Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7d6f0059-7ec3-4f4f-9014-0ea06316569a/509acabd-b582-367e-a14f-c5a9330423c4.roa
File:                     509acabd-b582-367e-a14f-c5a9330423c4.roa (raw, json)
Hash identifier:          uL8twTUPxzoaSruT7TuSaMO1bpbZXrVxB097TwUtyTk=
Subject key identifier:   25:F2:DE:9C:9D:30:46:84:AE:C5:6E:CE:B8:D9:71:EC:09:88:E9:F7
Certificate issuer:       /CN=7d6f0059-7ec3-4f4f-9014-0ea06316569a
Certificate serial:       010D0C9F4328584F71ED959EA820464E0046FE00
Authority key identifier: C7:CA:4B:C4:7D:DA:E8:CF:20:DE:7B:88:EC:D8:7B:98:18:2F:C8:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7d6f0059-7ec3-4f4f-9014-0ea06316569a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7d6f0059-7ec3-4f4f-9014-0ea06316569a/509acabd-b582-367e-a14f-c5a9330423c4.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     42473
IP address blocks:        162.220.220.0/22 maxlen: 24
                          162.250.0.0/21 maxlen: 24
                          2605:380::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7d6f0059-7ec3-4f4f-9014-0ea06316569a/7d6f0059-7ec3-4f4f-9014-0ea06316569a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7d6f0059-7ec3-4f4f-9014-0ea06316569a/7d6f0059-7ec3-4f4f-9014-0ea06316569a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7d6f0059-7ec3-4f4f-9014-0ea06316569a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:95:9e:a8:20:46:4e:00:46:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d6f0059-7ec3-4f4f-9014-0ea06316569a
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=e9d05eb4-88bd-4258-867c-e6dd95f6e137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4c:7d:0e:6b:c5:8d:3f:bd:4c:43:57:e7:01:
                    37:03:10:c3:a6:2e:1f:2e:1d:3c:2e:95:38:2c:10:
                    0e:41:4d:17:ab:a2:8b:68:e9:55:4a:bd:3b:77:09:
                    dc:d0:b8:a9:d2:a4:af:7b:f3:b7:56:52:00:d6:df:
                    23:37:7d:f7:4b:9d:08:46:0c:59:3a:9b:75:0a:c1:
                    ea:78:56:f2:04:b6:d0:c3:e9:a3:d9:e8:fc:3e:84:
                    2d:2e:c2:ea:a0:7d:97:bd:ab:98:8e:e0:fc:5f:b6:
                    74:2b:9d:02:f1:15:62:00:c3:3e:02:ef:5c:c4:35:
                    97:37:c8:1a:23:98:55:7a:71:e7:b0:87:07:b8:d7:
                    6d:02:8e:c0:06:b4:71:98:d2:ed:71:86:8d:d6:39:
                    51:67:ee:bd:43:cb:da:c4:20:50:38:0f:a7:d8:b3:
                    be:0d:2a:7b:cb:a9:11:df:bc:0b:6b:24:12:05:60:
                    da:94:b9:88:ee:6c:5c:c8:61:59:26:ea:ff:82:07:
                    c1:92:95:bd:39:65:87:f4:7f:18:19:1a:4e:ba:da:
                    f7:dd:c6:c2:71:b1:3f:bd:4a:9d:49:e2:85:36:68:
                    43:64:3c:33:f0:6a:48:bc:5a:1a:dd:7d:46:c2:bd:
                    1f:72:9c:61:77:ad:e2:12:99:7d:e4:7e:46:1f:99:
                    5a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:F2:DE:9C:9D:30:46:84:AE:C5:6E:CE:B8:D9:71:EC:09:88:E9:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7d6f0059-7ec3-4f4f-9014-0ea06316569a/509acabd-b582-367e-a14f-c5a9330423c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7d6f0059-7ec3-4f4f-9014-0ea06316569a/7d6f0059-7ec3-4f4f-9014-0ea06316569a.crl

            X509v3 Authority Key Identifier:
                keyid:C7:CA:4B:C4:7D:DA:E8:CF:20:DE:7B:88:EC:D8:7B:98:18:2F:C8:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7d6f0059-7ec3-4f4f-9014-0ea06316569a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.220.220.0/22
                  162.250.0.0/21
                IPv6:
                  2605:380::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:ae:f9:79:a1:82:d4:9a:ae:ba:7b:e2:16:70:f5:6f:fe:fa:
         81:6d:48:23:1f:6d:1e:3c:08:e0:d1:2e:ae:2a:52:76:0a:25:
         e4:37:b3:95:3b:b4:ac:e3:0f:32:9e:64:9d:43:f6:5b:fe:da:
         13:09:23:52:df:76:fc:bb:b3:92:b7:ae:c2:8f:66:c7:9f:32:
         be:eb:01:d1:86:d1:56:75:dd:76:42:e4:a1:27:5b:4c:67:77:
         0a:75:fb:6a:6e:18:81:a3:17:56:38:a7:c0:e9:49:3b:b7:22:
         d4:15:dc:aa:d7:44:05:c0:33:23:85:c6:7b:81:c0:88:39:33:
         5e:1b:ba:5f:47:ed:5b:e7:2a:cf:a9:5c:ec:2d:0e:85:19:b6:
         a8:23:96:39:2e:de:f1:cd:6f:ab:3f:ba:8d:89:c5:1b:f0:e5:
         67:f3:25:be:b9:e3:86:44:43:78:74:ff:19:7b:f2:c3:a7:a9:
         6f:da:81:7b:b1:0e:93:1f:eb:d6:42:bc:24:d9:ef:b9:7b:ff:
         24:e9:91:b3:00:53:ba:20:e0:ed:39:df:52:8e:18:ea:93:c3:
         66:bf:18:29:23:63:4f:77:37:69:8b:6f:b7:28:60:11:89:a1:
         75:98:a4:16:51:53:4b:e1:4b:22:c0:41:d0:17:5b:45:47:5e:
         1c:75:8a:b8
-----BEGIN CERTIFICATE-----
MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWE9x7ZWeqCBGTgBG/gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2Q2ZjAwNTktN2VjMy00ZjRmLTkwMTQtMGVhMDYzMTY1
NjlhMB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk
ZTlkMDVlYjQtODhiZC00MjU4LTg2N2MtZTZkZDk1ZjZlMTM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUx9DmvFjT+9TENX5wE3AxDDpi4fLh08LpU4
LBAOQU0Xq6KLaOlVSr07dwnc0Lip0qSve/O3VlIA1t8jN333S50IRgxZOpt1CsHq
eFbyBLbQw+mj2ej8PoQtLsLqoH2XvauYjuD8X7Z0K50C8RViAMM+Au9cxDWXN8ga
I5hVenHnsIcHuNdtAo7ABrRxmNLtcYaN1jlRZ+69Q8vaxCBQOA+n2LO+DSp7y6kR
37wLayQSBWDalLmI7mxcyGFZJur/ggfBkpW9OWWH9H8YGRpOutr33cbCcbE/vUqd
SeKFNmhDZDwz8GpIvFoa3X1Gwr0fcpxhd63iEpl95H5GH5laiQIDAQABo4IDajCC
A2YwHQYDVR0OBBYEFCXy3pydMEaErsVuzrjZcewJiOn3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83ZDZm
MDA1OS03ZWMzLTRmNGYtOTAxNC0wZWEwNjMxNjU2OWEvNTA5YWNhYmQtYjU4Mi0z
NjdlLWExNGYtYzVhOTMzMDQyM2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2Q2ZjAwNTktN2VjMy00ZjRmLTkw
MTQtMGVhMDYzMTY1NjlhLzdkNmYwMDU5LTdlYzMtNGY0Zi05MDE0LTBlYTA2MzE2
NTY5YS5jcmwwHwYDVR0jBBgwFoAUx8pLxH3a6M8g3nuI7Nh7mBgvyDswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83ZDZmMDA1OS03ZWMzLTRmNGYtOTAxNC0wZWEw
NjMxNjU2OWEuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCotzcAwQD
ovoAMA0EAgACMAcDBQAmBQOAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEKu+XmhgtSarrp74hZw9W/++oFt
SCMfbR48CODRLq4qUnYKJeQ3s5U7tKzjDzKeZJ1D9lv+2hMJI1Lfdvy7s5K3rsKP
ZsefMr7rAdGG0VZ13XZC5KEnW0xndwp1+2puGIGjF1Y4p8DpSTu3ItQV3KrXRAXA
MyOFxnuBwIg5M14bul9H7VvnKs+pXOwtDoUZtqgjljku3vHNb6s/uo2JxRvw5Wfz
Jb6544ZEQ3h0/xl78sOnqW/agXuxDpMf69ZCvCTZ77l7/yTpkbMAU7og4O0531KO
GOqTw2a/GCkjY093N2mLb7coYBGJoXWYpBZRU0vhSyLAQdAXW0VHXhx1irg=
-----END CERTIFICATE-----
Generated at Tue Oct 13 06:14:34 2026 by rpki-client