Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/e38b7540-8d02-3428-8b61-2305b0a7237b.roa
File:                     e38b7540-8d02-3428-8b61-2305b0a7237b.roa (raw, json)
Hash identifier:          pminPOBcUVKvtPzA5BT7N5JRNa6/87fh25ouQFxQhdw=
Subject key identifier:   2E:3C:A2:84:C6:D0:1E:DA:68:25:0A:FD:E9:8C:99:97:77:D4:77:81
Certificate issuer:       /CN=174db496-399b-48c7-919e-3e6dfd4a5584
Certificate serial:       010D0C9F4328584FA55FB216F7CCD979069C1300
Authority key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/e38b7540-8d02-3428-8b61-2305b0a7237b.roa
Signing time:             Tue 27 Oct 2026 23:16:39 +0000
ROA not before:           Tue 27 Oct 2026 23:16:39 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     40934
IP address blocks:        23.249.55.0/24 maxlen: 24
                          96.45.39.0/24 maxlen: 24
                          96.45.40.0/24 maxlen: 24
                          96.45.41.0/24 maxlen: 24
                          189.25.98.0/24 maxlen: 24
                          189.25.117.0/24 maxlen: 24
                          189.25.118.0/24 maxlen: 24
                          189.25.124.0/24 maxlen: 24
                          209.40.103.0/24 maxlen: 24
                          209.40.110.0/24 maxlen: 24
                          209.40.120.0/24 maxlen: 24
                          2602:fc4e:f10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a5:5f:b2:16:f7:cc:d9:79:06:9c:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174db496-399b-48c7-919e-3e6dfd4a5584
        Validity
            Not Before: Oct 27 23:16:39 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b7d14c6c-cf56-41fc-aeb8-60f7e1d32ff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:56:50:69:7b:59:dd:af:b6:55:e2:d4:07:4c:
                    dc:52:34:03:e7:91:6d:af:29:d3:4d:e6:7b:2a:34:
                    78:3d:72:d3:b7:fa:be:64:cc:2b:9a:b9:b4:6f:d6:
                    9c:96:d0:d7:84:a7:40:32:b7:62:8f:6e:ef:ba:86:
                    df:4f:8c:38:2c:d6:46:6e:7a:db:3d:09:fc:81:c5:
                    ae:d1:88:51:66:5c:cd:70:24:70:70:16:5a:73:4d:
                    95:1d:52:2d:06:4d:33:5d:eb:59:c8:76:a0:b9:b1:
                    8a:36:41:dc:f6:bf:62:56:a0:a3:b5:71:51:ed:08:
                    c5:4c:f4:27:b5:f4:2a:64:63:82:56:b2:f4:93:ed:
                    13:15:96:7c:ec:be:a6:1e:36:26:ac:e6:af:f9:fa:
                    77:5b:f5:35:98:5b:f0:8d:6a:83:84:dc:2e:4f:23:
                    0a:98:ee:3f:1d:31:78:66:65:8b:92:53:57:53:c9:
                    d2:7e:b9:8c:ac:75:f7:a8:02:d6:ae:b3:46:ef:eb:
                    ca:15:1d:22:41:ab:ed:cd:5e:07:84:a3:fb:06:74:
                    8d:60:34:b6:2a:3b:fb:9b:13:33:f6:9a:03:b1:58:
                    1f:99:ce:74:e3:b8:21:ef:61:50:7d:b8:2c:5e:2b:
                    51:5d:4e:d8:3b:b6:67:97:06:ed:df:8c:65:38:d2:
                    5e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:3C:A2:84:C6:D0:1E:DA:68:25:0A:FD:E9:8C:99:97:77:D4:77:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/e38b7540-8d02-3428-8b61-2305b0a7237b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl

            X509v3 Authority Key Identifier:
                keyid:9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.249.55.0/24
                  96.45.39.0-96.45.41.255
                  189.25.98.0/24
                  189.25.117.0-189.25.118.255
                  189.25.124.0/24
                  209.40.103.0/24
                  209.40.110.0/24
                  209.40.120.0/24
                IPv6:
                  2602:fc4e:f10::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:cc:53:94:6f:8a:69:f0:08:42:0e:85:47:dd:da:4b:8c:66:
         36:c3:57:25:2c:55:ef:6d:2f:62:72:77:08:97:82:33:90:b3:
         38:a9:93:a2:c5:0b:45:29:71:9b:13:e2:9d:d1:62:f1:60:79:
         8f:4f:27:0c:4e:e5:fd:8c:5c:bf:8e:fc:bd:3c:d3:8f:81:01:
         04:c0:5f:08:6a:29:09:a8:40:09:ee:f5:10:da:4f:4b:0c:76:
         f6:19:65:e5:81:23:7f:14:21:47:a0:be:6b:c3:5e:eb:ed:7e:
         9d:c0:9b:25:22:eb:24:17:4e:16:c0:3f:92:f4:99:67:cb:6b:
         2a:1f:ff:4f:ba:19:4f:46:3f:98:cb:0e:35:62:7d:53:27:2f:
         19:59:6e:4a:41:05:8a:ff:1e:0c:aa:62:f5:79:71:d8:f2:91:
         9e:a0:31:e7:89:e2:bc:8b:0e:38:ba:d2:06:80:0b:46:d6:1f:
         79:cb:b0:9a:f6:22:6e:60:3c:81:22:17:fb:30:79:93:75:fe:
         18:69:e7:9a:fe:8e:c3:2c:18:99:41:53:a2:b2:5c:29:19:b2:
         19:bc:53:db:95:f4:9e:41:1d:f4:85:e6:4d:55:89:23:c8:49:
         59:2a:ce:4c:7e:9a:dd:96:ea:da:e7:2b:bb:64:c2:5f:e2:08:
         ff:cf:bc:bd
-----BEGIN CERTIFICATE-----
MIIGjjCCBXagAwIBAgIUAQ0Mn0MoWE+lX7IW98zZeQacEwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTc0ZGI0OTYtMzk5Yi00OGM3LTkxOWUtM2U2ZGZkNGE1
NTg0MB4XDTI2MTAyNzIzMTYzOVoXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
YjdkMTRjNmMtY2Y1Ni00MWZjLWFlYjgtNjBmN2UxZDMyZmYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1ZQaXtZ3a+2VeLUB0zcUjQD55FtrynTTeZ7
KjR4PXLTt/q+ZMwrmrm0b9acltDXhKdAMrdij27vuobfT4w4LNZGbnrbPQn8gcWu
0YhRZlzNcCRwcBZac02VHVItBk0zXetZyHagubGKNkHc9r9iVqCjtXFR7QjFTPQn
tfQqZGOCVrL0k+0TFZZ87L6mHjYmrOav+fp3W/U1mFvwjWqDhNwuTyMKmO4/HTF4
ZmWLklNXU8nSfrmMrHX3qALWrrNG7+vKFR0iQavtzV4HhKP7BnSNYDS2Kjv7mxMz
9poDsVgfmc5047gh72FQfbgsXitRXU7YO7Znlwbt34xlONJePwIDAQABo4IDoDCC
A5wwHQYDVR0OBBYEFC48ooTG0B7aaCUK/emMmZd31HeBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNzRk
YjQ5Ni0zOTliLTQ4YzctOTE5ZS0zZTZkZmQ0YTU1ODQvZTM4Yjc1NDAtOGQwMi0z
NDI4LThiNjEtMjMwNWIwYTcyMzdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTc0ZGI0OTYtMzk5Yi00OGM3LTkx
OWUtM2U2ZGZkNGE1NTg0LzE3NGRiNDk2LTM5OWItNDhjNy05MTllLTNlNmRmZDRh
NTU4NC5jcmwwHwYDVR0jBBgwFoAUnbYvqwyEv+F7kStHMMc1sXqvgNEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8xNzRkYjQ5Ni0zOTliLTQ4YzctOTE5ZS0zZTZk
ZmQ0YTU1ODQuY2VyMGoGCCsGAQUFBwEHAQH/BFswWTBGBAIAATBAAwQAF/k3MAwD
BABgLScDBAFgLSgDBAC9GWIwDAMEAL0ZdQMEAL0ZdgMEAL0ZfAMEANEoZwMEANEo
bgMEANEoeDAPBAIAAjAJAwcAJgL8Tg8QMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH
DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz
L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFfMU5RvimnwCEIOhUfd
2kuMZjbDVyUsVe9tL2JydwiXgjOQszipk6LFC0UpcZsT4p3RYvFgeY9PJwxO5f2M
XL+O/L0804+BAQTAXwhqKQmoQAnu9RDaT0sMdvYZZeWBI38UIUegvmvDXuvtfp3A
myUi6yQXThbAP5L0mWfLayof/0+6GU9GP5jLDjVifVMnLxlZbkpBBYr/HgyqYvV5
cdjykZ6gMeeJ4ryLDji60gaAC0bWH3nLsJr2Im5gPIEiF/sweZN1/hhp55r+jsMs
GJlBU6KyXCkZshm8U9uV9J5BHfSF5k1ViSPISVkqzkx+mt2W6trnK7tkwl/iCP/P
vL0=
-----END CERTIFICATE-----
Generated at Wed Oct 28 05:00:43 2026 by rpki-client