Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0cebf4b3-f223-4dcf-b466-5757dc91a10d/04d911aa-036c-302e-aec4-a9fdfb56ac50.roa
File:                     04d911aa-036c-302e-aec4-a9fdfb56ac50.roa (raw, json)
Hash identifier:          1nW+2KHm4nVEn33Dl7Vp8s3dsUcKG+HOxAk4xlS3w6M=
Subject key identifier:   B8:D3:22:91:1B:0D:01:D5:EC:14:E7:B7:A5:B3:3C:63:F0:6C:3B:96
Certificate issuer:       /CN=0cebf4b3-f223-4dcf-b466-5757dc91a10d
Certificate serial:       010D0C9F4328584EA7973214E1F2053B662F78C0
Authority key identifier: 2C:B1:C6:6F:30:76:4D:ED:BC:60:2E:48:E6:39:C0:66:25:09:3B:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0cebf4b3-f223-4dcf-b466-5757dc91a10d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0cebf4b3-f223-4dcf-b466-5757dc91a10d/04d911aa-036c-302e-aec4-a9fdfb56ac50.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     13994
IP address blocks:        144.86.192.0/22 maxlen: 22
                          144.86.192.0/24 maxlen: 24
                          144.86.193.0/24 maxlen: 24
                          144.86.194.0/24 maxlen: 24
                          144.86.195.0/24 maxlen: 24
                          161.115.192.0/20 maxlen: 20
                          161.115.192.0/21 maxlen: 21
                          161.115.192.0/22 maxlen: 22
                          161.115.192.0/23 maxlen: 23
                          161.115.192.0/24 maxlen: 24
                          161.115.193.0/24 maxlen: 24
                          161.115.194.0/23 maxlen: 23
                          161.115.194.0/24 maxlen: 24
                          161.115.195.0/24 maxlen: 24
                          161.115.196.0/22 maxlen: 22
                          161.115.196.0/23 maxlen: 23
                          161.115.196.0/24 maxlen: 24
                          161.115.197.0/24 maxlen: 24
                          161.115.198.0/23 maxlen: 23
                          161.115.198.0/24 maxlen: 24
                          161.115.199.0/24 maxlen: 24
                          161.115.200.0/21 maxlen: 21
                          161.115.200.0/22 maxlen: 22
                          161.115.200.0/23 maxlen: 23
                          161.115.200.0/24 maxlen: 24
                          161.115.201.0/24 maxlen: 24
                          161.115.202.0/23 maxlen: 23
                          161.115.202.0/24 maxlen: 24
                          161.115.203.0/24 maxlen: 24
                          161.115.204.0/22 maxlen: 22
                          161.115.204.0/23 maxlen: 23
                          161.115.204.0/24 maxlen: 24
                          161.115.205.0/24 maxlen: 24
                          161.115.206.0/23 maxlen: 23
                          161.115.206.0/24 maxlen: 24
                          161.115.207.0/24 maxlen: 24
                          184.154.224.0/20 maxlen: 20
                          184.154.224.0/21 maxlen: 21
                          184.154.224.0/22 maxlen: 22
                          184.154.224.0/23 maxlen: 23
                          184.154.226.0/23 maxlen: 23
                          184.154.228.0/22 maxlen: 22
                          184.154.228.0/23 maxlen: 23
                          184.154.230.0/23 maxlen: 23
                          184.154.232.0/21 maxlen: 21
                          184.154.232.0/22 maxlen: 22
                          184.154.232.0/23 maxlen: 23
                          184.154.234.0/23 maxlen: 23
                          184.154.236.0/22 maxlen: 22
                          184.154.236.0/23 maxlen: 23
                          184.154.238.0/23 maxlen: 23
                          207.188.20.0/22 maxlen: 22
                          207.188.20.0/24 maxlen: 24
                          207.188.21.0/24 maxlen: 24
                          207.188.22.0/24 maxlen: 24
                          207.188.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0cebf4b3-f223-4dcf-b466-5757dc91a10d/0cebf4b3-f223-4dcf-b466-5757dc91a10d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0cebf4b3-f223-4dcf-b466-5757dc91a10d/0cebf4b3-f223-4dcf-b466-5757dc91a10d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0cebf4b3-f223-4dcf-b466-5757dc91a10d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:32:14:e1:f2:05:3b:66:2f:78:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cebf4b3-f223-4dcf-b466-5757dc91a10d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=5483df1b-9c63-4ed8-badf-8df98d32b72b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d3:ff:4a:74:ad:10:6c:db:8c:7e:3b:67:e1:
                    e9:b5:e0:1c:e9:37:18:ab:70:4a:4d:f4:43:8b:8d:
                    ad:91:a3:96:9b:80:67:69:b3:83:69:f8:86:9e:50:
                    3e:3e:57:af:d6:82:61:71:23:d5:9a:2d:73:6b:ae:
                    0f:2f:35:ce:d6:6c:d8:1d:a6:2c:49:1f:7e:67:a5:
                    cd:fd:67:d9:ca:0a:ea:40:04:23:ab:c3:78:28:8f:
                    2e:ec:cd:09:d1:b6:fc:83:2d:91:b6:f7:ee:f2:02:
                    ad:2d:3c:3d:f4:22:ce:69:87:6d:0f:a8:04:54:46:
                    6d:40:8a:22:62:c3:7a:ed:dd:d9:10:c1:b2:fb:ca:
                    85:d0:07:fb:91:fa:7e:ba:2d:ae:ad:7c:4a:1b:33:
                    16:62:80:5c:fc:d3:29:88:f5:56:7e:de:da:d0:5f:
                    9c:e2:d2:48:78:40:4b:3e:46:2f:99:81:85:87:9e:
                    33:a3:70:a5:35:7a:26:e8:f3:c3:c0:56:4c:de:15:
                    7b:a5:fb:fc:ed:0f:a9:d6:1a:70:2b:c1:dc:5a:11:
                    7d:28:ea:f1:83:f8:84:4e:40:92:80:4a:3e:53:a9:
                    b0:df:e8:0f:29:58:ec:61:37:ec:7f:bd:b9:5b:29:
                    1b:bd:b6:cd:fd:08:32:62:0f:5c:c6:92:ea:93:12:
                    22:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:D3:22:91:1B:0D:01:D5:EC:14:E7:B7:A5:B3:3C:63:F0:6C:3B:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0cebf4b3-f223-4dcf-b466-5757dc91a10d/04d911aa-036c-302e-aec4-a9fdfb56ac50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0cebf4b3-f223-4dcf-b466-5757dc91a10d/0cebf4b3-f223-4dcf-b466-5757dc91a10d.crl

            X509v3 Authority Key Identifier:
                keyid:2C:B1:C6:6F:30:76:4D:ED:BC:60:2E:48:E6:39:C0:66:25:09:3B:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0cebf4b3-f223-4dcf-b466-5757dc91a10d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.86.192.0/22
                  161.115.192.0/20
                  184.154.224.0/20
                  207.188.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:a7:cd:4c:9a:62:31:74:a2:2b:b5:81:5f:d7:f3:bd:e9:89:
         6c:e2:10:c7:09:db:07:e3:a2:2c:fb:54:f7:80:9a:b7:0d:06:
         4d:cf:29:a5:17:5c:22:e6:ae:c0:26:c2:dc:5e:6a:6c:af:b1:
         a2:3d:6c:62:f6:1e:54:3f:44:d1:ba:cb:19:2f:2e:f1:ed:4e:
         85:44:dd:21:70:4b:82:b1:48:42:d8:62:55:b4:e0:13:5a:56:
         84:16:3d:16:6a:bb:95:b4:3e:b6:81:15:aa:bb:af:85:57:39:
         32:29:68:24:24:e3:4c:3f:b6:b3:bb:50:b2:ca:28:d6:fb:a4:
         f9:c3:7d:98:0a:75:69:35:91:f0:2b:dc:d0:2d:f8:9a:2b:cd:
         73:02:72:f1:5d:c4:88:d6:9f:f3:5d:db:57:80:cd:20:47:a0:
         2a:15:f9:2a:52:0c:ab:50:1c:67:2a:e6:e4:ea:98:88:99:b7:
         7b:9f:d2:26:9f:5f:4e:98:dd:5a:c8:04:20:9f:8b:fd:e6:18:
         cd:17:f3:c3:44:eb:f6:a7:d0:0c:0b:bd:99:67:0a:c1:f6:d5:
         e9:9f:0a:aa:4b:84:96:ce:8e:1b:fd:38:87:06:d5:73:b3:74:
         f3:d0:a0:f1:ef:b7:f3:9d:e0:dd:73:fa:5f:07:72:b6:61:8f:
         30:57:d9:75
-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWE6nlzIU4fIFO2YveMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGNlYmY0YjMtZjIyMy00ZGNmLWI0NjYtNTc1N2RjOTFh
MTBkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NTQ4M2RmMWItOWM2My00ZWQ4LWJhZGYtOGRmOThkMzJiNzJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9P/SnStEGzbjH47Z+HpteAc6TcYq3BKTfRD
i42tkaOWm4BnabODafiGnlA+Plev1oJhcSPVmi1za64PLzXO1mzYHaYsSR9+Z6XN
/WfZygrqQAQjq8N4KI8u7M0J0bb8gy2Rtvfu8gKtLTw99CLOaYdtD6gEVEZtQIoi
YsN67d3ZEMGy+8qF0Af7kfp+ui2urXxKGzMWYoBc/NMpiPVWft7a0F+c4tJIeEBL
PkYvmYGFh54zo3ClNXom6PPDwFZM3hV7pfv87Q+p1hpwK8HcWhF9KOrxg/iETkCS
gEo+U6mw3+gPKVjsYTfsf725WykbvbbN/QgyYg9cxpLqkxIixQIDAQABo4IDZzCC
A2MwHQYDVR0OBBYEFLjTIpEbDQHV7BTnt6WzPGPwbDuWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wY2Vi
ZjRiMy1mMjIzLTRkY2YtYjQ2Ni01NzU3ZGM5MWExMGQvMDRkOTExYWEtMDM2Yy0z
MDJlLWFlYzQtYTlmZGZiNTZhYzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGNlYmY0YjMtZjIyMy00ZGNmLWI0
NjYtNTc1N2RjOTFhMTBkLzBjZWJmNGIzLWYyMjMtNGRjZi1iNDY2LTU3NTdkYzkx
YTEwZC5jcmwwHwYDVR0jBBgwFoAULLHGbzB2Te28YC5I5jnAZiUJO/owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wY2ViZjRiMy1mMjIzLTRkY2YtYjQ2Ni01NzU3
ZGM5MWExMGQuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCkFbAAwQE
oXPAAwQEuJrgAwQCz7wUMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr
BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz
Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIinzUyaYjF0oiu1gV/X873piWziEMcJ
2wfjoiz7VPeAmrcNBk3PKaUXXCLmrsAmwtxeamyvsaI9bGL2HlQ/RNG6yxkvLvHt
ToVE3SFwS4KxSELYYlW04BNaVoQWPRZqu5W0PraBFaq7r4VXOTIpaCQk40w/trO7
ULLKKNb7pPnDfZgKdWk1kfAr3NAt+JorzXMCcvFdxIjWn/Nd21eAzSBHoCoV+SpS
DKtQHGcq5uTqmIiZt3uf0iafX06Y3VrIBCCfi/3mGM0X88NE6/an0AwLvZlnCsH2
1emfCqpLhJbOjhv9OIcG1XOzdPPQoPHvt/Od4N1z+l8HcrZhjzBX2XU=
-----END CERTIFICATE-----
Generated at Thu Aug 27 13:22:35 2026 by rpki-client