Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f9e5042-0109-358f-9abb-5204ef9d0863.roa
File:                     9f9e5042-0109-358f-9abb-5204ef9d0863.roa (raw, json)
Hash identifier:          LdPCLOkQh70ZYsWDByuBUoEG3VDpNff9Nt7OFIS+fWQ=
Subject key identifier:   96:0A:8A:8F:27:C9:8B:2D:E3:2E:8C:2F:49:D3:10:C1:16:7C:EE:1D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A7780A6601BD43C2907D89D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f9e5042-0109-358f-9abb-5204ef9d0863.roa
Signing time:             Thu 10 Jul 2025 01:00:51 +0000
ROA not before:           Thu 10 Jul 2025 01:00:51 +0000
ROA not after:            Wed 08 Oct 2025 01:00:51 +0000
asID:                     36733
IP address blocks:        64.235.160.0/19 maxlen: 19
                          65.97.0.0/20 maxlen: 20
                          65.97.16.0/20 maxlen: 20
                          67.174.80.0/20 maxlen: 20
                          68.81.10.0/23 maxlen: 23
                          68.85.136.0/23 maxlen: 23
                          68.85.215.0/24 maxlen: 24
                          68.86.134.0/23 maxlen: 23
                          68.86.228.0/23 maxlen: 23
                          68.87.16.0/22 maxlen: 22
                          68.87.24.0/24 maxlen: 24
                          68.87.26.0/23 maxlen: 23
                          68.87.28.0/22 maxlen: 22
                          68.87.32.0/20 maxlen: 20
                          68.87.96.0/20 maxlen: 20
                          69.137.133.0/24 maxlen: 24
                          69.139.191.0/24 maxlen: 24
                          69.139.244.0/23 maxlen: 23
                          69.241.18.0/23 maxlen: 23
                          69.241.40.0/21 maxlen: 21
                          69.241.72.0/24 maxlen: 24
                          69.247.96.0/20 maxlen: 20
                          73.5.240.0/20 maxlen: 20
                          75.149.106.0/23 maxlen: 23
                          76.26.112.0/21 maxlen: 21
                          76.96.48.0/20 maxlen: 20
                          76.96.64.0/20 maxlen: 20
                          96.82.16.0/23 maxlen: 23
                          96.97.20.0/22 maxlen: 22
                          96.108.38.0/23 maxlen: 23
                          96.108.76.0/22 maxlen: 22
                          96.108.144.0/23 maxlen: 23
                          96.109.130.0/23 maxlen: 23
                          96.115.158.0/23 maxlen: 23
                          96.116.0.0/19 maxlen: 19
                          96.119.96.0/19 maxlen: 19
                          96.216.36.0/22 maxlen: 22
                          98.40.34.0/23 maxlen: 23
                          162.150.160.0/20 maxlen: 20
                          2001:558:e0::/44 maxlen: 44
                          2001:558:400::/44 maxlen: 44
                          2001:558:460::/44 maxlen: 44
                          2001:558:461::/48 maxlen: 48
                          2001:558:502a::/48 maxlen: 48
                          2001:558:6000::/48 maxlen: 48
                          2001:558:fc0b::/48 maxlen: 48
                          2001:558:fe14::/48 maxlen: 48
                          2001:558:fee7::/48 maxlen: 48
                          2001:558:ff00::/40 maxlen: 40
                          2601:a40::/26 maxlen: 26
                          2601:a40:202::/48 maxlen: 48
                          2601:a40:600::/40 maxlen: 40
                          2601:a40:700::/40 maxlen: 40
                          2603:2a40::/26 maxlen: 26
                          2603:2a40:5::/48 maxlen: 48
                          2603:2a40:600::/40 maxlen: 40
                          2603:3019::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:77:80:a6:60:1b:d4:3c:29:07:d8:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 10 01:00:51 2025 GMT
            Not After : Oct  8 01:00:51 2025 GMT
        Subject: CN=60707f35-815d-4b54-ac05-9703061380ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:dc:fd:e4:97:44:00:99:c8:ac:e2:2e:8b:ea:
                    43:cc:d9:24:86:37:5d:fe:39:f1:b0:17:f0:8d:fd:
                    c1:21:21:72:b5:51:8a:d6:d7:7b:84:08:a4:a5:b4:
                    2d:79:8c:68:7b:99:f1:e9:bf:16:b6:6b:fd:19:3e:
                    3b:7d:cf:3b:4d:b2:c1:6d:69:9c:3b:e9:d4:9e:c4:
                    8c:36:13:7d:cd:ec:77:a9:12:98:b7:2c:d8:b7:42:
                    f3:1c:42:53:4d:16:aa:53:08:1b:bd:8a:34:74:41:
                    1e:fd:fd:8e:8c:fe:2a:eb:37:bf:6f:61:22:a8:c9:
                    dc:b2:f0:f8:a0:fb:97:a5:e4:a8:45:ec:97:a2:86:
                    23:d4:12:dc:ee:30:39:cc:53:d1:e6:9b:3f:d6:f0:
                    2f:ec:9e:cd:e6:69:56:8c:a6:17:d4:72:dd:5a:bf:
                    62:3a:f9:4f:b5:5a:34:02:a3:28:12:f2:c7:7f:b3:
                    03:ef:b0:f6:f7:34:1f:3a:d2:79:b7:cc:81:60:3d:
                    4d:dc:45:d0:13:15:9d:de:f7:dc:56:74:51:0f:12:
                    a9:a8:13:59:ea:26:63:ca:55:fd:e6:ec:fd:73:1c:
                    c3:6e:99:d1:50:cd:d7:08:40:7f:61:33:b3:42:9c:
                    58:1a:07:c1:ce:62:c0:cf:31:ff:30:e2:4e:ff:73:
                    09:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:0A:8A:8F:27:C9:8B:2D:E3:2E:8C:2F:49:D3:10:C1:16:7C:EE:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f9e5042-0109-358f-9abb-5204ef9d0863.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.235.160.0/19
                  65.97.0.0/19
                  67.174.80.0/20
                  68.81.10.0/23
                  68.85.136.0/23
                  68.85.215.0/24
                  68.86.134.0/23
                  68.86.228.0/23
                  68.87.16.0/22
                  68.87.24.0/24
                  68.87.26.0-68.87.47.255
                  68.87.96.0/20
                  69.137.133.0/24
                  69.139.191.0/24
                  69.139.244.0/23
                  69.241.18.0/23
                  69.241.40.0/21
                  69.241.72.0/24
                  69.247.96.0/20
                  73.5.240.0/20
                  75.149.106.0/23
                  76.26.112.0/21
                  76.96.48.0-76.96.79.255
                  96.82.16.0/23
                  96.97.20.0/22
                  96.108.38.0/23
                  96.108.76.0/22
                  96.108.144.0/23
                  96.109.130.0/23
                  96.115.158.0/23
                  96.116.0.0/19
                  96.119.96.0/19
                  96.216.36.0/22
                  98.40.34.0/23
                  162.150.160.0/20
                IPv6:
                  2001:558:e0::/44
                  2001:558:400::/44
                  2001:558:460::/44
                  2001:558:502a::/48
                  2001:558:6000::/48
                  2001:558:fc0b::/48
                  2001:558:fe14::/48
                  2001:558:fee7::/48
                  2001:558:ff00::/40
                  2601:a40::/26
                  2603:2a40::/26
                  2603:3019::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:76:e3:c6:e2:8b:48:85:0d:77:c1:df:b5:40:4a:18:11:f2:
         2c:11:5c:c6:c9:90:a7:5f:05:b7:fb:31:d2:95:e2:14:b1:c7:
         6d:e5:b4:af:c7:74:9f:a2:d8:47:47:e3:b0:67:5b:a0:3b:1d:
         fd:c8:5e:88:23:31:db:c4:6d:ca:cf:04:4f:ae:b8:fb:80:c7:
         31:a9:4d:b0:33:95:9a:89:01:e1:83:e1:67:46:66:18:c2:8e:
         f5:39:4d:7e:a4:9f:53:1d:17:0a:b9:5e:d5:99:8a:63:c7:0a:
         cd:60:62:a4:27:f6:50:de:61:ca:e8:45:07:be:a5:ad:64:cf:
         aa:2b:ad:ed:4d:fa:39:b5:3e:99:5b:94:44:42:44:b2:dc:bd:
         f8:00:43:ad:e3:12:b0:1d:12:2b:9c:66:37:94:2a:20:9d:55:
         23:4f:ec:b9:2b:0a:fb:b4:73:e4:ad:da:b1:e6:a9:aa:52:82:
         de:ed:ba:a0:5c:2c:41:28:94:c8:7b:c9:21:68:22:69:d5:97:
         27:58:39:55:cb:77:25:49:58:be:02:77:52:9f:c3:fd:89:a8:
         aa:a5:0b:8c:a5:1c:f1:94:74:28:bf:21:07:0a:be:c4:2a:bf:
         80:04:d8:52:15:8a:e0:eb:f5:3c:50:e5:b5:35:ee:82:e9:ba:
         aa:58:b5:1f
-----BEGIN CERTIFICATE-----
MIIHlDCCBnygAwIBAgIUAQ0Mn0MoWEp3gKZgG9Q8KQfYnYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDcxMDAxMDA1MVoXDTI1MTAwODAxMDA1MVowLzEtMCsGA1UEAxMk
NjA3MDdmMzUtODE1ZC00YjU0LWFjMDUtOTcwMzA2MTM4MGFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdz95JdEAJnIrOIui+pDzNkkhjdd/jnxsBfw
jf3BISFytVGK1td7hAikpbQteYxoe5nx6b8Wtmv9GT47fc87TbLBbWmcO+nUnsSM
NhN9zex3qRKYtyzYt0LzHEJTTRaqUwgbvYo0dEEe/f2OjP4q6ze/b2EiqMncsvD4
oPuXpeSoReyXooYj1BLc7jA5zFPR5ps/1vAv7J7N5mlWjKYX1HLdWr9iOvlPtVo0
AqMoEvLHf7MD77D29zQfOtJ5t8yBYD1N3EXQExWd3vfcVnRRDxKpqBNZ6iZjylX9
5uz9cxzDbpnRUM3XCEB/YTOzQpxYGgfBzmLAzzH/MOJO/3MJAQIDAQABo4IEpjCC
BKIwHQYDVR0OBBYEFJYKio8nyYst4y6ML0nTEMEWfO4dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWY5ZTUwNDItMDEwOS0z
NThmLTlhYmItNTIwNGVmOWQwODYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMIIBbgYIKwYBBQUHAQcBAf8EggFdMIIBWTCB6QQCAAEwgeID
BAVA66ADBAVBYQADBARDrlADBAFEUQoDBAFEVYgDBABEVdcDBAFEVoYDBAFEVuQD
BAJEVxADBABEVxgwDAMEAURXGgMEBERXIAMEBERXYAMEAEWJhQMEAEWLvwMEAUWL
9AMEAUXxEgMEA0XxKAMEAEXxSAMEBEX3YAMEBEkF8AMEAUuVagMEA0wacDAMAwQE
TGAwAwQETGBAAwQBYFIQAwQCYGEUAwQBYGwmAwQCYGxMAwQBYGyQAwQBYG2CAwQB
YHOeAwQFYHQAAwQFYHdgAwQCYNgkAwQBYigiAwQEopagMGsEAgACMGUDBwQgAQVY
AOADBwQgAQVYBAADBwQgAQVYBGADBwAgAQVYUCoDBwAgAQVYYAADBwAgAQVY/AsD
BwAgAQVY/hQDBwAgAQVY/ucDBgAgAQVY/wMFBiYBCkADBQYmAypAAwUAJgMwGTBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBLduPG4otIhQ13wd+1QEoYEfIsEVzGyZCnXwW3+zHSleIUscdt5bSv
x3SfothHR+OwZ1ugOx39yF6IIzHbxG3KzwRPrrj7gMcxqU2wM5WaiQHhg+FnRmYY
wo71OU1+pJ9THRcKuV7VmYpjxwrNYGKkJ/ZQ3mHK6EUHvqWtZM+qK63tTfo5tT6Z
W5REQkSy3L34AEOt4xKwHRIrnGY3lCognVUjT+y5Kwr7tHPkrdqx5qmqUoLe7bqg
XCxBKJTIe8khaCJp1ZcnWDlVy3clSVi+AndSn8P9iaiqpQuMpRzxlHQovyEHCr7E
Kr+ABNhSFYrg6/U8UOW1Ne6C6bqqWLUf
-----END CERTIFICATE-----
Generated at Mon Jul 21 07:33:06 2025 by rpki-client