Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/1e9ff741-e5c9-35db-bc16-dff9f999865d.roa
File:                     1e9ff741-e5c9-35db-bc16-dff9f999865d.roa (raw, json)
Hash identifier:          tfqDnT5EUABPLGUVefQzJviXin00XfkEhqV8HHIqj4k=
Subject key identifier:   82:3E:41:09:25:D2:8A:AE:60:0F:5B:D6:4A:E4:FE:77:77:CC:94:2B
Certificate issuer:       /CN=c69a1447-7cfa-456f-a600-4b2012c01dc7
Certificate serial:       010D0C9F4328584E4A9256868E1528E9E1B869B0
Authority key identifier: 02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/1e9ff741-e5c9-35db-bc16-dff9f999865d.roa
Signing time:             Thu 25 Jun 2026 17:53:11 +0000
ROA not before:           Thu 25 Jun 2026 17:53:11 +0000
ROA not after:            Sun 13 Sep 2026 14:24:32 +0000
asID:                     11776
IP address blocks:        23.245.64.0/20 maxlen: 20
                          23.245.168.0/21 maxlen: 21
                          24.145.76.0/24 maxlen: 24
                          24.145.77.0/24 maxlen: 24
                          24.145.78.0/24 maxlen: 24
                          24.145.79.0/24 maxlen: 24
                          64.186.81.0/24 maxlen: 24
                          64.186.83.0/24 maxlen: 24
                          72.45.32.0/24 maxlen: 24
                          132.147.34.0/24 maxlen: 24
                          137.103.44.0/24 maxlen: 24
                          137.103.190.0/24 maxlen: 24
                          137.103.191.0/24 maxlen: 24
                          137.103.224.0/19 maxlen: 19
                          137.103.242.0/24 maxlen: 24
                          137.103.244.0/24 maxlen: 24
                          137.103.245.0/24 maxlen: 24
                          137.103.247.0/24 maxlen: 24
                          138.207.146.0/24 maxlen: 24
                          138.207.148.0/24 maxlen: 24
                          138.207.157.0/24 maxlen: 24
                          146.168.122.0/23 maxlen: 23
                          146.168.124.0/23 maxlen: 23
                          146.168.126.0/23 maxlen: 23
                          146.168.127.0/24 maxlen: 24
                          159.250.96.0/19 maxlen: 19
                          159.250.152.0/21 maxlen: 21
                          159.250.232.0/21 maxlen: 21
                          165.188.128.0/19 maxlen: 19
                          170.103.32.0/19 maxlen: 19
                          170.103.35.0/24 maxlen: 24
                          172.85.10.0/24 maxlen: 24
                          172.85.12.0/24 maxlen: 24
                          172.85.13.0/24 maxlen: 24
                          172.85.15.0/24 maxlen: 24
                          174.140.109.0/24 maxlen: 24
                          204.195.136.0/24 maxlen: 24
                          209.196.184.0/21 maxlen: 21
                          209.196.184.0/24 maxlen: 24
                          209.196.187.0/24 maxlen: 24
                          216.189.160.0/24 maxlen: 24
                          216.189.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:92:56:86:8e:15:28:e9:e1:b8:69:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c69a1447-7cfa-456f-a600-4b2012c01dc7
        Validity
            Not Before: Jun 25 17:53:11 2026 GMT
            Not After : Sep 13 14:24:32 2026 GMT
        Subject: CN=2a64abe3-549f-45a3-9f77-6d3e67f6635f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a2:c2:0d:67:d4:d8:f5:04:c2:20:60:04:a0:
                    9e:ce:dc:a1:33:bf:85:ce:74:25:90:3b:03:0c:5f:
                    3f:b7:1c:04:cf:0a:36:75:66:29:55:c7:b6:39:41:
                    2b:25:b2:7b:6c:5a:2c:47:e0:20:c3:56:71:58:eb:
                    29:43:f3:7f:35:a3:2b:0a:ef:dc:af:f7:fd:c6:74:
                    f4:72:f1:75:75:94:0b:c9:2f:3a:91:30:26:04:31:
                    60:9f:61:18:37:c5:19:9e:39:e4:d9:e3:fc:80:f2:
                    09:ee:c7:1b:43:d6:84:a5:b2:3f:4d:db:06:d6:70:
                    c8:9b:77:ab:a4:22:3b:11:9c:0c:df:f4:49:c2:02:
                    3e:01:27:19:42:71:43:2a:89:02:f3:65:bb:df:5a:
                    c8:fb:87:74:4b:33:ac:09:01:26:4c:09:82:51:a6:
                    3c:4f:ce:b0:a2:8b:fa:fa:f9:73:fa:8c:46:ea:ba:
                    e1:07:83:1d:0f:ab:d1:82:5a:e8:5c:79:84:f1:5f:
                    1b:ae:d7:d1:16:6c:34:85:34:81:2b:94:54:59:da:
                    54:e8:21:58:5b:d6:49:80:a3:ba:e0:fd:27:d9:d8:
                    d2:89:e2:48:71:33:05:b2:70:cd:35:db:df:cf:40:
                    ca:d9:a7:db:fb:ef:f1:e1:72:d1:6f:36:79:fe:ee:
                    d8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:3E:41:09:25:D2:8A:AE:60:0F:5B:D6:4A:E4:FE:77:77:CC:94:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/1e9ff741-e5c9-35db-bc16-dff9f999865d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl

            X509v3 Authority Key Identifier:
                keyid:02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.245.64.0/20
                  23.245.168.0/21
                  24.145.76.0/22
                  64.186.81.0/24
                  64.186.83.0/24
                  72.45.32.0/24
                  132.147.34.0/24
                  137.103.44.0/24
                  137.103.190.0/23
                  137.103.224.0/19
                  138.207.146.0/24
                  138.207.148.0/24
                  138.207.157.0/24
                  146.168.122.0-146.168.127.255
                  159.250.96.0/19
                  159.250.152.0/21
                  159.250.232.0/21
                  165.188.128.0/19
                  170.103.32.0/19
                  172.85.10.0/24
                  172.85.12.0/23
                  172.85.15.0/24
                  174.140.109.0/24
                  204.195.136.0/24
                  209.196.184.0/21
                  216.189.160.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:c1:63:81:8e:43:4e:16:e5:c6:eb:76:5e:cf:3b:dd:b3:79:
         36:e3:78:c2:f5:7e:fa:f0:5e:e5:5c:b9:a8:6b:c6:ea:57:16:
         18:6f:ad:a4:0c:cb:73:c2:15:08:a6:26:65:a2:1f:06:12:8a:
         78:e1:3d:d2:99:71:13:b9:50:72:89:8e:91:e7:77:0e:20:f1:
         ee:07:53:6d:c6:04:2c:55:da:08:58:e6:9f:d8:3b:56:99:52:
         75:10:b1:7d:98:ea:70:c4:fd:b0:94:87:c1:a4:ee:88:fd:ae:
         2a:45:7e:4e:3e:8b:1e:08:0c:91:1d:8b:40:d2:a4:14:af:cb:
         f5:d8:1d:15:ce:e2:58:a2:02:f1:87:cd:a5:54:64:c7:b6:63:
         9a:e2:39:96:09:77:70:72:f9:ad:ab:ad:3d:32:ee:b7:18:91:
         8a:e4:b1:a8:43:64:a4:bb:92:24:4b:1c:ac:c2:bd:be:58:fb:
         34:20:56:71:e7:c4:33:3c:79:16:d0:f7:72:18:de:f9:59:45:
         90:15:2b:01:df:52:13:ee:48:4d:4b:74:e6:6b:c1:0d:5f:71:
         4a:cb:56:36:41:dc:8d:93:17:d6:82:55:83:c1:fb:d0:f1:6c:
         58:50:21:b8:41:62:31:6c:3c:3b:f4:6f:ff:24:eb:4c:81:34:
         f2:0f:ba:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 05:20:52 2026 by rpki-client