Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82/433d1d19-f42d-3bbf-bff8-a92c26aeabde.roa
File:                     433d1d19-f42d-3bbf-bff8-a92c26aeabde.roa (raw, json)
Hash identifier:          SW+mxKPiqAcI6eIWDMWVcCI4L6LxY6TVf9wvZMHGnLA=
Subject key identifier:   DE:A0:9B:09:23:BF:0D:F0:28:49:5B:05:77:71:55:FE:AF:42:43:00
Certificate issuer:       /CN=f42ba754-2a4d-4b4e-b364-698af500fc82
Certificate serial:       010D0C9F4328584DFA8DF7098A9B213845867280
Authority key identifier: 7E:C2:DF:26:B9:88:C5:11:94:F3:BC:2C:44:11:34:0D:C2:5A:0C:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82/433d1d19-f42d-3bbf-bff8-a92c26aeabde.roa
Signing time:             Thu 28 May 2026 01:59:42 +0000
ROA not before:           Thu 28 May 2026 01:59:42 +0000
ROA not after:            Wed 26 Aug 2026 01:59:42 +0000
asID:                     1613
IP address blocks:        168.100.240.0/23 maxlen: 23
                          168.100.245.0/24 maxlen: 24
                          168.100.248.0/23 maxlen: 24
                          2605:e740:500::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82/f42ba754-2a4d-4b4e-b364-698af500fc82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82/f42ba754-2a4d-4b4e-b364-698af500fc82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fa:8d:f7:09:8a:9b:21:38:45:86:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f42ba754-2a4d-4b4e-b364-698af500fc82
        Validity
            Not Before: May 28 01:59:42 2026 GMT
            Not After : Aug 26 01:59:42 2026 GMT
        Subject: CN=d470726b-94a4-409c-a4e3-3eee7f5f7077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:af:74:81:9e:da:c8:0d:33:e5:1c:01:27:2a:
                    e4:22:ae:45:9e:3c:52:a4:08:22:09:90:98:c3:fb:
                    63:ad:ea:2c:d5:ed:ae:8f:a1:d2:31:42:3d:08:15:
                    39:08:15:89:92:af:94:98:5e:90:34:27:1f:31:69:
                    d9:67:43:b1:e3:5a:72:b8:8f:19:99:6d:88:66:f1:
                    31:64:b7:d7:0f:e8:11:69:71:1d:f1:44:f1:9b:fe:
                    cd:d8:0c:6e:c1:cb:eb:4f:93:2e:0a:9e:c9:02:9e:
                    0f:f2:ac:ed:88:62:c7:84:7c:73:46:00:c2:0d:05:
                    be:2a:96:c2:6e:99:24:db:af:2b:31:2d:ba:60:b3:
                    23:e1:0a:8f:21:ab:5b:97:ff:4b:1a:7e:5e:51:57:
                    95:22:e2:84:c3:ac:ad:9b:18:27:cf:e3:1c:2b:f0:
                    c5:00:56:97:01:2c:7e:26:6e:2b:8e:99:46:10:82:
                    be:4c:63:a5:75:b8:31:6c:a8:22:f5:c6:7a:a2:29:
                    84:7f:a2:b8:6f:32:ab:f4:d6:11:53:65:1a:8e:9b:
                    fd:eb:85:d8:ca:44:7d:94:ea:e9:2e:93:33:6d:1f:
                    13:93:47:6d:49:dc:ef:90:4d:f6:6b:c1:db:fb:93:
                    f8:1f:92:d9:5a:b1:3d:c1:fa:44:a1:f4:9c:03:05:
                    98:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:A0:9B:09:23:BF:0D:F0:28:49:5B:05:77:71:55:FE:AF:42:43:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82/433d1d19-f42d-3bbf-bff8-a92c26aeabde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82/f42ba754-2a4d-4b4e-b364-698af500fc82.crl

            X509v3 Authority Key Identifier:
                keyid:7E:C2:DF:26:B9:88:C5:11:94:F3:BC:2C:44:11:34:0D:C2:5A:0C:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.100.240.0/23
                  168.100.245.0/24
                  168.100.248.0/23
                IPv6:
                  2605:e740:500::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:97:c5:7c:84:2d:2e:51:61:75:b2:ef:f5:57:41:1a:e1:0b:
         33:af:83:eb:79:ae:70:c8:4f:33:2c:70:3a:d1:5c:e8:9b:89:
         d6:bb:cd:c6:dd:c5:e0:87:30:7c:6e:1c:eb:17:22:79:de:e6:
         61:14:b4:16:7b:bd:8d:75:97:94:ab:f3:c4:6d:ee:7c:9a:c0:
         3c:fc:3c:be:f3:23:0d:df:77:d5:f8:68:21:ae:5d:2b:e8:c3:
         a4:8b:71:40:5e:d3:9a:0c:cc:bc:21:c0:f5:61:6e:85:64:49:
         91:f3:16:49:28:da:88:13:9b:7c:62:e2:76:fd:28:0c:65:10:
         d7:ba:92:f9:62:8f:ba:8a:cc:1b:76:ea:78:27:b5:14:d5:b9:
         a2:4d:7c:de:8e:30:f9:55:1e:a9:84:43:e4:ac:68:ec:c6:77:
         14:f7:a1:f3:4f:f9:42:1b:00:2d:2b:68:38:1d:f1:b3:55:48:
         54:f2:58:34:32:22:30:d4:94:66:79:f9:b0:74:7b:5c:0b:02:
         3d:99:11:c9:35:81:5d:f7:f2:a9:79:15:e9:04:1f:d7:0a:0f:
         97:93:0e:43:4b:dc:cf:de:d3:99:9a:8f:92:cd:c0:5d:5a:48:
         46:89:7b:17:94:37:91:67:e1:6a:39:ae:7a:3b:a9:90:c5:98:
         86:83:53:62
-----BEGIN CERTIFICATE-----
MIIGXzCCBUegAwIBAgIUAQ0Mn0MoWE36jfcJipshOEWGcoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQyYmE3NTQtMmE0ZC00YjRlLWIzNjQtNjk4YWY1MDBm
YzgyMB4XDTI2MDUyODAxNTk0MloXDTI2MDgyNjAxNTk0MlowLzEtMCsGA1UEAxMk
ZDQ3MDcyNmItOTRhNC00MDljLWE0ZTMtM2VlZTdmNWY3MDc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgq90gZ7ayA0z5RwBJyrkIq5FnjxSpAgiCZCY
w/tjreos1e2uj6HSMUI9CBU5CBWJkq+UmF6QNCcfMWnZZ0Ox41pyuI8ZmW2IZvEx
ZLfXD+gRaXEd8UTxm/7N2AxuwcvrT5MuCp7JAp4P8qztiGLHhHxzRgDCDQW+KpbC
bpkk268rMS26YLMj4QqPIatbl/9LGn5eUVeVIuKEw6ytmxgnz+McK/DFAFaXASx+
Jm4rjplGEIK+TGOldbgxbKgi9cZ6oimEf6K4bzKr9NYRU2Uajpv964XYykR9lOrp
LpMzbR8Tk0dtSdzvkE32a8Hb+5P4H5LZWrE9wfpEofScAwWY3QIDAQABo4IDcTCC
A20wHQYDVR0OBBYEFN6gmwkjvw3wKElbBXdxVf6vQkMAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mNDJi
YTc1NC0yYTRkLTRiNGUtYjM2NC02OThhZjUwMGZjODIvNDMzZDFkMTktZjQyZC0z
YmJmLWJmZjgtYTkyYzI2YWVhYmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjQyYmE3NTQtMmE0ZC00YjRlLWIz
NjQtNjk4YWY1MDBmYzgyL2Y0MmJhNzU0LTJhNGQtNGI0ZS1iMzY0LTY5OGFmNTAw
ZmM4Mi5jcmwwHwYDVR0jBBgwFoAUfsLfJrmIxRGU87wsRBE0DcJaDAUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9mNDJiYTc1NC0yYTRkLTRiNGUtYjM2NC02OThh
ZjUwMGZjODIuY2VyMDsGCCsGAQUFBwEHAQH/BCwwKjAYBAIAATASAwQBqGTwAwQA
qGT1AwQBqGT4MA4EAgACMAgDBgAmBedABTBUBgNVHSABAf8ESjBIMEYGCCsGAQUF
Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl
cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA1l8V8hC0uUWF1su/1
V0Ea4Qszr4Prea5wyE8zLHA60Vzom4nWu83G3cXghzB8bhzrFyJ53uZhFLQWe72N
dZeUq/PEbe58msA8/Dy+8yMN33fV+Gghrl0r6MOki3FAXtOaDMy8IcD1YW6FZEmR
8xZJKNqIE5t8YuJ2/SgMZRDXupL5Yo+6iswbdup4J7UU1bmiTXzejjD5VR6phEPk
rGjsxncU96HzT/lCGwAtK2g4HfGzVUhU8lg0MiIw1JRmefmwdHtcCwI9mRHJNYFd
9/KpeRXpBB/XCg+Xkw5DS9zP3tOZmo+SzcBdWkhGiXsXlDeRZ+FqOa56O6mQxZiG
g1Ni
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:53:01 2026 by rpki-client