Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/e38b7540-8d02-3428-8b61-2305b0a7237b.roa
File:                     e38b7540-8d02-3428-8b61-2305b0a7237b.roa (raw, json)
Hash identifier:          bHHGgDto/VWzQryRN5Xe9ecyh6qTnDDeEs97WfsWbYU=
Subject key identifier:   FE:5F:D8:4C:89:E9:0B:54:0B:FF:8C:ED:72:D4:81:7E:B9:E1:B7:9A
Certificate issuer:       /CN=174db496-399b-48c7-919e-3e6dfd4a5584
Certificate serial:       010D0C9F4328584F67B7EE4C5F6749008DFA4280
Authority key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/e38b7540-8d02-3428-8b61-2305b0a7237b.roa
Signing time:             Mon 05 Oct 2026 21:14:18 +0000
ROA not before:           Mon 05 Oct 2026 21:14:18 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     40934
IP address blocks:        23.249.55.0/24 maxlen: 24
                          96.45.39.0/24 maxlen: 24
                          96.45.40.0/24 maxlen: 24
                          96.45.41.0/24 maxlen: 24
                          189.25.98.0/24 maxlen: 24
                          189.25.117.0/24 maxlen: 24
                          189.25.118.0/24 maxlen: 24
                          209.40.103.0/24 maxlen: 24
                          209.40.110.0/24 maxlen: 24
                          209.40.120.0/24 maxlen: 24
                          2602:fc4e:f10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:67:b7:ee:4c:5f:67:49:00:8d:fa:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174db496-399b-48c7-919e-3e6dfd4a5584
        Validity
            Not Before: Oct  5 21:14:18 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=42860fa5-6aeb-45c4-ba82-4de4510c5e3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:4e:5a:c9:41:cc:3c:96:3c:60:9f:78:a4:44:
                    16:14:f6:0b:89:7f:62:0a:84:11:5d:ea:03:47:10:
                    fc:a6:92:96:77:de:11:9e:a3:c4:8b:e1:28:57:77:
                    65:d0:3b:92:4b:6c:54:5d:74:72:20:15:1f:88:16:
                    b8:75:2d:10:42:e9:60:8a:94:02:af:74:21:ba:d4:
                    59:fa:d7:5b:fa:d8:c6:59:03:f7:e3:e7:2e:ea:4a:
                    a1:5a:10:eb:bc:0f:01:a3:3a:55:31:b9:00:5d:89:
                    a0:9f:6d:96:0b:dc:f4:05:b3:49:a7:58:5b:b6:c1:
                    6a:d9:f9:fa:7f:7f:fd:ce:41:8a:76:3e:3b:13:d4:
                    eb:34:0e:b5:a7:3a:dc:f5:d3:bc:4a:86:12:be:8a:
                    19:4e:fc:31:32:4e:11:02:4e:a4:05:ae:66:4f:5c:
                    2f:5f:7d:f9:cb:03:1f:81:d1:5f:02:24:75:13:03:
                    a1:7e:ec:a8:a4:9b:b1:5f:80:ef:42:4b:fd:9e:a6:
                    b9:05:cf:aa:1b:d2:db:9a:53:83:ca:6b:85:02:e8:
                    2c:d7:4f:f3:fa:3b:2c:e7:b9:33:8e:c2:86:a1:67:
                    ea:bd:d2:21:3e:41:92:71:00:e1:03:dc:b2:db:7a:
                    db:ba:9e:48:69:da:c8:7e:97:b4:27:8d:cf:c5:7a:
                    eb:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:5F:D8:4C:89:E9:0B:54:0B:FF:8C:ED:72:D4:81:7E:B9:E1:B7:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/e38b7540-8d02-3428-8b61-2305b0a7237b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl

            X509v3 Authority Key Identifier:
                keyid:9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.249.55.0/24
                  96.45.39.0-96.45.41.255
                  189.25.98.0/24
                  189.25.117.0-189.25.118.255
                  209.40.103.0/24
                  209.40.110.0/24
                  209.40.120.0/24
                IPv6:
                  2602:fc4e:f10::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:bf:69:74:a3:4c:72:9b:36:97:0a:42:1e:bc:67:bd:5b:4e:
         81:8c:f1:1d:3b:31:36:64:a1:f8:3f:03:96:05:c5:c1:2c:32:
         b8:30:2c:80:fe:35:3e:ae:31:1c:a1:0a:b4:a2:8d:2f:c0:75:
         a7:1e:79:dd:8a:69:eb:f9:52:05:e3:1d:94:e1:3f:28:8b:88:
         98:03:5f:1e:f8:11:70:a3:c9:74:48:1c:de:74:f7:d7:7d:25:
         8a:38:1e:59:20:82:95:db:41:43:2e:1a:15:87:ee:f2:bd:2f:
         10:5f:9e:9c:a1:e2:2c:6f:64:06:1c:b1:f6:d0:d4:ce:df:d5:
         67:bf:8c:b8:13:df:a4:a8:85:f8:04:31:16:67:0b:c1:73:6b:
         95:6a:77:a1:e1:67:bd:2b:86:9e:e2:02:e4:89:0a:ec:d2:57:
         7f:0a:18:f7:4d:37:f0:8a:03:75:5c:96:e7:f1:6e:40:d3:a0:
         34:72:7e:1b:cc:94:97:04:fa:53:bc:2f:20:70:bf:db:ac:8d:
         63:47:20:e2:2f:1e:a8:68:da:e0:97:16:3e:03:63:e6:0c:b1:
         22:bd:65:8b:38:27:0d:aa:ad:e8:63:4e:f9:a3:5f:03:d3:ab:
         04:db:3b:8d:51:22:7d:81:0e:ab:ac:3e:84:60:0b:cf:51:30:
         78:07:b6:ec
-----BEGIN CERTIFICATE-----
MIIGiDCCBXCgAwIBAgIUAQ0Mn0MoWE9nt+5MX2dJAI36QoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTc0ZGI0OTYtMzk5Yi00OGM3LTkxOWUtM2U2ZGZkNGE1
NTg0MB4XDTI2MTAwNTIxMTQxOFoXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NDI4NjBmYTUtNmFlYi00NWM0LWJhODItNGRlNDUxMGM1ZTNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlE5ayUHMPJY8YJ94pEQWFPYLiX9iCoQRXeoD
RxD8ppKWd94RnqPEi+EoV3dl0DuSS2xUXXRyIBUfiBa4dS0QQulgipQCr3QhutRZ
+tdb+tjGWQP34+cu6kqhWhDrvA8BozpVMbkAXYmgn22WC9z0BbNJp1hbtsFq2fn6
f3/9zkGKdj47E9TrNA61pzrc9dO8SoYSvooZTvwxMk4RAk6kBa5mT1wvX335ywMf
gdFfAiR1EwOhfuyopJuxX4DvQkv9nqa5Bc+qG9LbmlODymuFAugs10/z+jss57kz
jsKGoWfqvdIhPkGScQDhA9yy23rbup5IadrIfpe0J43PxXrrfQIDAQABo4IDmjCC
A5YwHQYDVR0OBBYEFP5f2EyJ6QtUC/+M7XLUgX654beaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNzRk
YjQ5Ni0zOTliLTQ4YzctOTE5ZS0zZTZkZmQ0YTU1ODQvZTM4Yjc1NDAtOGQwMi0z
NDI4LThiNjEtMjMwNWIwYTcyMzdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTc0ZGI0OTYtMzk5Yi00OGM3LTkx
OWUtM2U2ZGZkNGE1NTg0LzE3NGRiNDk2LTM5OWItNDhjNy05MTllLTNlNmRmZDRh
NTU4NC5jcmwwHwYDVR0jBBgwFoAUnbYvqwyEv+F7kStHMMc1sXqvgNEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8xNzRkYjQ5Ni0zOTliLTQ4YzctOTE5ZS0zZTZk
ZmQ0YTU1ODQuY2VyMGQGCCsGAQUFBwEHAQH/BFUwUzBABAIAATA6AwQAF/k3MAwD
BABgLScDBAFgLSgDBAC9GWIwDAMEAL0ZdQMEAL0ZdgMEANEoZwMEANEobgMEANEo
eDAPBAIAAjAJAwcAJgL8Tg8QMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABi/aXSjTHKbNpcKQh68Z71bToGM
8R07MTZkofg/A5YFxcEsMrgwLID+NT6uMRyhCrSijS/Adaceed2Kaev5UgXjHZTh
PyiLiJgDXx74EXCjyXRIHN5099d9JYo4HlkggpXbQUMuGhWH7vK9LxBfnpyh4ixv
ZAYcsfbQ1M7f1We/jLgT36SohfgEMRZnC8Fza5Vqd6HhZ70rhp7iAuSJCuzSV38K
GPdNN/CKA3VclufxbkDToDRyfhvMlJcE+lO8LyBwv9usjWNHIOIvHqho2uCXFj4D
Y+YMsSK9ZYs4Jw2qrehjTvmjXwPTqwTbO41RIn2BDqusPoRgC89RMHgHtuw=
-----END CERTIFICATE-----
Generated at Sun Oct 11 07:31:51 2026 by rpki-client