Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d46b5c04-6ffd-4817-a7a5-68bc91297a0e/58a721bd-3a30-35f2-968b-1112cce1f384.roa
File:                     58a721bd-3a30-35f2-968b-1112cce1f384.roa (raw, json)
Hash identifier:          Rjtt2h38WreNRi41EjLZkI1KDvLnm4oFfNPK9ZROHwY=
Subject key identifier:   8C:03:10:DB:1F:07:B0:B0:A3:9B:4A:7C:6C:A6:6E:38:54:D3:56:B0
Certificate issuer:       /CN=d46b5c04-6ffd-4817-a7a5-68bc91297a0e
Certificate serial:       010D0C9F4328584CBB79BF5C112896136FF4C800
Authority key identifier: B8:12:04:53:57:27:CC:9D:C8:BE:BB:84:0F:41:1E:95:44:AC:B6:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d46b5c04-6ffd-4817-a7a5-68bc91297a0e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d46b5c04-6ffd-4817-a7a5-68bc91297a0e/58a721bd-3a30-35f2-968b-1112cce1f384.roa
Signing time:             Mon 02 Feb 2026 18:17:07 +0000
ROA not before:           Mon 02 Feb 2026 18:17:07 +0000
ROA not after:            Sun 03 May 2026 17:17:07 +0000
asID:                     26481
IP address blocks:        199.33.120.0/24 maxlen: 24
                          199.33.121.0/24 maxlen: 24
                          199.33.122.0/24 maxlen: 24
                          199.33.123.0/24 maxlen: 24
                          199.33.124.0/24 maxlen: 24
                          199.33.125.0/24 maxlen: 24
                          199.33.126.0/24 maxlen: 24
                          199.33.127.0/24 maxlen: 24
                          209.74.104.0/24 maxlen: 24
                          209.74.105.0/24 maxlen: 24
                          209.74.106.0/24 maxlen: 24
                          209.74.107.0/24 maxlen: 24
                          209.74.108.0/24 maxlen: 24
                          209.74.109.0/24 maxlen: 24
                          209.74.110.0/24 maxlen: 24
                          209.74.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d46b5c04-6ffd-4817-a7a5-68bc91297a0e/d46b5c04-6ffd-4817-a7a5-68bc91297a0e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d46b5c04-6ffd-4817-a7a5-68bc91297a0e/d46b5c04-6ffd-4817-a7a5-68bc91297a0e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d46b5c04-6ffd-4817-a7a5-68bc91297a0e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bb:79:bf:5c:11:28:96:13:6f:f4:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d46b5c04-6ffd-4817-a7a5-68bc91297a0e
        Validity
            Not Before: Feb  2 18:17:07 2026 GMT
            Not After : May  3 17:17:07 2026 GMT
        Subject: CN=0fd227da-4651-42f9-acd8-041af45b1ecc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:68:15:64:75:9e:a7:94:89:ff:5c:fc:0b:57:
                    82:70:4c:04:14:15:17:45:4c:b6:02:3d:78:b1:8c:
                    cd:6f:83:a8:d1:b3:92:d1:09:b1:19:53:54:76:87:
                    47:19:65:46:33:74:f8:5a:86:c4:87:c1:9d:be:96:
                    ff:13:c5:a2:3c:3c:19:d5:d0:79:d4:d7:b3:ff:e1:
                    49:2c:da:1c:33:9e:de:ce:c7:51:b7:d0:21:7e:32:
                    ce:86:60:3e:85:bd:55:50:80:9f:c6:f9:aa:69:9a:
                    be:4c:f7:f3:3a:9a:c2:4a:1f:06:27:a0:98:fe:59:
                    3b:70:56:8c:9f:ab:0d:12:5f:b2:59:99:15:96:f1:
                    25:46:85:6f:f6:05:ad:d2:18:21:98:02:19:a4:a2:
                    ef:b9:36:0d:3c:c6:c3:7a:6e:db:b9:20:d6:ae:7d:
                    db:84:86:70:f8:35:81:7d:61:0b:47:4c:76:3e:d9:
                    18:9a:be:c6:58:9d:5c:b0:7f:af:10:f1:50:de:f4:
                    0a:46:cc:dc:73:6b:e4:44:81:23:20:cc:ec:fe:8f:
                    aa:48:b6:87:2e:dc:13:1a:2b:af:93:fe:f5:2f:14:
                    60:b0:1a:84:45:a7:7e:55:2b:9c:ce:7a:85:49:88:
                    99:ac:4c:93:2e:2a:73:a2:76:9a:89:63:8e:e7:39:
                    bb:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:03:10:DB:1F:07:B0:B0:A3:9B:4A:7C:6C:A6:6E:38:54:D3:56:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d46b5c04-6ffd-4817-a7a5-68bc91297a0e/58a721bd-3a30-35f2-968b-1112cce1f384.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d46b5c04-6ffd-4817-a7a5-68bc91297a0e/d46b5c04-6ffd-4817-a7a5-68bc91297a0e.crl

            X509v3 Authority Key Identifier:
                keyid:B8:12:04:53:57:27:CC:9D:C8:BE:BB:84:0F:41:1E:95:44:AC:B6:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d46b5c04-6ffd-4817-a7a5-68bc91297a0e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.33.120.0/21
                  209.74.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:94:ff:e0:d8:fa:03:a9:28:11:64:ed:ce:b4:72:00:11:dc:
         43:1e:df:5e:e3:2e:4b:ac:0a:ee:1c:5c:08:61:4a:fe:73:f8:
         e0:56:04:22:3d:0f:9e:8d:8a:85:00:67:54:ea:e3:81:41:c0:
         d8:ae:85:bc:44:5e:8c:07:61:0f:d3:0a:2a:55:3e:ec:18:4d:
         42:fe:ee:2f:55:1a:3f:8f:47:4b:18:93:11:38:9b:5d:bb:8a:
         b3:f7:01:20:35:07:8b:12:7f:24:68:8c:5a:cf:59:91:46:f9:
         c8:64:6a:6a:bc:a1:9a:8b:15:2c:7b:d7:8d:f8:4d:3b:71:d8:
         f6:61:7e:d3:58:6d:5a:88:92:f9:cf:8c:ed:78:49:3d:09:17:
         02:31:1f:08:b5:b9:54:7e:52:c0:38:03:9f:0b:bd:f2:a6:70:
         77:58:e1:28:02:d5:f0:b4:a6:9e:b1:78:cf:d4:f3:a8:1d:f3:
         d6:b8:8b:1c:0d:21:67:13:04:f3:6a:92:bc:9e:b8:eb:5b:1b:
         3a:f4:59:aa:cf:3c:99:7f:18:94:59:c5:0d:64:c9:c1:d2:be:
         f1:e8:07:69:4c:63:3f:25:4a:e2:bb:9c:38:4c:ff:16:37:fe:
         bd:a7:4e:20:a5:e4:a8:18:98:74:68:8e:76:d1:5d:80:34:b9:
         a5:4f:dc:b7
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEy7eb9cESiWE2/0yAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDQ2YjVjMDQtNmZmZC00ODE3LWE3YTUtNjhiYzkxMjk3
YTBlMB4XDTI2MDIwMjE4MTcwN1oXDTI2MDUwMzE3MTcwN1owLzEtMCsGA1UEAxMk
MGZkMjI3ZGEtNDY1MS00MmY5LWFjZDgtMDQxYWY0NWIxZWNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGgVZHWep5SJ/1z8C1eCcEwEFBUXRUy2Aj14
sYzNb4Oo0bOS0QmxGVNUdodHGWVGM3T4WobEh8Gdvpb/E8WiPDwZ1dB51Nez/+FJ
LNocM57ezsdRt9AhfjLOhmA+hb1VUICfxvmqaZq+TPfzOprCSh8GJ6CY/lk7cFaM
n6sNEl+yWZkVlvElRoVv9gWt0hghmAIZpKLvuTYNPMbDem7buSDWrn3bhIZw+DWB
fWELR0x2PtkYmr7GWJ1csH+vEPFQ3vQKRszcc2vkRIEjIMzs/o+qSLaHLtwTGiuv
k/71LxRgsBqERad+VSucznqFSYiZrEyTLipzonaaiWOO5zm74QIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFIwDENsfB7Cwo5tKfGymbjhU01awMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kNDZi
NWMwNC02ZmZkLTQ4MTctYTdhNS02OGJjOTEyOTdhMGUvNThhNzIxYmQtM2EzMC0z
NWYyLTk2OGItMTExMmNjZTFmMzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZDQ2YjVjMDQtNmZmZC00ODE3LWE3
YTUtNjhiYzkxMjk3YTBlL2Q0NmI1YzA0LTZmZmQtNDgxNy1hN2E1LTY4YmM5MTI5
N2EwZS5jcmwwHwYDVR0jBBgwFoAUuBIEU1cnzJ3IvruED0EelUSstuMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS9kNDZiNWMwNC02ZmZkLTQ4MTctYTdhNS02OGJj
OTEyOTdhMGUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDxyF4AwQD
0UpoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBACKU/+DY+gOpKBFk7c60cgAR3EMe317jLkusCu4cXAhhSv5z
+OBWBCI9D56NioUAZ1Tq44FBwNiuhbxEXowHYQ/TCipVPuwYTUL+7i9VGj+PR0sY
kxE4m127irP3ASA1B4sSfyRojFrPWZFG+chkamq8oZqLFSx71434TTtx2PZhftNY
bVqIkvnPjO14ST0JFwIxHwi1uVR+UsA4A58LvfKmcHdY4SgC1fC0pp6xeM/U86gd
89a4ixwNIWcTBPNqkryeuOtbGzr0WarPPJl/GJRZxQ1kycHSvvHoB2lMYz8lSuK7
nDhM/xY3/r2nTiCl5KgYmHRojnbRXYA0uaVP3Lc=
-----END CERTIFICATE-----
Generated at Sun Mar 1 16:23:14 2026 by rpki-client