Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/09c3b0cc-16fe-3bc1-8424-76f1ab132ac6.roa
File:                     09c3b0cc-16fe-3bc1-8424-76f1ab132ac6.roa (raw, json)
Hash identifier:          h1OlEtroHyQbFHugtZaWN76ah+/EHF9Sz+EV92TcfHo=
Subject key identifier:   04:79:65:A1:27:82:DA:DA:AF:F2:E8:E7:5C:0F:9B:F8:86:45:EC:06
Certificate issuer:       /CN=c69a1447-7cfa-456f-a600-4b2012c01dc7
Certificate serial:       010D0C9F4328584EBDDC5227B00B79421CD37100
Authority key identifier: 02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/09c3b0cc-16fe-3bc1-8424-76f1ab132ac6.roa
Signing time:             Thu 06 Aug 2026 01:00:12 +0000
ROA not before:           Thu 06 Aug 2026 01:00:12 +0000
ROA not after:            Wed 04 Nov 2026 02:00:12 +0000
asID:                     11776
IP address blocks:        146.168.66.0/23 maxlen: 23
                          146.168.68.0/23 maxlen: 23
                          146.168.70.0/23 maxlen: 23
                          146.168.76.0/23 maxlen: 23
                          146.168.78.0/23 maxlen: 23
                          146.168.80.0/23 maxlen: 23
                          146.168.82.0/23 maxlen: 23
                          146.168.84.0/23 maxlen: 23
                          146.168.88.0/23 maxlen: 23
                          146.168.90.0/23 maxlen: 23
                          146.168.92.0/23 maxlen: 23
                          146.168.94.0/23 maxlen: 23
                          146.168.96.0/21 maxlen: 21
                          146.168.108.0/23 maxlen: 23
                          146.168.110.0/23 maxlen: 23
                          146.168.112.0/23 maxlen: 23
                          146.168.114.0/23 maxlen: 23
                          146.168.116.0/22 maxlen: 22
                          146.168.120.0/23 maxlen: 23
                          159.250.96.0/21 maxlen: 21
                          159.250.104.0/21 maxlen: 21
                          159.250.112.0/21 maxlen: 21
                          159.250.120.0/21 maxlen: 21
                          159.250.160.0/21 maxlen: 21
                          159.250.176.0/21 maxlen: 21
                          159.250.184.0/21 maxlen: 21
                          159.250.232.0/23 maxlen: 23
                          162.218.20.0/24 maxlen: 24
                          165.188.152.0/23 maxlen: 23
                          170.103.44.0/23 maxlen: 23
                          170.103.46.0/23 maxlen: 23
                          170.103.48.0/23 maxlen: 23
                          170.103.63.0/24 maxlen: 24
                          174.140.96.0/21 maxlen: 21
                          174.140.108.0/24 maxlen: 24
                          174.140.110.0/24 maxlen: 24
                          174.140.111.0/24 maxlen: 24
                          184.164.160.0/21 maxlen: 21
                          184.164.160.0/23 maxlen: 23
                          184.164.162.0/23 maxlen: 23
                          184.164.164.0/23 maxlen: 23
                          184.164.166.0/23 maxlen: 23
                          184.164.172.0/23 maxlen: 23
                          184.164.174.0/23 maxlen: 23
                          184.164.176.0/22 maxlen: 22
                          184.164.180.0/23 maxlen: 23
                          184.164.182.0/23 maxlen: 23
                          184.164.184.0/22 maxlen: 22
                          204.11.80.0/22 maxlen: 22
                          204.11.80.0/23 maxlen: 23
                          204.11.82.0/23 maxlen: 23
                          204.195.137.0/24 maxlen: 24
                          204.195.138.0/23 maxlen: 23
                          204.195.144.0/22 maxlen: 22
                          204.195.148.0/23 maxlen: 23
                          204.195.152.0/24 maxlen: 24
                          204.195.153.0/24 maxlen: 24
                          204.195.154.0/24 maxlen: 24
                          204.195.155.0/24 maxlen: 24
                          204.195.156.0/23 maxlen: 23
                          204.195.158.0/23 maxlen: 23
                          207.244.160.0/22 maxlen: 22
                          207.244.164.0/22 maxlen: 22
                          207.244.168.0/22 maxlen: 22
                          207.244.172.0/23 maxlen: 23
                          207.244.176.0/20 maxlen: 20
                          216.189.172.0/22 maxlen: 22
                          216.189.176.0/23 maxlen: 23
                          216.189.178.0/23 maxlen: 23
                          216.189.180.0/22 maxlen: 22
                          216.189.184.0/23 maxlen: 23
                          216.189.186.0/23 maxlen: 23
                          216.189.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bd:dc:52:27:b0:0b:79:42:1c:d3:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c69a1447-7cfa-456f-a600-4b2012c01dc7
        Validity
            Not Before: Aug  6 01:00:12 2026 GMT
            Not After : Nov  4 02:00:12 2026 GMT
        Subject: CN=c7c07975-a7ab-4246-a066-b9710baed0b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:05:28:2c:3e:13:1f:e2:2e:2a:49:a3:f5:69:
                    6e:c8:8f:96:09:15:cb:7b:b2:e8:87:42:b8:58:04:
                    6b:e5:4d:19:31:3e:57:08:64:b2:be:89:96:ff:a6:
                    c6:4d:c6:b6:5c:f0:44:0b:f1:f5:15:9c:f9:0f:e8:
                    ac:f4:a2:b8:b1:27:c9:21:9b:61:a2:63:af:1f:f2:
                    07:b4:6e:16:52:50:ce:44:99:6b:15:db:b6:df:6f:
                    d9:43:fc:cf:e6:0b:06:a8:02:e0:a3:ee:88:cb:74:
                    8b:86:44:0e:7a:55:4b:b5:9f:69:78:38:a2:79:6f:
                    ee:ab:ae:fb:7c:4a:56:f4:3b:5c:28:ef:e6:15:f5:
                    ae:85:bc:79:1c:56:c8:c8:ce:e1:44:be:57:16:cc:
                    bf:d0:25:ef:7f:68:75:28:af:15:c4:38:dc:1e:3c:
                    23:5a:9f:01:8b:79:c3:1a:f3:60:c9:06:66:41:d9:
                    af:c7:f2:c2:d7:20:40:08:c6:88:a6:0a:c9:97:54:
                    74:60:31:23:30:d8:2c:e4:00:19:aa:43:08:31:98:
                    9a:f3:40:e5:40:bc:1f:e3:11:70:3a:1f:96:86:96:
                    3f:03:6f:d5:ce:7f:5b:17:0e:67:e6:a9:3a:ab:57:
                    f5:dd:18:71:0f:54:9b:c8:d4:c9:a8:23:85:9d:4c:
                    67:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:79:65:A1:27:82:DA:DA:AF:F2:E8:E7:5C:0F:9B:F8:86:45:EC:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/09c3b0cc-16fe-3bc1-8424-76f1ab132ac6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl

            X509v3 Authority Key Identifier:
                keyid:02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.168.66.0-146.168.71.255
                  146.168.76.0-146.168.85.255
                  146.168.88.0-146.168.103.255
                  146.168.108.0-146.168.121.255
                  159.250.96.0/19
                  159.250.160.0/21
                  159.250.176.0/20
                  159.250.232.0/23
                  162.218.20.0/24
                  165.188.152.0/23
                  170.103.44.0-170.103.49.255
                  170.103.63.0/24
                  174.140.96.0/21
                  174.140.108.0/24
                  174.140.110.0/23
                  184.164.160.0/21
                  184.164.172.0-184.164.187.255
                  204.11.80.0/22
                  204.195.137.0-204.195.139.255
                  204.195.144.0-204.195.149.255
                  204.195.152.0/21
                  207.244.160.0-207.244.173.255
                  207.244.176.0/20
                  216.189.172.0-216.189.191.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:48:85:a6:53:85:fc:f8:83:18:8a:3c:da:79:20:0a:7e:b7:
         ab:a3:07:15:00:da:42:ef:00:26:20:33:4d:76:69:7a:16:5d:
         49:7f:99:f4:7f:a1:2d:d4:ec:22:64:28:82:b2:5d:3e:74:08:
         17:50:e7:c0:84:82:74:f9:e0:13:f2:e9:75:c4:f6:a0:e9:6e:
         d2:31:a1:c3:8f:3a:3a:63:ad:72:e8:65:4a:87:ba:8a:73:8a:
         53:dc:39:4f:cb:b6:ca:16:85:27:26:7b:0d:1e:5e:77:2b:9f:
         72:56:52:18:d9:b4:c0:05:10:7d:bd:38:7b:b7:52:44:16:57:
         93:55:85:f4:1e:2b:e2:32:d4:a5:4b:32:4b:20:e6:6f:e3:34:
         4d:93:93:d6:73:14:94:cb:e6:96:35:88:e3:01:a3:e0:4d:3e:
         9e:0e:d4:a5:8a:e4:7a:9c:ef:56:dd:30:55:df:bf:05:97:06:
         f8:04:16:c2:57:c5:6a:83:3b:df:21:c8:43:fa:31:3d:bd:19:
         28:ed:a4:7a:b6:c4:c3:51:86:ee:e8:45:30:45:f3:88:f9:ce:
         1f:8f:f2:f5:5e:90:92:77:8e:5c:71:c0:7a:12:fb:6c:61:06:
         65:d0:cf:0c:61:08:f5:38:be:d6:49:29:eb:a0:d1:4c:57:c7:
         d5:a3:d5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 10:37:47 2026 by rpki-client