Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a/271464d1-f8cb-3425-b761-d634ad58c029.roa
File:                     271464d1-f8cb-3425-b761-d634ad58c029.roa (raw, json)
Hash identifier:          Kfk1ccuCY5m+WbTDPwlbpU8rAohHtXw0gWbmUg8eJAw=
Subject key identifier:   E6:6B:01:03:62:F7:1E:01:1A:C5:8B:CB:08:3D:F2:97:18:4E:B2:30
Certificate issuer:       /CN=abdcc2e2-c99a-4bc5-8c10-f78c4275050a
Certificate serial:       010D0C9F4328584F549DAF367A162A17C1262EAA
Authority key identifier: B7:49:5B:25:C2:C3:4E:84:0F:EC:3E:9F:7E:E4:B8:5A:C4:00:D6:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a/271464d1-f8cb-3425-b761-d634ad58c029.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     40755
IP address blocks:        64.49.96.0/20 maxlen: 20
                          67.14.176.0/20 maxlen: 20
                          144.89.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a/abdcc2e2-c99a-4bc5-8c10-f78c4275050a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a/abdcc2e2-c99a-4bc5-8c10-f78c4275050a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:af:36:7a:16:2a:17:c1:26:2e:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abdcc2e2-c99a-4bc5-8c10-f78c4275050a
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=bf9b5d69-7d62-48ac-af3d-9393a8686c2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e2:35:f9:2c:65:e5:6b:27:d5:28:fd:c8:3d:
                    b0:93:91:c0:37:2c:b8:49:57:e9:c4:81:65:87:6d:
                    84:81:6b:d0:c2:e1:53:c5:9e:50:ea:5e:02:e8:6f:
                    e0:48:3e:45:9b:b2:39:02:38:a0:b7:71:62:cb:b0:
                    ef:1a:44:55:21:72:59:53:c8:b6:b0:af:54:ff:97:
                    3d:76:c2:0a:f4:84:b5:ae:a0:41:2c:c6:cd:99:b6:
                    7a:3d:f8:06:52:cf:3c:d5:b5:04:fa:aa:a7:7d:18:
                    01:b4:fe:44:08:ae:a2:a4:23:a5:7f:41:5a:64:dc:
                    1b:cf:38:91:25:40:f1:21:ca:6a:a6:f6:05:69:c2:
                    00:0d:13:7e:e9:7c:59:ff:81:84:09:23:f4:f8:fa:
                    73:7b:77:9d:15:16:d3:78:ce:6a:21:40:f5:39:e9:
                    54:54:3c:8d:6b:ed:74:b7:63:3e:e4:e0:09:16:9e:
                    12:8b:ef:80:48:29:58:51:38:30:31:11:07:9a:5b:
                    0a:91:12:8a:4e:97:01:59:9b:74:2b:f9:6d:42:80:
                    5a:b5:97:82:bd:ab:f1:cb:8f:1f:77:74:81:31:a0:
                    6e:3a:08:96:96:15:3f:f7:12:e1:0a:88:2c:ac:e9:
                    6f:f0:2d:26:11:78:b5:7b:c1:02:39:7e:d8:86:b0:
                    aa:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:6B:01:03:62:F7:1E:01:1A:C5:8B:CB:08:3D:F2:97:18:4E:B2:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a/271464d1-f8cb-3425-b761-d634ad58c029.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a/abdcc2e2-c99a-4bc5-8c10-f78c4275050a.crl

            X509v3 Authority Key Identifier:
                keyid:B7:49:5B:25:C2:C3:4E:84:0F:EC:3E:9F:7E:E4:B8:5A:C4:00:D6:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.49.96.0/20
                  67.14.176.0/20
                  144.89.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:b4:dc:5a:3e:78:45:b2:91:4f:b9:85:c5:2f:45:80:bb:96:
         a1:0b:2c:1b:a9:a5:53:7e:fc:4c:ee:0f:43:43:1b:85:5a:62:
         20:aa:9e:08:01:f4:15:26:58:59:96:0b:28:59:c2:2d:04:fc:
         63:71:f5:fd:4a:0f:02:4e:03:cc:05:c1:09:8b:54:77:bb:a2:
         2d:ec:bb:e9:38:1b:98:38:f9:8d:2b:56:2d:d6:44:d9:2f:ab:
         a7:79:15:0a:2c:1c:ef:72:57:91:64:b8:62:0d:b9:5f:56:7f:
         b2:ed:6e:63:44:5d:97:5a:d9:ed:22:57:f9:56:20:84:4b:f0:
         a4:c7:1b:4a:fa:fd:ab:d1:46:8c:88:15:18:2e:e4:c8:50:8d:
         ad:55:55:fe:aa:69:6d:74:df:a4:94:0f:30:87:c0:f3:4a:fb:
         f2:8c:f2:b7:11:81:fa:f2:84:e5:31:2e:61:56:99:87:8f:6b:
         f7:6a:f8:4c:b6:1d:25:f5:fe:c7:73:4e:fa:67:d0:14:5e:b6:
         bd:1e:fa:55:3d:cb:6c:b5:39:e8:7e:cd:67:fc:07:3a:7b:0c:
         e0:32:2f:c6:8c:0e:f0:d1:9d:82:45:b1:d1:88:4e:cb:b2:e9:
         0a:96:09:2e:09:28:ef:7b:1f:43:2b:43:0e:07:40:c9:89:ed:
         92:d9:6e:ae
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE9Una82ehYqF8EmLqowDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJkY2MyZTItYzk5YS00YmM1LThjMTAtZjc4YzQyNzUw
NTBhMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk
YmY5YjVkNjktN2Q2Mi00OGFjLWFmM2QtOTM5M2E4Njg2YzJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOI1+Sxl5Wsn1Sj9yD2wk5HANyy4SVfpxIFl
h22EgWvQwuFTxZ5Q6l4C6G/gSD5Fm7I5Ajigt3Fiy7DvGkRVIXJZU8i2sK9U/5c9
dsIK9IS1rqBBLMbNmbZ6PfgGUs881bUE+qqnfRgBtP5ECK6ipCOlf0FaZNwbzziR
JUDxIcpqpvYFacIADRN+6XxZ/4GECSP0+Ppze3edFRbTeM5qIUD1OelUVDyNa+10
t2M+5OAJFp4Si++ASClYUTgwMREHmlsKkRKKTpcBWZt0K/ltQoBatZeCvavxy48f
d3SBMaBuOgiWlhU/9xLhCogsrOlv8C0mEXi1e8ECOX7YhrCqzwIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFOZrAQNi9x4BGsWLywg98pcYTrIwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hYmRj
YzJlMi1jOTlhLTRiYzUtOGMxMC1mNzhjNDI3NTA1MGEvMjcxNDY0ZDEtZjhjYi0z
NDI1LWI3NjEtZDYzNGFkNThjMDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYWJkY2MyZTItYzk5YS00YmM1LThj
MTAtZjc4YzQyNzUwNTBhL2FiZGNjMmUyLWM5OWEtNGJjNS04YzEwLWY3OGM0Mjc1
MDUwYS5jcmwwHwYDVR0jBBgwFoAUt0lbJcLDToQP7D6ffuS4WsQA1nowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9hYmRjYzJlMi1jOTlhLTRiYzUtOGMxMC1mNzhj
NDI3NTA1MGEuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEQDFgAwQE
Qw6wAwQEkFlQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAIa03Fo+eEWykU+5hcUvRYC7lqELLBuppVN+/Ezu
D0NDG4VaYiCqnggB9BUmWFmWCyhZwi0E/GNx9f1KDwJOA8wFwQmLVHe7oi3su+k4
G5g4+Y0rVi3WRNkvq6d5FQosHO9yV5FkuGINuV9Wf7LtbmNEXZda2e0iV/lWIIRL
8KTHG0r6/avRRoyIFRgu5MhQja1VVf6qaW1036SUDzCHwPNK+/KM8rcRgfryhOUx
LmFWmYePa/dq+Ey2HSX1/sdzTvpn0BRetr0e+lU9y2y1Oeh+zWf8Bzp7DOAyL8aM
DvDRnYJFsdGITsuy6QqWCS4JKO97H0MrQw4HQMmJ7ZLZbq4=
-----END CERTIFICATE-----
Generated at Tue Oct 13 17:20:02 2026 by rpki-client