Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/02e6e24b-0337-38a5-8435-aaed43ce5fd1.roa
File:                     02e6e24b-0337-38a5-8435-aaed43ce5fd1.roa (raw, json)
Hash identifier:          217uT6lqaRZlnGUUWDXw20aYSQtcGjUosyzmK8XIM1g=
Subject key identifier:   85:9D:B1:F3:7B:26:A2:79:39:9B:FC:CE:C1:EE:1A:86:DC:FA:6F:4B
Certificate issuer:       /CN=9ed45e97-90c2-483d-a68b-2dd2c83266a2
Certificate serial:       010D0C9F4328584B5571DE560878EEE290B0F358
Authority key identifier: D8:D6:BF:37:B5:B6:4E:D4:1D:79:55:CD:93:7E:A6:5E:00:89:9F:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/02e6e24b-0337-38a5-8435-aaed43ce5fd1.roa
Signing time:             Sat 27 Sep 2025 13:00:41 +0000
ROA not before:           Sat 27 Sep 2025 13:00:41 +0000
ROA not after:            Fri 26 Dec 2025 14:00:41 +0000
asID:                     1299
IP address blocks:        64.246.96.0/19 maxlen: 24
                          104.37.52.0/22 maxlen: 24
                          137.83.84.0/23 maxlen: 24
                          158.247.72.0/22 maxlen: 24
                          168.245.180.0/22 maxlen: 24
                          192.211.11.0/24 maxlen: 24
                          2001:4950::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:55:71:de:56:08:78:ee:e2:90:b0:f3:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed45e97-90c2-483d-a68b-2dd2c83266a2
        Validity
            Not Before: Sep 27 13:00:41 2025 GMT
            Not After : Dec 26 14:00:41 2025 GMT
        Subject: CN=d2928baf-2e85-4511-83ae-e0726f6c14b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:4b:00:0f:3a:89:d0:35:29:46:42:4f:5e:4c:
                    8a:c1:ba:bb:f0:29:31:69:01:81:4a:55:6a:f0:fd:
                    b6:0d:9a:2e:ff:7b:70:8a:0b:bd:64:18:2d:2f:5f:
                    b8:39:0e:75:8c:02:c5:2f:a5:4a:df:4e:f9:83:b5:
                    f2:ab:f1:40:51:88:99:6e:fc:cc:ab:f6:5b:b6:b2:
                    2a:5a:19:f8:65:58:c2:63:46:e0:8f:cb:c4:c1:ee:
                    20:28:36:51:ba:9d:6d:e0:81:2f:db:ac:16:e0:76:
                    a9:bf:9d:9d:8c:69:a7:5b:1a:1a:78:4a:e4:ad:97:
                    ee:35:9f:db:9c:7b:41:67:62:4f:bc:f9:b7:10:44:
                    28:bd:50:45:ad:e0:27:16:a8:46:4e:2d:a7:22:8a:
                    28:f7:90:f5:3b:bb:4e:78:19:d0:31:df:ae:17:f2:
                    bf:b5:15:fa:4c:8a:26:46:fd:b6:66:63:45:f4:b9:
                    b5:c3:d9:1c:c6:44:52:05:fd:70:b0:56:d7:89:6d:
                    a8:21:7a:56:93:95:0f:36:14:a5:69:a3:c3:2c:1b:
                    1d:95:26:99:e7:07:67:bf:e1:0e:f4:40:a1:ab:06:
                    a3:bc:fd:78:c8:31:d7:b3:5d:4e:fb:8c:79:a0:ca:
                    dc:0f:05:30:c9:11:9e:27:68:26:2d:72:68:af:15:
                    0a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:9D:B1:F3:7B:26:A2:79:39:9B:FC:CE:C1:EE:1A:86:DC:FA:6F:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/02e6e24b-0337-38a5-8435-aaed43ce5fd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.crl

            X509v3 Authority Key Identifier:
                keyid:D8:D6:BF:37:B5:B6:4E:D4:1D:79:55:CD:93:7E:A6:5E:00:89:9F:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.246.96.0/19
                  104.37.52.0/22
                  137.83.84.0/23
                  158.247.72.0/22
                  168.245.180.0/22
                  192.211.11.0/24
                IPv6:
                  2001:4950::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:28:9c:f1:48:1d:af:f9:ce:e2:5f:be:4b:4e:dd:52:b5:1e:
         77:75:0f:c3:a1:3a:cc:b8:9b:4b:30:25:b1:ef:bf:2c:81:f5:
         98:25:a7:16:b6:2a:87:fc:67:5a:fc:84:dd:38:8f:e0:e9:5b:
         c1:b3:f0:ed:79:f5:68:53:6b:48:a0:1d:dd:91:d5:2e:f1:ef:
         34:7a:c0:b0:69:cb:76:67:60:12:3c:ac:a9:e7:6b:12:0e:38:
         05:30:08:45:7e:1d:13:cd:06:d7:18:b6:e1:84:bc:0d:52:80:
         b5:f0:6e:4d:03:58:9b:96:47:7c:e3:5f:2a:7d:17:93:e2:6b:
         bd:38:8c:07:96:21:ee:e5:07:5c:8d:c0:a7:ec:5e:51:f6:ef:
         1f:8f:ee:9c:a2:53:35:b7:b5:b1:c5:a2:0b:7c:79:ec:64:5d:
         2d:6c:98:44:29:40:fb:9e:98:49:e7:62:9b:e3:9c:f6:af:57:
         4d:7b:c9:a6:bb:b3:78:cc:d3:37:7f:93:45:55:71:86:43:13:
         49:28:c2:8a:46:c8:4d:4a:2e:07:0a:0b:0b:45:63:55:26:1d:
         58:12:90:fe:1b:64:97:56:bb:8b:85:b3:e0:5a:14:49:3e:d6:
         71:11:b1:2f:be:f6:2f:78:9a:84:21:68:2a:1d:41:69:22:4d:
         72:1e:a1:8c
-----BEGIN CERTIFICATE-----
MIIGcDCCBVigAwIBAgIUAQ0Mn0MoWEtVcd5WCHju4pCw81gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWVkNDVlOTctOTBjMi00ODNkLWE2OGItMmRkMmM4MzI2
NmEyMB4XDTI1MDkyNzEzMDA0MVoXDTI1MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk
ZDI5MjhiYWYtMmU4NS00NTExLTgzYWUtZTA3MjZmNmMxNGIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjksADzqJ0DUpRkJPXkyKwbq78CkxaQGBSlVq
8P22DZou/3twigu9ZBgtL1+4OQ51jALFL6VK3075g7Xyq/FAUYiZbvzMq/ZbtrIq
Whn4ZVjCY0bgj8vEwe4gKDZRup1t4IEv26wW4Hapv52djGmnWxoaeErkrZfuNZ/b
nHtBZ2JPvPm3EEQovVBFreAnFqhGTi2nIooo95D1O7tOeBnQMd+uF/K/tRX6TIom
Rv22ZmNF9Lm1w9kcxkRSBf1wsFbXiW2oIXpWk5UPNhSlaaPDLBsdlSaZ5wdnv+EO
9EChqwajvP14yDHXs11O+4x5oMrcDwUwyRGeJ2gmLXJorxUKJwIDAQABo4IDgjCC
A34wHQYDVR0OBBYEFIWdsfN7JqJ5OZv8zsHuGobc+m9LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85ZWQ0
NWU5Ny05MGMyLTQ4M2QtYTY4Yi0yZGQyYzgzMjY2YTIvMDJlNmUyNGItMDMzNy0z
OGE1LTg0MzUtYWFlZDQzY2U1ZmQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWVkNDVlOTctOTBjMi00ODNkLWE2
OGItMmRkMmM4MzI2NmEyLzllZDQ1ZTk3LTkwYzItNDgzZC1hNjhiLTJkZDJjODMy
NjZhMi5jcmwwHwYDVR0jBBgwFoAU2Na/N7W2TtQdeVXNk36mXgCJn/gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS85ZWQ0NWU5Ny05MGMyLTQ4M2QtYTY4Yi0yZGQy
YzgzMjY2YTIuY2VyMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQFQPZgAwQC
aCU0AwQBiVNUAwQCnvdIAwQCqPW0AwQAwNMLMA0EAgACMAcDBQAgAUlQMFQGA1Ud
IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu
YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD
ggEBAD4onPFIHa/5zuJfvktO3VK1Hnd1D8OhOsy4m0swJbHvvyyB9Zglpxa2Kof8
Z1r8hN04j+DpW8Gz8O159WhTa0igHd2R1S7x7zR6wLBpy3ZnYBI8rKnnaxIOOAUw
CEV+HRPNBtcYtuGEvA1SgLXwbk0DWJuWR3zjXyp9F5Pia704jAeWIe7lB1yNwKfs
XlH27x+P7pyiUzW3tbHFogt8eexkXS1smEQpQPuemEnnYpvjnPavV017yaa7s3jM
0zd/k0VVcYZDE0kowopGyE1KLgcKCwtFY1UmHVgSkP4bZJdWu4uFs+BaFEk+1nER
sS++9i94moQhaCodQWkiTXIeoYw=
-----END CERTIFICATE-----
Generated at Fri Oct 10 21:32:53 2025 by rpki-client