Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/8ccc1071-20f1-3c32-b565-0625b4e43cfb.roa
File:                     8ccc1071-20f1-3c32-b565-0625b4e43cfb.roa (raw, json)
Hash identifier:          ADVzjvLaDHuDm9MPO01Dx6DyPNOFwp594NAaKoNzSxo=
Subject key identifier:   DC:DB:3A:56:78:27:71:7C:57:73:14:F4:14:82:72:F4:76:C5:BE:9E
Certificate issuer:       /CN=f59a5af4-2483-44fd-8539-cacfd54edc45
Certificate serial:       010D0C9F4328584F20F7CDDBA5AA12F5C3412C80
Authority key identifier: 6C:D3:07:8B:48:B6:21:C8:CB:18:75:C5:23:65:DE:84:63:AF:1B:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/8ccc1071-20f1-3c32-b565-0625b4e43cfb.roa
Signing time:             Thu 10 Sep 2026 13:00:12 +0000
ROA not before:           Thu 10 Sep 2026 13:00:12 +0000
ROA not after:            Wed 09 Dec 2026 14:00:12 +0000
asID:                     19523
IP address blocks:        64.203.64.0/24 maxlen: 24
                          64.203.65.0/24 maxlen: 24
                          64.203.66.0/24 maxlen: 24
                          64.203.67.0/24 maxlen: 24
                          64.203.68.0/24 maxlen: 24
                          64.203.69.0/24 maxlen: 24
                          64.203.72.0/24 maxlen: 24
                          64.203.73.0/24 maxlen: 24
                          64.203.74.0/24 maxlen: 24
                          64.203.76.0/24 maxlen: 24
                          64.203.77.0/24 maxlen: 24
                          64.203.78.0/24 maxlen: 24
                          64.203.79.0/24 maxlen: 24
                          64.203.80.0/24 maxlen: 24
                          64.203.81.0/24 maxlen: 24
                          64.203.82.0/24 maxlen: 24
                          64.203.83.0/24 maxlen: 24
                          64.203.84.0/24 maxlen: 24
                          64.203.85.0/24 maxlen: 24
                          64.203.86.0/24 maxlen: 24
                          64.203.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/f59a5af4-2483-44fd-8539-cacfd54edc45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/f59a5af4-2483-44fd-8539-cacfd54edc45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:20:f7:cd:db:a5:aa:12:f5:c3:41:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f59a5af4-2483-44fd-8539-cacfd54edc45
        Validity
            Not Before: Sep 10 13:00:12 2026 GMT
            Not After : Dec  9 14:00:12 2026 GMT
        Subject: CN=544007bd-d891-4eae-b7ba-dcce4137d5c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0f:7d:ac:25:3c:f0:40:a8:04:9d:c4:30:94:
                    9f:27:55:d6:92:3e:e3:23:de:1e:09:79:bb:3a:2b:
                    4e:20:74:f2:51:83:ae:4e:b6:eb:63:99:77:a6:ad:
                    db:bd:e2:d6:67:4a:0f:70:8d:14:a5:37:b6:14:53:
                    2b:c1:ed:be:b1:4a:4a:b5:ee:9e:2c:79:e7:6c:4e:
                    92:b7:17:58:db:1c:94:ee:60:b2:da:4a:e3:6f:6c:
                    39:d8:39:2b:11:b1:d5:a9:83:b1:9c:1e:c6:8a:ed:
                    83:2d:73:b5:7d:ca:e0:dc:f5:0d:c2:47:46:6c:65:
                    ba:f5:de:d6:36:8d:42:ee:c1:72:7b:96:d7:13:3a:
                    7a:89:b0:9b:2a:a1:f5:21:0a:19:f2:f9:fc:13:6d:
                    3b:86:6f:f3:26:fa:62:35:62:ce:38:98:d0:3c:88:
                    c3:f6:23:a3:f0:61:e4:ab:db:96:b1:aa:a1:2a:c9:
                    da:82:98:a5:33:bf:c0:e1:a9:b1:5f:64:9d:d9:e0:
                    aa:6f:68:a2:e6:1b:ca:03:da:22:dc:c5:51:a5:e3:
                    81:74:e0:2d:94:1d:42:da:e6:d5:99:96:e0:27:7a:
                    cf:0e:53:87:c9:cd:bc:85:fe:4e:6c:ce:1d:9d:c3:
                    ea:99:e3:d4:4d:5c:77:09:81:6a:81:2d:01:36:78:
                    6e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:DB:3A:56:78:27:71:7C:57:73:14:F4:14:82:72:F4:76:C5:BE:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/8ccc1071-20f1-3c32-b565-0625b4e43cfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/f59a5af4-2483-44fd-8539-cacfd54edc45.crl

            X509v3 Authority Key Identifier:
                keyid:6C:D3:07:8B:48:B6:21:C8:CB:18:75:C5:23:65:DE:84:63:AF:1B:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.203.64.0-64.203.69.255
                  64.203.72.0-64.203.74.255
                  64.203.76.0-64.203.87.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:55:7d:9f:a7:c2:aa:be:b6:ad:c3:e7:29:41:72:7a:0c:54:
         bf:e6:0b:6e:38:f7:5e:89:5a:e8:97:03:a9:18:fa:79:5e:a8:
         35:3c:9d:7a:a5:07:d8:d2:b5:bc:0f:04:3f:b5:d1:fb:31:19:
         4e:91:f8:13:69:d2:b5:4d:c8:e4:28:5a:e9:58:4a:ab:ad:1a:
         4b:ed:90:63:f8:25:dd:dd:41:2e:72:b3:4e:74:d7:f2:8e:f0:
         fb:c1:d3:d3:d7:96:89:14:b7:04:16:d2:20:ef:ac:29:20:02:
         c9:df:19:3d:9d:63:3e:11:af:a2:c6:bb:48:2a:0b:70:62:6b:
         6f:e2:ce:48:89:8e:e0:1f:e0:93:39:e4:1b:22:7a:5a:f8:89:
         38:92:ba:ba:08:96:fa:b8:74:4e:3e:c5:44:65:08:2e:29:bd:
         9f:bc:91:0c:4f:a4:87:de:14:b9:f0:d1:fb:08:31:2d:ab:c6:
         54:5c:bb:49:e6:96:08:33:19:cb:d3:47:c5:22:cb:51:55:0c:
         00:14:79:86:02:97:70:fc:8c:b6:cd:37:af:a1:13:d1:a3:a9:
         3e:4e:70:0e:64:6d:e7:3a:8d:b8:ff:b4:85:55:2a:8e:70:5d:
         3f:d7:e4:2c:dd:c6:97:7a:61:fd:6d:e6:e3:0e:53:21:1f:3e:
         0c:ca:f7:2b
-----BEGIN CERTIFICATE-----
MIIGZzCCBU+gAwIBAgIUAQ0Mn0MoWE8g983bpaoS9cNBLIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjU5YTVhZjQtMjQ4My00NGZkLTg1MzktY2FjZmQ1NGVk
YzQ1MB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk
NTQ0MDA3YmQtZDg5MS00ZWFlLWI3YmEtZGNjZTQxMzdkNWMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsA99rCU88ECoBJ3EMJSfJ1XWkj7jI94eCXm7
OitOIHTyUYOuTrbrY5l3pq3bveLWZ0oPcI0UpTe2FFMrwe2+sUpKte6eLHnnbE6S
txdY2xyU7mCy2krjb2w52DkrEbHVqYOxnB7Giu2DLXO1fcrg3PUNwkdGbGW69d7W
No1C7sFye5bXEzp6ibCbKqH1IQoZ8vn8E207hm/zJvpiNWLOOJjQPIjD9iOj8GHk
q9uWsaqhKsnagpilM7/A4amxX2Sd2eCqb2ii5hvKA9oi3MVRpeOBdOAtlB1C2ubV
mZbgJ3rPDlOHyc28hf5ObM4dncPqmePUTVx3CYFqgS0BNnhuAwIDAQABo4IDeTCC
A3UwHQYDVR0OBBYEFNzbOlZ4J3F8V3MU9BSCcvR2xb6eMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9mNTlh
NWFmNC0yNDgzLTQ0ZmQtODUzOS1jYWNmZDU0ZWRjNDUvOGNjYzEwNzEtMjBmMS0z
YzMyLWI1NjUtMDYyNWI0ZTQzY2ZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZjU5YTVhZjQtMjQ4My00NGZkLTg1
MzktY2FjZmQ1NGVkYzQ1L2Y1OWE1YWY0LTI0ODMtNDRmZC04NTM5LWNhY2ZkNTRl
ZGM0NS5jcmwwHwYDVR0jBBgwFoAUbNMHi0i2IcjLGHXFI2XehGOvG78wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS9mNTlhNWFmNC0yNDgzLTQ0ZmQtODUzOS1jYWNm
ZDU0ZWRjNDUuY2VyMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqMAwDBAZAy0AD
BAFAy0QwDAMEA0DLSAMEAEDLSjAMAwQCQMtMAwQDQMtQMFQGA1UdIAEB/wRKMEgw
RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv
cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJtVfZ+n
wqq+tq3D5ylBcnoMVL/mC244916JWuiXA6kY+nleqDU8nXqlB9jStbwPBD+10fsx
GU6R+BNp0rVNyOQoWulYSqutGkvtkGP4Jd3dQS5ys0501/KO8PvB09PXlokUtwQW
0iDvrCkgAsnfGT2dYz4Rr6LGu0gqC3Bia2/izkiJjuAf4JM55Bsielr4iTiSuroI
lvq4dE4+xURlCC4pvZ+8kQxPpIfeFLnw0fsIMS2rxlRcu0nmlggzGcvTR8Uiy1FV
DAAUeYYCl3D8jLbNN6+hE9GjqT5OcA5kbec6jbj/tIVVKo5wXT/X5Czdxpd6Yf1t
5uMOUyEfPgzK9ys=
-----END CERTIFICATE-----
Generated at Thu Sep 24 10:17:15 2026 by rpki-client