Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/5b036da1-7aaf-32b5-ad5c-5caff71c8950.roa
File:                     5b036da1-7aaf-32b5-ad5c-5caff71c8950.roa (raw, json)
Hash identifier:          NIpnA1uvzvktS2gSuD+/r5XQLRW0jaa9N+bLsYCUrmY=
Subject key identifier:   08:08:F4:7D:2D:7B:84:5F:A0:39:09:EB:0F:43:6D:CF:74:EE:DA:73
Certificate issuer:       /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00
Certificate serial:       010D0C9F4328584E07008BEDB212F4D6CC6AC1C0
Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/5b036da1-7aaf-32b5-ad5c-5caff71c8950.roa
Signing time:             Mon 01 Jun 2026 13:00:10 +0000
ROA not before:           Mon 01 Jun 2026 13:00:10 +0000
ROA not after:            Sun 30 Aug 2026 13:00:10 +0000
asID:                     32035
IP address blocks:        66.43.92.0/24 maxlen: 24
                          66.43.96.0/23 maxlen: 24
                          66.43.98.0/24 maxlen: 24
                          66.43.101.0/24 maxlen: 24
                          66.43.105.0/24 maxlen: 24
                          66.43.106.0/24 maxlen: 24
                          66.43.108.0/24 maxlen: 24
                          66.43.110.0/24 maxlen: 24
                          66.43.112.0/21 maxlen: 24
                          69.28.96.0/19 maxlen: 24
                          69.168.192.0/19 maxlen: 24
                          69.170.160.0/19 maxlen: 24
                          74.85.0.0/19 maxlen: 24
                          207.232.80.0/20 maxlen: 24
                          209.141.64.0/19 maxlen: 24
                          209.141.96.0/20 maxlen: 24
                          2607:f778::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:07:00:8b:ed:b2:12:f4:d6:cc:6a:c1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00
        Validity
            Not Before: Jun  1 13:00:10 2026 GMT
            Not After : Aug 30 13:00:10 2026 GMT
        Subject: CN=c38761c6-26a4-43f5-aca3-e1b5742f8e66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a5:c1:61:f3:b6:93:13:0b:b8:73:5e:c9:0a:
                    9b:b3:b7:9c:e9:36:8d:31:69:59:49:00:76:4a:1c:
                    c0:03:f4:3d:c6:32:46:2c:80:8f:6d:14:10:ac:90:
                    f8:cd:0e:f2:44:e1:df:fc:8c:92:81:17:65:98:9d:
                    da:72:17:34:32:19:27:93:a1:b2:f9:dd:11:25:0f:
                    03:d0:d1:96:ef:e1:fd:1f:48:46:af:f7:3e:78:fb:
                    72:af:36:88:40:84:f4:66:26:8f:12:75:fa:f9:30:
                    e4:93:fe:01:59:6b:0b:5e:fe:d3:f5:b3:3a:ae:0d:
                    c0:3a:95:e2:dd:47:b6:cd:17:cc:c1:13:f3:64:b7:
                    0c:aa:53:e2:13:31:66:74:27:c8:30:c0:92:ac:3b:
                    c2:75:bd:a8:0b:e5:e8:0e:97:4d:96:87:c1:4a:0d:
                    46:1e:86:97:54:62:5b:e1:1f:7e:ef:1a:e6:9c:c1:
                    71:db:9b:77:d5:67:50:2f:f5:9c:45:02:1b:48:0a:
                    79:57:4c:2d:8d:85:a1:36:97:ae:76:a5:04:e7:25:
                    a4:c4:d8:a3:b8:6b:5a:ff:50:b9:48:5d:6e:98:cd:
                    d5:53:3b:ee:bd:ac:95:08:92:4a:c5:c1:cf:76:89:
                    53:f4:70:b1:9f:b0:64:f6:4d:2f:95:35:5b:1d:0f:
                    dc:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:08:F4:7D:2D:7B:84:5F:A0:39:09:EB:0F:43:6D:CF:74:EE:DA:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/5b036da1-7aaf-32b5-ad5c-5caff71c8950.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl

            X509v3 Authority Key Identifier:
                keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.43.92.0/24
                  66.43.96.0-66.43.98.255
                  66.43.101.0/24
                  66.43.105.0-66.43.106.255
                  66.43.108.0/24
                  66.43.110.0/24
                  66.43.112.0/21
                  69.28.96.0/19
                  69.168.192.0/19
                  69.170.160.0/19
                  74.85.0.0/19
                  207.232.80.0/20
                  209.141.64.0-209.141.111.255
                IPv6:
                  2607:f778::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:da:5d:97:ed:55:94:21:db:36:2e:61:6b:ae:17:ce:a1:60:
         9a:1b:5e:76:bb:54:54:6f:ae:75:37:e2:4a:bb:d8:a6:b8:19:
         a5:9d:fc:b4:88:aa:87:e2:85:b8:41:98:6a:36:19:3a:2d:89:
         00:47:b5:26:47:10:ae:d6:51:84:0c:e3:4e:76:01:7c:21:8d:
         5a:70:fe:85:a0:af:8f:6b:d2:6f:ae:76:01:7c:ac:dc:1f:a4:
         76:05:48:c2:a1:a9:4a:1b:59:b2:10:7e:36:f3:c6:a4:91:50:
         3a:df:f6:fc:32:c0:65:53:50:6a:3d:a0:17:9c:d1:64:49:70:
         7a:51:72:13:51:dc:76:4c:a1:c2:df:e5:ee:23:e2:1a:fc:7c:
         07:bf:f3:9e:ad:82:35:42:b5:b4:3a:53:80:55:81:6d:26:2e:
         97:3e:ae:80:7c:19:16:ec:67:63:d0:4a:9d:ca:8e:5b:08:1e:
         d2:4e:6d:e7:19:1b:a3:0b:82:5e:61:ac:20:d8:61:e9:70:22:
         70:58:ba:98:a3:d7:3b:cd:98:de:ba:98:94:5c:f8:af:05:e1:
         38:b7:f3:33:ce:a0:62:a0:8c:66:f6:42:3a:81:4e:9f:61:d6:
         9c:23:38:cd:c8:0f:41:c7:dd:35:5a:e9:79:56:05:a4:5f:36:
         9e:f4:9e:4b
-----BEGIN CERTIFICATE-----
MIIGszCCBZugAwIBAgIUAQ0Mn0MoWE4HAIvtshL01sxqwcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGI4MWM5MjgtMDhjYy00MjM0LWIxNWMtMGYxYTE5N2M2
ZTAwMB4XDTI2MDYwMTEzMDAxMFoXDTI2MDgzMDEzMDAxMFowLzEtMCsGA1UEAxMk
YzM4NzYxYzYtMjZhNC00M2Y1LWFjYTMtZTFiNTc0MmY4ZTY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKXBYfO2kxMLuHNeyQqbs7ec6TaNMWlZSQB2
ShzAA/Q9xjJGLICPbRQQrJD4zQ7yROHf/IySgRdlmJ3achc0Mhknk6Gy+d0RJQ8D
0NGW7+H9H0hGr/c+ePtyrzaIQIT0ZiaPEnX6+TDkk/4BWWsLXv7T9bM6rg3AOpXi
3Ue2zRfMwRPzZLcMqlPiEzFmdCfIMMCSrDvCdb2oC+XoDpdNlofBSg1GHoaXVGJb
4R9+7xrmnMFx25t31WdQL/WcRQIbSAp5V0wtjYWhNpeudqUE5yWkxNijuGta/1C5
SF1umM3VUzvuvayVCJJKxcHPdolT9HCxn7Bk9k0vlTVbHQ/cswIDAQABo4IDxTCC
A8EwHQYDVR0OBBYEFAgI9H0te4RfoDkJ6w9Dbc907tpzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yjgx
YzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFhMTk3YzZlMDAvNWIwMzZkYTEtN2FhZi0z
MmI1LWFkNWMtNWNhZmY3MWM4OTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGI4MWM5MjgtMDhjYy00MjM0LWIx
NWMtMGYxYTE5N2M2ZTAwLzRiODFjOTI4LTA4Y2MtNDIzNC1iMTVjLTBmMWExOTdj
NmUwMC5jcmwwHwYDVR0jBBgwFoAUGyJ1omrTZEyFY4Te69BMVmcuyJswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80YjgxYzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFh
MTk3YzZlMDAuY2VyMIGOBggrBgEFBQcBBwEB/wR/MH0wbAQCAAEwZgMEAEIrXDAM
AwQFQitgAwQAQitiAwQAQitlMAwDBABCK2kDBABCK2oDBABCK2wDBABCK24DBANC
K3ADBAVFHGADBAVFqMADBAVFqqADBAVKVQADBATP6FAwDAMEBtGNQAMEBNGNYDAN
BAIAAjAHAwUAJgf3eDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAU2l2X7VWUIds2LmFrrhfOoWCaG152u1RU
b651N+JKu9imuBmlnfy0iKqH4oW4QZhqNhk6LYkAR7UmRxCu1lGEDONOdgF8IY1a
cP6FoK+Pa9JvrnYBfKzcH6R2BUjCoalKG1myEH4288akkVA63/b8MsBlU1BqPaAX
nNFkSXB6UXITUdx2TKHC3+XuI+Ia/HwHv/OerYI1QrW0OlOAVYFtJi6XPq6AfBkW
7Gdj0Eqdyo5bCB7STm3nGRujC4JeYawg2GHpcCJwWLqYo9c7zZjeupiUXPivBeE4
t/MzzqBioIxm9kI6gU6fYdacIzjNyA9Bx901Wul5VgWkXzae9J5L
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:03:56 2026 by rpki-client