Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/3ae91796-d0c5-382c-af8b-cc422804c680.roa
File:                     3ae91796-d0c5-382c-af8b-cc422804c680.roa (raw, json)
Hash identifier:          rM7ZnyAxXv5Gwg/denED8kjRvge8xJXcapBrTbK42sE=
Subject key identifier:   90:B2:2D:83:1E:7C:A0:E3:17:A3:BC:B4:D7:8F:37:48:6A:20:F0:E0
Certificate issuer:       /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial:       010D0C9F4328584E104ED8E66A6EA02236E88080
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/3ae91796-d0c5-382c-af8b-cc422804c680.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     63062
IP address blocks:        67.44.112.0/20 maxlen: 24
                          174.32.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4e:d8:e6:6a:6e:a0:22:36:e8:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=d7c7683a-de12-40b0-96c0-64eda0d9a764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:d6:a4:56:98:61:9f:60:0e:e7:6c:59:40:7b:
                    73:83:08:df:85:02:98:82:1a:0f:ba:67:04:34:33:
                    62:0a:fe:eb:fa:3c:42:0c:df:47:b6:05:d4:ba:c1:
                    c6:c4:24:c5:6c:a2:c5:5e:18:98:df:15:0b:8e:64:
                    45:48:df:bd:01:71:5f:f8:c5:f0:75:e1:9b:a2:a1:
                    93:13:f4:99:aa:bc:45:9e:4c:a6:11:5a:c6:59:95:
                    db:58:cd:6d:ee:ee:c9:ab:a7:89:2a:93:46:d7:2a:
                    81:75:07:3d:27:63:dc:fe:75:4e:21:c1:d7:ef:fc:
                    22:2c:77:c0:77:2d:ef:d6:53:aa:4a:a9:39:a5:1b:
                    d0:81:c6:c4:95:52:2e:bd:9c:af:b2:e5:a0:8a:6f:
                    b7:af:b0:0a:06:4f:f6:37:c3:a9:0c:2d:4c:ca:dd:
                    62:72:74:8a:9d:aa:2e:11:72:11:1f:6e:59:a1:70:
                    64:36:d2:2d:8f:b8:16:29:bf:5a:1e:27:e8:a6:6a:
                    3d:79:55:bb:be:8a:bd:57:af:60:a5:17:ce:b1:c9:
                    b4:99:1a:bf:fd:d4:9d:80:38:63:01:c4:71:93:89:
                    4c:c9:e3:16:48:4e:97:6f:4a:5b:6f:93:0e:f9:91:
                    92:e1:36:59:73:b8:e8:85:c9:fa:34:71:69:f7:39:
                    dd:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:B2:2D:83:1E:7C:A0:E3:17:A3:BC:B4:D7:8F:37:48:6A:20:F0:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/3ae91796-d0c5-382c-af8b-cc422804c680.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl

            X509v3 Authority Key Identifier:
                keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.44.112.0/20
                  174.32.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:06:6f:f6:c7:36:92:31:ab:45:76:89:c4:7f:fe:01:66:54:
         d9:d1:18:d1:59:7d:7a:e8:ba:2a:04:8e:7c:33:03:7e:d9:dc:
         b4:5c:a9:3a:98:57:5b:fa:6d:d5:28:d4:c9:16:1f:3e:b0:07:
         61:bf:b8:b6:66:fc:e7:cc:d7:11:ff:5d:36:6d:8e:d1:ba:86:
         6a:48:d8:6f:46:f2:e2:90:cf:79:49:7a:db:d5:35:0b:62:0e:
         a3:f3:25:92:ed:d8:d0:61:c0:c4:ce:2a:79:94:a2:7f:e7:b3:
         87:d5:e9:e8:3f:df:f4:05:f5:36:cc:ce:c0:8d:03:f3:4d:fd:
         79:30:64:23:ab:b5:b4:c5:aa:98:0f:e7:4c:ea:bb:0f:c9:9c:
         0b:e8:5b:1b:50:e3:18:f4:81:e5:38:8d:af:93:70:fb:ed:a8:
         ba:e8:04:ba:43:b3:f4:59:2e:30:2d:9e:8e:90:a4:54:ed:7e:
         87:1b:e2:0b:f8:ab:a6:90:b2:77:58:03:cf:e3:90:92:b7:46:
         5d:51:df:b9:13:7e:cd:21:27:e2:fe:9b:1b:4d:5e:24:01:e7:
         f3:57:69:3c:9a:c2:ca:9d:dc:b2:ab:b7:cd:95:32:0a:1f:ec:
         40:b8:61:b2:66:77:c7:cf:f2:c2:c8:c0:17:73:13:4a:8b:b7:
         54:09:5c:d5
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE4QTtjmam6gIjbogIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDFmODg2ZGYtNmM1OC00ZWE3LTlkMWYtMDY1OWUyMzI0
NDYwMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk
ZDdjNzY4M2EtZGUxMi00MGIwLTk2YzAtNjRlZGEwZDlhNzY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNakVphhn2AO52xZQHtzgwjfhQKYghoPumcE
NDNiCv7r+jxCDN9HtgXUusHGxCTFbKLFXhiY3xULjmRFSN+9AXFf+MXwdeGboqGT
E/SZqrxFnkymEVrGWZXbWM1t7u7Jq6eJKpNG1yqBdQc9J2Pc/nVOIcHX7/wiLHfA
dy3v1lOqSqk5pRvQgcbElVIuvZyvsuWgim+3r7AKBk/2N8OpDC1Myt1icnSKnaou
EXIRH25ZoXBkNtItj7gWKb9aHifopmo9eVW7voq9V69gpRfOscm0mRq//dSdgDhj
AcRxk4lMyeMWSE6Xb0pbb5MO+ZGS4TZZc7johcn6NHFp9zndbwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFJCyLYMefKDjF6O8tNePN0hqIPDgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4
ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5ZTIzMjQ0NjAvM2FlOTE3OTYtZDBjNS0z
ODJjLWFmOGItY2M0MjI4MDRjNjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDFmODg2ZGYtNmM1OC00ZWE3LTlk
MWYtMDY1OWUyMzI0NDYwL2QxZjg4NmRmLTZjNTgtNGVhNy05ZDFmLTA2NTllMjMy
NDQ2MC5jcmwwHwYDVR0jBBgwFoAU3hZRIFaD1ggT5kJFjv0WcO6Hb7swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5
ZTIzMjQ0NjAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEQyxwAwQE
riBwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAIwGb/bHNpIxq0V2icR//gFmVNnRGNFZfXrouioEjnwzA37Z
3LRcqTqYV1v6bdUo1MkWHz6wB2G/uLZm/OfM1xH/XTZtjtG6hmpI2G9G8uKQz3lJ
etvVNQtiDqPzJZLt2NBhwMTOKnmUon/ns4fV6eg/3/QF9TbMzsCNA/NN/XkwZCOr
tbTFqpgP50zquw/JnAvoWxtQ4xj0geU4ja+TcPvtqLroBLpDs/RZLjAtno6QpFTt
focb4gv4q6aQsndYA8/jkJK3Rl1R37kTfs0hJ+L+mxtNXiQB5/NXaTyawsqd3LKr
t82VMgof7EC4YbJmd8fP8sLIwBdzE0qLt1QJXNU=
-----END CERTIFICATE-----
Generated at Sun Jun 14 05:13:11 2026 by rpki-client