Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/b009589d-c2ae-3e7c-ae62-0db5040f93ee.roa
File:                     b009589d-c2ae-3e7c-ae62-0db5040f93ee.roa (raw, json)
Hash identifier:          CoYWNoCImP05Z5f0zoc2jdgFBAYI5C7+cVMwiV30dL0=
Subject key identifier:   D6:0D:1D:9E:00:1A:61:46:F2:F7:B8:AD:78:58:6E:E6:18:55:E7:26
Certificate issuer:       /CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d
Certificate serial:       010D0C9F4328584E9A7FD0CD63FA882B02CF1D80
Authority key identifier: BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/b009589d-c2ae-3e7c-ae62-0db5040f93ee.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     19905
IP address blocks:        198.174.212.0/23 maxlen: 24
                          198.174.214.0/23 maxlen: 24
                          204.221.17.0/24 maxlen: 24
                          204.221.18.0/23 maxlen: 24
                          204.221.144.0/22 maxlen: 24
                          206.9.80.0/24 maxlen: 24
                          206.145.178.0/23 maxlen: 24
                          206.145.224.0/23 maxlen: 24
                          206.146.48.0/22 maxlen: 24
                          209.32.64.0/21 maxlen: 24
                          209.32.112.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:d0:cd:63:fa:88:2b:02:cf:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=75f85688-828a-4bc4-899f-dc3d433dd6ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:21:e5:d0:3a:1f:f1:a3:49:c1:f7:b0:08:84:
                    63:6a:f4:21:b0:e4:fa:56:f2:79:cb:ea:94:a3:ed:
                    00:b9:b4:4b:93:eb:63:f7:b9:e2:9d:5b:d2:73:4b:
                    0a:6b:a7:7c:68:42:61:11:f7:ca:79:58:7a:30:57:
                    3a:c5:4f:4a:d5:8c:56:26:22:9e:fe:68:e4:fa:f9:
                    12:11:6d:b8:c5:65:20:3e:a3:a7:43:31:be:6b:d7:
                    ff:c4:37:4e:67:3d:25:ff:bf:ba:87:9a:2b:ec:fa:
                    41:45:9b:3e:df:0e:23:56:dc:7f:23:64:06:07:ef:
                    8f:57:69:f6:12:28:3d:9e:ef:7d:22:e6:04:da:fa:
                    43:a2:06:e8:41:cf:d1:6d:b9:0b:cd:a0:42:85:a3:
                    d0:9b:e7:70:1f:05:a9:80:48:40:8e:59:67:28:f5:
                    f3:e9:bd:8a:8a:f2:ce:3e:a1:42:f9:85:5f:e7:9e:
                    a7:3f:59:8a:62:13:72:d3:84:8d:84:ee:92:cb:b4:
                    e2:5d:9a:72:64:8c:0c:e2:64:a2:19:c8:d2:0b:46:
                    b2:f2:f1:7a:7a:ed:3d:5e:82:8e:52:e1:71:2d:eb:
                    48:05:45:c5:c8:b4:4d:b9:5e:73:f3:ca:6d:fd:5e:
                    c9:42:c9:6b:c7:de:da:f9:10:ad:1c:1f:bc:f4:73:
                    24:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:0D:1D:9E:00:1A:61:46:F2:F7:B8:AD:78:58:6E:E6:18:55:E7:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/b009589d-c2ae-3e7c-ae62-0db5040f93ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl

            X509v3 Authority Key Identifier:
                keyid:BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.174.212.0/22
                  204.221.17.0-204.221.19.255
                  204.221.144.0/22
                  206.9.80.0/24
                  206.145.178.0/23
                  206.145.224.0/23
                  206.146.48.0/22
                  209.32.64.0/21
                  209.32.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:db:cb:c5:9d:40:1f:7d:d4:ba:fa:d9:80:12:e0:8d:bc:6d:
         77:a6:e5:f7:84:1e:73:be:e5:9e:6f:e9:aa:60:8b:d3:a4:bc:
         67:76:42:19:38:4c:f7:c6:35:58:2b:d1:9e:87:18:44:56:fa:
         3f:07:a2:ca:ba:03:b8:d1:c1:d8:1d:2a:a3:82:13:73:06:7d:
         85:e0:1f:e5:b5:b8:06:68:1b:b4:d1:24:e4:57:c1:ed:21:29:
         91:50:9b:b6:00:17:67:ec:ac:8f:dc:e1:19:98:f9:7e:b4:80:
         98:20:83:4c:fe:76:f5:37:23:5c:90:3d:6a:73:f1:7a:60:7f:
         f2:a0:f5:ec:9d:82:cc:66:e6:f8:94:3a:86:cb:25:a5:9d:1f:
         41:95:33:23:bd:4d:b4:63:f6:23:1a:cf:ac:7b:29:91:42:7b:
         8e:19:4c:3d:d6:64:c5:d3:f1:87:ef:8c:1f:3d:e1:aa:df:6e:
         d6:46:d6:8d:df:f2:38:56:d2:2d:c9:96:b0:50:af:57:e8:0e:
         10:de:c2:6c:db:30:c8:6f:25:d8:1c:2b:a7:7a:a1:9e:57:5b:
         4f:c2:d1:37:1c:38:ed:fa:64:73:f1:25:49:a5:60:a6:f2:b0:
         0e:a1:b2:8d:4b:30:b9:30:e2:16:07:35:f8:34:9f:8e:ce:60:
         48:10:a8:4c
-----BEGIN CERTIFICATE-----
MIIGezCCBWOgAwIBAgIUAQ0Mn0MoWE6af9DNY/qIKwLPHYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGJjNDFkNTUtOWNiZC00MDNlLTlmYTctYTMzMzRmMWVk
ZTNkMB4XDTI2MDcyNDA5MDAxMloXDTI2MTAyMjA5MDAxMlowLzEtMCsGA1UEAxMk
NzVmODU2ODgtODI4YS00YmM0LTg5OWYtZGMzZDQzM2RkNmNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSHl0Dof8aNJwfewCIRjavQhsOT6VvJ5y+qU
o+0AubRLk+tj97ninVvSc0sKa6d8aEJhEffKeVh6MFc6xU9K1YxWJiKe/mjk+vkS
EW24xWUgPqOnQzG+a9f/xDdOZz0l/7+6h5or7PpBRZs+3w4jVtx/I2QGB++PV2n2
Eig9nu99IuYE2vpDogboQc/RbbkLzaBChaPQm+dwHwWpgEhAjllnKPXz6b2KivLO
PqFC+YVf556nP1mKYhNy04SNhO6Sy7TiXZpyZIwM4mSiGcjSC0ay8vF6eu09XoKO
UuFxLetIBUXFyLRNuV5z88pt/V7JQslrx97a+RCtHB+89HMkowIDAQABo4IDjTCC
A4kwHQYDVR0OBBYEFNYNHZ4AGmFG8ve4rXhYbuYYVecmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYmM0
MWQ1NS05Y2JkLTQwM2UtOWZhNy1hMzMzNGYxZWRlM2QvYjAwOTU4OWQtYzJhZS0z
ZTdjLWFlNjItMGRiNTA0MGY5M2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGJjNDFkNTUtOWNiZC00MDNlLTlm
YTctYTMzMzRmMWVkZTNkL2RiYzQxZDU1LTljYmQtNDAzZS05ZmE3LWEzMzM0ZjFl
ZGUzZC5jcmwwHwYDVR0jBBgwFoAUvQmQei2aL1ZlthZM7CRjivLSCZwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kYmM0MWQ1NS05Y2JkLTQwM2UtOWZhNy1hMzMz
NGYxZWRlM2QuY2VyMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQCxq7UMAwD
BADM3REDBALM3RADBALM3ZADBADOCVADBAHOkbIDBAHOkeADBALOkjADBAPRIEAD
BAPRIHAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAn9vLxZ1AH33UuvrZgBLgjbxtd6bl94Qec77lnm/pqmCL
06S8Z3ZCGThM98Y1WCvRnocYRFb6PweiyroDuNHB2B0qo4ITcwZ9heAf5bW4Bmgb
tNEk5FfB7SEpkVCbtgAXZ+ysj9zhGZj5frSAmCCDTP529TcjXJA9anPxemB/8qD1
7J2CzGbm+JQ6hsslpZ0fQZUzI71NtGP2IxrPrHspkUJ7jhlMPdZkxdPxh++MHz3h
qt9u1kbWjd/yOFbSLcmWsFCvV+gOEN7CbNswyG8l2Bwrp3qhnldbT8LRNxw47fpk
c/ElSaVgpvKwDqGyjUswuTDiFgc1+DSfjs5gSBCoTA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:23:07 2026 by rpki-client