Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f9e5042-0109-358f-9abb-5204ef9d0863.roa
File:                     9f9e5042-0109-358f-9abb-5204ef9d0863.roa (raw, json)
Hash identifier:          gDLLOCVC7ss36Eho6r0jfcM4ojxwVA4xVdGpIlMvRfY=
Subject key identifier:   79:A5:4A:19:DA:55:CC:41:9F:F8:D9:6A:EB:EC:CF:9D:91:3D:A5:21
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DFA70A1D6111932AA6B69FE00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f9e5042-0109-358f-9abb-5204ef9d0863.roa
Signing time:             Thu 28 May 2026 01:00:10 +0000
ROA not before:           Thu 28 May 2026 01:00:10 +0000
ROA not after:            Wed 26 Aug 2026 01:00:10 +0000
asID:                     36733
IP address blocks:        64.235.160.0/19 maxlen: 19
                          65.97.0.0/20 maxlen: 20
                          65.97.16.0/20 maxlen: 20
                          67.174.80.0/20 maxlen: 20
                          68.81.10.0/23 maxlen: 23
                          68.85.136.0/23 maxlen: 23
                          68.85.215.0/24 maxlen: 24
                          68.86.134.0/23 maxlen: 23
                          68.86.228.0/23 maxlen: 23
                          68.87.16.0/22 maxlen: 22
                          68.87.24.0/24 maxlen: 24
                          68.87.26.0/23 maxlen: 23
                          68.87.28.0/22 maxlen: 22
                          68.87.32.0/20 maxlen: 20
                          68.87.96.0/20 maxlen: 20
                          69.137.133.0/24 maxlen: 24
                          69.139.191.0/24 maxlen: 24
                          69.139.244.0/23 maxlen: 23
                          69.241.18.0/23 maxlen: 23
                          69.241.40.0/21 maxlen: 21
                          69.241.72.0/24 maxlen: 24
                          69.247.96.0/20 maxlen: 20
                          73.5.240.0/20 maxlen: 20
                          75.149.106.0/23 maxlen: 23
                          76.26.112.0/21 maxlen: 21
                          76.96.48.0/20 maxlen: 20
                          76.96.64.0/20 maxlen: 20
                          96.82.16.0/23 maxlen: 23
                          96.97.20.0/22 maxlen: 22
                          96.108.38.0/23 maxlen: 23
                          96.108.76.0/22 maxlen: 22
                          96.108.144.0/23 maxlen: 23
                          96.109.130.0/23 maxlen: 23
                          96.115.158.0/23 maxlen: 23
                          96.116.0.0/19 maxlen: 19
                          96.119.96.0/19 maxlen: 19
                          96.216.36.0/22 maxlen: 22
                          98.40.34.0/23 maxlen: 23
                          162.150.160.0/20 maxlen: 20
                          2001:558:e0::/44 maxlen: 44
                          2001:558:400::/44 maxlen: 44
                          2001:558:460::/44 maxlen: 44
                          2001:558:461::/48 maxlen: 48
                          2001:558:502a::/48 maxlen: 48
                          2001:558:6000::/48 maxlen: 48
                          2001:558:fc0b::/48 maxlen: 48
                          2001:558:fe14::/48 maxlen: 48
                          2001:558:fee7::/48 maxlen: 48
                          2001:558:ff00::/40 maxlen: 40
                          2601:a40::/26 maxlen: 26
                          2601:a40:202::/48 maxlen: 48
                          2601:a40:600::/40 maxlen: 40
                          2601:a40:700::/40 maxlen: 40
                          2603:2a40::/26 maxlen: 26
                          2603:2a40:5::/48 maxlen: 48
                          2603:2a40:600::/40 maxlen: 40
                          2603:3019::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fa:70:a1:d6:11:19:32:aa:6b:69:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 28 01:00:10 2026 GMT
            Not After : Aug 26 01:00:10 2026 GMT
        Subject: CN=5b9dc6e2-ec55-460c-9bc9-f3b313b3f689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:79:ab:85:cf:f1:5d:7f:a1:fa:72:15:2c:4e:
                    5e:29:5a:97:2e:d1:5a:18:84:64:ae:96:e8:95:3f:
                    7d:5d:55:6c:04:33:45:59:a2:c1:aa:15:9a:9d:09:
                    5f:f4:10:68:c1:71:f8:79:75:ee:f6:c2:60:6d:50:
                    42:83:ef:dc:89:e2:01:77:a3:a5:af:62:1c:81:69:
                    cf:03:e8:2b:c1:ee:a0:25:97:34:35:25:cc:5d:5c:
                    ce:cb:a5:02:44:2d:d9:8c:3e:1b:d7:bd:26:13:dd:
                    22:48:96:4c:18:4d:2e:8d:9e:d0:ca:f4:65:2a:93:
                    66:a7:09:b1:c1:07:87:28:9f:7a:c1:62:d9:61:96:
                    05:4d:85:c3:de:25:f5:b8:79:90:db:8a:5d:d7:19:
                    c3:fe:01:34:9a:62:b5:66:63:3c:7f:12:c8:77:57:
                    60:39:ee:b9:81:0e:71:ac:5d:4d:34:5e:ce:82:22:
                    e5:d5:26:a2:8c:b2:2c:ac:33:6e:90:a8:e0:3c:07:
                    b9:01:ee:0f:d2:56:0c:d5:08:8c:8a:00:d0:2c:70:
                    8b:cb:62:fb:39:7c:7d:69:f6:08:d7:67:e6:6e:83:
                    23:37:45:f7:60:96:f5:9e:e5:24:76:6d:b9:98:d8:
                    eb:a4:fa:70:8f:60:b8:0c:78:3e:a4:77:39:ce:0c:
                    8e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:A5:4A:19:DA:55:CC:41:9F:F8:D9:6A:EB:EC:CF:9D:91:3D:A5:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f9e5042-0109-358f-9abb-5204ef9d0863.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.235.160.0/19
                  65.97.0.0/19
                  67.174.80.0/20
                  68.81.10.0/23
                  68.85.136.0/23
                  68.85.215.0/24
                  68.86.134.0/23
                  68.86.228.0/23
                  68.87.16.0/22
                  68.87.24.0/24
                  68.87.26.0-68.87.47.255
                  68.87.96.0/20
                  69.137.133.0/24
                  69.139.191.0/24
                  69.139.244.0/23
                  69.241.18.0/23
                  69.241.40.0/21
                  69.241.72.0/24
                  69.247.96.0/20
                  73.5.240.0/20
                  75.149.106.0/23
                  76.26.112.0/21
                  76.96.48.0-76.96.79.255
                  96.82.16.0/23
                  96.97.20.0/22
                  96.108.38.0/23
                  96.108.76.0/22
                  96.108.144.0/23
                  96.109.130.0/23
                  96.115.158.0/23
                  96.116.0.0/19
                  96.119.96.0/19
                  96.216.36.0/22
                  98.40.34.0/23
                  162.150.160.0/20
                IPv6:
                  2001:558:e0::/44
                  2001:558:400::/44
                  2001:558:460::/44
                  2001:558:502a::/48
                  2001:558:6000::/48
                  2001:558:fc0b::/48
                  2001:558:fe14::/48
                  2001:558:fee7::/48
                  2001:558:ff00::/40
                  2601:a40::/26
                  2603:2a40::/26
                  2603:3019::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:67:c0:ea:40:13:89:f8:9d:e1:e0:2b:fc:ec:ed:c1:35:60:
         f9:2f:02:fe:a4:0a:d1:f8:b9:8a:22:fe:7d:29:34:4e:8d:b0:
         b3:2b:44:a4:5d:37:5b:3f:8c:bf:fd:a6:35:24:8b:dc:2e:74:
         cb:54:19:24:6c:fa:e4:2a:1e:51:ef:c3:47:56:2e:3f:89:88:
         09:02:fe:c8:f8:a6:3b:fe:8f:35:1c:6c:ad:d8:c4:7c:b3:d7:
         37:1a:d1:34:70:e7:55:3f:1d:f0:ee:31:d9:02:39:56:40:ad:
         33:ed:b0:40:1a:62:df:79:70:4c:1f:5a:c1:97:32:9f:70:da:
         6e:89:a6:23:0f:8b:ce:66:5e:d0:38:d0:0e:3d:4c:4b:8b:40:
         22:68:23:87:0f:b8:d4:f0:ce:a8:d0:6c:c9:c9:ac:f2:f2:86:
         22:5b:36:96:f6:15:4d:e8:f4:be:3a:af:82:bd:7d:d8:33:a3:
         34:35:fb:94:ea:c2:f3:36:fd:b7:4d:43:3a:30:f4:bb:d4:84:
         29:35:fb:e9:11:62:a3:75:55:4a:aa:1e:eb:d8:16:20:9f:cf:
         09:82:bc:38:b6:f2:ca:3b:67:57:af:46:ab:26:68:e8:36:f5:
         12:38:47:15:86:be:d3:79:f4:24:7f:79:11:4d:04:9f:43:87:
         38:b1:2f:d9
-----BEGIN CERTIFICATE-----
MIIHlDCCBnygAwIBAgIUAQ0Mn0MoWE36cKHWERkyqmtp/gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDUyODAxMDAxMFoXDTI2MDgyNjAxMDAxMFowLzEtMCsGA1UEAxMk
NWI5ZGM2ZTItZWM1NS00NjBjLTliYzktZjNiMzEzYjNmNjg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHmrhc/xXX+h+nIVLE5eKVqXLtFaGIRkrpbo
lT99XVVsBDNFWaLBqhWanQlf9BBowXH4eXXu9sJgbVBCg+/cieIBd6Olr2IcgWnP
A+grwe6gJZc0NSXMXVzOy6UCRC3ZjD4b170mE90iSJZMGE0ujZ7QyvRlKpNmpwmx
wQeHKJ96wWLZYZYFTYXD3iX1uHmQ24pd1xnD/gE0mmK1ZmM8fxLId1dgOe65gQ5x
rF1NNF7OgiLl1SaijLIsrDNukKjgPAe5Ae4P0lYM1QiMigDQLHCLy2L7OXx9afYI
12fmboMjN0X3YJb1nuUkdm25mNjrpPpwj2C4DHg+pHc5zgyOowIDAQABo4IEpjCC
BKIwHQYDVR0OBBYEFHmlShnaVcxBn/jZauvsz52RPaUhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWY5ZTUwNDItMDEwOS0z
NThmLTlhYmItNTIwNGVmOWQwODYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMIIBbgYIKwYBBQUHAQcBAf8EggFdMIIBWTCB6QQCAAEwgeID
BAVA66ADBAVBYQADBARDrlADBAFEUQoDBAFEVYgDBABEVdcDBAFEVoYDBAFEVuQD
BAJEVxADBABEVxgwDAMEAURXGgMEBERXIAMEBERXYAMEAEWJhQMEAEWLvwMEAUWL
9AMEAUXxEgMEA0XxKAMEAEXxSAMEBEX3YAMEBEkF8AMEAUuVagMEA0wacDAMAwQE
TGAwAwQETGBAAwQBYFIQAwQCYGEUAwQBYGwmAwQCYGxMAwQBYGyQAwQBYG2CAwQB
YHOeAwQFYHQAAwQFYHdgAwQCYNgkAwQBYigiAwQEopagMGsEAgACMGUDBwQgAQVY
AOADBwQgAQVYBAADBwQgAQVYBGADBwAgAQVYUCoDBwAgAQVYYAADBwAgAQVY/AsD
BwAgAQVY/hQDBwAgAQVY/ucDBgAgAQVY/wMFBiYBCkADBQYmAypAAwUAJgMwGTBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQC8Z8DqQBOJ+J3h4Cv87O3BNWD5LwL+pArR+LmKIv59KTROjbCzK0Sk
XTdbP4y//aY1JIvcLnTLVBkkbPrkKh5R78NHVi4/iYgJAv7I+KY7/o81HGyt2MR8
s9c3GtE0cOdVPx3w7jHZAjlWQK0z7bBAGmLfeXBMH1rBlzKfcNpuiaYjD4vOZl7Q
ONAOPUxLi0AiaCOHD7jU8M6o0GzJyazy8oYiWzaW9hVN6PS+Oq+CvX3YM6M0NfuU
6sLzNv23TUM6MPS71IQpNfvpEWKjdVVKqh7r2BYgn88Jgrw4tvLKO2dXr0arJmjo
NvUSOEcVhr7TefQkf3kRTQSfQ4c4sS/Z
-----END CERTIFICATE-----
Generated at Sun Jun 14 09:56:27 2026 by rpki-client