Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17/0e4645bc-c3fe-36b8-8d81-10da41797a09.roa
File:                     0e4645bc-c3fe-36b8-8d81-10da41797a09.roa (raw, json)
Hash identifier:          EnULsJ/QLus1FR03Vfv1T7iAeBrbyKxfXS1C9zgghgg=
Subject key identifier:   18:07:20:C5:F5:BE:34:29:6A:59:E7:20:29:B0:13:22:A2:7D:70:1F
Certificate issuer:       /CN=d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17
Certificate serial:       010D0C9F4328584CC6121E456CF1D7D6525CB700
Authority key identifier: D1:8E:3F:84:49:98:82:D7:24:A2:C8:3F:24:E3:63:0B:16:31:62:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17/0e4645bc-c3fe-36b8-8d81-10da41797a09.roa
Signing time:             Fri 06 Feb 2026 14:00:40 +0000
ROA not before:           Fri 06 Feb 2026 14:00:40 +0000
ROA not after:            Thu 07 May 2026 13:00:40 +0000
asID:                     46572
IP address blocks:        139.60.32.0/22 maxlen: 24
                          199.184.128.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c6:12:1e:45:6c:f1:d7:d6:52:5c:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17
        Validity
            Not Before: Feb  6 14:00:40 2026 GMT
            Not After : May  7 13:00:40 2026 GMT
        Subject: CN=3c93efe2-0410-444e-b0d5-94c0573a6816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:47:bc:54:11:64:ea:84:10:b9:a1:d3:21:c5:
                    5b:76:06:c6:af:0c:ad:03:70:e6:d1:67:c0:c2:50:
                    0d:64:e1:dc:1b:b0:ec:d4:77:eb:4a:d8:aa:6e:4c:
                    cd:26:45:fa:e4:c3:81:86:32:8f:66:4d:11:53:b8:
                    16:cc:7e:59:d8:3f:92:32:37:78:e6:f0:78:18:64:
                    4b:73:30:4a:02:90:71:db:d1:1f:91:7e:f9:90:69:
                    09:ca:fb:d6:75:3a:24:c8:c6:65:38:fa:58:62:95:
                    6a:ee:06:4c:4a:60:53:42:cc:7b:4d:c7:5c:f1:bf:
                    08:6d:06:b2:64:ff:44:05:11:36:f9:41:b7:71:85:
                    ca:67:83:db:86:67:50:94:8e:7d:4d:7d:55:b8:f1:
                    c7:d5:d4:ec:01:e0:a2:a4:13:73:15:e5:61:93:bf:
                    90:7e:01:27:a8:02:3a:b9:3a:2f:b2:21:2e:2e:90:
                    1e:49:8e:5e:40:f1:35:e0:34:f9:72:43:40:5b:50:
                    ed:ea:3c:78:84:7e:26:ba:8d:f2:8a:e8:ae:55:60:
                    83:ff:23:8c:1e:27:23:c8:71:c1:87:8d:f4:4b:c2:
                    3f:50:0d:16:b6:70:6f:9e:0b:eb:37:d5:c2:4c:c6:
                    72:de:d1:49:f2:65:10:67:44:22:35:ff:09:25:d5:
                    ee:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:07:20:C5:F5:BE:34:29:6A:59:E7:20:29:B0:13:22:A2:7D:70:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17/0e4645bc-c3fe-36b8-8d81-10da41797a09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17.crl

            X509v3 Authority Key Identifier:
                keyid:D1:8E:3F:84:49:98:82:D7:24:A2:C8:3F:24:E3:63:0B:16:31:62:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.60.32.0/22
                  199.184.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:0f:f7:19:1e:fc:fb:41:81:20:2f:24:d1:ee:08:62:a7:40:
         f7:5b:eb:5f:3c:b6:e0:2b:00:12:16:06:0f:a9:43:96:83:86:
         35:78:45:c8:82:51:4c:ce:88:32:35:a5:ea:98:be:48:2c:20:
         7c:4a:2b:7d:c6:74:ae:66:6b:3c:dc:59:04:f9:bf:73:4d:aa:
         92:29:cd:3c:0f:23:0c:97:f4:1e:fd:03:c3:19:d9:0a:d8:5e:
         f8:bd:92:a7:f3:c4:20:4a:00:4a:cd:9f:90:a9:ae:1b:13:5e:
         a2:3d:2d:5e:71:56:19:af:42:1b:db:e8:4f:d9:9f:01:82:f7:
         b7:db:f9:9c:fa:63:df:1f:fd:e5:f4:8e:32:7d:34:83:d2:30:
         42:73:39:40:e6:db:65:76:02:b6:90:64:af:a8:3e:51:a1:d2:
         d9:a5:e1:53:f3:25:5d:d8:77:a1:c9:c4:48:02:70:84:a2:3d:
         a1:4b:d4:46:5a:2c:95:f9:57:ad:c2:70:d0:ff:12:a8:31:22:
         de:ef:fe:19:fb:78:bf:32:fe:42:58:b1:a9:9c:7b:05:7a:19:
         26:36:b7:5b:ff:14:e8:7e:e2:32:fd:68:d0:cd:81:92:22:ab:
         64:d1:be:aa:9b:6a:9b:28:57:62:2e:99:a7:c8:39:a9:f2:9d:
         d7:f6:79:cf
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEzGEh5FbPHX1lJctwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDFlZjRiMzgtYjVkYy00YjM3LTkwYjUtZWI5ZTI2MmJm
YTE3MB4XDTI2MDIwNjE0MDA0MFoXDTI2MDUwNzEzMDA0MFowLzEtMCsGA1UEAxMk
M2M5M2VmZTItMDQxMC00NDRlLWIwZDUtOTRjMDU3M2E2ODE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ke8VBFk6oQQuaHTIcVbdgbGrwytA3Dm0WfA
wlANZOHcG7Ds1HfrStiqbkzNJkX65MOBhjKPZk0RU7gWzH5Z2D+SMjd45vB4GGRL
czBKApBx29EfkX75kGkJyvvWdTokyMZlOPpYYpVq7gZMSmBTQsx7Tcdc8b8IbQay
ZP9EBRE2+UG3cYXKZ4PbhmdQlI59TX1VuPHH1dTsAeCipBNzFeVhk7+QfgEnqAI6
uTovsiEuLpAeSY5eQPE14DT5ckNAW1Dt6jx4hH4muo3yiuiuVWCD/yOMHicjyHHB
h430S8I/UA0WtnBvngvrN9XCTMZy3tFJ8mUQZ0QiNf8JJdXuzwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFBgHIMX1vjQpalnnICmwEyKifXAfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kMWVm
NGIzOC1iNWRjLTRiMzctOTBiNS1lYjllMjYyYmZhMTcvMGU0NjQ1YmMtYzNmZS0z
NmI4LThkODEtMTBkYTQxNzk3YTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDFlZjRiMzgtYjVkYy00YjM3LTkw
YjUtZWI5ZTI2MmJmYTE3L2QxZWY0YjM4LWI1ZGMtNGIzNy05MGI1LWViOWUyNjJi
ZmExNy5jcmwwHwYDVR0jBBgwFoAU0Y4/hEmYgtckosg/JONjCxYxYpUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9kMWVmNGIzOC1iNWRjLTRiMzctOTBiNS1lYjll
MjYyYmZhMTcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCizwgAwQD
x7iAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAGUP9xke/PtBgSAvJNHuCGKnQPdb6188tuArABIWBg+pQ5aD
hjV4RciCUUzOiDI1peqYvkgsIHxKK33GdK5mazzcWQT5v3NNqpIpzTwPIwyX9B79
A8MZ2QrYXvi9kqfzxCBKAErNn5CprhsTXqI9LV5xVhmvQhvb6E/ZnwGC97fb+Zz6
Y98f/eX0jjJ9NIPSMEJzOUDm22V2AraQZK+oPlGh0tml4VPzJV3Yd6HJxEgCcISi
PaFL1EZaLJX5V63CcND/EqgxIt7v/hn7eL8y/kJYsamcewV6GSY2t1v/FOh+4jL9
aNDNgZIiq2TRvqqbapsoV2IumafIOanyndf2ec8=
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:21:07 2026 by rpki-client