Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/68d1a941-51ad-3750-8235-b215425c89f4.roa
File:                     68d1a941-51ad-3750-8235-b215425c89f4.roa (raw, json)
Hash identifier:          RWxj/0QnSy0q+F2SlU1S0x76LTNINTXP6LBm9K6pCvk=
Subject key identifier:   7E:28:F5:DC:0E:9A:6E:93:E3:23:DE:A2:87:7D:C2:0D:E1:D3:03:85
Certificate issuer:       /CN=d512566a-2d54-474a-a1b0-93c74d4f7e45
Certificate serial:       010D0C9F4328584D71A50EC3596FE9FB2C431F40
Authority key identifier: 1F:FA:6D:95:AF:5A:0B:BF:31:14:4C:3C:C6:AF:E5:51:0F:41:55:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/68d1a941-51ad-3750-8235-b215425c89f4.roa
Signing time:             Thu 09 Apr 2026 01:00:23 +0000
ROA not before:           Thu 09 Apr 2026 01:00:23 +0000
ROA not after:            Wed 08 Jul 2026 01:00:23 +0000
asID:                     19905
IP address blocks:        167.245.8.0/22 maxlen: 22
                          167.245.12.0/22 maxlen: 22
                          167.245.16.0/22 maxlen: 22
                          167.245.20.0/22 maxlen: 22
                          167.245.24.0/22 maxlen: 22
                          167.245.28.0/22 maxlen: 22
                          167.245.32.0/22 maxlen: 22
                          167.245.36.0/22 maxlen: 22
                          167.245.54.0/23 maxlen: 23
                          167.245.56.0/22 maxlen: 22
                          167.245.62.0/23 maxlen: 23
                          167.245.64.0/20 maxlen: 20
                          167.245.88.0/22 maxlen: 22
                          167.245.92.0/22 maxlen: 22
                          167.245.104.0/22 maxlen: 22
                          167.245.139.0/24 maxlen: 24
                          167.245.160.0/19 maxlen: 19
                          167.245.243.0/24 maxlen: 24
                          167.245.245.0/24 maxlen: 24
                          167.245.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/d512566a-2d54-474a-a1b0-93c74d4f7e45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/d512566a-2d54-474a-a1b0-93c74d4f7e45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:71:a5:0e:c3:59:6f:e9:fb:2c:43:1f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d512566a-2d54-474a-a1b0-93c74d4f7e45
        Validity
            Not Before: Apr  9 01:00:23 2026 GMT
            Not After : Jul  8 01:00:23 2026 GMT
        Subject: CN=e2bf9e53-3170-4ff8-beeb-9525bfa42cea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f0:19:ab:dd:84:7b:fb:57:92:22:60:c8:88:
                    1b:40:97:ca:27:c0:c6:e2:7f:5c:f4:47:f5:97:8d:
                    57:49:69:24:fc:73:47:62:e4:dd:ed:2f:07:99:d6:
                    54:b5:1d:d7:74:df:1f:1a:77:16:fb:31:51:88:bb:
                    e3:37:06:54:b4:4d:b1:c7:e4:b0:29:0e:aa:90:91:
                    e5:95:e6:0d:a7:d5:3a:58:8d:20:73:c9:03:41:36:
                    da:2d:37:dd:d7:f8:99:84:84:5b:9a:13:a4:29:12:
                    2b:9d:04:25:94:fb:8e:5f:ee:8d:55:81:2c:5c:83:
                    95:3a:6e:17:1f:46:81:90:6d:67:77:b2:87:12:86:
                    e9:3d:4f:fd:a5:cb:57:5e:da:06:5d:59:c6:ed:f4:
                    e8:33:ac:0b:3e:f6:13:f7:9a:c8:0b:d1:07:be:72:
                    60:38:ca:dc:70:e9:2f:3b:52:0c:79:ee:65:1b:56:
                    e0:27:af:56:d6:b9:52:86:03:fd:01:4e:24:f9:f1:
                    8b:b4:bb:62:6b:28:91:f5:1e:7e:69:58:f1:17:3d:
                    00:3e:fb:e5:28:82:d6:8f:a8:4c:60:41:07:be:b2:
                    54:31:a8:14:e8:f0:59:62:c4:74:66:d4:da:a3:25:
                    14:c7:21:69:5e:8f:4f:4d:2e:76:6b:8e:94:7e:54:
                    89:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:28:F5:DC:0E:9A:6E:93:E3:23:DE:A2:87:7D:C2:0D:E1:D3:03:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/68d1a941-51ad-3750-8235-b215425c89f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/d512566a-2d54-474a-a1b0-93c74d4f7e45.crl

            X509v3 Authority Key Identifier:
                keyid:1F:FA:6D:95:AF:5A:0B:BF:31:14:4C:3C:C6:AF:E5:51:0F:41:55:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.245.8.0-167.245.39.255
                  167.245.54.0-167.245.59.255
                  167.245.62.0-167.245.79.255
                  167.245.88.0/21
                  167.245.104.0/22
                  167.245.139.0/24
                  167.245.160.0/19
                  167.245.243.0/24
                  167.245.245.0/24
                  167.245.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:c3:a7:36:4f:6c:85:a0:84:3f:d4:ee:a3:71:78:20:7b:ed:
         d4:eb:e0:ae:36:7a:5d:bf:2e:d5:aa:b9:33:f6:54:bb:a7:15:
         87:c5:2b:2f:38:3b:6f:b6:53:53:54:40:b5:28:4e:b3:c4:e5:
         11:6e:0c:45:25:e2:94:f3:f5:ce:7b:63:89:54:59:5e:54:c7:
         c5:04:fe:c4:b7:46:78:84:5e:5f:29:1d:57:00:a6:cd:ea:cd:
         eb:a9:4f:be:55:b5:4b:51:c6:16:b4:53:5b:fd:df:a6:bc:c4:
         bd:9a:ce:cd:7f:a6:94:cb:38:84:71:07:a6:46:cd:e3:d2:63:
         f8:bb:91:a9:a2:28:74:7e:eb:84:d2:f2:23:0a:2e:26:56:61:
         86:a0:2b:7a:8a:1d:ed:d0:98:4a:94:8a:5d:2e:39:2e:75:3a:
         5f:b0:09:6d:d8:00:db:a7:86:98:49:5a:3a:87:ba:86:5e:da:
         36:38:06:c0:cf:d9:7c:3e:f3:ee:63:68:d7:68:70:c4:fd:72:
         c6:e5:6a:39:e7:48:19:56:38:fb:5d:fb:2b:26:aa:58:3f:20:
         ab:e7:d4:d5:6a:9a:c2:87:b4:bd:fa:c4:fd:22:e4:c8:99:b5:
         5e:7e:86:b8:67:a3:37:a4:78:51:1e:12:2a:a7:e5:b6:08:4e:
         f7:50:db:d6
-----BEGIN CERTIFICATE-----
MIIGkTCCBXmgAwIBAgIUAQ0Mn0MoWE1xpQ7DWW/p+yxDH0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDUxMjU2NmEtMmQ1NC00NzRhLWExYjAtOTNjNzRkNGY3
ZTQ1MB4XDTI2MDQwOTAxMDAyM1oXDTI2MDcwODAxMDAyM1owLzEtMCsGA1UEAxMk
ZTJiZjllNTMtMzE3MC00ZmY4LWJlZWItOTUyNWJmYTQyY2VhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPAZq92Ee/tXkiJgyIgbQJfKJ8DG4n9c9Ef1
l41XSWkk/HNHYuTd7S8HmdZUtR3XdN8fGncW+zFRiLvjNwZUtE2xx+SwKQ6qkJHl
leYNp9U6WI0gc8kDQTbaLTfd1/iZhIRbmhOkKRIrnQQllPuOX+6NVYEsXIOVOm4X
H0aBkG1nd7KHEobpPU/9pctXXtoGXVnG7fToM6wLPvYT95rIC9EHvnJgOMrccOkv
O1IMee5lG1bgJ69W1rlShgP9AU4k+fGLtLtiayiR9R5+aVjxFz0APvvlKILWj6hM
YEEHvrJUMagU6PBZYsR0ZtTaoyUUxyFpXo9PTS52a46UflSJdwIDAQABo4IDozCC
A58wHQYDVR0OBBYEFH4o9dwOmm6T4yPeood9wg3h0wOFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kNTEy
NTY2YS0yZDU0LTQ3NGEtYTFiMC05M2M3NGQ0ZjdlNDUvNjhkMWE5NDEtNTFhZC0z
NzUwLTgyMzUtYjIxNTQyNWM4OWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZDUxMjU2NmEtMmQ1NC00NzRhLWEx
YjAtOTNjNzRkNGY3ZTQ1L2Q1MTI1NjZhLTJkNTQtNDc0YS1hMWIwLTkzYzc0ZDRm
N2U0NS5jcmwwHwYDVR0jBBgwFoAUH/ptla9aC78xFEw8xq/lUQ9BVfYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9kNTEyNTY2YS0yZDU0LTQ3NGEtYTFiMC05M2M3
NGQ0ZjdlNDUuY2VyMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUMAwDBAOn9QgD
BAOn9SAwDAMEAaf1NgMEAqf1ODAMAwQBp/U+AwQEp/VAAwQDp/VYAwQCp/VoAwQA
p/WLAwQFp/WgAwQAp/XzAwQAp/X1AwQAp/X3MFQGA1UdIAEB/wRKMEgwRgYIKwYB
BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy
Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAITDpzZPbIWghD/U
7qNxeCB77dTr4K42el2/LtWquTP2VLunFYfFKy84O2+2U1NUQLUoTrPE5RFuDEUl
4pTz9c57Y4lUWV5Ux8UE/sS3RniEXl8pHVcAps3qzeupT75VtUtRxha0U1v936a8
xL2azs1/ppTLOIRxB6ZGzePSY/i7kamiKHR+64TS8iMKLiZWYYagK3qKHe3QmEqU
il0uOS51Ol+wCW3YANunhphJWjqHuoZe2jY4BsDP2Xw+8+5jaNdocMT9csblajnn
SBlWOPtd+ysmqlg/IKvn1NVqmsKHtL36xP0i5MiZtV5+hrhnozekeFEeEiqn5bYI
TvdQ29Y=
-----END CERTIFICATE-----
Generated at Sat Apr 18 00:05:00 2026 by rpki-client