Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/ec532543-9dd6-3bcf-bdea-82dd95098083.roa
File:                     ec532543-9dd6-3bcf-bdea-82dd95098083.roa (raw, json)
Hash identifier:          5NPdhaWkjIJpYE5tmLZ3263kqwQTbGyqhH9t3z7CfR4=
Subject key identifier:   E3:BE:A7:D9:09:52:70:A3:DE:B1:CD:B0:34:75:E9:93:C0:FC:6F:D3
Certificate issuer:       /CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
Certificate serial:       010D0C9F4328584F7E7DAA0AE0B79515547F3E00
Authority key identifier: 2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/ec532543-9dd6-3bcf-bdea-82dd95098083.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     46375
IP address blocks:        23.93.0.0/16 maxlen: 24
                          50.0.0.0/15 maxlen: 24
                          64.142.0.0/17 maxlen: 24
                          69.12.128.0/17 maxlen: 24
                          70.36.128.0/17 maxlen: 24
                          75.101.0.0/17 maxlen: 24
                          76.191.128.0/17 maxlen: 24
                          107.156.0.0/15 maxlen: 24
                          108.169.0.0/17 maxlen: 24
                          135.180.0.0/16 maxlen: 24
                          142.254.0.0/17 maxlen: 24
                          157.131.0.0/16 maxlen: 24
                          173.228.0.0/17 maxlen: 24
                          184.23.0.0/16 maxlen: 24
                          192.184.128.0/17 maxlen: 24
                          198.27.128.0/17 maxlen: 24
                          199.245.68.0/24 maxlen: 24
                          208.106.0.0/17 maxlen: 24
                          209.148.96.0/19 maxlen: 24
                          209.204.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:aa:0a:e0:b7:95:15:54:7f:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=117e1787-38a5-4950-b003-dd6a31184c8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:eb:af:48:f2:24:ef:49:cd:6f:cd:84:05:25:
                    c2:48:04:e8:11:c2:65:e0:2b:4d:ed:9b:0e:92:77:
                    9d:cd:d4:93:ef:aa:b2:0f:b1:f3:d7:7a:43:f7:f7:
                    07:bd:1a:8f:3e:e6:57:aa:b3:51:d6:66:35:15:d7:
                    97:9b:33:ea:b3:fa:d6:2d:44:cf:17:84:84:98:76:
                    02:44:a9:a0:84:ad:12:90:2c:51:d8:dd:60:80:58:
                    e5:e0:c3:f4:f6:ec:4c:75:5d:3e:3b:3d:4c:85:8e:
                    10:2f:c4:6f:46:97:cd:a9:18:fc:af:d4:75:e8:4a:
                    b8:e3:2a:f7:6c:4f:96:2f:95:21:43:de:dc:35:b9:
                    c3:d3:8a:bd:e0:80:c1:84:97:ea:bf:94:bb:09:fd:
                    07:97:3d:65:67:54:44:ff:3b:2a:58:97:b7:42:77:
                    72:a3:d3:33:f2:52:77:3e:0b:25:af:cb:93:10:7f:
                    3a:44:0a:9e:fa:b4:9c:82:d9:a8:f3:e0:c2:fc:6a:
                    c4:a3:31:50:f5:00:0c:e7:7a:b4:82:30:76:66:d1:
                    0d:81:0b:57:53:38:62:3e:ac:7d:14:67:f5:35:d0:
                    03:b1:da:a8:7d:9b:42:f0:39:a0:67:59:84:60:65:
                    ce:67:eb:ca:93:f2:22:f3:b7:56:f7:95:b5:ee:7a:
                    d2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:BE:A7:D9:09:52:70:A3:DE:B1:CD:B0:34:75:E9:93:C0:FC:6F:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/ec532543-9dd6-3bcf-bdea-82dd95098083.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl

            X509v3 Authority Key Identifier:
                keyid:2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.93.0.0/16
                  50.0.0.0/15
                  64.142.0.0/17
                  69.12.128.0/17
                  70.36.128.0/17
                  75.101.0.0/17
                  76.191.128.0/17
                  107.156.0.0/15
                  108.169.0.0/17
                  135.180.0.0/16
                  142.254.0.0/17
                  157.131.0.0/16
                  173.228.0.0/17
                  184.23.0.0/16
                  192.184.128.0/17
                  198.27.128.0/17
                  199.245.68.0/24
                  208.106.0.0/17
                  209.148.96.0/19
                  209.204.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:52:b4:5a:a3:a7:1e:36:f0:6f:bb:67:33:6d:3a:18:0f:27:
         7f:4b:9b:d1:9e:d9:7f:b8:a2:9f:88:b6:d4:57:ca:df:c3:c0:
         29:71:cd:2c:2a:d0:6a:65:80:a6:60:fd:68:d0:b0:49:4f:25:
         4b:a9:7e:4a:cc:28:95:ff:47:7b:16:8b:9e:2a:98:52:b5:41:
         83:d5:fa:47:6a:21:3f:3c:04:77:39:7b:84:40:e6:25:92:3f:
         a1:05:e4:d0:c6:74:28:a2:32:97:90:4d:3d:c8:57:49:da:9c:
         2f:1f:ca:ed:bd:50:45:4b:15:4a:67:06:5e:60:b2:3a:5f:ee:
         ff:fc:29:5d:7e:97:8c:87:39:b8:9f:13:8a:e7:ec:4f:0f:5b:
         77:3f:56:0a:63:31:78:55:dd:26:a1:de:d1:36:34:9d:2f:03:
         82:ce:28:8a:f2:cb:2e:77:6a:cb:a5:2e:f1:b9:0d:98:99:d7:
         8a:d3:35:04:8a:02:29:17:e5:e1:38:59:51:00:ac:b5:0a:00:
         e9:d7:31:20:6e:ee:46:f1:70:ef:28:04:a3:56:49:f9:70:ab:
         f3:c0:51:61:14:5f:1c:91:d2:9f:ab:62:a2:2d:f8:b3:56:8d:
         28:7b:eb:24:3b:3c:ac:ac:47:ea:72:fd:06:ac:46:5c:65:67:
         12:6a:60:57
-----BEGIN CERTIFICATE-----
MIIGsDCCBZigAwIBAgIUAQ0Mn0MoWE9+faoK4LeVFVR/PgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmU5ZjRhMWYtMTM3MS00ZjNmLWIyOTEtNjllYWJmOGJi
MDg3MB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk
MTE3ZTE3ODctMzhhNS00OTUwLWIwMDMtZGQ2YTMxMTg0YzhlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeuvSPIk70nNb82EBSXCSAToEcJl4CtN7ZsO
knedzdST76qyD7Hz13pD9/cHvRqPPuZXqrNR1mY1FdeXmzPqs/rWLUTPF4SEmHYC
RKmghK0SkCxR2N1ggFjl4MP09uxMdV0+Oz1MhY4QL8RvRpfNqRj8r9R16Eq44yr3
bE+WL5UhQ97cNbnD04q94IDBhJfqv5S7Cf0Hlz1lZ1RE/zsqWJe3Qndyo9Mz8lJ3
Pgslr8uTEH86RAqe+rScgtmo8+DC/GrEozFQ9QAM53q0gjB2ZtENgQtXUzhiPqx9
FGf1NdADsdqofZtC8DmgZ1mEYGXOZ+vKk/Ii87dW95W17nrS7QIDAQABo4IDwjCC
A74wHQYDVR0OBBYEFOO+p9kJUnCj3rHNsDR16ZPA/G/TMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iZTlm
NGExZi0xMzcxLTRmM2YtYjI5MS02OWVhYmY4YmIwODcvZWM1MzI1NDMtOWRkNi0z
YmNmLWJkZWEtODJkZDk1MDk4MDgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmU5ZjRhMWYtMTM3MS00ZjNmLWIy
OTEtNjllYWJmOGJiMDg3L2JlOWY0YTFmLTEzNzEtNGYzZi1iMjkxLTY5ZWFiZjhi
YjA4Ny5jcmwwHwYDVR0jBBgwFoAULwwCufh39B5QfFnfYu1eKPkJXfUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9iZTlmNGExZi0xMzcxLTRmM2YtYjI5MS02OWVh
YmY4YmIwODcuY2VyMIGLBggrBgEFBQcBBwEB/wR8MHoweAQCAAEwcgMDABddAwMB
MgADBAdAjgADBAdFDIADBAdGJIADBAdLZQADBAdMv4ADAwFrnAMEB2ypAAMDAIe0
AwQHjv4AAwMAnYMDBAet5AADAwC4FwMEB8C4gAMEB8YbgAMEAMf1RAMEB9BqAAME
BdGUYAMEBtHMgDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCkUrRao6ceNvBvu2czbToYDyd/S5vRntl/uKKf
iLbUV8rfw8Apcc0sKtBqZYCmYP1o0LBJTyVLqX5KzCiV/0d7FoueKphStUGD1fpH
aiE/PAR3OXuEQOYlkj+hBeTQxnQoojKXkE09yFdJ2pwvH8rtvVBFSxVKZwZeYLI6
X+7//CldfpeMhzm4nxOK5+xPD1t3P1YKYzF4Vd0mod7RNjSdLwOCziiK8ssud2rL
pS7xuQ2YmdeK0zUEigIpF+XhOFlRAKy1CgDp1zEgbu5G8XDvKASjVkn5cKvzwFFh
FF8ckdKfq2KiLfizVo0oe+skOzysrEfqcv0GrEZcZWcSamBX
-----END CERTIFICATE-----
Generated at Sun Oct 25 06:23:38 2026 by rpki-client