Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/b25fb2e5-3c67-3bf7-a50b-f0635fba80d8.roa
File:                     b25fb2e5-3c67-3bf7-a50b-f0635fba80d8.roa (raw, json)
Hash identifier:          v0LYEcuSkqG/z2B5bkmjK6fJ7txWQw1FEkzbxjY2vbs=
Subject key identifier:   FC:F4:90:7E:9C:B8:B6:82:0E:60:A6:38:DA:FE:C4:46:99:FE:30:51
Certificate issuer:       /CN=0c33aff5-10d3-454a-8b27-ca4c4f50851f
Certificate serial:       010D0C9F4328584D83CB02B6E324A79AAF728150
Authority key identifier: 5F:22:DD:58:56:EF:26:C7:1C:AF:8E:EC:EE:A9:FD:69:FB:3D:08:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/b25fb2e5-3c67-3bf7-a50b-f0635fba80d8.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     19686
IP address blocks:        23.139.60.0/24 maxlen: 24
                          23.139.61.0/24 maxlen: 24
                          64.32.50.0/24 maxlen: 24
                          2620:d7:a000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/0c33aff5-10d3-454a-8b27-ca4c4f50851f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/0c33aff5-10d3-454a-8b27-ca4c4f50851f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:cb:02:b6:e3:24:a7:9a:af:72:81:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c33aff5-10d3-454a-8b27-ca4c4f50851f
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=b0e7ec90-4f38-4b95-89f1-efbc2a9e77fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:46:4f:72:eb:9f:37:ab:f5:47:f5:ee:0e:70:
                    f8:83:ad:41:e8:76:cf:7a:a0:4b:f6:18:b3:3c:93:
                    84:7a:1f:e1:f5:7d:ff:45:50:db:e9:5e:73:c0:a7:
                    17:f6:43:ba:a7:e7:7e:3e:57:4d:b5:93:0a:47:e6:
                    62:92:83:fd:5d:26:be:46:5d:17:bc:69:56:db:5a:
                    01:f6:18:75:fe:f0:b8:50:41:99:b7:b5:69:36:b8:
                    71:58:77:ff:f8:69:8b:45:12:bf:06:b6:dc:1b:8b:
                    a1:13:b1:ca:48:05:c8:27:0a:3e:97:cb:4e:e4:bf:
                    3a:38:f1:6c:c5:d8:fe:10:6a:03:d8:6f:6b:f1:75:
                    d5:49:f3:8a:e6:2b:5d:c4:c9:c7:d3:fe:47:72:66:
                    35:45:d6:24:d5:73:b9:1c:f3:a5:57:e7:cb:fa:e6:
                    36:80:12:c1:d7:1d:9d:17:86:b1:93:1f:d1:5d:80:
                    de:d9:96:c3:62:75:59:35:a2:37:ac:ad:4f:5d:52:
                    9e:9a:2b:05:b4:58:68:5a:13:0e:36:42:b3:ee:af:
                    b3:22:be:3b:78:83:05:06:b2:a6:b8:60:4b:df:46:
                    21:5e:46:59:41:d6:7e:f0:dc:13:14:6b:97:32:5e:
                    b7:d1:35:68:99:24:05:2b:1d:07:4d:6f:d3:cc:2d:
                    1e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:F4:90:7E:9C:B8:B6:82:0E:60:A6:38:DA:FE:C4:46:99:FE:30:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/b25fb2e5-3c67-3bf7-a50b-f0635fba80d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/0c33aff5-10d3-454a-8b27-ca4c4f50851f.crl

            X509v3 Authority Key Identifier:
                keyid:5F:22:DD:58:56:EF:26:C7:1C:AF:8E:EC:EE:A9:FD:69:FB:3D:08:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.139.60.0/23
                  64.32.50.0/24
                IPv6:
                  2620:d7:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:10:c3:32:f2:7c:3b:c9:5a:9f:0c:57:60:d2:bf:00:a3:6d:
         4b:4b:c5:e9:74:4a:ed:0b:7d:2c:ae:24:4b:20:a9:cd:82:57:
         5d:01:2c:c5:ac:13:a9:61:c8:63:d4:2d:5b:7a:a7:e4:ff:53:
         75:dc:d9:1b:aa:6d:47:79:99:60:6d:f3:a6:bf:d5:0d:26:fc:
         50:bd:47:7c:9b:61:0b:ef:68:ba:f5:69:a1:7c:d0:16:96:a0:
         bf:91:6d:a6:bd:3d:fa:de:c8:0d:01:4c:fb:94:35:c6:15:ea:
         48:60:cc:47:fb:4d:ad:99:7c:5d:80:05:9c:36:d6:4a:91:23:
         d7:5f:8a:33:0c:bc:59:f0:ca:89:31:cd:fa:80:af:53:67:ef:
         ad:4f:48:70:7d:46:70:66:8d:df:96:c1:49:c5:34:62:de:47:
         c7:ce:78:34:bd:61:ae:92:ea:f7:50:a0:20:8e:1e:b4:b0:4c:
         02:ce:fc:75:82:f3:bb:9b:6a:25:17:42:92:8a:d3:8d:84:02:
         36:18:5f:7e:8f:ae:f0:37:18:4a:7d:18:42:4d:a1:8a:71:a4:
         fe:0d:1c:b4:b5:85:36:b7:4d:72:d2:71:90:e3:98:9a:dd:88:
         46:47:14:d0:ed:0f:7a:5c:42:95:01:c9:ee:43:51:59:a4:21:
         99:59:1e:37
-----BEGIN CERTIFICATE-----
MIIGWjCCBUKgAwIBAgIUAQ0Mn0MoWE2DywK24ySnmq9ygVAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGMzM2FmZjUtMTBkMy00NTRhLThiMjctY2E0YzRmNTA4
NTFmMB4XDTI2MDQxNTEzMDAzMFoXDTI2MDcxNDEzMDAzMFowLzEtMCsGA1UEAxMk
YjBlN2VjOTAtNGYzOC00Yjk1LTg5ZjEtZWZiYzJhOWU3N2ZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUZPcuufN6v1R/XuDnD4g61B6HbPeqBL9hiz
PJOEeh/h9X3/RVDb6V5zwKcX9kO6p+d+PldNtZMKR+ZikoP9XSa+Rl0XvGlW21oB
9hh1/vC4UEGZt7VpNrhxWHf/+GmLRRK/BrbcG4uhE7HKSAXIJwo+l8tO5L86OPFs
xdj+EGoD2G9r8XXVSfOK5itdxMnH0/5HcmY1RdYk1XO5HPOlV+fL+uY2gBLB1x2d
F4axkx/RXYDe2ZbDYnVZNaI3rK1PXVKemisFtFhoWhMONkKz7q+zIr47eIMFBrKm
uGBL30YhXkZZQdZ+8NwTFGuXMl630TVomSQFKx0HTW/TzC0eQwIDAQABo4IDbDCC
A2gwHQYDVR0OBBYEFPz0kH6cuLaCDmCmONr+xEaZ/jBRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wYzMz
YWZmNS0xMGQzLTQ1NGEtOGIyNy1jYTRjNGY1MDg1MWYvYjI1ZmIyZTUtM2M2Ny0z
YmY3LWE1MGItZjA2MzVmYmE4MGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMGMzM2FmZjUtMTBkMy00NTRhLThi
MjctY2E0YzRmNTA4NTFmLzBjMzNhZmY1LTEwZDMtNDU0YS04YjI3LWNhNGM0ZjUw
ODUxZi5jcmwwHwYDVR0jBBgwFoAUXyLdWFbvJsccr47s7qn9afs9CH4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8wYzMzYWZmNS0xMGQzLTQ1NGEtOGIyNy1jYTRj
NGY1MDg1MWYuY2VyMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQBF4s8AwQA
QCAyMA8EAgACMAkDBwAmIADXoAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6
MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr
aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEALBDDMvJ8O8lanwxXYNK/AKNt
S0vF6XRK7Qt9LK4kSyCpzYJXXQEsxawTqWHIY9QtW3qn5P9TddzZG6ptR3mZYG3z
pr/VDSb8UL1HfJthC+9ouvVpoXzQFpagv5Ftpr09+t7IDQFM+5Q1xhXqSGDMR/tN
rZl8XYAFnDbWSpEj11+KMwy8WfDKiTHN+oCvU2fvrU9IcH1GcGaN35bBScU0Yt5H
x854NL1hrpLq91CgII4etLBMAs78dYLzu5tqJRdCkorTjYQCNhhffo+u8DcYSn0Y
Qk2hinGk/g0ctLWFNrdNctJxkOOYmt2IRkcU0O0PelxClQHJ7kNRWaQhmVkeNw==
-----END CERTIFICATE-----
Generated at Wed Apr 15 16:13:54 2026 by rpki-client