMk
MDExYjc3YTYtYWM4Zi00ZDczLWFkNzctNDc4Mzg0MDQyNzZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGP6owAumEFM9M8n5P0r0foJ/siyl+YjYEXv
dy75LG34n3QVSqY83OLgbjnSLYl8sAzGDZIcbrZPwbLOrCoHDJLa/i+gJP1otXKh
KBeQ2MzlxXwXuDCh3t5ZV2rjv0j6VhwaoSPdFsUuJR1j50291aLAu4MKT1DWnxo3
0Lp9T/sNpflBjp/ZrwViib3P+g5O0HKRuayiI2uAZ97i2vglm2Aq4v3BckhVB8pZ
p2WZRfQptu2gn4Np1SicPJm+MSFBUegxHS7X0W8ud+eRhDUTBWdm2EZSuRjRpJdG
nu9z92mqkKEVcSFbMSU11RLbM1d3P3XmgWZdZUJI8wPZ8innnwIDAQABo4IDZzCC
A2MwHQYDVR0OBBYEFKwRYtJKVi7F4C3tZL61sQzDw2+yMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zOTBj
ZWIxZS0zOGYwLTQ2OTAtOGUxMi1mZGVmMGRjMGVkZGIvNGUwMWNmMWMtYjQyNy0z
ZDU2LWFiODUtMDdkYmQyY2U0NGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzkwY2ViMWUtMzhmMC00NjkwLThl
MTItZmRlZjBkYzBlZGRiLzM5MGNlYjFlLTM4ZjAtNDY5MC04ZTEyLWZkZWYwZGMw
ZWRkYi5jcmwwHwYDVR0jBBgwFoAU7IhVYel9//xGKMwSEvEQkth0VUswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zOTBjZWIxZS0zOGYwLTQ2OTAtOGUxMi1mZGVm
MGRjMGVkZGIuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQChkHAAwQC
pJigAwQCqZssAwQCqZuoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr
BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz
Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBALXg6Vk7NweeYjDGQOj4gSwJvG2WOM/l
lh9rP8EffVI45hL44GZixGtCLPbwLoBMooFeC47kf9KFQUTv+X53yC6tSfXZSRoG
PGIcQ77uKAfPBLLgbtSm5r1vdZBdQsprbClA5HXgzS2jQN2dXUSaR/cb+OfA1KTM
7MCNtSUf/idHUCcViHwZtF8C2cPJHnKz/z3WJWBa3/xLE742caWdgkoHO8t58O5w
Mj1aiYUklHt/cxhTM3qUuwyxjv/ha6qlULm6quTssYCjOT6rpziBTeOi/Q1Ch8sc
2tQMd5yn9Qo9BfjEZt7MDf3MtswoSlZsugkycmUAtUqNMK/m5FqDNG0=
-----END CERTIFICATE-----
Generated at Thu Jul 30 07:06:50 2026 by rpki-client