Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/bb330b77-f6a5-3349-83dd-00364aa65fa2.roa
File:                     bb330b77-f6a5-3349-83dd-00364aa65fa2.roa (raw, json)
Hash identifier:          1s4FXpPcRiQSIiU1DEIXzjClVz5cnisneEDN8VSI/+c=
Subject key identifier:   3A:2B:69:5A:FB:CB:55:63:D9:D3:87:0A:2B:FB:71:49:5E:24:B7:E2
Certificate issuer:       /CN=835152c2-2ed8-4151-8f82-ac9407335b2c
Certificate serial:       010D0C9F4328584DEF45D9F53EE75B06FB2F0AB0
Authority key identifier: 8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/bb330b77-f6a5-3349-83dd-00364aa65fa2.roa
Signing time:             Sun 24 May 2026 01:00:27 +0000
ROA not before:           Sun 24 May 2026 01:00:27 +0000
ROA not after:            Sat 22 Aug 2026 01:00:27 +0000
asID:                     396982
IP address blocks:        50.116.64.0/23 maxlen: 23
                          50.116.66.0/23 maxlen: 23
                          50.116.68.0/22 maxlen: 22
                          50.116.80.0/22 maxlen: 22
                          50.116.84.0/23 maxlen: 23
                          50.116.86.0/23 maxlen: 23
                          50.116.88.0/22 maxlen: 22
                          50.116.92.0/22 maxlen: 22
                          50.116.112.0/23 maxlen: 23
                          50.116.124.0/22 maxlen: 22
                          96.125.162.0/23 maxlen: 23
                          96.125.174.0/23 maxlen: 23
                          108.167.132.0/24 maxlen: 24
                          108.167.133.0/24 maxlen: 24
                          108.167.140.0/22 maxlen: 22
                          108.167.144.0/23 maxlen: 23
                          108.167.146.0/23 maxlen: 23
                          108.167.148.0/23 maxlen: 23
                          108.167.151.0/24 maxlen: 24
                          108.167.152.0/22 maxlen: 22
                          108.167.156.0/22 maxlen: 22
                          108.167.164.0/23 maxlen: 23
                          108.167.166.0/24 maxlen: 24
                          108.167.168.0/22 maxlen: 22
                          108.167.188.0/24 maxlen: 24
                          108.167.190.0/23 maxlen: 23
                          108.179.192.0/23 maxlen: 23
                          108.179.194.0/24 maxlen: 24
                          108.179.200.0/23 maxlen: 23
                          108.179.212.0/22 maxlen: 22
                          108.179.228.0/22 maxlen: 22
                          108.179.241.0/24 maxlen: 24
                          108.179.242.0/23 maxlen: 23
                          108.179.246.0/23 maxlen: 23
                          108.179.252.0/23 maxlen: 23
                          108.179.254.0/24 maxlen: 24
                          192.185.2.0/23 maxlen: 23
                          192.185.4.0/23 maxlen: 23
                          192.185.12.0/22 maxlen: 22
                          192.185.16.0/21 maxlen: 21
                          192.185.24.0/21 maxlen: 21
                          192.185.32.0/20 maxlen: 20
                          192.185.48.0/21 maxlen: 21
                          192.185.56.0/23 maxlen: 23
                          192.185.58.0/23 maxlen: 23
                          192.185.60.0/22 maxlen: 22
                          192.185.64.0/21 maxlen: 21
                          192.185.72.0/21 maxlen: 21
                          192.185.81.0/24 maxlen: 24
                          192.185.82.0/23 maxlen: 23
                          192.185.84.0/22 maxlen: 22
                          192.185.88.0/21 maxlen: 21
                          192.185.96.0/21 maxlen: 21
                          192.185.104.0/21 maxlen: 21
                          192.185.112.0/21 maxlen: 21
                          192.185.120.0/21 maxlen: 21
                          192.185.129.0/24 maxlen: 24
                          192.185.131.0/24 maxlen: 24
                          192.185.132.0/23 maxlen: 23
                          192.185.136.0/21 maxlen: 21
                          192.185.179.0/24 maxlen: 24
                          192.185.180.0/22 maxlen: 22
                          192.185.184.0/21 maxlen: 21
                          192.185.192.0/21 maxlen: 21
                          192.185.202.0/23 maxlen: 23
                          192.232.216.0/21 maxlen: 21
                          192.254.224.0/20 maxlen: 20
                          192.254.250.0/23 maxlen: 23
                          216.172.168.0/23 maxlen: 23
                          216.172.172.0/23 maxlen: 23
                          216.172.175.0/24 maxlen: 24
                          216.172.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ef:45:d9:f5:3e:e7:5b:06:fb:2f:0a:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835152c2-2ed8-4151-8f82-ac9407335b2c
        Validity
            Not Before: May 24 01:00:27 2026 GMT
            Not After : Aug 22 01:00:27 2026 GMT
        Subject: CN=eff02728-3aed-494a-94fa-d5033880af67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e3:90:a5:cd:c2:d7:0f:83:c1:bc:ac:b9:89:
                    63:ac:ed:e2:26:e5:f9:3d:e5:1f:6f:93:61:d4:b2:
                    e1:c9:2a:48:94:ba:bc:9d:c3:32:75:d1:ef:11:38:
                    b6:6d:82:4f:b8:56:5c:18:d7:1a:83:ae:30:75:d4:
                    8c:9e:2f:11:de:11:3d:11:11:e4:8a:18:74:05:61:
                    0e:ce:1e:2e:cf:8c:8a:dc:49:f5:96:44:b2:17:24:
                    bc:b9:c5:a2:de:79:63:a8:64:36:45:6a:cd:32:5b:
                    e4:0e:d9:de:28:9f:bc:f8:62:f1:b2:09:4e:be:df:
                    c4:63:4f:4e:b8:ed:68:c1:47:24:33:cc:99:d6:23:
                    c9:74:2d:68:f9:2c:a3:d0:ee:4a:2a:d0:24:61:78:
                    bd:76:e1:3c:39:ef:80:c9:bd:6c:be:f0:25:1d:3f:
                    45:12:bb:54:10:56:45:5f:9c:65:9a:0d:09:98:fa:
                    91:f8:7d:f1:8b:ef:a7:fa:93:8e:94:4c:d4:6f:97:
                    2c:88:4e:7a:e2:8d:c7:17:e8:cf:85:8c:4b:48:bb:
                    31:cf:fc:09:00:07:f5:67:1b:a0:bf:8a:bd:6a:fc:
                    25:38:b4:da:cd:be:b7:67:d9:4f:b1:91:c5:1e:e1:
                    f7:3d:c7:9a:74:81:f5:07:d2:d7:9c:2f:cb:b3:73:
                    ac:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:2B:69:5A:FB:CB:55:63:D9:D3:87:0A:2B:FB:71:49:5E:24:B7:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/bb330b77-f6a5-3349-83dd-00364aa65fa2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.116.64.0/21
                  50.116.80.0/20
                  50.116.112.0/23
                  50.116.124.0/22
                  96.125.162.0/23
                  96.125.174.0/23
                  108.167.132.0/23
                  108.167.140.0-108.167.149.255
                  108.167.151.0-108.167.159.255
                  108.167.164.0-108.167.166.255
                  108.167.168.0/22
                  108.167.188.0/24
                  108.167.190.0/23
                  108.179.192.0-108.179.194.255
                  108.179.200.0/23
                  108.179.212.0/22
                  108.179.228.0/22
                  108.179.241.0-108.179.243.255
                  108.179.246.0/23
                  108.179.252.0-108.179.254.255
                  192.185.2.0-192.185.5.255
                  192.185.12.0-192.185.79.255
                  192.185.81.0-192.185.127.255
                  192.185.129.0/24
                  192.185.131.0-192.185.133.255
                  192.185.136.0/21
                  192.185.179.0-192.185.199.255
                  192.185.202.0/23
                  192.232.216.0/21
                  192.254.224.0/20
                  192.254.250.0/23
                  216.172.168.0/23
                  216.172.172.0/23
                  216.172.175.0/24
                  216.172.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:51:d4:05:c4:82:63:5c:3c:40:78:02:87:77:0e:ed:1f:6e:
         5f:89:58:7c:4c:b1:aa:f2:e0:d8:fa:e4:b9:c4:82:82:36:96:
         25:0a:b4:38:20:d9:97:be:24:9e:3f:fd:ca:c5:c8:81:fa:a7:
         42:ff:45:3b:9b:0d:c1:ba:26:ac:cc:90:c1:e7:b8:08:c9:ea:
         c1:d0:3a:ee:2d:42:70:93:8d:03:c7:89:7d:5e:7a:3b:0e:08:
         15:cd:49:c0:0c:3e:2c:d3:bf:34:d1:90:92:35:b4:86:4c:06:
         29:a4:b3:13:5e:28:e1:9b:1c:de:57:4a:06:18:79:2c:3e:64:
         10:af:b8:38:3a:18:ce:d7:58:41:12:d0:cc:66:7b:01:57:e4:
         01:30:3b:65:ce:d2:91:8f:46:7c:1e:8f:c0:a9:10:a1:c2:04:
         ec:a1:66:94:f7:15:4f:ea:6e:ed:cb:c7:dd:1a:63:0a:ac:91:
         dd:40:9e:0b:ca:5c:a6:9c:45:37:95:d4:91:02:30:dd:0f:eb:
         35:a3:26:a7:f8:81:f9:83:a4:ca:da:4c:b1:d9:27:67:29:7a:
         97:13:d8:30:ec:92:b4:9a:fc:3d:09:40:9b:5c:3c:05:2c:22:
         a1:9e:5e:c3:81:6e:e5:59:c0:ee:74:45:4b:ad:f3:b9:3e:3d:
         44:9d:a8:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:04:52 2026 by rpki-client