Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/90ad5afb-11a5-3a7e-af84-85ae08f294f7.roa
File:                     90ad5afb-11a5-3a7e-af84-85ae08f294f7.roa (raw, json)
Hash identifier:          L1VnssxXL//FmUA775xDvpYldc/EJA09SbI7mAIYt0Y=
Subject key identifier:   91:A8:B0:51:E6:9A:89:60:14:BC:2F:20:5D:16:71:3D:A3:75:1E:9C
Certificate issuer:       /CN=3d21f741-fd91-4158-8853-7388dab3b3e3
Certificate serial:       010D0C9F4328584D8EF567F04E96BBE284810F00
Authority key identifier: A7:AF:BF:E1:62:39:AF:97:9B:56:A5:07:BE:38:09:30:7F:F3:BE:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/90ad5afb-11a5-3a7e-af84-85ae08f294f7.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     53274
IP address blocks:        162.255.168.0/22 maxlen: 24
                          199.168.200.0/22 maxlen: 24
                          199.168.204.0/24 maxlen: 24
                          199.168.205.0/24 maxlen: 24
                          199.168.206.0/24 maxlen: 24
                          199.168.207.0/24 maxlen: 24
                          204.48.56.0/23 maxlen: 24
                          204.48.58.0/23 maxlen: 24
                          2602:ff8f::/40 maxlen: 41
                          2602:ff8f:fff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:67:f0:4e:96:bb:e2:84:81:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d21f741-fd91-4158-8853-7388dab3b3e3
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=d19f1236-46d9-436b-8203-fcf16502e120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:05:df:29:3e:a8:f5:c2:19:ba:46:2a:3e:24:
                    94:4c:c3:48:86:7b:f3:4b:1b:98:42:bc:bb:4d:1d:
                    98:93:d8:b1:06:99:32:8e:67:9b:88:72:dd:3a:7e:
                    d6:ae:ec:40:a4:9a:2e:bd:12:2e:86:f5:ba:39:6b:
                    6d:c7:87:4c:07:7a:e7:ba:ac:1a:26:e4:55:f0:f2:
                    b5:24:5e:d2:53:05:2a:0a:db:e6:0b:6d:55:fe:e4:
                    78:5c:52:62:3b:56:5f:fe:54:6f:37:c4:46:d8:b9:
                    95:f8:05:75:f3:f3:f8:67:a6:8d:e1:a9:af:9c:5e:
                    73:dc:46:d6:bc:d5:f6:08:3d:7b:80:a1:e9:61:18:
                    a5:55:bc:e7:55:14:d5:6a:47:d2:0e:53:8b:7c:32:
                    16:6c:6f:97:8a:44:4b:c5:d6:8d:d0:28:cc:df:72:
                    7f:2d:78:0d:3d:54:31:09:ad:61:25:db:4c:c3:19:
                    65:0b:c4:fc:7b:b3:8e:65:f4:16:c8:ef:ae:6a:93:
                    9b:b8:56:48:2a:05:b9:ff:1c:e7:1d:a3:b5:6e:1e:
                    e4:3c:07:59:e9:aa:32:41:4b:3e:36:f8:e0:41:b9:
                    f2:56:4f:7b:95:64:d3:27:e6:3b:b7:1c:b6:e8:e9:
                    61:0a:1a:b1:56:d4:47:5d:79:7d:ce:ad:b5:87:de:
                    5e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:A8:B0:51:E6:9A:89:60:14:BC:2F:20:5D:16:71:3D:A3:75:1E:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/90ad5afb-11a5-3a7e-af84-85ae08f294f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.crl

            X509v3 Authority Key Identifier:
                keyid:A7:AF:BF:E1:62:39:AF:97:9B:56:A5:07:BE:38:09:30:7F:F3:BE:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.255.168.0/22
                  199.168.200.0/21
                  204.48.56.0/22
                IPv6:
                  2602:ff8f::/40
                  2602:ff8f:fff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:b1:48:43:37:65:4d:03:2f:a5:17:16:0c:a2:e2:12:03:86:
         7a:76:12:5b:83:9c:b1:45:79:79:42:14:04:ff:00:fa:ed:f3:
         f0:74:a9:47:e8:20:ed:7f:c5:b7:91:c8:6d:bb:a0:60:2e:d7:
         e1:40:2f:df:15:d8:5e:c5:d4:63:45:b2:e4:45:c6:01:b8:ac:
         e3:d4:00:dd:76:2a:c2:0a:74:a0:21:ec:71:47:b0:8b:84:c0:
         d3:16:7d:f4:77:b3:20:ec:90:99:24:38:e5:bd:ba:00:0a:c1:
         77:30:f8:3d:84:05:cc:b3:26:7e:0b:6b:56:7b:44:d3:91:e4:
         a8:9e:5d:1a:4a:14:4b:19:e5:4a:c9:1f:6d:a6:4f:61:84:fc:
         46:fe:aa:e4:65:02:50:9b:76:cc:4d:c1:56:2d:88:1f:57:3c:
         bd:dc:1e:9c:13:a1:bd:d5:80:2d:e4:08:62:36:e0:39:c8:b2:
         4d:5b:ac:1a:54:81:9f:b4:04:cb:55:6b:11:da:77:64:09:a3:
         c2:b3:20:38:a3:3e:1a:d3:df:3f:fe:fc:53:77:1b:39:07:38:
         39:9d:fb:4a:af:19:22:20:1c:18:54:0b:3e:c0:a6:fc:9e:63:
         2a:8d:f4:be:33:4f:2f:9a:0d:ad:e8:ee:02:af:b7:9d:c8:e8:
         9b:d4:58:a9
-----BEGIN CERTIFICATE-----
MIIGaDCCBVCgAwIBAgIUAQ0Mn0MoWE2O9WfwTpa74oSBDwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2QyMWY3NDEtZmQ5MS00MTU4LTg4NTMtNzM4OGRhYjNi
M2UzMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk
ZDE5ZjEyMzYtNDZkOS00MzZiLTgyMDMtZmNmMTY1MDJlMTIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAXfKT6o9cIZukYqPiSUTMNIhnvzSxuYQry7
TR2Yk9ixBpkyjmebiHLdOn7WruxApJouvRIuhvW6OWttx4dMB3rnuqwaJuRV8PK1
JF7SUwUqCtvmC21V/uR4XFJiO1Zf/lRvN8RG2LmV+AV18/P4Z6aN4amvnF5z3EbW
vNX2CD17gKHpYRilVbznVRTVakfSDlOLfDIWbG+XikRLxdaN0CjM33J/LXgNPVQx
Ca1hJdtMwxllC8T8e7OOZfQWyO+uapObuFZIKgW5/xznHaO1bh7kPAdZ6aoyQUs+
NvjgQbnyVk97lWTTJ+Y7txy26OlhChqxVtRHXXl9zq21h95eqwIDAQABo4IDejCC
A3YwHQYDVR0OBBYEFJGosFHmmolgFLwvIF0WcT2jdR6cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zZDIx
Zjc0MS1mZDkxLTQxNTgtODg1My03Mzg4ZGFiM2IzZTMvOTBhZDVhZmItMTFhNS0z
YTdlLWFmODQtODVhZTA4ZjI5NGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2QyMWY3NDEtZmQ5MS00MTU4LTg4
NTMtNzM4OGRhYjNiM2UzLzNkMjFmNzQxLWZkOTEtNDE1OC04ODUzLTczODhkYWIz
YjNlMy5jcmwwHwYDVR0jBBgwFoAUp6+/4WI5r5ebVqUHvjgJMH/zvhQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zZDIxZjc0MS1mZDkxLTQxNTgtODg1My03Mzg4
ZGFiM2IzZTMuY2VyMEQGCCsGAQUFBwEHAQH/BDUwMzAYBAIAATASAwQCov+oAwQD
x6jIAwQCzDA4MBcEAgACMBEDBgAmAv+PAAMHACYC/48P/zBUBgNVHSABAf8ESjBI
MEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0
L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB1sUhD
N2VNAy+lFxYMouISA4Z6dhJbg5yxRXl5QhQE/wD67fPwdKlH6CDtf8W3kchtu6Bg
LtfhQC/fFdhexdRjRbLkRcYBuKzj1ADddirCCnSgIexxR7CLhMDTFn30d7Mg7JCZ
JDjlvboACsF3MPg9hAXMsyZ+C2tWe0TTkeSonl0aShRLGeVKyR9tpk9hhPxG/qrk
ZQJQm3bMTcFWLYgfVzy93B6cE6G91YAt5AhiNuA5yLJNW6waVIGftATLVWsR2ndk
CaPCsyA4oz4a098//vxTdxs5Bzg5nftKrxkiIBwYVAs+wKb8nmMqjfS+M08vmg2t
6O4Cr7edyOib1Fip
-----END CERTIFICATE-----
Generated at Sun Apr 19 15:33:15 2026 by rpki-client