Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/5f47116e-b91e-3908-a9ab-88040374696f.roa
File:                     5f47116e-b91e-3908-a9ab-88040374696f.roa (raw, json)
Hash identifier:          cfNQgi8SdiKFbgcojQDtOvQAAXQRvycDKVXcIwVvbeU=
Subject key identifier:   DE:5E:C1:33:32:35:CC:4B:45:15:BF:E6:C9:61:7C:0F:52:A7:22:E0
Certificate issuer:       /CN=c69a1447-7cfa-456f-a600-4b2012c01dc7
Certificate serial:       010D0C9F4328584F68282118B7AEB305A7924BC0
Authority key identifier: 02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/5f47116e-b91e-3908-a9ab-88040374696f.roa
Signing time:             Tue 06 Oct 2026 01:00:13 +0000
ROA not before:           Tue 06 Oct 2026 01:00:13 +0000
ROA not after:            Mon 04 Jan 2027 02:00:13 +0000
asID:                     11776
IP address blocks:        23.244.24.0/23 maxlen: 23
                          23.244.26.0/23 maxlen: 23
                          23.244.28.0/23 maxlen: 23
                          23.244.30.0/23 maxlen: 23
                          23.244.60.0/23 maxlen: 23
                          23.244.62.0/23 maxlen: 23
                          23.245.100.0/24 maxlen: 24
                          23.245.152.0/24 maxlen: 24
                          23.245.253.0/24 maxlen: 24
                          24.214.159.0/24 maxlen: 24
                          24.214.180.0/24 maxlen: 24
                          24.214.195.0/24 maxlen: 24
                          65.60.194.0/24 maxlen: 24
                          69.171.196.0/22 maxlen: 22
                          74.81.195.0/24 maxlen: 24
                          75.76.52.0/22 maxlen: 22
                          75.76.60.0/23 maxlen: 23
                          75.76.93.0/24 maxlen: 24
                          75.118.2.0/23 maxlen: 23
                          75.118.160.0/24 maxlen: 24
                          75.118.176.0/21 maxlen: 21
                          75.118.226.0/23 maxlen: 23
                          75.118.229.0/24 maxlen: 24
                          76.73.229.0/24 maxlen: 24
                          216.186.192.0/24 maxlen: 24
                          216.186.204.0/24 maxlen: 24
                          216.186.209.0/24 maxlen: 24
                          216.186.213.0/24 maxlen: 24
                          216.186.214.0/23 maxlen: 23
                          216.186.218.0/24 maxlen: 24
                          216.186.232.0/21 maxlen: 21
                          216.186.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:68:28:21:18:b7:ae:b3:05:a7:92:4b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c69a1447-7cfa-456f-a600-4b2012c01dc7
        Validity
            Not Before: Oct  6 01:00:13 2026 GMT
            Not After : Jan  4 02:00:13 2027 GMT
        Subject: CN=329cb9ce-646b-4b0d-91fb-d4c9ddf64eef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:77:45:9a:8b:b4:96:81:b9:3e:bb:df:c8:75:
                    85:5e:c2:8b:1f:58:e6:75:38:a9:12:e3:82:fa:44:
                    47:be:97:7d:a4:ce:19:2c:7a:08:53:69:af:f3:67:
                    e3:e4:2e:f7:9a:4d:1f:89:f9:5a:d2:05:73:33:62:
                    fe:dc:04:ac:61:26:ae:0a:45:e6:f0:f0:0a:11:ae:
                    53:68:c2:c0:70:5c:de:4f:e2:66:54:68:bb:53:52:
                    1e:61:09:e2:29:e0:fd:89:b5:9d:ee:e3:cc:8b:56:
                    51:c7:78:d9:35:80:f0:7c:a7:ea:38:94:fc:77:6e:
                    51:02:22:33:bc:2d:86:23:15:ef:5c:dd:cc:ab:dd:
                    b1:73:15:38:ff:d0:62:08:ed:ef:83:c5:40:4a:62:
                    14:71:15:5a:bb:ff:86:a4:cf:45:e4:ab:9b:31:77:
                    dd:9d:0c:12:66:69:c7:c2:6a:0a:6e:aa:8b:24:6f:
                    ed:39:21:84:1e:b3:cd:27:05:76:be:a7:67:17:15:
                    4e:15:67:dd:2f:7a:6d:b6:72:a2:ea:91:f3:13:df:
                    7e:95:35:76:8a:73:db:e2:25:5f:fd:7e:e2:73:45:
                    c6:41:32:9d:12:6e:b0:bf:3b:f6:86:2f:7f:64:1b:
                    3b:8d:e5:6e:33:00:a8:75:e1:61:6d:e5:9a:dd:f4:
                    53:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:5E:C1:33:32:35:CC:4B:45:15:BF:E6:C9:61:7C:0F:52:A7:22:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/5f47116e-b91e-3908-a9ab-88040374696f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl

            X509v3 Authority Key Identifier:
                keyid:02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.244.24.0/21
                  23.244.60.0/22
                  23.245.100.0/24
                  23.245.152.0/24
                  23.245.253.0/24
                  24.214.159.0/24
                  24.214.180.0/24
                  24.214.195.0/24
                  65.60.194.0/24
                  69.171.196.0/22
                  74.81.195.0/24
                  75.76.52.0/22
                  75.76.60.0/23
                  75.76.93.0/24
                  75.118.2.0/23
                  75.118.160.0/24
                  75.118.176.0/21
                  75.118.226.0/23
                  75.118.229.0/24
                  76.73.229.0/24
                  216.186.192.0/24
                  216.186.204.0/24
                  216.186.209.0/24
                  216.186.213.0-216.186.215.255
                  216.186.218.0/24
                  216.186.232.0/21
                  216.186.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:99:83:aa:81:9a:80:e1:6e:28:41:7d:e0:bc:c4:8e:f9:c2:
         b3:33:56:b7:80:08:1d:a6:8c:0f:17:e5:55:5c:22:c4:1a:f8:
         18:5e:07:82:b6:1c:77:f0:2b:18:29:29:6a:c3:d1:70:f6:18:
         3a:35:24:82:01:3d:4e:ac:4f:63:29:72:e7:c5:5e:5c:d5:48:
         54:4e:68:aa:16:d6:bf:02:ae:9e:57:68:3a:46:b3:19:e4:87:
         27:9a:db:67:5d:14:38:28:ad:bf:9e:08:97:9a:56:06:3d:43:
         e0:b3:85:e6:4c:93:6f:e4:f7:65:7f:39:75:88:ab:78:a3:38:
         bb:bd:40:7d:26:76:9c:52:6b:69:5d:76:a7:ce:be:de:00:1f:
         74:f2:be:1d:b6:93:35:69:5a:c5:60:2b:db:f8:6b:a4:62:73:
         d8:3d:d0:13:d8:53:f5:d6:b1:f2:99:b7:1e:fb:be:5e:47:9e:
         ae:40:ff:2f:83:10:5e:b0:3f:33:a3:93:dc:6a:42:7c:a4:cc:
         73:54:de:be:87:2d:6c:02:0b:b3:ed:01:1f:e6:d6:10:b4:3b:
         1b:00:15:eb:3d:a8:f0:6e:2c:2f:4c:7b:36:28:af:23:aa:5f:
         7c:04:fe:8f:e9:c6:bc:2a:c4:c2:08:47:a7:99:50:1d:5c:f3:
         c5:a0:3d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:32:56 2026 by rpki-client