Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0/60b0efca-2ff2-35d3-bccd-0cd0eb1fa0b0.roa
File:                     60b0efca-2ff2-35d3-bccd-0cd0eb1fa0b0.roa (raw, json)
Hash identifier:          mlUzeVBsgqkjG5W3GhChjlAhPB/IxbGzgAn6d/n/FMw=
Subject key identifier:   31:E1:31:20:39:CB:36:1C:EA:08:7C:E7:BC:88:4D:B1:45:21:90:C4
Certificate issuer:       /CN=31663e0d-961a-43ac-8a01-d43efc01bea0
Certificate serial:       010D0C9F4328584D7F9A87954AF0B56E843C0C00
Authority key identifier: 7B:F3:59:98:1D:7C:59:F4:71:50:EF:F2:7C:BA:A7:98:14:DA:40:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0/60b0efca-2ff2-35d3-bccd-0cd0eb1fa0b0.roa
Signing time:             Tue 14 Apr 2026 01:00:24 +0000
ROA not before:           Tue 14 Apr 2026 01:00:24 +0000
ROA not after:            Mon 13 Jul 2026 01:00:24 +0000
asID:                     395555
IP address blocks:        170.10.64.0/22 maxlen: 24
                          170.10.72.0/24 maxlen: 24
                          170.10.84.0/22 maxlen: 24
                          209.206.64.0/19 maxlen: 24
                          2604:4c40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0/31663e0d-961a-43ac-8a01-d43efc01bea0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0/31663e0d-961a-43ac-8a01-d43efc01bea0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7f:9a:87:95:4a:f0:b5:6e:84:3c:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31663e0d-961a-43ac-8a01-d43efc01bea0
        Validity
            Not Before: Apr 14 01:00:24 2026 GMT
            Not After : Jul 13 01:00:24 2026 GMT
        Subject: CN=b9a740a3-f9ca-4b1b-a193-387d24690489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6f:52:7a:ae:14:80:2d:6a:c4:b1:d9:ed:72:
                    1f:b2:4a:2f:86:02:69:83:8d:4c:f0:5e:f0:ca:3b:
                    e1:a4:b0:db:63:d3:30:4a:5c:d6:90:72:5a:b4:13:
                    19:40:c0:5e:81:b9:02:86:10:f6:97:13:27:2e:40:
                    61:20:bf:8d:c4:4e:87:ca:8b:b7:dd:26:b3:f0:67:
                    51:b2:45:26:6f:d4:3b:cd:40:7d:75:ee:44:81:4b:
                    0a:30:e3:12:45:a6:31:dc:6d:5d:48:c9:d9:51:82:
                    e8:1f:42:d8:23:b1:56:d1:4d:3a:ed:15:63:2f:03:
                    19:8b:fd:a8:b1:1b:85:c8:02:f3:88:d0:08:bc:c4:
                    f7:c6:52:d0:7f:e8:c1:e0:74:65:58:aa:ac:ed:95:
                    52:1a:2b:6f:a0:40:37:87:c6:b9:ab:2a:48:ce:d9:
                    e2:58:ba:b3:d5:a0:07:fe:60:76:ba:b6:53:ed:e1:
                    50:b0:2c:36:a9:d4:f7:0b:6a:a5:d4:20:6f:3e:e5:
                    06:99:f9:5b:e5:43:61:5f:6f:ba:ab:aa:6b:a8:34:
                    45:54:7a:3f:61:9e:f7:1f:05:ec:a2:96:78:09:3a:
                    5f:03:20:1a:ac:ec:c1:8c:84:89:f5:69:c9:ba:1f:
                    d8:d3:af:4e:b5:de:57:94:77:f3:05:d5:9c:d9:6f:
                    cc:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:E1:31:20:39:CB:36:1C:EA:08:7C:E7:BC:88:4D:B1:45:21:90:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0/60b0efca-2ff2-35d3-bccd-0cd0eb1fa0b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0/31663e0d-961a-43ac-8a01-d43efc01bea0.crl

            X509v3 Authority Key Identifier:
                keyid:7B:F3:59:98:1D:7C:59:F4:71:50:EF:F2:7C:BA:A7:98:14:DA:40:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.10.64.0/22
                  170.10.72.0/24
                  170.10.84.0/22
                  209.206.64.0/19
                IPv6:
                  2604:4c40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:59:24:4f:ed:25:ef:d7:41:66:0d:08:a8:17:70:79:85:6e:
         b4:83:67:32:68:78:ff:e5:fb:a5:f9:0e:85:ae:be:35:e8:5f:
         20:81:9d:6f:18:89:a8:11:36:4b:08:a7:92:83:1b:91:cd:0f:
         f9:21:4b:0e:30:49:60:89:d7:c0:d3:90:a7:9b:eb:fa:c3:94:
         4f:69:fe:ec:07:cd:4f:aa:5e:96:83:cc:0f:b6:16:d2:74:ac:
         43:d1:a7:25:c8:26:31:f1:4e:31:11:1c:b1:d9:93:a4:3f:a6:
         28:90:f2:01:d5:79:2f:53:3f:f7:84:f2:d8:7d:8e:56:a4:c4:
         63:07:7e:ab:b4:a3:5a:c3:78:8f:03:d5:29:a4:2f:f1:80:5e:
         43:ca:69:13:99:9a:1d:9c:77:22:fe:4b:33:8b:b8:bc:72:dd:
         a5:41:f1:f0:59:93:98:4a:48:7e:a9:59:c7:45:ec:46:8d:5d:
         75:78:1c:cb:5d:47:bb:ca:c0:1b:0e:6a:03:09:5b:cb:00:3c:
         c2:5b:ce:35:dd:dd:8d:46:e2:09:cf:b7:a0:c0:93:e0:65:18:
         9b:3a:15:64:20:6d:6e:43:d1:98:ba:6e:4e:25:d4:93:54:23:
         8c:95:f3:07:b9:7a:1e:ba:1f:1d:c5:34:09:1c:87:50:3a:a9:
         e0:9c:e6:2e
-----BEGIN CERTIFICATE-----
MIIGZDCCBUygAwIBAgIUAQ0Mn0MoWE1/moeVSvC1boQ8DAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzE2NjNlMGQtOTYxYS00M2FjLThhMDEtZDQzZWZjMDFi
ZWEwMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk
YjlhNzQwYTMtZjljYS00YjFiLWExOTMtMzg3ZDI0NjkwNDg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0G9Seq4UgC1qxLHZ7XIfskovhgJpg41M8F7w
yjvhpLDbY9MwSlzWkHJatBMZQMBegbkChhD2lxMnLkBhIL+NxE6Hyou33Saz8GdR
skUmb9Q7zUB9de5EgUsKMOMSRaYx3G1dSMnZUYLoH0LYI7FW0U067RVjLwMZi/2o
sRuFyALziNAIvMT3xlLQf+jB4HRlWKqs7ZVSGitvoEA3h8a5qypIztniWLqz1aAH
/mB2urZT7eFQsCw2qdT3C2ql1CBvPuUGmflb5UNhX2+6q6prqDRFVHo/YZ73HwXs
opZ4CTpfAyAarOzBjISJ9WnJuh/Y069Otd5XlHfzBdWc2W/MKwIDAQABo4IDdjCC
A3IwHQYDVR0OBBYEFDHhMSA5yzYc6gh857yITbFFIZDEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zMTY2
M2UwZC05NjFhLTQzYWMtOGEwMS1kNDNlZmMwMWJlYTAvNjBiMGVmY2EtMmZmMi0z
NWQzLWJjY2QtMGNkMGViMWZhMGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMzE2NjNlMGQtOTYxYS00M2FjLThh
MDEtZDQzZWZjMDFiZWEwLzMxNjYzZTBkLTk2MWEtNDNhYy04YTAxLWQ0M2VmYzAx
YmVhMC5jcmwwHwYDVR0jBBgwFoAUe/NZmB18WfRxUO/yfLqnmBTaQIAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8zMTY2M2UwZC05NjFhLTQzYWMtOGEwMS1kNDNl
ZmMwMWJlYTAuY2VyMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCqgpAAwQA
qgpIAwQCqgpUAwQF0c5AMA0EAgACMAcDBQAmBExAMFQGA1UdIAEB/wRKMEgwRgYI
KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz
b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABZZJE/tJe/X
QWYNCKgXcHmFbrSDZzJoeP/l+6X5DoWuvjXoXyCBnW8YiagRNksIp5KDG5HND/kh
Sw4wSWCJ18DTkKeb6/rDlE9p/uwHzU+qXpaDzA+2FtJ0rEPRpyXIJjHxTjERHLHZ
k6Q/piiQ8gHVeS9TP/eE8th9jlakxGMHfqu0o1rDeI8D1SmkL/GAXkPKaROZmh2c
dyL+SzOLuLxy3aVB8fBZk5hKSH6pWcdF7EaNXXV4HMtdR7vKwBsOagMJW8sAPMJb
zjXd3Y1G4gnPt6DAk+BlGJs6FWQgbW5D0Zi6bk4l1JNUI4yV8we5eh66Hx3FNAkc
h1A6qeCc5i4=
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:37:33 2026 by rpki-client