Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad5465a2-82c8-4447-b6da-7cabc017e3a9/c24db57b-191a-3c0d-9ec9-9b6fa7f1d67e.roa
File:                     c24db57b-191a-3c0d-9ec9-9b6fa7f1d67e.roa (raw, json)
Hash identifier:          e+G/zePPrj4S/cFfBvka/BpFGdf4yDfydtRhegWFsFE=
Subject key identifier:   99:A3:5B:A1:68:0A:0B:E2:B3:27:7B:F1:B8:79:2F:7E:03:33:75:DD
Certificate issuer:       /CN=ad5465a2-82c8-4447-b6da-7cabc017e3a9
Certificate serial:       010D0C9F4328584EF18208A55176824023B47E00
Authority key identifier: 56:FA:4F:52:D3:E4:B6:52:26:99:0B:FB:CF:CD:F8:A1:5C:63:E4:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad5465a2-82c8-4447-b6da-7cabc017e3a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad5465a2-82c8-4447-b6da-7cabc017e3a9/c24db57b-191a-3c0d-9ec9-9b6fa7f1d67e.roa
Signing time:             Mon 24 Aug 2026 13:00:12 +0000
ROA not before:           Mon 24 Aug 2026 13:00:12 +0000
ROA not after:            Sun 22 Nov 2026 14:00:12 +0000
asID:                     394911
IP address blocks:        64.66.244.0/22 maxlen: 24
                          172.82.12.0/22 maxlen: 24
                          206.183.136.0/22 maxlen: 24
                          207.90.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad5465a2-82c8-4447-b6da-7cabc017e3a9/ad5465a2-82c8-4447-b6da-7cabc017e3a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad5465a2-82c8-4447-b6da-7cabc017e3a9/ad5465a2-82c8-4447-b6da-7cabc017e3a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad5465a2-82c8-4447-b6da-7cabc017e3a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f1:82:08:a5:51:76:82:40:23:b4:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad5465a2-82c8-4447-b6da-7cabc017e3a9
        Validity
            Not Before: Aug 24 13:00:12 2026 GMT
            Not After : Nov 22 14:00:12 2026 GMT
        Subject: CN=117d1b84-e012-46c8-b622-b6b87d1f750f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:66:51:79:41:e1:fd:32:7e:4e:e4:c3:a2:04:
                    a4:6b:bc:70:3c:2f:3a:61:48:03:fb:c6:65:ee:b2:
                    bc:c7:19:c6:d1:69:d1:5b:34:83:ef:a6:23:6c:19:
                    21:91:77:6b:bc:94:16:7c:4b:45:ed:27:be:da:0d:
                    0c:af:12:0c:53:cc:0a:b3:49:a6:b8:83:99:fb:8a:
                    19:48:fb:a8:43:39:15:5e:89:be:15:38:9d:1f:a8:
                    ec:a1:17:88:69:9a:cf:49:b0:b9:09:37:f1:2a:a2:
                    ce:86:d1:a4:25:85:6b:15:e6:ff:d2:7e:75:e8:14:
                    bf:85:df:21:f4:0d:5f:a1:1f:5e:7b:b3:73:a0:63:
                    77:4a:2c:39:90:16:96:0f:a6:e3:5a:32:53:3c:54:
                    c0:8f:ab:ec:55:1d:52:82:2e:ff:8a:a8:c7:e2:6a:
                    a1:46:25:00:dd:03:09:9a:c9:64:f4:10:2d:d5:b5:
                    f3:8a:1d:33:55:a8:4e:fa:9f:0e:a0:65:34:d8:ec:
                    6d:ac:99:31:c3:56:12:cf:fd:2a:ce:da:de:61:78:
                    4f:f1:e1:81:50:0b:01:69:e8:da:ff:0b:c8:21:a6:
                    fe:e3:a0:8d:fb:1f:dc:1a:ee:76:b6:33:06:b1:3e:
                    91:05:7b:d4:04:a5:f8:63:60:85:4f:21:dc:05:be:
                    06:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:A3:5B:A1:68:0A:0B:E2:B3:27:7B:F1:B8:79:2F:7E:03:33:75:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad5465a2-82c8-4447-b6da-7cabc017e3a9/c24db57b-191a-3c0d-9ec9-9b6fa7f1d67e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad5465a2-82c8-4447-b6da-7cabc017e3a9/ad5465a2-82c8-4447-b6da-7cabc017e3a9.crl

            X509v3 Authority Key Identifier:
                keyid:56:FA:4F:52:D3:E4:B6:52:26:99:0B:FB:CF:CD:F8:A1:5C:63:E4:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad5465a2-82c8-4447-b6da-7cabc017e3a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.66.244.0/22
                  172.82.12.0/22
                  206.183.136.0/22
                  207.90.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:dd:e3:77:3a:56:8a:ad:ce:70:39:38:91:55:6b:3e:44:b9:
         b1:c0:d1:a8:55:95:ce:e2:9f:a3:45:59:ee:5e:95:e4:c7:de:
         9b:da:fc:d6:14:ce:0c:15:b5:8f:9e:9d:ed:4b:e0:2d:a7:8e:
         2a:ab:cf:fb:db:21:64:09:8d:95:9d:3c:22:30:5f:02:1f:8a:
         49:2f:5f:e8:df:1b:a4:30:26:68:bc:8e:ad:3b:e5:89:5d:19:
         46:db:da:18:bf:04:37:f7:97:d4:7f:bd:6c:88:5d:b0:ea:c4:
         d8:1a:11:ce:36:04:f1:25:ac:9d:87:51:9e:59:72:ba:c3:21:
         40:02:06:ca:1e:0d:fe:46:54:07:d2:60:1d:e7:0e:82:de:76:
         77:6f:e0:1e:68:89:35:3e:0f:9c:7a:d6:8b:ff:8e:f1:83:f8:
         a4:d3:d8:dc:bc:48:bf:6f:58:5a:43:a1:d9:03:31:2d:ec:22:
         fb:bd:8b:e7:e9:2e:1b:21:9f:ee:15:8e:87:4c:94:77:01:fb:
         95:22:bc:b4:8c:71:c8:9b:81:d4:71:3c:ef:81:c7:77:4e:5e:
         ab:7e:21:ce:c3:f0:fe:04:2d:90:7b:50:7c:52:5f:04:17:e3:
         5c:aa:5f:7c:6f:d0:89:14:3c:51:11:7f:e0:86:b2:e4:91:d8:
         75:7a:6d:2a
-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWE7xggilUXaCQCO0fgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWQ1NDY1YTItODJjOC00NDQ3LWI2ZGEtN2NhYmMwMTdl
M2E5MB4XDTI2MDgyNDEzMDAxMloXDTI2MTEyMjE0MDAxMlowLzEtMCsGA1UEAxMk
MTE3ZDFiODQtZTAxMi00NmM4LWI2MjItYjZiODdkMWY3NTBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumZReUHh/TJ+TuTDogSka7xwPC86YUgD+8Zl
7rK8xxnG0WnRWzSD76YjbBkhkXdrvJQWfEtF7Se+2g0MrxIMU8wKs0mmuIOZ+4oZ
SPuoQzkVXom+FTidH6jsoReIaZrPSbC5CTfxKqLOhtGkJYVrFeb/0n516BS/hd8h
9A1foR9ee7NzoGN3Siw5kBaWD6bjWjJTPFTAj6vsVR1Sgi7/iqjH4mqhRiUA3QMJ
mslk9BAt1bXzih0zVahO+p8OoGU02OxtrJkxw1YSz/0qztreYXhP8eGBUAsBaeja
/wvIIab+46CN+x/cGu52tjMGsT6RBXvUBKX4Y2CFTyHcBb4GFQIDAQABo4IDZzCC
A2MwHQYDVR0OBBYEFJmjW6FoCgvisyd78bh5L34DM3XdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hZDU0
NjVhMi04MmM4LTQ0NDctYjZkYS03Y2FiYzAxN2UzYTkvYzI0ZGI1N2ItMTkxYS0z
YzBkLTllYzktOWI2ZmE3ZjFkNjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWQ1NDY1YTItODJjOC00NDQ3LWI2
ZGEtN2NhYmMwMTdlM2E5L2FkNTQ2NWEyLTgyYzgtNDQ0Ny1iNmRhLTdjYWJjMDE3
ZTNhOS5jcmwwHwYDVR0jBBgwFoAUVvpPUtPktlImmQv7z834oVxj5KkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hZDU0NjVhMi04MmM4LTQ0NDctYjZkYS03Y2Fi
YzAxN2UzYTkuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCQEL0AwQC
rFIMAwQCzreIAwQCz1rkMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr
BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz
Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEjd43c6VoqtznA5OJFVaz5EubHA0ahV
lc7in6NFWe5eleTH3pva/NYUzgwVtY+ene1L4C2njiqrz/vbIWQJjZWdPCIwXwIf
ikkvX+jfG6QwJmi8jq075YldGUbb2hi/BDf3l9R/vWyIXbDqxNgaEc42BPElrJ2H
UZ5ZcrrDIUACBsoeDf5GVAfSYB3nDoLedndv4B5oiTU+D5x61ov/jvGD+KTT2Ny8
SL9vWFpDodkDMS3sIvu9i+fpLhshn+4VjodMlHcB+5UivLSMccibgdRxPO+Bx3dO
Xqt+Ic7D8P4ELZB7UHxSXwQX41yqX3xv0IkUPFERf+CGsuSR2HV6bSo=
-----END CERTIFICATE-----
Generated at Mon Sep 21 20:39:29 2026 by rpki-client