Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/91533126-83d7-3399-8e3a-8d1baf4226fe.roa
File:                     91533126-83d7-3399-8e3a-8d1baf4226fe.roa (raw, json)
Hash identifier:          UkMT+pMGrz4AIZBB+iclKxi4AjIcZ2bYRUWTMeAPndU=
Subject key identifier:   1F:08:CA:F5:39:2B:48:29:61:DE:96:73:AD:5D:B1:FD:C5:C6:8F:4D
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D52433C596930445732C80C40
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/91533126-83d7-3399-8e3a-8d1baf4226fe.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     17497
IP address blocks:        64.32.144.0/24 maxlen: 24
                          64.32.145.0/24 maxlen: 24
                          64.32.146.0/24 maxlen: 24
                          64.32.147.0/24 maxlen: 24
                          64.32.151.0/24 maxlen: 24
                          64.32.164.0/24 maxlen: 24
                          64.32.165.0/24 maxlen: 24
                          64.32.166.0/24 maxlen: 24
                          64.32.167.0/24 maxlen: 24
                          207.145.156.0/24 maxlen: 24
                          207.145.157.0/24 maxlen: 24
                          207.145.188.0/24 maxlen: 24
                          207.145.189.0/24 maxlen: 24
                          207.145.249.0/24 maxlen: 24
                          207.145.250.0/24 maxlen: 24
                          207.145.252.0/24 maxlen: 24
                          207.145.253.0/24 maxlen: 24
                          207.145.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:3c:59:69:30:44:57:32:c8:0c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=b5ad32e6-7235-42c5-9a8e-be92a2eea39e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:88:6a:03:3a:f4:a8:bc:34:83:3f:f0:2c:9a:
                    28:00:64:78:1c:f4:46:d9:d5:b2:68:9c:fb:12:e4:
                    17:42:68:86:54:2b:1e:60:4f:c3:e4:d8:0a:a4:b9:
                    75:1d:fc:12:5d:f5:c0:38:fe:ab:62:6f:e5:6c:3d:
                    c1:3a:ca:c2:8f:c8:4b:b5:21:01:85:01:dd:eb:e9:
                    a4:ef:1d:61:b5:c2:06:e6:eb:1d:09:c7:69:63:8a:
                    ef:39:c9:60:a3:cb:8e:4a:e7:5f:31:80:71:3d:38:
                    d4:64:f8:54:5e:07:97:bf:40:4e:16:1d:1f:a3:cd:
                    d6:b2:70:16:bf:d6:51:f8:4e:57:a5:51:2b:b5:cd:
                    10:4f:cd:7c:ad:ba:b7:ba:7d:b1:a3:e0:04:90:6b:
                    41:95:4e:a5:9d:10:78:6a:77:f4:11:45:5b:2e:cf:
                    1d:48:4a:37:0f:c3:1b:1a:ba:1f:b6:fc:a3:90:91:
                    4b:f3:59:54:0f:c5:15:ff:04:d7:0d:b8:0e:9c:75:
                    5e:0f:9d:4c:55:a3:2c:c6:0b:b2:be:69:79:0d:57:
                    a7:2c:73:38:38:68:64:29:72:93:56:12:55:77:d3:
                    ea:9c:1b:55:40:39:f9:f9:2d:28:b2:d7:74:c4:66:
                    34:bd:5e:78:a0:ec:4d:45:60:91:6c:e3:16:ed:9d:
                    57:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:08:CA:F5:39:2B:48:29:61:DE:96:73:AD:5D:B1:FD:C5:C6:8F:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/91533126-83d7-3399-8e3a-8d1baf4226fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.32.144.0/22
                  64.32.151.0/24
                  64.32.164.0/22
                  207.145.156.0/23
                  207.145.188.0/23
                  207.145.249.0-207.145.250.255
                  207.145.252.0/23
                  207.145.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:d5:6e:f4:cd:7f:2f:87:43:4e:2c:b3:1d:90:b9:08:a9:88:
         54:06:2b:81:f8:68:85:3d:fd:9c:f6:ed:bb:60:75:dc:1c:87:
         e9:68:a8:4a:92:f0:d4:6a:da:d2:1a:76:53:12:21:33:2c:60:
         55:98:70:a2:a4:66:69:e2:18:66:9d:48:fa:34:d6:f9:87:90:
         11:b1:09:a2:b6:f4:70:46:24:58:6a:60:03:39:d2:10:04:72:
         37:b1:0e:a2:42:5d:db:44:9e:bc:fa:f9:0e:8f:51:05:fe:53:
         88:62:33:66:01:05:a4:c0:e6:e3:6e:bf:4a:f7:bc:ca:81:f7:
         0c:5b:51:53:60:30:dd:ef:cd:65:20:86:6f:0e:65:5e:5a:6d:
         d0:d1:50:be:cf:19:b2:94:de:07:b2:bc:cd:dd:7e:68:46:c5:
         f1:22:8f:b4:b2:75:87:4c:5e:dd:66:a7:87:45:4e:5d:d8:f9:
         af:41:89:8a:62:bf:f9:e8:c4:e0:c1:72:78:2d:98:9b:8d:07:
         b3:91:93:07:a0:23:c7:30:45:b8:cd:14:cf:8f:03:9e:e0:3e:
         d0:7d:f9:9a:76:9e:e1:4b:31:bf:c3:96:ac:1a:c6:48:4c:ad:
         a2:10:4a:0f:de:95:13:de:12:2c:33:c3:58:55:26:da:d6:d0:
         bd:a9:20:75
-----BEGIN CERTIFICATE-----
MIIGdTCCBV2gAwIBAgIUAQ0Mn0MoWE1SQzxZaTBEVzLIDEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk
YjVhZDMyZTYtNzIzNS00MmM1LTlhOGUtYmU5MmEyZWVhMzllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IhqAzr0qLw0gz/wLJooAGR4HPRG2dWyaJz7
EuQXQmiGVCseYE/D5NgKpLl1HfwSXfXAOP6rYm/lbD3BOsrCj8hLtSEBhQHd6+mk
7x1htcIG5usdCcdpY4rvOclgo8uOSudfMYBxPTjUZPhUXgeXv0BOFh0fo83WsnAW
v9ZR+E5XpVErtc0QT818rbq3un2xo+AEkGtBlU6lnRB4anf0EUVbLs8dSEo3D8Mb
GroftvyjkJFL81lUD8UV/wTXDbgOnHVeD51MVaMsxguyvml5DVenLHM4OGhkKXKT
VhJVd9PqnBtVQDn5+S0ostd0xGY0vV54oOxNRWCRbOMW7Z1XxwIDAQABo4IDhzCC
A4MwHQYDVR0OBBYEFB8IyvU5K0gpYd6Wc61dsf3Fxo9NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOTE1MzMxMjYtODNkNy0z
Mzk5LThlM2EtOGQxYmFmNDIyNmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQCQCCQAwQA
QCCXAwQCQCCkAwQBz5GcAwQBz5G8MAwDBADPkfkDBADPkfoDBAHPkfwDBADPkf8w
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAE9Vu9M1/L4dDTiyzHZC5CKmIVAYrgfhohT39nPbtu2B13ByH6Wio
SpLw1Gra0hp2UxIhMyxgVZhwoqRmaeIYZp1I+jTW+YeQEbEJorb0cEYkWGpgAznS
EARyN7EOokJd20SevPr5Do9RBf5TiGIzZgEFpMDm426/Sve8yoH3DFtRU2Aw3e/N
ZSCGbw5lXlpt0NFQvs8ZspTeB7K8zd1+aEbF8SKPtLJ1h0xe3Wanh0VOXdj5r0GJ
imK/+ejE4MFyeC2Ym40Hs5GTB6AjxzBFuM0Uz48DnuA+0H35mnae4Usxv8OWrBrG
SEytohBKD96VE94SLDPDWFUm2tbQvakgdQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:47:57 2026 by rpki-client