Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3/aacdbaa6-ec6f-3a9c-bd9d-b1785fba835f.roa
File:                     aacdbaa6-ec6f-3a9c-bd9d-b1785fba835f.roa (raw, json)
Hash identifier:          6fhdiOqfTHjAvXBg6U4o2xkIRBAlbQQ6F3YAk6fkYjA=
Subject key identifier:   B1:46:7B:C8:76:76:38:63:2A:17:F9:E5:D8:9E:69:E2:1E:F6:6A:D3
Certificate issuer:       /CN=e78d9e3b-7aed-4f65-85b4-120ec0a9ede3
Certificate serial:       010D0C9F4328584CDC677238F6B4987B1B83A920
Authority key identifier: CB:31:32:7B:67:42:3C:B0:C4:2D:66:22:9B:33:A1:EC:77:FA:9C:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3/aacdbaa6-ec6f-3a9c-bd9d-b1785fba835f.roa
Signing time:             Sat 14 Feb 2026 14:00:41 +0000
ROA not before:           Sat 14 Feb 2026 14:00:41 +0000
ROA not after:            Fri 15 May 2026 13:00:41 +0000
asID:                     11059
IP address blocks:        64.234.228.0/22 maxlen: 22
                          136.175.64.0/23 maxlen: 23
                          199.202.224.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:67:72:38:f6:b4:98:7b:1b:83:a9:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e78d9e3b-7aed-4f65-85b4-120ec0a9ede3
        Validity
            Not Before: Feb 14 14:00:41 2026 GMT
            Not After : May 15 13:00:41 2026 GMT
        Subject: CN=67c343cd-8b7e-495b-8502-1a07c1a2229c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c6:d1:e0:7d:f5:3f:48:c8:45:08:e2:e4:6e:
                    2d:51:2f:d6:1b:5f:44:03:77:f1:88:7d:8f:02:51:
                    0b:15:a2:4f:19:ce:16:cc:ca:c8:44:f4:85:ab:36:
                    3c:ab:c9:74:70:0e:f3:30:a2:88:ac:32:83:fe:6d:
                    70:4c:dd:98:de:4c:59:cd:46:b7:72:93:ef:10:24:
                    2a:8e:53:ba:88:6b:1d:5a:c7:55:6c:56:bb:70:ff:
                    d1:8f:fb:b7:ff:9c:84:07:06:c8:3d:1c:83:65:df:
                    41:57:56:0e:af:be:68:fd:6c:81:ba:19:9f:e6:fe:
                    fd:0a:f4:7f:e2:71:b9:d4:03:da:4c:15:24:e6:90:
                    b8:ab:b8:88:11:53:06:56:d5:a6:8a:43:df:e3:a0:
                    3a:29:8d:a5:a9:20:1b:c3:56:80:32:62:9d:89:93:
                    ee:c2:e5:b1:cd:f5:ee:bd:48:2e:ee:f8:07:0d:c6:
                    69:b6:08:60:6a:38:67:81:5f:ae:83:21:33:f7:8b:
                    45:83:8a:1a:cc:c8:89:47:bd:c1:50:74:8b:1d:66:
                    c4:f8:5e:8e:85:b3:17:d8:0b:9a:f7:96:18:47:ba:
                    00:fa:09:17:bb:b4:7e:27:8e:ce:96:54:15:d0:c7:
                    30:d0:fc:52:a8:13:9a:5f:91:67:da:81:ad:fd:9f:
                    bd:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:46:7B:C8:76:76:38:63:2A:17:F9:E5:D8:9E:69:E2:1E:F6:6A:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3/aacdbaa6-ec6f-3a9c-bd9d-b1785fba835f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3.crl

            X509v3 Authority Key Identifier:
                keyid:CB:31:32:7B:67:42:3C:B0:C4:2D:66:22:9B:33:A1:EC:77:FA:9C:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.234.228.0/22
                  136.175.64.0/23
                  199.202.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:b4:09:c9:d4:f1:71:d2:51:6c:b5:60:5b:0c:55:e7:a2:08:
         28:dc:40:cc:ee:bf:f2:32:c7:75:93:aa:5f:1a:9a:17:35:c3:
         99:81:b7:9a:7d:93:2a:e2:a8:a0:47:46:49:c0:8a:bc:cd:59:
         bb:7a:d4:df:9d:8e:88:45:64:81:2d:b2:41:e2:21:c2:2b:42:
         73:b5:30:ee:8a:25:d3:3e:25:f2:12:a9:dc:d1:55:c8:36:55:
         68:09:8b:40:14:57:39:22:20:41:6d:c5:c1:2e:61:1a:01:a2:
         8d:9d:d8:75:52:69:c1:b4:8c:a0:40:d5:c2:34:32:10:ed:40:
         34:f3:e0:97:e7:e6:0a:83:5b:2f:63:b8:a7:a3:24:52:0c:ae:
         84:e3:d8:c7:22:e8:d1:65:ab:ea:c0:2a:88:b4:5c:c0:50:f6:
         f0:1a:a3:09:28:2e:e2:63:dc:aa:dc:50:dc:bf:a5:0f:aa:1c:
         55:6b:4e:7f:c8:ec:5e:73:a4:9d:63:5e:76:d8:34:5e:04:bc:
         05:1b:f3:ce:43:33:70:55:30:6c:7c:e1:fe:7a:1f:89:8c:24:
         c9:9d:a6:20:0a:de:6e:7d:9b:ec:90:31:97:1d:12:d7:11:14:
         ae:74:62:c6:33:18:ea:6d:91:37:53:a1:a9:c3:c9:e9:0d:69:
         f4:f9:4c:92
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEzcZ3I49rSYexuDqSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTc4ZDllM2ItN2FlZC00ZjY1LTg1YjQtMTIwZWMwYTll
ZGUzMB4XDTI2MDIxNDE0MDA0MVoXDTI2MDUxNTEzMDA0MVowLzEtMCsGA1UEAxMk
NjdjMzQzY2QtOGI3ZS00OTViLTg1MDItMWEwN2MxYTIyMjljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcbR4H31P0jIRQji5G4tUS/WG19EA3fxiH2P
AlELFaJPGc4WzMrIRPSFqzY8q8l0cA7zMKKIrDKD/m1wTN2Y3kxZzUa3cpPvECQq
jlO6iGsdWsdVbFa7cP/Rj/u3/5yEBwbIPRyDZd9BV1YOr75o/WyBuhmf5v79CvR/
4nG51APaTBUk5pC4q7iIEVMGVtWmikPf46A6KY2lqSAbw1aAMmKdiZPuwuWxzfXu
vUgu7vgHDcZptghgajhngV+ugyEz94tFg4oazMiJR73BUHSLHWbE+F6OhbMX2Aua
95YYR7oA+gkXu7R+J47OllQV0Mcw0PxSqBOaX5Fn2oGt/Z+9QwIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFLFGe8h2djhjKhf55dieaeIe9mrTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lNzhk
OWUzYi03YWVkLTRmNjUtODViNC0xMjBlYzBhOWVkZTMvYWFjZGJhYTYtZWM2Zi0z
YTljLWJkOWQtYjE3ODVmYmE4MzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTc4ZDllM2ItN2FlZC00ZjY1LTg1
YjQtMTIwZWMwYTllZGUzL2U3OGQ5ZTNiLTdhZWQtNGY2NS04NWI0LTEyMGVjMGE5
ZWRlMy5jcmwwHwYDVR0jBBgwFoAUyzEye2dCPLDELWYimzOh7Hf6nB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lNzhkOWUzYi03YWVkLTRmNjUtODViNC0xMjBl
YzBhOWVkZTMuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCQOrkAwQB
iK9AAwQCx8rgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAGu0CcnU8XHSUWy1YFsMVeeiCCjcQMzuv/Iyx3WT
ql8amhc1w5mBt5p9kyriqKBHRknAirzNWbt61N+djohFZIEtskHiIcIrQnO1MO6K
JdM+JfISqdzRVcg2VWgJi0AUVzkiIEFtxcEuYRoBoo2d2HVSacG0jKBA1cI0MhDt
QDTz4Jfn5gqDWy9juKejJFIMroTj2Mci6NFlq+rAKoi0XMBQ9vAaowkoLuJj3Krc
UNy/pQ+qHFVrTn/I7F5zpJ1jXnbYNF4EvAUb885DM3BVMGx84f56H4mMJMmdpiAK
3m59m+yQMZcdEtcRFK50YsYzGOptkTdToanDyekNafT5TJI=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:52:08 2026 by rpki-client