Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/b2db89cf-5cb9-301a-ab04-b31b90b54f17.roa
File:                     b2db89cf-5cb9-301a-ab04-b31b90b54f17.roa (raw, json)
Hash identifier:          bsDQTJEcO5jQaKNLDO3ruovCd9/5UPg29a22MImSYCY=
Subject key identifier:   AE:B2:9E:21:61:1B:5D:DD:9F:CE:AD:39:4C:33:DB:32:85:52:69:8B
Certificate issuer:       /CN=c69a1447-7cfa-456f-a600-4b2012c01dc7
Certificate serial:       010D0C9F4328584EC4D718EDF08E90EEAD280E00
Authority key identifier: 02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/b2db89cf-5cb9-301a-ab04-b31b90b54f17.roa
Signing time:             Sat 08 Aug 2026 13:00:11 +0000
ROA not before:           Sat 08 Aug 2026 13:00:11 +0000
ROA not after:            Fri 06 Nov 2026 14:00:11 +0000
asID:                     11776
IP address blocks:        23.244.160.0/23 maxlen: 23
                          23.244.162.0/23 maxlen: 23
                          23.244.164.0/23 maxlen: 23
                          23.244.166.0/23 maxlen: 23
                          23.244.168.0/23 maxlen: 23
                          23.244.170.0/23 maxlen: 23
                          23.244.172.0/23 maxlen: 23
                          23.244.174.0/23 maxlen: 23
                          23.244.177.0/24 maxlen: 24
                          23.244.178.0/23 maxlen: 23
                          23.244.180.0/23 maxlen: 23
                          23.244.182.0/24 maxlen: 24
                          23.244.186.0/24 maxlen: 24
                          23.244.240.0/23 maxlen: 23
                          23.244.242.0/23 maxlen: 23
                          23.244.244.0/23 maxlen: 23
                          23.244.246.0/23 maxlen: 23
                          23.244.248.0/23 maxlen: 23
                          23.244.250.0/23 maxlen: 23
                          23.244.252.0/23 maxlen: 23
                          23.244.255.0/24 maxlen: 24
                          23.245.36.0/23 maxlen: 23
                          23.245.38.0/23 maxlen: 23
                          23.245.40.0/23 maxlen: 23
                          23.245.42.0/23 maxlen: 23
                          23.245.44.0/23 maxlen: 23
                          23.245.46.0/23 maxlen: 23
                          23.245.48.0/23 maxlen: 23
                          23.245.50.0/23 maxlen: 23
                          24.145.0.0/24 maxlen: 24
                          24.145.1.0/24 maxlen: 24
                          24.145.2.0/23 maxlen: 23
                          24.145.4.0/22 maxlen: 22
                          24.145.8.0/22 maxlen: 22
                          24.145.12.0/23 maxlen: 23
                          24.145.14.0/23 maxlen: 23
                          24.145.16.0/22 maxlen: 22
                          24.145.20.0/22 maxlen: 22
                          24.145.24.0/21 maxlen: 21
                          24.145.48.0/20 maxlen: 20
                          24.145.88.0/22 maxlen: 22
                          24.145.120.0/22 maxlen: 22
                          24.145.124.0/23 maxlen: 23
                          24.145.126.0/23 maxlen: 23
                          72.28.194.0/24 maxlen: 24
                          72.28.195.0/24 maxlen: 24
                          72.28.196.0/24 maxlen: 24
                          72.28.197.0/24 maxlen: 24
                          72.28.198.0/24 maxlen: 24
                          72.28.199.0/24 maxlen: 24
                          72.28.200.0/21 maxlen: 21
                          72.28.240.0/23 maxlen: 23
                          72.28.242.0/23 maxlen: 23
                          72.28.244.0/23 maxlen: 23
                          72.28.246.0/23 maxlen: 23
                          72.45.36.0/23 maxlen: 23
                          72.45.38.0/24 maxlen: 24
                          72.45.40.0/22 maxlen: 22
                          72.45.44.0/22 maxlen: 22
                          132.147.0.0/24 maxlen: 24
                          132.147.1.0/24 maxlen: 24
                          132.147.2.0/23 maxlen: 23
                          132.147.4.0/23 maxlen: 23
                          132.147.6.0/23 maxlen: 23
                          132.147.48.0/22 maxlen: 22
                          132.147.52.0/22 maxlen: 22
                          132.147.56.0/22 maxlen: 22
                          132.147.60.0/22 maxlen: 22
                          137.103.0.0/21 maxlen: 21
                          137.103.8.0/22 maxlen: 22
                          137.103.13.0/24 maxlen: 24
                          137.103.14.0/23 maxlen: 23
                          137.103.16.0/21 maxlen: 21
                          137.103.24.0/21 maxlen: 21
                          137.103.128.0/23 maxlen: 23
                          137.103.130.0/23 maxlen: 23
                          137.103.132.0/22 maxlen: 22
                          137.103.136.0/22 maxlen: 22
                          137.103.140.0/22 maxlen: 22
                          137.103.144.0/22 maxlen: 22
                          137.103.148.0/22 maxlen: 22
                          137.103.152.0/22 maxlen: 22
                          137.103.156.0/22 maxlen: 22
                          137.103.160.0/20 maxlen: 20
                          137.103.184.0/23 maxlen: 23
                          137.103.186.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c4:d7:18:ed:f0:8e:90:ee:ad:28:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c69a1447-7cfa-456f-a600-4b2012c01dc7
        Validity
            Not Before: Aug  8 13:00:11 2026 GMT
            Not After : Nov  6 14:00:11 2026 GMT
        Subject: CN=5f492dc8-e525-40b1-9846-56047f6f9f43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:14:ae:c3:90:da:4c:b8:c2:f1:f7:bf:d1:f6:
                    51:ee:10:bc:ef:34:4f:dd:f8:38:cb:75:c5:6b:0b:
                    84:70:af:04:6f:3b:3c:ff:d2:25:ef:d4:6a:0a:61:
                    f4:39:24:c5:a1:23:47:00:e7:4b:b1:0f:52:c7:5e:
                    6e:2d:69:f3:a4:e9:f3:53:80:9e:c6:75:42:5c:8e:
                    9a:53:87:67:e2:bd:65:0f:a1:60:17:56:0a:7e:8e:
                    e7:5a:9e:cd:81:59:e7:0e:85:10:eb:67:cd:4f:9f:
                    8e:da:7b:17:11:97:ae:b5:34:cb:79:8f:40:12:1a:
                    fa:b2:35:31:c9:d7:49:01:0e:fc:e5:1b:c3:5d:d4:
                    d5:80:f8:f2:80:c7:e5:90:ea:a9:f4:f8:4b:d3:53:
                    9a:55:0b:fb:39:ea:bf:dc:88:9e:07:c3:23:29:22:
                    94:a2:23:0b:a2:0b:db:89:ea:4f:f1:da:28:42:88:
                    fe:b5:6a:76:5c:1c:00:56:35:4a:8d:af:97:c1:b9:
                    86:e2:d9:d8:89:0e:bc:4f:00:c1:17:0f:eb:52:ea:
                    76:50:fb:0c:24:4e:6f:54:90:e8:a7:2c:24:81:e9:
                    4a:77:73:bb:aa:9b:d7:7f:5e:bd:e3:36:e2:55:3e:
                    eb:29:b9:3f:67:0a:24:e4:02:e0:25:78:6b:ee:c8:
                    53:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:B2:9E:21:61:1B:5D:DD:9F:CE:AD:39:4C:33:DB:32:85:52:69:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/b2db89cf-5cb9-301a-ab04-b31b90b54f17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl

            X509v3 Authority Key Identifier:
                keyid:02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.244.160.0/20
                  23.244.177.0-23.244.182.255
                  23.244.186.0/24
                  23.244.240.0-23.244.253.255
                  23.244.255.0/24
                  23.245.36.0-23.245.51.255
                  24.145.0.0/19
                  24.145.48.0/20
                  24.145.88.0/22
                  24.145.120.0/21
                  72.28.194.0-72.28.207.255
                  72.28.240.0/21
                  72.45.36.0-72.45.38.255
                  72.45.40.0/21
                  132.147.0.0/21
                  132.147.48.0/20
                  137.103.0.0-137.103.11.255
                  137.103.13.0-137.103.31.255
                  137.103.128.0-137.103.175.255
                  137.103.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:90:f1:4f:8a:7e:3c:4a:85:b7:ef:e5:31:4a:1e:12:47:16:
         28:83:bd:de:0d:cc:89:c1:ba:c6:33:d3:96:d0:5c:ef:be:38:
         54:29:44:af:1c:64:e9:f6:f0:7b:d5:96:87:df:f9:76:3d:f7:
         26:d4:6d:4a:72:fd:6b:36:40:30:56:f5:9c:72:d6:6b:30:e6:
         ca:e6:12:c2:16:27:5a:b5:b4:7a:e1:10:53:d0:00:6d:ca:80:
         9f:52:aa:79:47:1d:70:2e:a9:c2:84:23:e1:12:c5:ec:e6:e5:
         5b:56:d6:67:fd:d6:7f:8a:5c:9c:4c:0d:e1:58:6c:20:91:f0:
         3d:10:7e:e8:3d:a2:85:80:d4:b2:bc:99:25:d8:60:44:c1:df:
         e9:d0:4c:80:ab:30:61:c5:5e:75:1e:5a:3e:f5:49:eb:bb:c5:
         f2:3a:0c:c5:f5:9a:47:b4:ac:b1:cf:69:67:d6:d6:dd:32:6e:
         27:ad:cb:5c:42:2b:09:f8:9e:a4:9e:62:e7:8f:b8:8f:68:be:
         d0:02:b2:d1:67:c2:4c:0c:98:f0:19:72:c9:5a:70:90:55:14:
         66:b6:49:5d:f1:c4:d9:84:8f:b6:62:c5:33:3b:d7:2d:7c:04:
         53:e3:36:c6:88:f4:21:9f:d9:f5:34:b3:fc:cb:d9:da:24:9c:
         49:ab:f2:fd
-----BEGIN CERTIFICATE-----
MIIG+TCCBeGgAwIBAgIUAQ0Mn0MoWE7E1xjt8I6Q7q0oDgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzY5YTE0NDctN2NmYS00NTZmLWE2MDAtNGIyMDEyYzAx
ZGM3MB4XDTI2MDgwODEzMDAxMVoXDTI2MTEwNjE0MDAxMVowLzEtMCsGA1UEAxMk
NWY0OTJkYzgtZTUyNS00MGIxLTk4NDYtNTYwNDdmNmY5ZjQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRSuw5DaTLjC8fe/0fZR7hC87zRP3fg4y3XF
awuEcK8Ebzs8/9Il79RqCmH0OSTFoSNHAOdLsQ9Sx15uLWnzpOnzU4CexnVCXI6a
U4dn4r1lD6FgF1YKfo7nWp7NgVnnDoUQ62fNT5+O2nsXEZeutTTLeY9AEhr6sjUx
yddJAQ785RvDXdTVgPjygMflkOqp9PhL01OaVQv7Oeq/3IieB8MjKSKUoiMLogvb
iepP8dooQoj+tWp2XBwAVjVKja+XwbmG4tnYiQ68TwDBFw/rUup2UPsMJE5vVJDo
pywkgelKd3O7qpvXf1694zbiVT7rKbk/Zwok5ALgJXhr7shTAwIDAQABo4IECzCC
BAcwHQYDVR0OBBYEFK6yniFhG13dn86tOUwz2zKFUmmLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9jNjlh
MTQ0Ny03Y2ZhLTQ1NmYtYTYwMC00YjIwMTJjMDFkYzcvYjJkYjg5Y2YtNWNiOS0z
MDFhLWFiMDQtYjMxYjkwYjU0ZjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvYzY5YTE0NDctN2NmYS00NTZmLWE2
MDAtNGIyMDEyYzAxZGM3L2M2OWExNDQ3LTdjZmEtNDU2Zi1hNjAwLTRiMjAxMmMw
MWRjNy5jcmwwHwYDVR0jBBgwFoAUAim6jdf4XnFYCVoyK2CEu0wjmpwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS9jNjlhMTQ0Ny03Y2ZhLTQ1NmYtYTYwMC00YjIw
MTJjMDFkYzcuY2VyMIHUBggrBgEFBQcBBwEB/wSBxDCBwTCBvgQCAAEwgbcDBAQX
9KAwDAMEABf0sQMEABf0tgMEABf0ujAMAwQEF/TwAwQBF/T8AwQAF/T/MAwDBAIX
9SQDBAIX9TADBAUYkQADBAQYkTADBAIYkVgDBAMYkXgwDAMEAUgcwgMEBEgcwAME
A0gc8DAMAwQCSC0kAwQASC0mAwQDSC0oAwQDhJMAAwQEhJMwMAsDAwCJZwMEAoln
CDAMAwQAiWcNAwQFiWcAMAwDBAeJZ4ADBASJZ6ADBAKJZ7gwVAYDVR0gAQH/BEow
SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l
dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAJpDx
T4p+PEqFt+/lMUoeEkcWKIO93g3MicG6xjPTltBc7744VClErxxk6fbwe9WWh9/5
dj33JtRtSnL9azZAMFb1nHLWazDmyuYSwhYnWrW0euEQU9AAbcqAn1KqeUcdcC6p
woQj4RLF7OblW1bWZ/3Wf4pcnEwN4VhsIJHwPRB+6D2ihYDUsryZJdhgRMHf6dBM
gKswYcVedR5aPvVJ67vF8joMxfWaR7Sssc9pZ9bW3TJuJ63LXEIrCfiepJ5i54+4
j2i+0AKy0WfCTAyY8BlyyVpwkFUUZrZJXfHE2YSPtmLFMzvXLXwEU+M2xoj0IZ/Z
9TSz/MvZ2iScSavy/Q==
-----END CERTIFICATE-----
Generated at Mon Aug 31 10:24:10 2026 by rpki-client