Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/ddbe2504-0a2c-3b73-9f6a-7b58fd3ead71.roa
File:                     ddbe2504-0a2c-3b73-9f6a-7b58fd3ead71.roa (raw, json)
Hash identifier:          LrQXTwocM77H2IFB8DQgF0FbAhFZ4tZzA3h1ZHhW4Oc=
Subject key identifier:   03:0A:A4:12:88:5F:C3:E5:E1:4D:CE:A0:C4:9F:0B:F8:1D:00:AF:E5
Certificate issuer:       /CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
Certificate serial:       010D0C9F4328584EA787E8898BDEA8C473902E60
Authority key identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/ddbe2504-0a2c-3b73-9f6a-7b58fd3ead71.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     14956
IP address blocks:        216.126.224.0/23 maxlen: 24
                          216.126.227.0/24 maxlen: 24
                          216.126.236.0/23 maxlen: 24
                          216.126.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:e8:89:8b:de:a8:c4:73:90:2e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=720d557b-ea47-4bf5-a570-52a6a8eebd4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:42:28:5f:8b:5b:82:e8:06:87:82:be:25:8f:
                    cb:b6:ae:33:6e:a6:94:44:48:d7:d2:70:42:37:77:
                    6f:95:38:d6:b8:43:78:a5:16:1a:12:87:21:f9:f2:
                    d6:2b:cf:02:a1:21:87:4b:f9:11:78:bf:47:22:70:
                    e9:b7:50:35:c9:f5:b1:26:d7:bf:5e:92:9e:bc:f5:
                    5b:e3:6c:3a:4c:bf:e6:08:d3:7b:c3:83:67:eb:04:
                    aa:29:c4:c2:3d:95:b0:68:9b:91:21:b6:93:99:e4:
                    d4:72:ee:60:d9:db:18:36:ab:6a:ac:41:26:48:59:
                    6e:82:cd:2f:09:bb:0d:4e:6a:ad:09:a5:23:41:1e:
                    11:59:69:69:a7:e0:2f:cd:f4:fc:94:35:d1:42:ef:
                    16:0f:b7:41:df:4a:aa:1a:8b:7d:b6:ed:5a:0f:a5:
                    d0:90:6c:44:24:39:5b:13:2d:27:ad:6a:cc:49:17:
                    5c:6e:44:fa:f2:73:35:6d:14:bb:8a:c7:e6:e1:bb:
                    73:4d:27:bd:00:da:31:dd:18:e6:c5:56:2f:19:22:
                    93:26:34:e1:58:f6:c7:38:c6:3c:8d:2e:ab:bf:9b:
                    41:ee:9d:17:f6:73:31:e9:a7:6f:e4:56:65:42:fe:
                    37:ac:2c:42:4e:f7:63:95:e7:c8:c1:1a:20:38:6b:
                    cf:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:0A:A4:12:88:5F:C3:E5:E1:4D:CE:A0:C4:9F:0B:F8:1D:00:AF:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/ddbe2504-0a2c-3b73-9f6a-7b58fd3ead71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl

            X509v3 Authority Key Identifier:
                keyid:68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.126.224.0/23
                  216.126.227.0/24
                  216.126.236.0/23
                  216.126.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:b6:0a:ed:c9:f0:86:f5:a5:12:49:d9:e5:42:ce:76:0b:af:
         84:a9:2a:3c:d1:07:f3:d2:66:61:cd:a0:63:5d:17:32:6d:00:
         1a:9f:47:32:1e:ad:bc:97:9a:50:a4:ec:85:14:0c:ec:d4:ce:
         c2:e4:4e:fa:3e:99:33:0f:9d:e4:15:a1:30:cd:8f:31:29:e6:
         2c:61:37:b2:33:50:1a:5d:ac:06:ee:93:75:57:e0:5c:b9:51:
         ca:76:e6:c0:71:11:eb:1a:46:e9:23:8d:73:6e:df:5a:f3:36:
         40:98:60:79:6f:25:4f:b8:7f:a6:42:ae:08:89:85:c2:ee:65:
         3e:05:d9:51:9c:82:07:54:ee:28:a1:85:49:be:71:f3:cc:90:
         ff:af:a0:8c:6e:f9:ff:57:c4:46:c0:67:9f:bd:f0:b9:ea:c1:
         ea:18:b5:e5:2f:88:7a:e6:4a:63:0a:df:c0:f8:91:c0:1b:6b:
         57:8b:16:cf:31:7a:d3:e8:53:7f:c1:4e:ce:c4:ee:c8:f4:47:
         ee:53:67:0f:b1:b6:f9:b0:38:5b:ac:59:e0:07:6a:7c:a5:4e:
         22:89:93:91:d1:f7:d5:e8:5f:2b:ce:2a:f2:7a:c5:63:41:e8:
         0f:ea:ae:97:53:6a:7b:4d:e8:55:19:1b:a7:13:e8:41:a4:6d:
         26:99:b1:16
-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWE6nh+iJi96oxHOQLmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTMwNDk4MDAtZmYxNy00OWE2LWIwMjktZWM5MDhlMWM3
Y2IzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NzIwZDU1N2ItZWE0Ny00YmY1LWE1NzAtNTJhNmE4ZWViZDRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kIoX4tbgugGh4K+JY/Ltq4zbqaUREjX0nBC
N3dvlTjWuEN4pRYaEoch+fLWK88CoSGHS/kReL9HInDpt1A1yfWxJte/XpKevPVb
42w6TL/mCNN7w4Nn6wSqKcTCPZWwaJuRIbaTmeTUcu5g2dsYNqtqrEEmSFlugs0v
CbsNTmqtCaUjQR4RWWlpp+AvzfT8lDXRQu8WD7dB30qqGot9tu1aD6XQkGxEJDlb
Ey0nrWrMSRdcbkT68nM1bRS7isfm4btzTSe9ANox3RjmxVYvGSKTJjThWPbHOMY8
jS6rv5tB7p0X9nMx6adv5FZlQv43rCxCTvdjlefIwRogOGvP8wIDAQABo4IDZzCC
A2MwHQYDVR0OBBYEFAMKpBKIX8Pl4U3OoMSfC/gdAK/lMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMzA0
OTgwMC1mZjE3LTQ5YTYtYjAyOS1lYzkwOGUxYzdjYjMvZGRiZTI1MDQtMGEyYy0z
YjczLTlmNmEtN2I1OGZkM2VhZDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTMwNDk4MDAtZmYxNy00OWE2LWIw
MjktZWM5MDhlMWM3Y2IzL2EzMDQ5ODAwLWZmMTctNDlhNi1iMDI5LWVjOTA4ZTFj
N2NiMy5jcmwwHwYDVR0jBBgwFoAUaCPKKb2RoUnOleZasQ9ms4VnbPAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hMzA0OTgwMC1mZjE3LTQ5YTYtYjAyOS1lYzkw
OGUxYzdjYjMuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQB2H7gAwQA
2H7jAwQB2H7sAwQA2H7vMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr
BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz
Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHu2Cu3J8Ib1pRJJ2eVCznYLr4SpKjzR
B/PSZmHNoGNdFzJtABqfRzIerbyXmlCk7IUUDOzUzsLkTvo+mTMPneQVoTDNjzEp
5ixhN7IzUBpdrAbuk3VX4Fy5Ucp25sBxEesaRukjjXNu31rzNkCYYHlvJU+4f6ZC
rgiJhcLuZT4F2VGcggdU7iihhUm+cfPMkP+voIxu+f9XxEbAZ5+98LnqweoYteUv
iHrmSmMK38D4kcAba1eLFs8xetPoU3/BTs7E7sj0R+5TZw+xtvmwOFusWeAHanyl
TiKJk5HR99XoXyvOKvJ6xWNB6A/qrpdTantN6FUZG6cT6EGkbSaZsRY=
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:39:52 2026 by rpki-client