Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3becc9af-9630-3ef3-91f4-e75f4fa4a2d4.roa
File:                     3becc9af-9630-3ef3-91f4-e75f4fa4a2d4.roa (raw, json)
Hash identifier:          IbVNbR4su+wik8kVQnaHMuKpo3pZY5TjLJLD+glBRRg=
Subject key identifier:   A6:A5:A7:DE:4A:D7:DA:9F:CC:FD:BF:EA:EA:E5:8C:54:86:78:5D:11
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F3E480178CA0DEE18E688F000
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3becc9af-9630-3ef3-91f4-e75f4fa4a2d4.roa
Signing time:             Mon 21 Sep 2026 01:00:11 +0000
ROA not before:           Mon 21 Sep 2026 01:00:11 +0000
ROA not after:            Sun 20 Dec 2026 02:00:11 +0000
asID:                     3320
IP address blocks:        64.32.152.0/21 maxlen: 24
                          64.50.136.0/21 maxlen: 24
                          64.145.128.0/18 maxlen: 24
                          64.145.192.0/18 maxlen: 24
                          64.248.0.0/18 maxlen: 24
                          64.248.64.0/18 maxlen: 24
                          64.248.128.0/18 maxlen: 24
                          64.248.192.0/18 maxlen: 24
                          64.249.0.0/18 maxlen: 24
                          64.249.64.0/18 maxlen: 24
                          64.249.128.0/18 maxlen: 24
                          64.249.192.0/18 maxlen: 24
                          66.17.72.0/21 maxlen: 24
                          66.200.0.0/18 maxlen: 24
                          66.200.64.0/18 maxlen: 24
                          66.200.128.0/18 maxlen: 24
                          66.200.192.0/18 maxlen: 24
                          74.3.0.0/18 maxlen: 24
                          74.3.64.0/18 maxlen: 24
                          205.214.32.0/20 maxlen: 24
                          206.40.192.0/20 maxlen: 24
                          206.253.0.0/20 maxlen: 24
                          208.41.0.0/18 maxlen: 24
                          208.41.64.0/18 maxlen: 24
                          208.41.128.0/18 maxlen: 24
                          208.41.192.0/18 maxlen: 24
                          216.151.224.0/20 maxlen: 24
                          216.184.128.0/18 maxlen: 24
                          216.184.192.0/18 maxlen: 24
                          216.224.0.0/19 maxlen: 24
                          216.224.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3e:48:01:78:ca:0d:ee:18:e6:88:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 21 01:00:11 2026 GMT
            Not After : Dec 20 02:00:11 2026 GMT
        Subject: CN=f6e89e32-1807-4163-94b7-2c1d4c47187a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:77:2c:ed:24:e3:f5:64:f4:9f:cb:9c:51:c1:
                    80:1f:85:16:26:0a:01:b1:b0:eb:b5:b5:3c:d5:3d:
                    f9:b7:3f:c3:06:f4:22:63:24:1b:e9:3e:74:6d:80:
                    3f:08:f2:54:f7:2a:50:d8:c7:e3:b6:bd:00:e3:a5:
                    6b:82:cd:4a:c4:c2:f7:66:00:c2:1f:ef:24:1d:29:
                    fd:10:ea:6f:22:59:93:46:1d:8b:78:eb:85:ae:2f:
                    53:31:2e:7f:94:be:c7:1a:fd:27:a3:d2:d8:f3:0b:
                    c2:5d:b7:7e:31:b8:fb:77:03:6d:6b:a8:d3:66:88:
                    df:f2:b6:35:1e:2b:c1:c6:10:d0:df:6a:06:9c:a9:
                    8d:95:e0:9a:57:82:83:cd:2a:f6:c7:ff:60:8e:0a:
                    16:bb:67:2e:9e:2d:39:22:4b:7a:9a:5b:8f:48:d1:
                    6a:27:0e:8e:14:f7:4a:60:3c:7c:31:ad:1d:f9:92:
                    dd:0c:0c:54:b5:bf:08:12:8b:25:87:df:63:19:09:
                    43:d8:9c:68:53:b2:51:a7:c8:09:13:52:0f:3f:36:
                    9c:35:19:73:f5:b9:31:b7:b8:6b:d2:a7:cc:5a:db:
                    f1:45:f7:e5:cd:9a:64:c5:92:1e:72:48:f4:17:19:
                    c7:98:1d:9d:ca:6b:86:d3:4a:6f:41:a3:83:15:1e:
                    32:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A5:A7:DE:4A:D7:DA:9F:CC:FD:BF:EA:EA:E5:8C:54:86:78:5D:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3becc9af-9630-3ef3-91f4-e75f4fa4a2d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.32.152.0/21
                  64.50.136.0/21
                  64.145.128.0/17
                  64.248.0.0/15
                  66.17.72.0/21
                  66.200.0.0/16
                  74.3.0.0/17
                  205.214.32.0/20
                  206.40.192.0/20
                  206.253.0.0/20
                  208.41.0.0/16
                  216.151.224.0/20
                  216.184.128.0/17
                  216.224.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:fd:d1:1c:8b:ba:c7:3d:f0:f0:77:71:a9:44:c7:18:cc:10:
         13:4d:e4:ac:42:f1:07:8b:ff:b8:f8:80:68:de:e8:af:e2:6d:
         11:b5:dd:43:e2:17:19:eb:00:9f:c1:23:ae:a3:0f:d2:32:01:
         7c:0e:23:7a:e1:01:35:5b:04:03:46:62:5a:19:d5:4d:81:be:
         e2:24:99:cf:fe:3d:f9:d9:25:0a:29:f8:c5:60:e2:65:a8:ad:
         e3:5e:05:d3:f5:1d:f6:8b:25:75:a4:78:12:f4:fd:1b:a2:a3:
         5d:ae:9f:c9:08:70:0d:0e:2f:f6:23:72:9f:ff:5d:7b:8e:7c:
         d2:c2:f0:10:c9:4b:7b:5d:90:96:f6:3a:98:c5:e8:13:cf:b8:
         2b:40:49:a8:44:36:32:33:d7:2b:0d:4a:14:77:aa:e9:f1:b9:
         0e:2d:8f:a5:53:89:68:63:59:18:24:aa:4b:d5:2f:72:57:bb:
         eb:f2:0f:80:21:ce:46:14:35:5e:c1:a5:bf:e4:1e:23:6b:bb:
         ce:52:a2:45:56:dd:60:56:20:26:2b:17:79:c0:24:a3:d7:fe:
         a0:d6:1a:64:4c:8c:d9:21:a6:3b:ad:e5:84:25:49:e9:f2:c6:
         60:66:61:65:b0:36:c5:4b:51:c6:0b:6b:27:5a:eb:e7:93:75:
         ee:c6:3f:d9
-----BEGIN CERTIFICATE-----
MIIGjjCCBXagAwIBAgIUAQ0Mn0MoWE8+SAF4yg3uGOaI8AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk
ZjZlODllMzItMTgwNy00MTYzLTk0YjctMmMxZDRjNDcxODdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgncs7STj9WT0n8ucUcGAH4UWJgoBsbDrtbU8
1T35tz/DBvQiYyQb6T50bYA/CPJU9ypQ2Mfjtr0A46Vrgs1KxML3ZgDCH+8kHSn9
EOpvIlmTRh2LeOuFri9TMS5/lL7HGv0no9LY8wvCXbd+Mbj7dwNta6jTZojf8rY1
HivBxhDQ32oGnKmNleCaV4KDzSr2x/9gjgoWu2cuni05Ikt6mluPSNFqJw6OFPdK
YDx8Ma0d+ZLdDAxUtb8IEoslh99jGQlD2JxoU7JRp8gJE1IPPzacNRlz9bkxt7hr
0qfMWtvxRfflzZpkxZIeckj0FxnHmB2dymuG00pvQaODFR4yzQIDAQABo4IDoDCC
A5wwHQYDVR0OBBYEFKalp95K19qfzP2/6urljFSGeF0RMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvM2JlY2M5YWYtOTYzMC0z
ZWYzLTkxZjQtZTc1ZjRmYTRhMmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMGoGCCsGAQUFBwEHAQH/BFswWTBXBAIAATBRAwQDQCCYAwQD
QDKIAwQHQJGAAwMBQPgDBANCEUgDAwBCyAMEB0oDAAMEBM3WIAMEBM4owAMEBM79
AAMDANApAwQE2JfgAwQH2LiAAwQG2OAAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH
DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz
L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAMT90RyLusc98PB3calE
xxjMEBNN5KxC8QeL/7j4gGje6K/ibRG13UPiFxnrAJ/BI66jD9IyAXwOI3rhATVb
BANGYloZ1U2BvuIkmc/+PfnZJQop+MVg4mWoreNeBdP1HfaLJXWkeBL0/Ruio12u
n8kIcA0OL/Yjcp//XXuOfNLC8BDJS3tdkJb2OpjF6BPPuCtASahENjIz1ysNShR3
qunxuQ4tj6VTiWhjWRgkqkvVL3JXu+vyD4AhzkYUNV7Bpb/kHiNru85SokVW3WBW
ICYrF3nAJKPX/qDWGmRMjNkhpjut5YQlSenyxmBmYWWwNsVLUcYLayda6+eTde7G
P9k=
-----END CERTIFICATE-----
Generated at Thu Sep 24 06:50:39 2026 by rpki-client