Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/1283eb3a-04e0-32f2-b54b-1bf5a9618c70.roa
File:                     1283eb3a-04e0-32f2-b54b-1bf5a9618c70.roa (raw, json)
Hash identifier:          wXB+39MHaXuvtkQwIS3YxVrbs7PPc3sWJ8aKODXazQA=
Subject key identifier:   65:33:67:34:DB:96:FC:D0:D1:70:48:B4:74:A4:0C:E5:0B:93:9B:FE
Certificate issuer:       /CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61
Certificate serial:       010D0C9F4328584CE7922DEE4A3D7CB1C71E6888
Authority key identifier: F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/1283eb3a-04e0-32f2-b54b-1bf5a9618c70.roa
Signing time:             Wed 18 Feb 2026 14:00:41 +0000
ROA not before:           Wed 18 Feb 2026 14:00:41 +0000
ROA not after:            Tue 19 May 2026 13:00:41 +0000
asID:                     63414
IP address blocks:        64.21.228.0/22 maxlen: 24
                          64.255.144.0/21 maxlen: 24
                          66.163.144.0/21 maxlen: 24
                          66.163.152.0/24 maxlen: 24
                          66.163.155.0/24 maxlen: 24
                          66.163.156.0/22 maxlen: 24
                          69.178.192.0/22 maxlen: 24
                          69.178.196.0/23 maxlen: 24
                          69.178.200.0/22 maxlen: 24
                          76.10.124.0/22 maxlen: 24
                          209.243.0.0/21 maxlen: 24
                          209.243.8.0/22 maxlen: 24
                          209.243.16.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e7:92:2d:ee:4a:3d:7c:b1:c7:1e:68:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61
        Validity
            Not Before: Feb 18 14:00:41 2026 GMT
            Not After : May 19 13:00:41 2026 GMT
        Subject: CN=4a960cc4-45ed-4a53-8118-cdb195607b63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f5:33:06:22:97:99:55:3a:e7:96:cf:5d:0d:
                    01:69:76:34:e7:3a:8a:df:6f:19:9a:bb:ad:23:a9:
                    96:69:6d:4f:a6:ec:e4:e0:8b:f7:91:b7:1b:87:32:
                    ea:63:7e:11:da:c3:ff:66:fa:1a:bd:d0:fa:4f:4e:
                    97:29:90:56:40:1b:18:6b:83:d3:16:0c:38:e0:28:
                    67:65:4d:a4:0d:25:f4:5a:6a:53:30:43:33:c3:8d:
                    e3:c0:43:0c:5a:94:e0:dc:3e:32:4f:12:4e:71:1a:
                    61:c3:79:c9:a2:4a:8e:cd:0f:50:15:6d:8c:ce:47:
                    bd:ee:b3:e2:41:31:57:fe:24:ad:1a:ae:28:0d:bc:
                    22:79:2d:a4:5d:0b:f6:8f:4a:27:03:f5:c8:49:96:
                    69:ff:41:1e:36:e6:2d:f1:e4:13:74:ca:1e:50:36:
                    42:fc:c2:f0:2f:cb:72:f3:c7:20:0e:46:3b:5f:11:
                    d2:04:5d:b6:05:96:96:f2:bd:69:be:6e:a6:cc:3a:
                    af:20:17:a4:4b:27:63:9f:b3:d3:be:79:05:69:86:
                    7f:6e:7c:ff:e7:39:79:7f:ce:dd:8a:d1:a9:58:5e:
                    42:60:51:0a:ae:48:66:22:a2:fa:dd:86:11:4c:03:
                    eb:ad:f7:74:b9:4c:d9:c6:28:da:bd:50:d2:2d:0e:
                    43:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:33:67:34:DB:96:FC:D0:D1:70:48:B4:74:A4:0C:E5:0B:93:9B:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/1283eb3a-04e0-32f2-b54b-1bf5a9618c70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl

            X509v3 Authority Key Identifier:
                keyid:F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.21.228.0/22
                  64.255.144.0/21
                  66.163.144.0-66.163.152.255
                  66.163.155.0-66.163.159.255
                  69.178.192.0-69.178.197.255
                  69.178.200.0/22
                  76.10.124.0/22
                  209.243.0.0-209.243.11.255
                  209.243.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:cb:22:9a:8b:16:6e:ec:3c:4c:1f:16:41:1c:b9:7b:44:5f:
         3b:a2:04:8e:e3:d1:dd:24:95:9e:36:f8:7b:2e:d0:59:83:c9:
         75:72:75:ce:65:61:28:b3:82:1e:7a:a4:b7:36:44:50:d9:f3:
         a3:46:11:53:cd:07:18:4e:30:84:a8:e2:c6:78:40:ac:f9:89:
         69:cc:4e:8e:75:5d:e8:88:40:d2:91:24:e6:76:8a:f6:4c:93:
         34:51:36:22:31:49:e5:0d:61:00:4e:84:05:81:9d:4b:9a:41:
         80:d0:55:b8:23:74:85:69:f2:a2:d9:ec:67:f8:0d:45:cf:ad:
         f6:4b:0a:30:d5:d6:9d:08:57:91:5d:fa:95:74:fd:06:27:97:
         48:72:86:27:48:7c:6b:28:70:4d:d8:11:2a:89:06:6e:81:38:
         56:09:ae:f4:89:30:c0:cd:eb:d4:3e:62:a5:76:0d:cc:df:15:
         40:c9:c1:7f:e3:f0:5d:02:74:0f:41:ab:dc:6c:15:9e:e7:a4:
         f4:4d:df:9e:2f:dd:cf:fb:fc:19:c1:11:d1:38:ff:99:e7:33:
         aa:7b:f5:1c:3a:eb:30:c9:5e:c7:1a:15:67:d1:94:11:fc:a5:
         15:86:48:d2:e0:d8:52:47:c8:9f:10:77:9f:22:99:4b:63:44:
         95:2c:cd:f8
-----BEGIN CERTIFICATE-----
MIIGkjCCBXqgAwIBAgIUAQ0Mn0MoWEznki3uSj18scceaIgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWRhN2Q1YzAtZWVjOS00MjVjLWE1NzQtNmViOWRkNGVk
ZTYxMB4XDTI2MDIxODE0MDA0MVoXDTI2MDUxOTEzMDA0MVowLzEtMCsGA1UEAxMk
NGE5NjBjYzQtNDVlZC00YTUzLTgxMTgtY2RiMTk1NjA3YjYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfUzBiKXmVU655bPXQ0BaXY05zqK328Zmrut
I6mWaW1Ppuzk4Iv3kbcbhzLqY34R2sP/ZvoavdD6T06XKZBWQBsYa4PTFgw44Chn
ZU2kDSX0WmpTMEMzw43jwEMMWpTg3D4yTxJOcRphw3nJokqOzQ9QFW2Mzke97rPi
QTFX/iStGq4oDbwieS2kXQv2j0onA/XISZZp/0EeNuYt8eQTdMoeUDZC/MLwL8ty
88cgDkY7XxHSBF22BZaW8r1pvm6mzDqvIBekSydjn7PTvnkFaYZ/bnz/5zl5f87d
itGpWF5CYFEKrkhmIqL63YYRTAPrrfd0uUzZxijavVDSLQ5DkwIDAQABo4IDpDCC
A6AwHQYDVR0OBBYEFGUzZzTblvzQ0XBItHSkDOULk5v+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81ZGE3
ZDVjMC1lZWM5LTQyNWMtYTU3NC02ZWI5ZGQ0ZWRlNjEvMTI4M2ViM2EtMDRlMC0z
MmYyLWI1NGItMWJmNWE5NjE4YzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWRhN2Q1YzAtZWVjOS00MjVjLWE1
NzQtNmViOWRkNGVkZTYxLzVkYTdkNWMwLWVlYzktNDI1Yy1hNTc0LTZlYjlkZDRl
ZGU2MS5jcmwwHwYDVR0jBBgwFoAU8QWcju/aWUH6JtOjabaF+gQ8dhswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy81ZGE3ZDVjMC1lZWM5LTQyNWMtYTU3NC02ZWI5
ZGQ0ZWRlNjEuY2VyMG4GCCsGAQUFBwEHAQH/BF8wXTBbBAIAATBVAwQCQBXkAwQD
QP+QMAwDBARCo5ADBABCo5gwDAMEAEKjmwMEBUKjgDAMAwQGRbLAAwQBRbLEAwQC
RbLIAwQCTAp8MAsDAwDR8wMEAtHzCAMEA9HzEDBUBgNVHSABAf8ESjBIMEYGCCsG
AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291
cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBAyyKaixZu7DxM
HxZBHLl7RF87ogSO49HdJJWeNvh7LtBZg8l1cnXOZWEos4IeeqS3NkRQ2fOjRhFT
zQcYTjCEqOLGeECs+YlpzE6OdV3oiEDSkSTmdor2TJM0UTYiMUnlDWEAToQFgZ1L
mkGA0FW4I3SFafKi2exn+A1Fz632Swow1dadCFeRXfqVdP0GJ5dIcoYnSHxrKHBN
2BEqiQZugThWCa70iTDAzevUPmKldg3M3xVAycF/4/BdAnQPQavcbBWe56T0Td+e
L93P+/wZwRHROP+Z5zOqe/UcOuswyV7HGhVn0ZQR/KUVhkjS4NhSR8ifEHefIplL
Y0SVLM34
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:36:51 2026 by rpki-client