Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/37c8d835-4a2a-33ad-92bb-901b6ac5b82a.roa
File:                     37c8d835-4a2a-33ad-92bb-901b6ac5b82a.roa (raw, json)
Hash identifier:          DoS4UJ81zFqUix9nNkFqqe+whcufSswqdRLRt5oYxwI=
Subject key identifier:   C5:92:71:5F:AA:62:D2:8B:A7:B2:40:44:41:6D:45:F6:92:6B:D5:41
Certificate issuer:       /CN=c69a1447-7cfa-456f-a600-4b2012c01dc7
Certificate serial:       010D0C9F4328584EC371B0E606372635E8ACFFC0
Authority key identifier: 02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/37c8d835-4a2a-33ad-92bb-901b6ac5b82a.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     11776
IP address blocks:        23.244.144.0/23 maxlen: 23
                          23.244.149.0/24 maxlen: 24
                          23.244.150.0/23 maxlen: 23
                          23.244.152.0/23 maxlen: 23
                          23.244.154.0/23 maxlen: 23
                          23.244.156.0/23 maxlen: 23
                          23.244.158.0/23 maxlen: 23
                          23.244.212.0/23 maxlen: 23
                          23.244.214.0/24 maxlen: 24
                          23.244.216.0/23 maxlen: 23
                          23.244.220.0/23 maxlen: 23
                          23.245.12.0/23 maxlen: 23
                          23.245.14.0/23 maxlen: 23
                          23.245.24.0/23 maxlen: 23
                          23.245.26.0/23 maxlen: 23
                          23.245.28.0/23 maxlen: 23
                          23.245.30.0/23 maxlen: 23
                          24.145.92.0/24 maxlen: 24
                          24.145.93.0/24 maxlen: 24
                          24.145.94.0/24 maxlen: 24
                          24.145.112.0/22 maxlen: 22
                          24.145.116.0/22 maxlen: 22
                          24.153.32.0/23 maxlen: 23
                          24.153.35.0/24 maxlen: 24
                          24.153.38.0/23 maxlen: 23
                          24.153.40.0/22 maxlen: 22
                          24.153.48.0/23 maxlen: 23
                          24.153.50.0/23 maxlen: 23
                          24.153.52.0/24 maxlen: 24
                          24.153.53.0/24 maxlen: 24
                          24.153.54.0/23 maxlen: 23
                          24.153.56.0/21 maxlen: 21
                          24.233.200.0/24 maxlen: 24
                          24.233.201.0/24 maxlen: 24
                          24.233.206.0/23 maxlen: 23
                          24.233.208.0/23 maxlen: 23
                          24.233.210.0/23 maxlen: 23
                          24.233.215.0/24 maxlen: 24
                          24.233.219.0/24 maxlen: 24
                          24.233.221.0/24 maxlen: 24
                          24.233.222.0/24 maxlen: 24
                          24.233.223.0/24 maxlen: 24
                          24.245.96.0/22 maxlen: 22
                          24.245.100.0/23 maxlen: 23
                          24.245.102.0/23 maxlen: 23
                          24.245.104.0/24 maxlen: 24
                          24.245.105.0/24 maxlen: 24
                          24.245.106.0/23 maxlen: 23
                          24.245.108.0/24 maxlen: 24
                          24.245.120.0/23 maxlen: 23
                          24.245.122.0/23 maxlen: 23
                          24.245.126.0/23 maxlen: 23
                          65.99.96.0/20 maxlen: 20
                          65.99.112.0/24 maxlen: 24
                          65.99.113.0/24 maxlen: 24
                          65.99.114.0/24 maxlen: 24
                          65.99.115.0/24 maxlen: 24
                          65.99.121.0/24 maxlen: 24
                          65.99.122.0/24 maxlen: 24
                          65.99.123.0/24 maxlen: 24
                          65.99.124.0/23 maxlen: 23
                          65.99.126.0/24 maxlen: 24
                          66.85.5.0/24 maxlen: 24
                          69.161.80.0/20 maxlen: 20
                          69.161.98.0/24 maxlen: 24
                          69.161.99.0/24 maxlen: 24
                          69.161.102.0/24 maxlen: 24
                          69.161.103.0/24 maxlen: 24
                          69.161.104.0/22 maxlen: 22
                          69.161.108.0/24 maxlen: 24
                          69.161.109.0/24 maxlen: 24
                          69.161.110.0/24 maxlen: 24
                          69.161.111.0/24 maxlen: 24
                          137.103.88.0/22 maxlen: 22
                          209.42.139.0/24 maxlen: 24
                          209.42.140.0/24 maxlen: 24
                          209.42.141.0/24 maxlen: 24
                          209.42.142.0/23 maxlen: 23
                          209.42.150.0/24 maxlen: 24
                          209.42.151.0/24 maxlen: 24
                          209.42.152.0/24 maxlen: 24
                          209.42.153.0/24 maxlen: 24
                          209.42.156.0/24 maxlen: 24
                          209.42.157.0/24 maxlen: 24
                          209.42.159.0/24 maxlen: 24
                          209.203.208.0/22 maxlen: 22
                          216.10.161.0/24 maxlen: 24
                          216.10.174.0/24 maxlen: 24
                          216.10.175.0/24 maxlen: 24
                          216.10.182.0/24 maxlen: 24
                          216.10.183.0/24 maxlen: 24
                          216.10.184.0/24 maxlen: 24
                          216.10.185.0/24 maxlen: 24
                          216.10.186.0/24 maxlen: 24
                          216.10.187.0/24 maxlen: 24
                          216.10.188.0/24 maxlen: 24
                          216.10.189.0/24 maxlen: 24
                          216.36.0.0/21 maxlen: 21
                          216.36.8.0/22 maxlen: 22
                          216.36.12.0/23 maxlen: 23
                          216.36.14.0/24 maxlen: 24
                          216.36.15.0/24 maxlen: 24
                          216.36.16.0/24 maxlen: 24
                          216.36.17.0/24 maxlen: 24
                          216.36.18.0/23 maxlen: 23
                          216.36.20.0/22 maxlen: 22
                          216.36.24.0/24 maxlen: 24
                          216.36.25.0/24 maxlen: 24
                          216.36.26.0/24 maxlen: 24
                          216.36.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:71:b0:e6:06:37:26:35:e8:ac:ff:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c69a1447-7cfa-456f-a600-4b2012c01dc7
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=e4a7c493-b134-46e2-ada1-e72bf2be535a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1b:69:60:02:61:6d:66:fe:10:d7:b9:ba:75:
                    de:45:d4:cb:26:ae:eb:56:3e:83:4c:b5:ba:4d:c0:
                    10:73:47:26:07:0b:0f:f6:a8:61:20:7f:92:4d:0e:
                    88:51:64:2f:a3:4d:20:db:00:03:8b:8a:38:a8:06:
                    77:53:18:31:c2:a5:c7:2c:26:ec:bd:eb:a8:17:3e:
                    f6:f5:d6:84:48:ff:c1:22:66:7c:57:2e:cb:95:af:
                    29:1e:d7:9f:b4:b6:38:6f:b0:19:75:cc:ae:df:84:
                    e4:56:38:df:ce:a5:7a:b5:1e:15:ae:42:92:c2:1e:
                    fe:87:64:d7:af:2a:33:c6:39:a7:14:d5:df:36:3f:
                    90:1b:e2:ff:a4:a0:40:e3:c2:3b:bf:60:d8:27:ac:
                    b9:6e:69:a5:1d:19:65:c3:41:a2:0b:48:a4:77:9c:
                    42:8e:ad:4f:71:08:b0:fd:bb:93:2f:14:c4:0f:fc:
                    9a:d5:9e:35:45:5a:33:21:b9:8f:39:ec:5f:06:36:
                    a7:f2:a9:1d:94:84:9c:ae:bc:56:2b:f2:96:0e:4e:
                    c6:1b:09:36:99:0a:74:36:ac:d5:32:8e:94:f0:9d:
                    8f:ee:12:c6:08:98:10:68:37:8f:c7:7f:8c:2c:f1:
                    8f:d2:3d:e4:c7:15:ba:b7:f9:97:ba:82:ad:e4:33:
                    04:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:92:71:5F:AA:62:D2:8B:A7:B2:40:44:41:6D:45:F6:92:6B:D5:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/37c8d835-4a2a-33ad-92bb-901b6ac5b82a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl

            X509v3 Authority Key Identifier:
                keyid:02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.244.144.0/23
                  23.244.149.0-23.244.159.255
                  23.244.212.0-23.244.214.255
                  23.244.216.0/23
                  23.244.220.0/23
                  23.245.12.0/22
                  23.245.24.0/21
                  24.145.92.0-24.145.94.255
                  24.145.112.0/21
                  24.153.32.0/23
                  24.153.35.0/24
                  24.153.38.0-24.153.43.255
                  24.153.48.0/20
                  24.233.200.0/23
                  24.233.206.0-24.233.211.255
                  24.233.215.0/24
                  24.233.219.0/24
                  24.233.221.0-24.233.223.255
                  24.245.96.0-24.245.108.255
                  24.245.120.0/22
                  24.245.126.0/23
                  65.99.96.0-65.99.115.255
                  65.99.121.0-65.99.126.255
                  66.85.5.0/24
                  69.161.80.0/20
                  69.161.98.0/23
                  69.161.102.0-69.161.111.255
                  137.103.88.0/22
                  209.42.139.0-209.42.143.255
                  209.42.150.0-209.42.153.255
                  209.42.156.0/23
                  209.42.159.0/24
                  209.203.208.0/22
                  216.10.161.0/24
                  216.10.174.0/23
                  216.10.182.0-216.10.189.255
                  216.36.0.0-216.36.27.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:0c:a7:73:74:35:08:13:5c:b8:6f:dc:46:45:77:b7:7d:5f:
         63:7f:3b:60:11:08:67:31:10:a0:66:48:e1:94:b4:b2:05:86:
         23:f4:a3:59:00:84:32:85:8d:53:ba:fe:43:bb:f1:7c:48:2d:
         95:54:35:2f:c4:c3:ee:8c:b3:9f:d3:82:f0:1b:8a:70:ca:84:
         2a:44:73:71:51:33:eb:45:93:f3:78:a6:4b:f1:ea:ae:4b:e6:
         7f:9b:75:ae:7e:0d:55:a3:61:58:cd:5a:03:50:fd:96:26:bb:
         c3:76:cb:88:b7:1c:11:6a:ce:59:90:75:7e:59:c9:0d:fc:06:
         bf:54:e9:24:4f:4b:0b:3f:3e:c4:8c:76:15:04:43:b3:70:e3:
         68:7d:7a:ef:f4:42:7d:64:67:e1:1c:45:ea:5f:bd:ad:0f:b7:
         fb:6a:bf:81:79:6d:8d:6d:d2:b9:89:eb:8e:48:fe:40:76:77:
         b4:fd:bd:36:59:80:cf:e2:be:25:c7:3a:be:f4:a2:e7:04:52:
         69:b4:a5:f7:1a:19:e2:a0:0e:d8:d2:aa:be:4e:ce:eb:1a:89:
         b5:ac:92:46:c6:02:35:08:b6:cc:7e:e7:ce:c1:46:7c:25:0e:
         ed:ab:9a:e9:21:f7:34:b1:c8:9d:87:fd:43:0a:32:f1:11:d0:
         53:7e:73:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 10:23:43 2026 by rpki-client