Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/85176132-47c9-32a1-9e04-6dadc4f6fc23.roa
File:                     85176132-47c9-32a1-9e04-6dadc4f6fc23.roa (raw, json)
Hash identifier:          H4h+T/cvarNWpFYmAOSA6SP/c1beh+HYW8K+I+Mvet8=
Subject key identifier:   C2:30:20:5B:F4:97:96:7C:7B:18:2E:B5:E8:C3:E1:8A:5A:95:5F:10
Certificate issuer:       /CN=37a1bff3-cff2-41f8-a1d2-8a10cad7e340
Certificate serial:       010D0C9F4328584E15E44D3AEDE450B4C9D99500
Authority key identifier: 0C:8C:A0:41:6E:20:D0:55:A5:33:45:77:B1:7E:51:36:33:22:11:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/85176132-47c9-32a1-9e04-6dadc4f6fc23.roa
Signing time:             Sat 06 Jun 2026 21:00:13 +0000
ROA not before:           Sat 06 Jun 2026 21:00:13 +0000
ROA not after:            Fri 04 Sep 2026 21:00:13 +0000
asID:                     36001
IP address blocks:        134.195.20.0/22 maxlen: 22
                          162.210.60.0/22 maxlen: 22
                          172.98.220.0/22 maxlen: 22
                          173.242.80.0/20 maxlen: 20
                          192.200.136.0/21 maxlen: 21
                          199.167.212.0/22 maxlen: 22
                          206.126.208.0/20 maxlen: 20
                          209.103.224.0/19 maxlen: 19
                          216.127.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:15:e4:4d:3a:ed:e4:50:b4:c9:d9:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37a1bff3-cff2-41f8-a1d2-8a10cad7e340
        Validity
            Not Before: Jun  6 21:00:13 2026 GMT
            Not After : Sep  4 21:00:13 2026 GMT
        Subject: CN=ec2c3995-0853-4de4-b817-91e054736f6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:87:26:b1:df:01:68:f9:98:01:59:f3:0c:eb:
                    68:7c:82:a2:bc:0f:2d:ec:2d:7c:96:bd:8b:9d:45:
                    20:19:fe:bf:89:88:cf:04:47:17:10:7a:b7:e9:9e:
                    38:eb:6c:8a:9f:9c:ef:20:10:83:7f:b9:e4:d2:df:
                    af:52:5d:d1:98:97:b7:ec:30:6f:bb:55:c9:f7:ec:
                    30:65:ad:6c:43:79:ee:8e:29:e3:f4:f2:e9:c9:22:
                    d6:af:c4:68:da:34:e3:0f:99:f5:c4:7e:87:ad:07:
                    54:bf:67:df:56:18:33:5f:45:2b:71:d3:77:ea:c2:
                    1f:73:19:e3:7d:30:17:7a:d2:92:d1:85:6d:da:53:
                    c6:58:75:f9:95:69:4c:fd:68:66:4f:94:03:6b:4f:
                    43:e6:30:51:6d:62:68:c4:51:90:d2:92:9b:3b:3f:
                    ef:06:5b:66:45:df:b8:af:c9:30:a1:ae:ec:4a:82:
                    53:82:56:05:b0:8d:34:e1:82:b4:f9:52:6c:bd:bd:
                    fa:99:9b:70:af:13:26:09:ee:5b:9e:fc:2c:28:2b:
                    9e:9d:6e:02:3b:e7:f4:2b:eb:55:66:8e:43:97:2c:
                    58:fa:6a:ba:d3:de:49:b2:43:51:bc:3a:8c:d7:b4:
                    7e:50:a7:3a:ed:41:1d:23:bf:23:90:10:7c:0f:66:
                    9d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:30:20:5B:F4:97:96:7C:7B:18:2E:B5:E8:C3:E1:8A:5A:95:5F:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/85176132-47c9-32a1-9e04-6dadc4f6fc23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.crl

            X509v3 Authority Key Identifier:
                keyid:0C:8C:A0:41:6E:20:D0:55:A5:33:45:77:B1:7E:51:36:33:22:11:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.20.0/22
                  162.210.60.0/22
                  172.98.220.0/22
                  173.242.80.0/20
                  192.200.136.0/21
                  199.167.212.0/22
                  206.126.208.0/20
                  209.103.224.0/19
                  216.127.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:cb:23:7b:8c:ca:e7:1a:23:d0:52:b3:a3:11:77:27:7c:91:
         8e:6f:cb:05:15:d6:44:ce:55:a1:02:d3:04:9b:38:a9:63:52:
         73:5f:47:30:e1:90:1f:be:10:3c:8c:e3:82:a3:bd:10:a4:9f:
         f3:89:51:51:6e:31:2e:cb:79:bc:33:5a:38:a1:44:f7:56:a3:
         f9:36:f1:84:07:8e:49:a2:50:13:99:d7:e2:31:a2:50:b8:02:
         37:d8:e3:cf:38:b3:f2:35:46:80:ff:c1:20:82:d3:04:f9:1f:
         45:06:b1:8b:d2:9a:e9:f7:0d:bc:55:b4:40:6e:b8:a8:cb:9c:
         ae:6b:b1:68:b2:8c:89:44:67:f7:8c:42:c7:7c:04:21:94:01:
         50:03:c4:66:7e:0d:09:67:f4:6f:1f:67:35:0d:18:22:63:37:
         36:88:44:46:ef:fe:d0:11:c7:e3:9b:de:72:ed:56:ea:54:23:
         b9:06:cc:9a:0f:48:07:3e:28:c2:d2:3f:39:2b:c4:0a:f8:c6:
         ac:dd:2e:35:c1:0d:b8:eb:59:9c:29:72:73:f4:b0:8c:4a:b0:
         c4:2f:3b:db:c6:59:e8:a7:4d:64:d8:db:8b:48:99:9d:fe:10:
         c9:77:24:e6:1f:88:43:87:b4:46:ea:39:33:a9:82:7d:ce:77:
         37:f9:61:5d
-----BEGIN CERTIFICATE-----
MIIGczCCBVugAwIBAgIUAQ0Mn0MoWE4V5E067eRQtMnZlQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzdhMWJmZjMtY2ZmMi00MWY4LWExZDItOGExMGNhZDdl
MzQwMB4XDTI2MDYwNjIxMDAxM1oXDTI2MDkwNDIxMDAxM1owLzEtMCsGA1UEAxMk
ZWMyYzM5OTUtMDg1My00ZGU0LWI4MTctOTFlMDU0NzM2ZjZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIcmsd8BaPmYAVnzDOtofIKivA8t7C18lr2L
nUUgGf6/iYjPBEcXEHq36Z4462yKn5zvIBCDf7nk0t+vUl3RmJe37DBvu1XJ9+ww
Za1sQ3nujinj9PLpySLWr8Ro2jTjD5n1xH6HrQdUv2ffVhgzX0UrcdN36sIfcxnj
fTAXetKS0YVt2lPGWHX5lWlM/WhmT5QDa09D5jBRbWJoxFGQ0pKbOz/vBltmRd+4
r8kwoa7sSoJTglYFsI004YK0+VJsvb36mZtwrxMmCe5bnvwsKCuenW4CO+f0K+tV
Zo5DlyxY+mq6095JskNRvDqM17R+UKc67UEdI78jkBB8D2ad2wIDAQABo4IDhTCC
A4EwHQYDVR0OBBYEFMIwIFv0l5Z8exgutejD4YpalV8QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zN2Ex
YmZmMy1jZmYyLTQxZjgtYTFkMi04YTEwY2FkN2UzNDAvODUxNzYxMzItNDdjOS0z
MmExLTllMDQtNmRhZGM0ZjZmYzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzdhMWJmZjMtY2ZmMi00MWY4LWEx
ZDItOGExMGNhZDdlMzQwLzM3YTFiZmYzLWNmZjItNDFmOC1hMWQyLThhMTBjYWQ3
ZTM0MC5jcmwwHwYDVR0jBBgwFoAUDIygQW4g0FWlM0V3sX5RNjMiEXAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zN2ExYmZmMy1jZmYyLTQxZjgtYTFkMi04YTEw
Y2FkN2UzNDAuY2VyME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQChsMUAwQC
otI8AwQCrGLcAwQErfJQAwQDwMiIAwQCx6fUAwQEzn7QAwQF0WfgAwQF2H/AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAL7LI3uMyucaI9BSs6MRdyd8kY5vywUV1kTOVaEC0wSbOKljUnNfRzDh
kB++EDyM44KjvRCkn/OJUVFuMS7LebwzWjihRPdWo/k28YQHjkmiUBOZ1+IxolC4
AjfY4884s/I1RoD/wSCC0wT5H0UGsYvSmun3DbxVtEBuuKjLnK5rsWiyjIlEZ/eM
Qsd8BCGUAVADxGZ+DQln9G8fZzUNGCJjNzaIREbv/tARx+Ob3nLtVupUI7kGzJoP
SAc+KMLSPzkrxAr4xqzdLjXBDbjrWZwpcnP0sIxKsMQvO9vGWeinTWTY24tImZ3+
EMl3JOYfiEOHtEbqOTOpgn3Odzf5YV0=
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:02:28 2026 by rpki-client