Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/09c3b0cc-16fe-3bc1-8424-76f1ab132ac6.roa
File:                     09c3b0cc-16fe-3bc1-8424-76f1ab132ac6.roa (raw, json)
Hash identifier:          3H2devdO/7w6JXXims0KwBK5h3gGWDtM2F7QWlJdDSE=
Subject key identifier:   94:6E:9B:31:BF:6B:AB:4D:51:F3:32:B8:66:97:29:AE:09:30:74:64
Certificate issuer:       /CN=c69a1447-7cfa-456f-a600-4b2012c01dc7
Certificate serial:       010D0C9F4328584F612D6C699BBE968C809BC500
Authority key identifier: 02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/09c3b0cc-16fe-3bc1-8424-76f1ab132ac6.roa
Signing time:             Sat 03 Oct 2026 13:00:13 +0000
ROA not before:           Sat 03 Oct 2026 13:00:13 +0000
ROA not after:            Fri 01 Jan 2027 14:00:13 +0000
asID:                     11776
IP address blocks:        146.168.66.0/23 maxlen: 23
                          146.168.68.0/23 maxlen: 23
                          146.168.70.0/23 maxlen: 23
                          146.168.76.0/23 maxlen: 23
                          146.168.78.0/23 maxlen: 23
                          146.168.80.0/23 maxlen: 23
                          146.168.82.0/23 maxlen: 23
                          146.168.84.0/23 maxlen: 23
                          146.168.88.0/23 maxlen: 23
                          146.168.90.0/23 maxlen: 23
                          146.168.92.0/23 maxlen: 23
                          146.168.94.0/23 maxlen: 23
                          146.168.96.0/21 maxlen: 21
                          146.168.108.0/23 maxlen: 23
                          146.168.110.0/23 maxlen: 23
                          146.168.112.0/23 maxlen: 23
                          146.168.114.0/23 maxlen: 23
                          146.168.116.0/22 maxlen: 22
                          146.168.120.0/23 maxlen: 23
                          159.250.96.0/21 maxlen: 21
                          159.250.104.0/21 maxlen: 21
                          159.250.112.0/21 maxlen: 21
                          159.250.120.0/21 maxlen: 21
                          159.250.160.0/21 maxlen: 21
                          159.250.176.0/21 maxlen: 21
                          159.250.184.0/21 maxlen: 21
                          159.250.232.0/23 maxlen: 23
                          162.218.20.0/24 maxlen: 24
                          165.188.152.0/23 maxlen: 23
                          170.103.44.0/23 maxlen: 23
                          170.103.46.0/23 maxlen: 23
                          170.103.48.0/23 maxlen: 23
                          170.103.63.0/24 maxlen: 24
                          174.140.96.0/21 maxlen: 21
                          174.140.108.0/24 maxlen: 24
                          174.140.110.0/24 maxlen: 24
                          174.140.111.0/24 maxlen: 24
                          184.164.160.0/21 maxlen: 21
                          184.164.160.0/23 maxlen: 23
                          184.164.162.0/23 maxlen: 23
                          184.164.164.0/23 maxlen: 23
                          184.164.166.0/23 maxlen: 23
                          184.164.172.0/23 maxlen: 23
                          184.164.174.0/23 maxlen: 23
                          184.164.176.0/22 maxlen: 22
                          184.164.180.0/23 maxlen: 23
                          184.164.182.0/23 maxlen: 23
                          184.164.184.0/22 maxlen: 22
                          204.11.80.0/22 maxlen: 22
                          204.11.80.0/23 maxlen: 23
                          204.11.82.0/23 maxlen: 23
                          204.195.137.0/24 maxlen: 24
                          204.195.138.0/23 maxlen: 23
                          204.195.144.0/22 maxlen: 22
                          204.195.148.0/23 maxlen: 23
                          204.195.152.0/24 maxlen: 24
                          204.195.153.0/24 maxlen: 24
                          204.195.154.0/24 maxlen: 24
                          204.195.155.0/24 maxlen: 24
                          204.195.156.0/23 maxlen: 23
                          204.195.158.0/23 maxlen: 23
                          207.244.160.0/22 maxlen: 22
                          207.244.164.0/22 maxlen: 22
                          207.244.168.0/22 maxlen: 22
                          207.244.172.0/23 maxlen: 23
                          207.244.176.0/20 maxlen: 20
                          216.189.172.0/22 maxlen: 22
                          216.189.176.0/23 maxlen: 23
                          216.189.178.0/23 maxlen: 23
                          216.189.180.0/22 maxlen: 22
                          216.189.184.0/23 maxlen: 23
                          216.189.186.0/23 maxlen: 23
                          216.189.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:61:2d:6c:69:9b:be:96:8c:80:9b:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c69a1447-7cfa-456f-a600-4b2012c01dc7
        Validity
            Not Before: Oct  3 13:00:13 2026 GMT
            Not After : Jan  1 14:00:13 2027 GMT
        Subject: CN=0b40e3fa-9a09-4a7f-a4da-3daebc15b743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:94:60:c3:3f:3e:26:6b:cd:87:f6:1b:71:35:
                    92:2f:9e:2b:1b:27:15:43:7d:21:d2:c8:ce:07:94:
                    78:74:54:d9:95:21:ac:29:ad:5a:eb:81:6d:42:d8:
                    cc:01:e3:2a:f5:d2:d9:13:bd:a8:ed:d7:cd:60:01:
                    8c:88:f1:21:80:51:37:6b:81:f7:91:8a:af:ff:7f:
                    ff:85:c5:05:74:93:5a:31:5e:a4:54:8e:cc:a8:56:
                    11:60:8d:17:60:f6:6c:32:f6:fb:1e:9e:cb:dd:c8:
                    06:52:99:d4:86:8a:1e:a0:5c:21:a7:3e:2a:36:26:
                    9f:e8:df:51:5a:fe:6c:59:9b:69:73:0d:d2:94:f2:
                    b0:cc:0f:98:ab:01:4b:2c:66:d4:60:64:c1:f8:1d:
                    de:11:d8:f8:2e:9c:14:70:84:f3:46:b2:04:cc:c0:
                    f9:9a:80:90:94:9b:27:9e:ec:61:4c:a0:12:09:f5:
                    77:05:e4:87:60:cf:c2:db:cf:f6:92:07:aa:c5:be:
                    1f:21:59:15:24:9e:79:3b:6e:61:19:af:5d:20:a3:
                    d4:a5:37:87:25:91:b5:ae:08:26:0e:9d:72:f1:4a:
                    27:05:ed:c0:78:38:34:b1:28:32:d0:e1:6d:5d:eb:
                    8e:6a:06:fe:ac:18:29:68:43:15:30:e9:da:23:2b:
                    af:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:6E:9B:31:BF:6B:AB:4D:51:F3:32:B8:66:97:29:AE:09:30:74:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/09c3b0cc-16fe-3bc1-8424-76f1ab132ac6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl

            X509v3 Authority Key Identifier:
                keyid:02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.168.66.0-146.168.71.255
                  146.168.76.0-146.168.85.255
                  146.168.88.0-146.168.103.255
                  146.168.108.0-146.168.121.255
                  159.250.96.0/19
                  159.250.160.0/21
                  159.250.176.0/20
                  159.250.232.0/23
                  162.218.20.0/24
                  165.188.152.0/23
                  170.103.44.0-170.103.49.255
                  170.103.63.0/24
                  174.140.96.0/21
                  174.140.108.0/24
                  174.140.110.0/23
                  184.164.160.0/21
                  184.164.172.0-184.164.187.255
                  204.11.80.0/22
                  204.195.137.0-204.195.139.255
                  204.195.144.0-204.195.149.255
                  204.195.152.0/21
                  207.244.160.0-207.244.173.255
                  207.244.176.0/20
                  216.189.172.0-216.189.191.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:97:9e:32:45:a4:1b:92:6c:78:cb:ac:e2:77:3d:b8:7c:56:
         ba:b4:75:55:23:22:67:bc:f0:d1:78:7e:ca:e5:99:e2:7e:9b:
         29:4d:5f:78:0b:3a:f9:86:66:70:ad:42:1f:1d:f5:b5:96:10:
         63:0a:f9:64:b5:49:12:1b:7a:06:d7:35:6f:dd:92:ac:53:fa:
         2a:b6:af:36:df:90:8f:ed:e3:6b:49:34:a7:81:e5:b2:1d:3f:
         db:82:98:4f:88:8c:5a:61:e4:94:73:f3:3a:26:e4:da:c8:aa:
         19:1b:d1:41:d6:9e:8f:d4:66:80:1a:4c:fc:bb:4f:e5:96:a3:
         14:d3:2f:e1:ad:05:f8:20:ec:94:fd:a3:37:55:a9:12:18:85:
         74:c8:2b:9e:a9:b5:b3:cc:bb:b4:8b:46:39:3b:8c:42:87:85:
         80:25:30:e3:ba:21:08:4e:dc:9b:b7:6b:ce:1d:6b:f7:cb:8b:
         a6:06:fc:f3:d0:f0:81:90:42:4a:07:71:2b:30:8b:33:8e:0d:
         d5:e0:07:ff:43:5d:08:a4:54:cb:b9:77:d6:fd:db:82:30:f2:
         0e:3d:5a:9a:9d:7e:01:fc:a2:c3:73:96:45:da:bb:31:21:f0:
         a7:79:6a:c1:b3:4c:4c:c6:82:ac:64:62:c8:f5:da:c4:00:74:
         ac:a1:9f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 19:48:53 2026 by rpki-client