Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/1e9ff741-e5c9-35db-bc16-dff9f999865d.roa
File:                     1e9ff741-e5c9-35db-bc16-dff9f999865d.roa (raw, json)
Hash identifier:          qqJoWsn8Hfhbq+AoV4puDR9amiodOQYLPmXcZsT+2kQ=
Subject key identifier:   89:97:E3:B3:96:94:78:3A:92:1F:2D:23:0D:C9:9A:76:C5:EA:04:43
Certificate issuer:       /CN=c69a1447-7cfa-456f-a600-4b2012c01dc7
Certificate serial:       010D0C9F4328584F7352E4565034233C501A6D80
Authority key identifier: 02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/1e9ff741-e5c9-35db-bc16-dff9f999865d.roa
Signing time:             Sat 10 Oct 2026 01:00:13 +0000
ROA not before:           Sat 10 Oct 2026 01:00:13 +0000
ROA not after:            Fri 08 Jan 2027 02:00:13 +0000
asID:                     11776
IP address blocks:        23.245.64.0/20 maxlen: 20
                          23.245.168.0/21 maxlen: 21
                          24.145.76.0/24 maxlen: 24
                          24.145.77.0/24 maxlen: 24
                          24.145.78.0/24 maxlen: 24
                          24.145.79.0/24 maxlen: 24
                          64.186.81.0/24 maxlen: 24
                          64.186.83.0/24 maxlen: 24
                          72.45.32.0/24 maxlen: 24
                          132.147.34.0/24 maxlen: 24
                          137.103.44.0/24 maxlen: 24
                          137.103.190.0/24 maxlen: 24
                          137.103.191.0/24 maxlen: 24
                          137.103.224.0/19 maxlen: 19
                          137.103.242.0/24 maxlen: 24
                          137.103.244.0/24 maxlen: 24
                          137.103.245.0/24 maxlen: 24
                          137.103.247.0/24 maxlen: 24
                          138.207.146.0/24 maxlen: 24
                          138.207.148.0/24 maxlen: 24
                          138.207.157.0/24 maxlen: 24
                          146.168.122.0/23 maxlen: 23
                          146.168.124.0/23 maxlen: 23
                          146.168.126.0/23 maxlen: 23
                          146.168.127.0/24 maxlen: 24
                          159.250.96.0/19 maxlen: 19
                          159.250.152.0/21 maxlen: 21
                          159.250.232.0/21 maxlen: 21
                          165.188.128.0/19 maxlen: 19
                          170.103.32.0/19 maxlen: 19
                          170.103.35.0/24 maxlen: 24
                          172.85.10.0/24 maxlen: 24
                          172.85.12.0/24 maxlen: 24
                          172.85.13.0/24 maxlen: 24
                          172.85.15.0/24 maxlen: 24
                          174.140.109.0/24 maxlen: 24
                          204.195.136.0/24 maxlen: 24
                          209.196.184.0/21 maxlen: 21
                          209.196.184.0/24 maxlen: 24
                          209.196.187.0/24 maxlen: 24
                          216.189.160.0/24 maxlen: 24
                          216.189.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:73:52:e4:56:50:34:23:3c:50:1a:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c69a1447-7cfa-456f-a600-4b2012c01dc7
        Validity
            Not Before: Oct 10 01:00:13 2026 GMT
            Not After : Jan  8 02:00:13 2027 GMT
        Subject: CN=d8a6db84-55d9-4ce6-9f78-0e00cce1b7ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:94:4e:14:13:4c:c5:b1:0f:3a:86:be:91:7d:
                    f5:93:98:dc:af:05:c8:16:af:07:50:c7:12:fa:0b:
                    3f:5f:b3:4d:9e:2d:81:fd:51:60:eb:d9:d8:5e:4c:
                    3b:8b:ef:95:a6:a2:cf:cf:3d:0b:05:f5:19:37:c9:
                    fb:e0:b5:0b:0c:e3:55:34:86:12:1e:c0:d9:1e:34:
                    d7:50:f5:da:7f:12:02:82:6e:17:c5:35:ec:a4:78:
                    71:f1:23:37:61:72:db:69:62:68:c4:71:18:41:3e:
                    78:46:39:c9:e9:ad:97:73:4b:d3:9f:9a:ad:88:d8:
                    88:ad:e4:56:b9:32:f5:9b:53:76:ef:28:2f:a7:b9:
                    14:80:f2:91:02:91:22:e0:5a:14:05:f4:65:17:bd:
                    48:1d:4d:70:53:09:55:78:cf:ab:40:17:d3:50:77:
                    8c:b2:d7:ef:06:81:4a:0b:b2:8a:b7:d9:47:69:29:
                    f8:c9:66:0d:9b:c0:60:78:10:8e:21:61:35:46:f6:
                    95:31:da:c8:bd:31:ab:63:36:11:25:7f:ba:44:a3:
                    5b:28:d8:1d:0d:ec:c5:ac:34:ed:c0:a4:a0:81:b4:
                    ee:01:c2:fa:ea:17:9e:f4:be:47:e6:f3:ca:66:bf:
                    69:4f:65:84:1c:5e:b2:35:e8:f6:7b:e8:fb:35:9d:
                    10:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:97:E3:B3:96:94:78:3A:92:1F:2D:23:0D:C9:9A:76:C5:EA:04:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/1e9ff741-e5c9-35db-bc16-dff9f999865d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl

            X509v3 Authority Key Identifier:
                keyid:02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.245.64.0/20
                  23.245.168.0/21
                  24.145.76.0/22
                  64.186.81.0/24
                  64.186.83.0/24
                  72.45.32.0/24
                  132.147.34.0/24
                  137.103.44.0/24
                  137.103.190.0/23
                  137.103.224.0/19
                  138.207.146.0/24
                  138.207.148.0/24
                  138.207.157.0/24
                  146.168.122.0-146.168.127.255
                  159.250.96.0/19
                  159.250.152.0/21
                  159.250.232.0/21
                  165.188.128.0/19
                  170.103.32.0/19
                  172.85.10.0/24
                  172.85.12.0/23
                  172.85.15.0/24
                  174.140.109.0/24
                  204.195.136.0/24
                  209.196.184.0/21
                  216.189.160.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:5d:d5:89:1a:c1:a9:c7:df:2e:d6:45:9d:93:46:06:09:a9:
         f9:92:f7:e1:d2:ca:91:89:60:6b:41:cc:4f:9c:d7:d9:75:94:
         6f:43:6a:bf:e8:3e:be:58:e8:cc:74:72:53:54:23:8a:df:c6:
         19:61:24:91:29:c7:98:df:6d:61:36:d7:21:17:96:96:f5:5e:
         76:c2:c6:3a:38:2a:e2:e5:f8:29:6b:64:b2:89:08:2d:d3:50:
         6f:e7:6d:51:c3:f9:23:7c:c7:98:69:1d:9a:3f:52:75:80:dd:
         7a:c3:9e:a1:b5:c9:55:77:38:5a:9c:dd:54:46:81:2d:c2:3a:
         c8:07:d2:4c:98:79:f3:65:b8:40:9d:0b:aa:3b:d7:c3:9c:c7:
         2b:cd:d1:f0:b0:e8:51:ff:02:79:94:c0:fe:7c:45:59:e5:b2:
         31:4b:59:90:ed:7c:19:68:13:76:7b:16:6c:68:f8:37:9b:54:
         63:cb:d0:ac:96:3f:aa:4b:30:a9:9f:a0:ae:c8:e5:43:f8:27:
         23:1d:f4:c6:bc:a7:f8:ab:1c:22:bc:89:04:46:75:55:82:20:
         6f:18:b5:e1:5e:99:d7:6d:98:f2:1b:05:dd:1b:4e:26:ad:42:
         5b:47:44:30:3f:06:48:31:55:14:c8:af:6d:fb:b7:8f:61:bd:
         c9:ec:96:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 11:50:26 2026 by rpki-client