Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/a2294655-0b7c-30a7-a52f-5b89e275331c.roa
File:                     a2294655-0b7c-30a7-a52f-5b89e275331c.roa (raw, json)
Hash identifier:          NZQJrQg9BYtD+oKm8Mn7PyVoro3pnxAweUYDOdzq3KE=
Subject key identifier:   C2:05:9E:2B:30:15:78:D0:90:A1:39:78:01:E9:F5:02:BF:ED:5B:A6
Certificate issuer:       /CN=0699cec8-3851-41f8-aee8-2e225865699c
Certificate serial:       010D0C9F4328584E09CB438B8DD55941DE2B2700
Authority key identifier: 04:3A:13:A4:9A:F1:19:6C:60:B7:74:79:3E:AA:82:F6:12:4B:E6:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/a2294655-0b7c-30a7-a52f-5b89e275331c.roa
Signing time:             Tue 02 Jun 2026 13:00:10 +0000
ROA not before:           Tue 02 Jun 2026 13:00:10 +0000
ROA not after:            Mon 31 Aug 2026 13:00:10 +0000
asID:                     40376
IP address blocks:        167.222.120.0/22 maxlen: 22
                          167.222.120.0/24 maxlen: 24
                          167.222.121.0/24 maxlen: 24
                          167.222.122.0/24 maxlen: 24
                          167.222.123.0/24 maxlen: 24
                          170.61.234.0/24 maxlen: 24
                          170.61.236.0/24 maxlen: 24
                          170.61.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/0699cec8-3851-41f8-aee8-2e225865699c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/0699cec8-3851-41f8-aee8-2e225865699c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:09:cb:43:8b:8d:d5:59:41:de:2b:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0699cec8-3851-41f8-aee8-2e225865699c
        Validity
            Not Before: Jun  2 13:00:10 2026 GMT
            Not After : Aug 31 13:00:10 2026 GMT
        Subject: CN=b8992ba1-73da-4c93-81f5-053b06913021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:12:0d:46:e3:be:60:78:cb:a4:dc:39:ac:0c:
                    e1:ce:af:90:d2:8a:0a:0f:b0:66:5b:f2:84:53:d3:
                    42:9b:be:be:0c:70:f6:75:50:94:97:db:29:e2:58:
                    e8:64:7e:90:c4:55:ab:33:36:9d:6e:d2:14:98:37:
                    92:87:0b:83:b8:9d:19:b5:75:28:d7:fd:39:8f:ad:
                    20:c6:16:25:49:88:41:9e:51:fe:df:f6:2c:40:21:
                    24:86:cd:8d:e9:55:3b:68:11:54:a4:30:9b:59:08:
                    34:bd:fe:bd:8d:16:ae:ed:ac:53:b1:ef:5e:ef:d4:
                    7a:d9:89:9b:82:c7:ad:5b:75:37:b7:5b:74:13:4f:
                    b3:7d:c0:72:ab:88:d9:52:5e:48:98:1e:3e:f4:c3:
                    9b:84:c9:56:c8:73:0c:90:af:78:03:dd:a6:e7:0a:
                    0e:c4:dd:ec:48:71:f6:42:56:ee:98:a7:8b:dd:80:
                    65:96:27:8e:39:64:d9:13:67:52:85:49:0c:bc:5d:
                    b2:68:1c:06:4c:b3:9b:c3:8e:96:d3:fa:38:43:72:
                    e4:87:59:33:d7:2f:01:dc:04:58:82:fb:ec:de:b9:
                    34:52:83:65:f7:6c:82:ff:24:30:31:bb:c6:39:03:
                    63:57:bc:f9:02:5e:6b:bb:62:14:4f:78:37:b7:5b:
                    d9:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:05:9E:2B:30:15:78:D0:90:A1:39:78:01:E9:F5:02:BF:ED:5B:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/a2294655-0b7c-30a7-a52f-5b89e275331c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/0699cec8-3851-41f8-aee8-2e225865699c.crl

            X509v3 Authority Key Identifier:
                keyid:04:3A:13:A4:9A:F1:19:6C:60:B7:74:79:3E:AA:82:F6:12:4B:E6:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.222.120.0/22
                  170.61.234.0/24
                  170.61.236.0/24
                  170.61.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:60:bd:fb:a9:15:bf:51:fe:e0:86:2e:00:42:52:d8:16:c3:
         60:bc:2b:bc:85:4f:21:71:66:9f:ff:d0:00:ce:7b:c8:34:26:
         a8:55:ef:8f:2e:a2:32:b0:60:65:df:34:d9:20:ed:ea:47:0c:
         a2:ea:3c:ad:0d:fd:7e:f6:65:3f:70:4c:e3:e5:60:58:d6:3d:
         cd:0e:4a:ee:51:bc:8b:a8:57:85:e2:36:3b:67:f4:45:74:d0:
         bd:22:85:70:16:c9:0a:57:0f:fe:06:af:4c:03:b0:59:16:48:
         95:2a:57:5a:0c:4b:f7:f1:1c:75:3c:d0:a2:a8:88:90:06:f8:
         6f:9e:71:5c:71:c6:9f:4f:44:ac:96:fd:d4:03:ab:ac:b4:86:
         b6:e3:df:7a:f1:ec:b1:bb:e2:be:99:90:02:c7:66:b7:c8:2c:
         fb:42:bc:62:27:22:0f:ce:e4:1b:07:79:d5:3d:46:30:a5:d2:
         a4:0c:98:0e:fc:00:87:1c:72:42:85:83:84:33:90:c0:95:39:
         f6:3e:db:ce:f2:43:f8:d4:14:29:7e:69:0e:2c:85:50:60:68:
         e0:49:17:a9:c9:e8:31:12:63:ef:26:17:df:9e:16:0e:46:d6:
         65:75:9d:07:e4:d7:be:c6:65:bf:67:26:c7:66:b1:60:c8:7a:
         d5:cc:17:64
-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWE4Jy0OLjdVZQd4rJwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDY5OWNlYzgtMzg1MS00MWY4LWFlZTgtMmUyMjU4NjU2
OTljMB4XDTI2MDYwMjEzMDAxMFoXDTI2MDgzMTEzMDAxMFowLzEtMCsGA1UEAxMk
Yjg5OTJiYTEtNzNkYS00YzkzLTgxZjUtMDUzYjA2OTEzMDIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBINRuO+YHjLpNw5rAzhzq+Q0ooKD7BmW/KE
U9NCm76+DHD2dVCUl9sp4ljoZH6QxFWrMzadbtIUmDeShwuDuJ0ZtXUo1/05j60g
xhYlSYhBnlH+3/YsQCEkhs2N6VU7aBFUpDCbWQg0vf69jRau7axTse9e79R62Ymb
gsetW3U3t1t0E0+zfcByq4jZUl5ImB4+9MObhMlWyHMMkK94A92m5woOxN3sSHH2
QlbumKeL3YBllieOOWTZE2dShUkMvF2yaBwGTLObw46W0/o4Q3Lkh1kz1y8B3ARY
gvvs3rk0UoNl92yC/yQwMbvGOQNjV7z5Al5ru2IUT3g3t1vZAQIDAQABo4IDZzCC
A2MwHQYDVR0OBBYEFMIFniswFXjQkKE5eAHp9QK/7VumMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8wNjk5
Y2VjOC0zODUxLTQxZjgtYWVlOC0yZTIyNTg2NTY5OWMvYTIyOTQ2NTUtMGI3Yy0z
MGE3LWE1MmYtNWI4OWUyNzUzMzFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMDY5OWNlYzgtMzg1MS00MWY4LWFl
ZTgtMmUyMjU4NjU2OTljLzA2OTljZWM4LTM4NTEtNDFmOC1hZWU4LTJlMjI1ODY1
Njk5Yy5jcmwwHwYDVR0jBBgwFoAUBDoTpJrxGWxgt3R5PqqC9hJL5p0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi8wNjk5Y2VjOC0zODUxLTQxZjgtYWVlOC0yZTIy
NTg2NTY5OWMuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCp954AwQA
qj3qAwQAqj3sAwQAqj3uMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr
BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz
Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBADxgvfupFb9R/uCGLgBCUtgWw2C8K7yF
TyFxZp//0ADOe8g0JqhV748uojKwYGXfNNkg7epHDKLqPK0N/X72ZT9wTOPlYFjW
Pc0OSu5RvIuoV4XiNjtn9EV00L0ihXAWyQpXD/4Gr0wDsFkWSJUqV1oMS/fxHHU8
0KKoiJAG+G+ecVxxxp9PRKyW/dQDq6y0hrbj33rx7LG74r6ZkALHZrfILPtCvGIn
Ig/O5BsHedU9RjCl0qQMmA78AIccckKFg4QzkMCVOfY+287yQ/jUFCl+aQ4shVBg
aOBJF6nJ6DESY+8mF9+eFg5G1mV1nQfk177GZb9nJsdmsWDIetXMF2Q=
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:48:28 2026 by rpki-client