Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ed1c116b-b42c-4d90-ac66-1ef8075303d6/1b244f74-053b-34ca-89d6-dee50883307a.roa
File:                     1b244f74-053b-34ca-89d6-dee50883307a.roa (raw, json)
Hash identifier:          palrbQ+1sRJf+KWYEyFkL4T8CsQ4P2PJm49iQsnNgH0=
Subject key identifier:   AF:3D:25:BC:89:36:1C:03:5C:3E:31:34:28:8B:96:62:64:F6:C8:67
Certificate issuer:       /CN=ed1c116b-b42c-4d90-ac66-1ef8075303d6
Certificate serial:       010D0C9F4328584E15C21A2A09B9134C1B2AA1E0
Authority key identifier: D4:EB:D8:25:07:E3:73:BD:26:AA:78:E8:41:70:E7:A7:AA:F0:0C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ed1c116b-b42c-4d90-ac66-1ef8075303d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ed1c116b-b42c-4d90-ac66-1ef8075303d6/1b244f74-053b-34ca-89d6-dee50883307a.roa
Signing time:             Sat 06 Jun 2026 19:51:35 +0000
ROA not before:           Sat 06 Jun 2026 19:51:35 +0000
ROA not after:            Fri 04 Sep 2026 19:51:35 +0000
asID:                     1299
IP address blocks:        64.250.0.0/24 maxlen: 24
                          64.250.1.0/24 maxlen: 24
                          64.250.2.0/24 maxlen: 24
                          64.250.3.0/24 maxlen: 24
                          64.250.4.0/24 maxlen: 24
                          64.250.5.0/24 maxlen: 24
                          64.250.6.0/24 maxlen: 24
                          64.250.7.0/24 maxlen: 24
                          64.250.8.0/24 maxlen: 24
                          64.250.9.0/24 maxlen: 24
                          64.250.10.0/24 maxlen: 24
                          64.250.11.0/24 maxlen: 24
                          64.250.12.0/24 maxlen: 24
                          64.250.13.0/24 maxlen: 24
                          64.250.14.0/24 maxlen: 24
                          64.250.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ed1c116b-b42c-4d90-ac66-1ef8075303d6/ed1c116b-b42c-4d90-ac66-1ef8075303d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ed1c116b-b42c-4d90-ac66-1ef8075303d6/ed1c116b-b42c-4d90-ac66-1ef8075303d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ed1c116b-b42c-4d90-ac66-1ef8075303d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:15:c2:1a:2a:09:b9:13:4c:1b:2a:a1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed1c116b-b42c-4d90-ac66-1ef8075303d6
        Validity
            Not Before: Jun  6 19:51:35 2026 GMT
            Not After : Sep  4 19:51:35 2026 GMT
        Subject: CN=0c975a4b-4486-4104-9d98-59c7e1605a80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b4:9c:f4:dc:59:58:af:a1:94:4b:fa:ef:43:
                    d7:cc:34:44:ec:96:03:70:78:30:af:b4:43:d8:c5:
                    4a:79:57:d9:f9:d3:52:9d:0c:d9:be:9d:da:94:62:
                    ff:06:0c:d2:53:35:e8:74:fb:ae:45:ab:7a:e7:ae:
                    8a:e4:bd:7e:2b:54:ec:08:a9:25:69:9f:28:21:25:
                    6a:8e:f2:e5:1c:19:dd:b2:12:29:bc:98:05:a2:b1:
                    c3:0a:0d:cb:d1:e4:5f:df:ed:57:8e:1d:a1:f3:b6:
                    4e:d2:0b:8e:79:2c:db:29:7c:99:d2:a6:3a:d2:9f:
                    56:61:e4:2f:99:74:a1:f5:a4:cd:33:f9:02:db:ed:
                    ca:ee:f5:3d:96:5f:33:c6:53:9d:78:c2:52:bb:4e:
                    76:70:72:a4:07:a5:fc:9f:08:2d:c0:d0:a7:c7:8d:
                    8c:13:d8:52:58:04:5e:b2:75:96:86:7a:0b:d9:2e:
                    7c:cf:cc:e7:f4:92:8f:a1:40:ad:0e:f1:51:4d:94:
                    53:24:45:a0:c7:36:c9:2c:ee:e7:2a:b0:fa:1b:af:
                    bf:9a:5b:b2:06:24:36:48:1b:6e:99:62:2d:b9:4b:
                    cb:68:97:b7:e6:4e:45:0e:42:24:67:85:ba:51:f0:
                    46:4f:3d:e3:93:d5:a1:90:a7:5b:13:cc:8d:46:83:
                    41:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:3D:25:BC:89:36:1C:03:5C:3E:31:34:28:8B:96:62:64:F6:C8:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ed1c116b-b42c-4d90-ac66-1ef8075303d6/1b244f74-053b-34ca-89d6-dee50883307a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ed1c116b-b42c-4d90-ac66-1ef8075303d6/ed1c116b-b42c-4d90-ac66-1ef8075303d6.crl

            X509v3 Authority Key Identifier:
                keyid:D4:EB:D8:25:07:E3:73:BD:26:AA:78:E8:41:70:E7:A7:AA:F0:0C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ed1c116b-b42c-4d90-ac66-1ef8075303d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.250.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:94:3b:f4:20:77:cb:a3:09:ba:89:ed:b9:d8:bd:87:d0:15:
         d2:ed:92:7b:02:38:79:d1:8a:fd:e8:99:17:f4:19:42:39:27:
         41:fa:57:ce:25:94:ab:ae:26:db:fe:06:ac:3c:2d:44:48:0c:
         cb:ad:ec:26:ef:6a:7a:d8:0d:61:1f:dc:0d:85:5d:fd:ac:d3:
         57:e2:b9:e8:3b:f2:d8:31:4f:d6:c7:64:22:1f:8e:92:0f:5f:
         81:c7:32:cc:19:83:eb:f0:73:06:ff:15:68:ab:97:b4:18:d5:
         87:d9:43:3d:77:ed:71:85:7f:33:52:ca:5f:73:ef:86:3f:27:
         f1:49:c6:65:2a:6e:02:aa:f6:81:23:86:35:6b:33:1b:66:4f:
         56:d8:6c:f5:ed:a1:44:f5:3b:a2:d6:92:bc:7c:e6:5c:e1:96:
         3b:17:df:81:8f:0e:57:94:5b:9d:36:59:be:3b:36:6c:8d:c2:
         c0:27:d7:17:b9:ae:df:54:a9:a7:51:ec:fa:db:b5:7f:37:97:
         c4:bf:5f:1e:e4:57:d8:df:a8:ba:44:e6:58:f2:fe:bd:a8:a9:
         fd:ef:2b:b1:a0:cd:56:22:d6:cf:a4:c7:7b:32:eb:31:8d:97:
         8e:b2:c4:b9:f4:5c:c0:a0:70:bf:59:64:c2:d0:a4:ab:97:cb:
         2b:f5:13:4c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4VwhoqCbkTTBsqoeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWQxYzExNmItYjQyYy00ZDkwLWFjNjYtMWVmODA3NTMw
M2Q2MB4XDTI2MDYwNjE5NTEzNVoXDTI2MDkwNDE5NTEzNVowLzEtMCsGA1UEAxMk
MGM5NzVhNGItNDQ4Ni00MTA0LTlkOTgtNTljN2UxNjA1YTgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LSc9NxZWK+hlEv670PXzDRE7JYDcHgwr7RD
2MVKeVfZ+dNSnQzZvp3alGL/BgzSUzXodPuuRat6566K5L1+K1TsCKklaZ8oISVq
jvLlHBndshIpvJgForHDCg3L0eRf3+1Xjh2h87ZO0guOeSzbKXyZ0qY60p9WYeQv
mXSh9aTNM/kC2+3K7vU9ll8zxlOdeMJSu052cHKkB6X8nwgtwNCnx42ME9hSWARe
snWWhnoL2S58z8zn9JKPoUCtDvFRTZRTJEWgxzbJLO7nKrD6G6+/mluyBiQ2SBtu
mWItuUvLaJe35k5FDkIkZ4W6UfBGTz3jk9WhkKdbE8yNRoNBkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK89JbyJNhwDXD4xNCiLlmJk9shnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9lZDFj
MTE2Yi1iNDJjLTRkOTAtYWM2Ni0xZWY4MDc1MzAzZDYvMWIyNDRmNzQtMDUzYi0z
NGNhLTg5ZDYtZGVlNTA4ODMzMDdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZWQxYzExNmItYjQyYy00ZDkwLWFj
NjYtMWVmODA3NTMwM2Q2L2VkMWMxMTZiLWI0MmMtNGQ5MC1hYzY2LTFlZjgwNzUz
MDNkNi5jcmwwHwYDVR0jBBgwFoAU1OvYJQfjc70mqnjoQXDnp6rwDAMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi9lZDFjMTE2Yi1iNDJjLTRkOTAtYWM2Ni0xZWY4
MDc1MzAzZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQPoAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG2UO/Qgd8ujCbqJ7bnYvYfQFdLtknsCOHnRiv3omRf0GUI5J0H6V84l
lKuuJtv+Bqw8LURIDMut7CbvanrYDWEf3A2FXf2s01fiueg78tgxT9bHZCIfjpIP
X4HHMswZg+vwcwb/FWirl7QY1YfZQz137XGFfzNSyl9z74Y/J/FJxmUqbgKq9oEj
hjVrMxtmT1bYbPXtoUT1O6LWkrx85lzhljsX34GPDleUW502Wb47NmyNwsAn1xe5
rt9UqadR7PrbtX83l8S/Xx7kV9jfqLpE5ljy/r2oqf3vK7GgzVYi1s+kx3sy6zGN
l46yxLn0XMCgcL9ZZMLQpKuXyyv1E0w=
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:40:58 2026 by rpki-client