Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/a3325f5a-465e-3622-a353-ec026e3ae096.roa
File:                     a3325f5a-465e-3622-a353-ec026e3ae096.roa (raw, json)
Hash identifier:          4HzwXWwKTddpEtgyUd0MlD/11P1hRjPI/xKOgNQOxrA=
Subject key identifier:   F2:5E:4A:7F:FB:45:45:CD:92:E3:E9:CD:C1:8D:63:99:02:B5:A1:36
Certificate issuer:       /CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
Certificate serial:       010D0C9F4328584EDC91EF131E92A0F4F331AF00
Authority key identifier: 2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/a3325f5a-465e-3622-a353-ec026e3ae096.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     7065
IP address blocks:        23.93.0.0/16 maxlen: 24
                          50.0.0.0/15 maxlen: 24
                          64.142.0.0/17 maxlen: 24
                          69.12.128.0/17 maxlen: 24
                          70.36.128.0/17 maxlen: 24
                          75.101.0.0/17 maxlen: 24
                          76.191.128.0/17 maxlen: 24
                          107.156.0.0/15 maxlen: 24
                          108.169.0.0/17 maxlen: 24
                          135.180.0.0/16 maxlen: 24
                          142.254.0.0/17 maxlen: 24
                          157.131.0.0/16 maxlen: 24
                          173.228.0.0/17 maxlen: 24
                          184.23.0.0/16 maxlen: 24
                          192.184.128.0/17 maxlen: 24
                          198.27.128.0/17 maxlen: 24
                          199.245.68.0/24 maxlen: 24
                          208.106.0.0/17 maxlen: 24
                          209.148.96.0/19 maxlen: 24
                          209.204.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:91:ef:13:1e:92:a0:f4:f3:31:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=de1b3da5-ab01-41a4-9166-38f196849166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d0:1f:58:05:7e:0f:92:a7:98:02:13:7d:39:
                    b6:2e:9c:f5:a9:69:13:2d:c5:7f:2c:5c:a4:56:5d:
                    d6:fc:5b:4d:01:72:b7:e1:71:f5:9f:93:71:e0:e7:
                    8e:da:0c:ce:f4:cd:68:8b:59:80:ab:3b:00:bc:08:
                    72:14:59:7a:d2:20:36:33:69:c0:43:4a:5e:38:10:
                    13:cf:50:3f:c9:6d:2d:85:bd:fe:ad:3f:c2:72:f5:
                    0d:9b:85:da:06:05:cd:c1:f0:4d:12:21:09:77:73:
                    fd:28:36:28:7d:16:f7:15:93:a5:b5:36:2e:d5:0e:
                    97:d2:92:5f:50:df:d5:c9:aa:6d:f0:3e:2d:a8:bc:
                    70:3d:8d:38:48:68:ae:b5:84:6e:e8:83:6c:75:5a:
                    29:8a:2b:41:b1:47:7d:cd:7e:53:51:b2:ca:14:c7:
                    c6:10:7e:a1:52:40:ac:53:7c:6a:0a:16:ba:94:21:
                    62:3c:29:f6:ea:e3:78:0e:b5:91:be:8c:b0:86:fa:
                    4b:34:0f:45:82:e6:4c:23:24:bc:21:c6:83:b2:94:
                    86:bf:5f:b2:52:4f:5f:2b:f3:3e:9a:04:67:44:e8:
                    b1:4f:ea:25:63:1b:53:cc:0c:fb:74:5b:b0:dd:30:
                    1c:e5:ab:1c:7a:9a:fe:32:64:a3:c8:6e:d1:fc:28:
                    8d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:5E:4A:7F:FB:45:45:CD:92:E3:E9:CD:C1:8D:63:99:02:B5:A1:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/a3325f5a-465e-3622-a353-ec026e3ae096.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl

            X509v3 Authority Key Identifier:
                keyid:2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.93.0.0/16
                  50.0.0.0/15
                  64.142.0.0/17
                  69.12.128.0/17
                  70.36.128.0/17
                  75.101.0.0/17
                  76.191.128.0/17
                  107.156.0.0/15
                  108.169.0.0/17
                  135.180.0.0/16
                  142.254.0.0/17
                  157.131.0.0/16
                  173.228.0.0/17
                  184.23.0.0/16
                  192.184.128.0/17
                  198.27.128.0/17
                  199.245.68.0/24
                  208.106.0.0/17
                  209.148.96.0/19
                  209.204.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:08:61:04:89:d5:55:ac:e5:b0:57:48:c3:38:ee:75:21:6c:
         2b:09:78:21:94:ca:9a:09:76:93:06:bf:4c:7b:db:9c:4f:b0:
         72:8d:14:8c:9a:17:b0:d2:78:63:04:0e:05:ed:9b:cc:76:45:
         be:54:46:61:3c:3d:e0:c6:97:ce:29:7b:d8:30:07:cd:38:6e:
         fa:33:7c:8f:de:26:5b:4e:71:66:47:a5:e8:bf:03:5b:b9:11:
         0c:f3:46:cf:13:1d:06:5e:ba:b1:44:b4:0d:1d:b2:71:2f:db:
         55:67:cc:e7:12:07:6d:82:e0:ff:ca:4a:c4:3a:63:83:29:08:
         aa:ff:68:e2:2b:b7:b5:a4:e0:fb:b0:f1:01:d9:06:5a:16:96:
         45:93:82:e7:a1:50:76:09:49:1b:af:05:f9:d7:d2:b8:68:90:
         34:4e:b9:60:f5:3d:31:c5:01:e8:06:65:7f:6f:46:a1:a6:0a:
         4b:42:3c:dc:4b:ef:a4:02:c1:60:bf:d0:39:5f:0d:a8:95:96:
         59:dc:ce:25:7d:1d:a0:fa:3c:2a:a5:5b:b8:cd:e9:67:0b:90:
         8e:d5:35:92:06:f1:0c:8d:07:7b:b7:da:96:29:55:76:21:31:
         66:89:62:49:ac:78:c3:5f:c9:9a:95:42:ad:12:5f:da:9f:80:
         1e:04:03:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:41:51 2026 by rpki-client