Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/2d164d61-ea2a-3b8b-a1b9-1c1934831808.roa
File:                     2d164d61-ea2a-3b8b-a1b9-1c1934831808.roa (raw, json)
Hash identifier:          aMxh1QZSm/hIG9LooNWNiFcFCyAq1TLBDzgQH33sSvs=
Subject key identifier:   D6:F3:48:40:B7:22:51:36:F0:A7:64:19:36:1A:85:02:07:B5:24:73
Certificate issuer:       /CN=c69a1447-7cfa-456f-a600-4b2012c01dc7
Certificate serial:       010D0C9F4328584F778366F66AD1713E0B562880
Authority key identifier: 02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/2d164d61-ea2a-3b8b-a1b9-1c1934831808.roa
Signing time:             Sun 11 Oct 2026 13:00:12 +0000
ROA not before:           Sun 11 Oct 2026 13:00:12 +0000
ROA not after:            Sat 09 Jan 2027 14:00:12 +0000
asID:                     11776
IP address blocks:        23.244.0.0/17 maxlen: 17
                          23.244.0.0/23 maxlen: 23
                          23.244.23.0/24 maxlen: 24
                          23.244.59.0/24 maxlen: 24
                          23.245.88.0/21 maxlen: 21
                          23.245.96.0/19 maxlen: 19
                          23.245.128.0/19 maxlen: 19
                          23.245.192.0/18 maxlen: 18
                          24.35.31.0/24 maxlen: 24
                          24.214.150.0/23 maxlen: 23
                          24.214.152.0/21 maxlen: 21
                          24.214.160.0/20 maxlen: 20
                          24.214.176.0/22 maxlen: 22
                          24.214.180.0/23 maxlen: 23
                          24.214.192.0/22 maxlen: 22
                          24.214.196.0/23 maxlen: 23
                          24.214.198.0/24 maxlen: 24
                          24.214.230.0/23 maxlen: 23
                          24.214.232.0/21 maxlen: 21
                          64.186.82.0/23 maxlen: 23
                          65.60.128.0/17 maxlen: 17
                          66.29.192.0/19 maxlen: 19
                          69.171.192.0/21 maxlen: 21
                          69.171.200.0/22 maxlen: 22
                          69.171.204.0/23 maxlen: 23
                          69.171.207.0/24 maxlen: 24
                          74.81.192.0/19 maxlen: 19
                          75.76.40.0/22 maxlen: 22
                          75.76.44.0/23 maxlen: 23
                          75.76.48.0/20 maxlen: 20
                          75.76.64.0/22 maxlen: 22
                          75.76.72.0/21 maxlen: 21
                          75.76.80.0/22 maxlen: 22
                          75.76.86.0/23 maxlen: 23
                          75.76.88.0/21 maxlen: 21
                          75.76.96.0/21 maxlen: 21
                          75.76.104.0/23 maxlen: 23
                          75.76.108.0/22 maxlen: 22
                          75.76.112.0/21 maxlen: 21
                          75.76.120.0/22 maxlen: 22
                          75.76.124.0/23 maxlen: 23
                          75.76.127.0/24 maxlen: 24
                          75.76.128.0/23 maxlen: 23
                          75.76.178.0/23 maxlen: 23
                          75.76.184.0/21 maxlen: 21
                          75.76.192.0/18 maxlen: 18
                          75.118.0.0/16 maxlen: 16
                          75.118.0.0/17 maxlen: 17
                          75.118.128.0/17 maxlen: 17
                          76.73.195.0/24 maxlen: 24
                          76.73.196.0/22 maxlen: 22
                          76.73.200.0/24 maxlen: 24
                          76.73.204.0/22 maxlen: 22
                          76.73.208.0/22 maxlen: 22
                          76.73.212.0/23 maxlen: 23
                          76.73.216.0/21 maxlen: 21
                          76.73.224.0/21 maxlen: 21
                          76.73.232.0/22 maxlen: 22
                          76.73.236.0/23 maxlen: 23
                          76.73.238.0/24 maxlen: 24
                          76.73.240.0/20 maxlen: 20
                          170.103.0.0/19 maxlen: 19
                          216.186.162.0/23 maxlen: 23
                          216.186.165.0/24 maxlen: 24
                          216.186.166.0/23 maxlen: 23
                          216.186.168.0/21 maxlen: 21
                          216.186.176.0/22 maxlen: 22
                          216.186.181.0/24 maxlen: 24
                          216.186.182.0/23 maxlen: 23
                          216.186.184.0/21 maxlen: 21
                          216.186.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:77:83:66:f6:6a:d1:71:3e:0b:56:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c69a1447-7cfa-456f-a600-4b2012c01dc7
        Validity
            Not Before: Oct 11 13:00:12 2026 GMT
            Not After : Jan  9 14:00:12 2027 GMT
        Subject: CN=864f3dc1-2a77-473a-b5b8-aa99d8de1c97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:65:b6:b4:19:79:b0:f6:1a:82:fc:24:8d:eb:
                    54:ba:ec:81:a0:08:4e:a0:af:72:63:1e:8d:2f:51:
                    9c:40:94:47:84:f9:c7:3e:65:06:12:98:a3:6e:4f:
                    e6:43:aa:aa:46:77:6f:c0:e4:fb:42:bc:6b:0a:99:
                    80:6a:b0:8f:10:c5:4b:b5:66:e5:2c:c8:7f:6b:df:
                    81:a1:d1:71:f1:7d:a5:5d:2a:25:f1:2f:40:95:b9:
                    af:95:13:67:07:57:c2:87:b6:b0:5e:4c:82:59:b3:
                    33:d5:a3:aa:80:27:8e:51:0a:83:3c:c7:05:82:7e:
                    23:d4:cc:dd:6e:1d:a5:96:cf:e7:57:5a:1e:74:c9:
                    21:0e:49:14:e3:fc:6e:8a:15:22:24:8a:49:a3:33:
                    6b:8c:90:bb:d3:c9:1f:75:8f:5e:91:04:f0:bc:1d:
                    48:17:8e:20:af:bf:66:68:18:e3:35:23:ef:6a:ff:
                    27:9c:46:41:e0:94:c5:66:e9:22:45:70:fa:48:c8:
                    b3:7e:3e:c8:bd:37:df:df:6d:af:ab:1d:80:7f:36:
                    92:10:1c:40:84:24:e9:81:bf:7c:10:54:26:59:8f:
                    c8:64:22:94:24:84:45:a6:4d:bb:f1:8e:be:e4:57:
                    47:a6:7e:b7:a6:f9:12:62:bf:51:32:98:23:26:fe:
                    fc:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:F3:48:40:B7:22:51:36:F0:A7:64:19:36:1A:85:02:07:B5:24:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/2d164d61-ea2a-3b8b-a1b9-1c1934831808.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl

            X509v3 Authority Key Identifier:
                keyid:02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.244.0.0/17
                  23.245.88.0-23.245.159.255
                  23.245.192.0/18
                  24.35.31.0/24
                  24.214.150.0-24.214.181.255
                  24.214.192.0-24.214.198.255
                  24.214.230.0-24.214.239.255
                  64.186.82.0/23
                  65.60.128.0/17
                  66.29.192.0/19
                  69.171.192.0-69.171.205.255
                  69.171.207.0/24
                  74.81.192.0/19
                  75.76.40.0-75.76.45.255
                  75.76.48.0-75.76.67.255
                  75.76.72.0-75.76.83.255
                  75.76.86.0-75.76.105.255
                  75.76.108.0-75.76.125.255
                  75.76.127.0-75.76.129.255
                  75.76.178.0/23
                  75.76.184.0-75.76.255.255
                  75.118.0.0/16
                  76.73.195.0-76.73.200.255
                  76.73.204.0-76.73.213.255
                  76.73.216.0-76.73.238.255
                  76.73.240.0/20
                  170.103.0.0/19
                  216.186.162.0/23
                  216.186.165.0-216.186.179.255
                  216.186.181.0-216.186.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:6d:69:b3:22:3d:65:ba:b2:fb:f9:dd:71:02:cf:2a:ed:4a:
         d4:12:1d:bb:86:30:13:ef:6e:25:96:3f:10:18:c9:a5:b9:1a:
         ab:74:c5:2e:49:79:55:61:e2:a9:80:43:cb:17:c0:c8:35:d6:
         7a:5f:f4:4b:a8:d5:16:4a:b5:b3:34:01:2f:24:d2:0e:08:c4:
         a5:9d:48:1a:69:8a:dd:b9:c7:3f:a9:53:37:92:9a:8b:90:9d:
         07:52:26:11:3c:38:54:b2:af:d4:2d:53:6f:2c:4a:d6:16:2d:
         5e:2b:f0:ab:a9:3c:65:20:b9:61:68:f2:f0:b1:e9:46:0e:69:
         1e:55:35:4a:df:0f:21:e9:3e:2f:31:03:ac:ac:5e:fb:eb:57:
         55:ce:89:c3:7e:f9:b9:0d:55:fe:1b:d6:75:ec:fe:73:fb:f8:
         ba:33:6d:a0:d0:5a:1a:5e:b1:75:f7:9b:11:9b:85:8c:b2:15:
         be:3e:42:86:6a:b5:7f:8f:68:97:d6:4d:28:cf:e3:40:b9:bc:
         46:6a:80:d8:b2:d1:8b:8b:b5:88:ba:9b:6b:1f:3d:c2:28:2c:
         57:7d:10:93:78:3f:97:00:79:eb:34:eb:93:b1:f9:da:05:87:
         ab:72:99:c7:2d:66:8f:68:ef:4b:87:fb:10:85:ed:ae:b3:ed:
         60:d9:46:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 11:50:29 2026 by rpki-client