Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7fe8e2c2-2a61-44d9-95b7-64eb181032e3/e2c50a35-50bf-3b4f-aa6d-fddffbb62ae4.roa
File:                     e2c50a35-50bf-3b4f-aa6d-fddffbb62ae4.roa (raw, json)
Hash identifier:          ZjSJbR0dz9RhVmk9wnSCDBpCpbFEZtFyP/v4z/OgxAc=
Subject key identifier:   C8:45:1A:FF:F9:40:52:A8:64:8D:A7:2F:92:AD:27:38:C8:15:47:DE
Certificate issuer:       /CN=7fe8e2c2-2a61-44d9-95b7-64eb181032e3
Certificate serial:       010D0C9F4328584EC20C7E8067C5A70D18F0FFA4
Authority key identifier: 77:DB:4F:76:3E:9F:44:8F:20:A3:2F:7B:8F:72:B7:F2:EC:20:0C:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7fe8e2c2-2a61-44d9-95b7-64eb181032e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7fe8e2c2-2a61-44d9-95b7-64eb181032e3/e2c50a35-50bf-3b4f-aa6d-fddffbb62ae4.roa
Signing time:             Fri 07 Aug 2026 13:00:11 +0000
ROA not before:           Fri 07 Aug 2026 13:00:11 +0000
ROA not after:            Thu 05 Nov 2026 14:00:11 +0000
asID:                     11192
IP address blocks:        24.56.133.0/24 maxlen: 24
                          24.56.136.0/24 maxlen: 24
                          24.56.140.0/24 maxlen: 24
                          24.56.184.0/22 maxlen: 24
                          24.75.228.0/22 maxlen: 24
                          24.75.240.0/22 maxlen: 24
                          24.236.56.0/22 maxlen: 24
                          66.78.200.0/21 maxlen: 24
                          66.78.232.0/22 maxlen: 24
                          66.78.242.0/23 maxlen: 24
                          66.78.244.0/23 maxlen: 24
                          66.78.250.0/23 maxlen: 24
                          66.78.252.0/24 maxlen: 24
                          66.78.253.0/24 maxlen: 24
                          67.217.0.0/22 maxlen: 24
                          96.8.34.0/24 maxlen: 24
                          96.8.36.0/22 maxlen: 24
                          96.8.40.0/22 maxlen: 24
                          208.115.76.0/23 maxlen: 24
                          208.115.81.0/24 maxlen: 24
                          208.115.82.0/24 maxlen: 24
                          208.115.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7fe8e2c2-2a61-44d9-95b7-64eb181032e3/7fe8e2c2-2a61-44d9-95b7-64eb181032e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7fe8e2c2-2a61-44d9-95b7-64eb181032e3/7fe8e2c2-2a61-44d9-95b7-64eb181032e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7fe8e2c2-2a61-44d9-95b7-64eb181032e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:0c:7e:80:67:c5:a7:0d:18:f0:ff:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fe8e2c2-2a61-44d9-95b7-64eb181032e3
        Validity
            Not Before: Aug  7 13:00:11 2026 GMT
            Not After : Nov  5 14:00:11 2026 GMT
        Subject: CN=12e8d032-a053-434d-96e7-c1ed889b432f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1e:1f:4c:9b:12:ff:63:14:52:3d:ee:65:82:
                    7c:3e:7c:e3:a3:6a:7e:9b:e2:2d:6d:38:7d:75:24:
                    a9:82:e0:a3:36:80:1b:85:28:00:49:64:54:79:6a:
                    d6:6f:b8:b8:14:26:1a:05:c2:9b:0c:cd:08:b3:a6:
                    05:c7:33:b1:9f:75:7b:89:56:fe:1a:22:d1:96:45:
                    a9:6b:cf:cd:88:54:8f:ec:de:97:cf:1f:9b:3a:b4:
                    9c:ef:9e:4a:fb:a5:9c:8a:8b:3b:34:57:c1:23:18:
                    6b:d4:97:48:f7:4c:86:fe:c9:3e:2e:20:9f:21:64:
                    3a:0c:0f:c2:16:ff:d7:20:39:ce:2b:dd:79:35:44:
                    96:c3:bf:93:c0:94:43:2d:cb:4a:96:ef:23:02:83:
                    76:f1:02:6a:86:4a:ab:15:a2:fe:d3:d2:d1:78:10:
                    3b:9b:ee:c6:94:0a:81:e2:45:b1:ab:ab:ae:06:e3:
                    ab:9d:c6:f8:9a:2f:bf:61:c0:7e:dd:e7:f7:b5:4c:
                    05:30:cb:2f:7c:7a:65:b0:8a:0e:f1:bb:20:1e:93:
                    38:d6:c0:70:a5:a2:bc:b6:21:5f:59:bf:86:09:bd:
                    14:5c:96:4f:21:f3:3a:3e:7d:f2:6e:18:6b:e3:26:
                    a2:9f:8d:a1:1a:95:16:a3:fc:2f:fb:74:eb:9a:02:
                    73:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:45:1A:FF:F9:40:52:A8:64:8D:A7:2F:92:AD:27:38:C8:15:47:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7fe8e2c2-2a61-44d9-95b7-64eb181032e3/e2c50a35-50bf-3b4f-aa6d-fddffbb62ae4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7fe8e2c2-2a61-44d9-95b7-64eb181032e3/7fe8e2c2-2a61-44d9-95b7-64eb181032e3.crl

            X509v3 Authority Key Identifier:
                keyid:77:DB:4F:76:3E:9F:44:8F:20:A3:2F:7B:8F:72:B7:F2:EC:20:0C:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7fe8e2c2-2a61-44d9-95b7-64eb181032e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.56.133.0/24
                  24.56.136.0/24
                  24.56.140.0/24
                  24.56.184.0/22
                  24.75.228.0/22
                  24.75.240.0/22
                  24.236.56.0/22
                  66.78.200.0/21
                  66.78.232.0/22
                  66.78.242.0-66.78.245.255
                  66.78.250.0-66.78.253.255
                  67.217.0.0/22
                  96.8.34.0/24
                  96.8.36.0-96.8.43.255
                  208.115.76.0/23
                  208.115.81.0-208.115.82.255
                  208.115.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:6b:87:e1:40:6c:29:ae:1b:0e:bd:ee:99:5a:bf:4f:c5:c6:
         56:4d:85:60:fa:40:bd:70:0f:65:bc:de:9e:48:f2:cb:4a:8f:
         f4:22:55:d4:7a:2c:1c:a9:80:91:f1:94:5b:de:4f:45:6e:1a:
         88:f2:11:f7:c2:9c:ed:f6:ca:48:2f:2a:2b:38:90:aa:f8:25:
         70:48:92:27:cc:52:8a:0f:47:f9:e0:d6:0b:d3:bb:3f:26:45:
         e6:54:90:cb:ca:37:60:e8:fe:f1:1e:5a:ff:4d:ec:0b:f1:98:
         e9:d8:3a:55:1a:f6:06:36:0f:3f:8f:ef:be:3a:54:9a:7f:a9:
         1d:ba:51:23:0e:c0:5b:7a:8a:d0:2d:a6:6b:1d:df:a8:b7:c7:
         f9:7d:63:07:74:f7:69:11:d7:fd:2a:3c:2d:f0:f1:99:9a:ec:
         9c:c5:78:a9:84:04:20:78:47:e0:2e:3f:02:a8:9d:b6:ce:3d:
         3c:d1:5b:68:9f:f4:35:e6:92:dc:e6:1d:a1:24:e8:e3:6d:90:
         47:c9:30:db:ae:a9:1a:80:54:3c:03:d7:1d:29:1d:46:c7:29:
         8b:1a:5e:e9:b0:a7:52:32:63:38:a0:be:ba:f3:b1:29:86:d3:
         3f:23:9b:26:47:e7:c5:ec:5a:31:c9:c6:5e:e6:3b:93:2a:20:
         63:6b:c1:5d
-----BEGIN CERTIFICATE-----
MIIGyDCCBbCgAwIBAgIUAQ0Mn0MoWE7CDH6AZ8WnDRjw/6QwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2ZlOGUyYzItMmE2MS00NGQ5LTk1YjctNjRlYjE4MTAz
MmUzMB4XDTI2MDgwNzEzMDAxMVoXDTI2MTEwNTE0MDAxMVowLzEtMCsGA1UEAxMk
MTJlOGQwMzItYTA1My00MzRkLTk2ZTctYzFlZDg4OWI0MzJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwx4fTJsS/2MUUj3uZYJ8Pnzjo2p+m+ItbTh9
dSSpguCjNoAbhSgASWRUeWrWb7i4FCYaBcKbDM0Is6YFxzOxn3V7iVb+GiLRlkWp
a8/NiFSP7N6Xzx+bOrSc755K+6Wcios7NFfBIxhr1JdI90yG/sk+LiCfIWQ6DA/C
Fv/XIDnOK915NUSWw7+TwJRDLctKlu8jAoN28QJqhkqrFaL+09LReBA7m+7GlAqB
4kWxq6uuBuOrncb4mi+/YcB+3ef3tUwFMMsvfHplsIoO8bsgHpM41sBwpaK8tiFf
Wb+GCb0UXJZPIfM6Pn3ybhhr4yain42hGpUWo/wv+3TrmgJz0QIDAQABo4ID2jCC
A9YwHQYDVR0OBBYEFMhFGv/5QFKoZI2nL5KtJzjIFUfeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83ZmU4
ZTJjMi0yYTYxLTQ0ZDktOTViNy02NGViMTgxMDMyZTMvZTJjNTBhMzUtNTBiZi0z
YjRmLWFhNmQtZmRkZmZiYjYyYWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvN2ZlOGUyYzItMmE2MS00NGQ5LTk1
YjctNjRlYjE4MTAzMmUzLzdmZThlMmMyLTJhNjEtNDRkOS05NWI3LTY0ZWIxODEw
MzJlMy5jcmwwHwYDVR0jBBgwFoAUd9tPdj6fRI8goy97j3K38uwgDKYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83ZmU4ZTJjMi0yYTYxLTQ0ZDktOTViNy02NGVi
MTgxMDMyZTMuY2VyMIGjBggrBgEFBQcBBwEB/wSBkzCBkDCBjQQCAAEwgYYDBAAY
OIUDBAAYOIgDBAAYOIwDBAIYOLgDBAIYS+QDBAIYS/ADBAIY7DgDBANCTsgDBAJC
TugwDAMEAUJO8gMEAUJO9DAMAwQBQk76AwQBQk78AwQCQ9kAAwQAYAgiMAwDBAJg
CCQDBAJgCCgDBAHQc0wwDAMEANBzUQMEANBzUgMEANBzXDBUBgNVHSABAf8ESjBI
MEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0
L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBVa4fh
QGwprhsOve6ZWr9PxcZWTYVg+kC9cA9lvN6eSPLLSo/0IlXUeiwcqYCR8ZRb3k9F
bhqI8hH3wpzt9spILyorOJCq+CVwSJInzFKKD0f54NYL07s/JkXmVJDLyjdg6P7x
Hlr/TewL8Zjp2DpVGvYGNg8/j+++OlSaf6kdulEjDsBbeorQLaZrHd+ot8f5fWMH
dPdpEdf9Kjwt8PGZmuycxXiphAQgeEfgLj8CqJ22zj080Vton/Q15pLc5h2hJOjj
bZBHyTDbrqkagFQ8A9cdKR1GxymLGl7psKdSMmM4oL6687EphtM/I5smR+fF7Fox
ycZe5juTKiBja8Fd
-----END CERTIFICATE-----
Generated at Sat Aug 22 18:47:03 2026 by rpki-client