Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a/cc45fbbb-2a7c-3d7c-bdc2-ba341dbf3952.roa
File:                     cc45fbbb-2a7c-3d7c-bdc2-ba341dbf3952.roa (raw, json)
Hash identifier:          4BklvEW1oAzL7oPM33hNi8dX1nPKRAArXQP5XLPkTUo=
Subject key identifier:   F0:58:0F:E7:A9:23:CC:06:74:E3:9C:6A:83:94:1D:E8:E5:93:51:63
Certificate issuer:       /CN=35c465ca-0a44-43ea-a23f-e0d2de220e1a
Certificate serial:       010D0C9F4328584F1B624061A83162F500982500
Authority key identifier: B7:37:30:1E:20:83:CB:C9:14:43:9B:7C:6E:43:4A:B7:7A:42:42:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a/cc45fbbb-2a7c-3d7c-bdc2-ba341dbf3952.roa
Signing time:             Tue 08 Sep 2026 13:00:12 +0000
ROA not before:           Tue 08 Sep 2026 13:00:12 +0000
ROA not after:            Mon 07 Dec 2026 14:00:12 +0000
asID:                     14928
IP address blocks:        24.115.20.0/24 maxlen: 24
                          24.115.21.0/24 maxlen: 24
                          24.115.210.0/24 maxlen: 24
                          24.115.211.0/24 maxlen: 24
                          24.115.241.0/24 maxlen: 24
                          64.67.46.0/24 maxlen: 24
                          64.67.54.0/24 maxlen: 24
                          64.67.64.0/24 maxlen: 24
                          64.67.73.0/24 maxlen: 24
                          64.67.78.0/24 maxlen: 24
                          64.67.99.0/24 maxlen: 24
                          64.67.100.0/24 maxlen: 24
                          64.67.124.0/24 maxlen: 24
                          64.67.132.0/24 maxlen: 24
                          64.67.148.0/24 maxlen: 24
                          70.15.100.0/24 maxlen: 24
                          70.15.101.0/24 maxlen: 24
                          70.15.102.0/24 maxlen: 24
                          70.15.103.0/24 maxlen: 24
                          70.15.104.0/24 maxlen: 24
                          70.15.105.0/24 maxlen: 24
                          70.15.106.0/24 maxlen: 24
                          70.15.107.0/24 maxlen: 24
                          70.15.108.0/24 maxlen: 24
                          70.15.109.0/24 maxlen: 24
                          70.15.110.0/24 maxlen: 24
                          70.15.111.0/24 maxlen: 24
                          70.44.32.0/24 maxlen: 24
                          70.44.33.0/24 maxlen: 24
                          70.44.34.0/24 maxlen: 24
                          70.44.35.0/24 maxlen: 24
                          70.44.208.0/24 maxlen: 24
                          70.44.209.0/24 maxlen: 24
                          70.44.210.0/24 maxlen: 24
                          70.44.211.0/24 maxlen: 24
                          70.44.242.0/24 maxlen: 24
                          70.44.252.0/24 maxlen: 24
                          70.44.253.0/24 maxlen: 24
                          70.44.254.0/24 maxlen: 24
                          70.44.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a/35c465ca-0a44-43ea-a23f-e0d2de220e1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a/35c465ca-0a44-43ea-a23f-e0d2de220e1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1b:62:40:61:a8:31:62:f5:00:98:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35c465ca-0a44-43ea-a23f-e0d2de220e1a
        Validity
            Not Before: Sep  8 13:00:12 2026 GMT
            Not After : Dec  7 14:00:12 2026 GMT
        Subject: CN=37f01aad-4e4f-430c-aad7-08943d107fc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:55:e9:ed:c1:31:6d:0a:c6:ba:05:67:e5:b6:
                    30:42:66:b7:c9:6b:2c:ff:ec:7d:1b:2c:0e:31:4a:
                    2c:53:8e:88:16:fa:e1:32:65:16:9f:2d:0d:e7:46:
                    d6:4a:92:14:09:30:e4:a9:34:0e:46:cd:86:26:07:
                    94:6f:31:67:82:d1:d6:dc:f8:44:f0:20:ef:ff:02:
                    a1:f8:68:9b:f0:79:f7:22:a3:38:a6:71:40:32:03:
                    d6:4f:5c:63:d5:0a:b1:b9:0c:12:fd:24:5f:68:24:
                    cb:e0:b5:54:20:a1:41:a3:54:46:3e:30:ec:46:ac:
                    73:4c:3d:c6:fb:d1:4e:3a:42:2a:1d:e3:b9:ec:33:
                    5b:01:b5:54:11:4c:a5:5f:b0:51:e8:12:22:74:89:
                    5f:01:bc:c7:81:3f:5b:b8:e6:44:4d:7d:92:d7:90:
                    e8:70:51:c7:17:0a:e2:63:5f:ba:5a:53:f9:5c:cd:
                    11:03:24:cb:39:b5:52:b2:76:76:ee:e5:f9:4e:92:
                    3e:f0:93:cd:a8:b7:ab:b2:62:65:80:09:b3:07:79:
                    5b:91:37:e5:28:cf:30:82:6b:97:fd:b3:95:59:59:
                    39:c4:2b:d0:76:e0:13:6d:a3:ff:e1:57:2a:ce:85:
                    ca:b1:25:b5:5c:bf:ea:b9:a9:7e:2f:f1:f0:82:eb:
                    eb:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:58:0F:E7:A9:23:CC:06:74:E3:9C:6A:83:94:1D:E8:E5:93:51:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a/cc45fbbb-2a7c-3d7c-bdc2-ba341dbf3952.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a/35c465ca-0a44-43ea-a23f-e0d2de220e1a.crl

            X509v3 Authority Key Identifier:
                keyid:B7:37:30:1E:20:83:CB:C9:14:43:9B:7C:6E:43:4A:B7:7A:42:42:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.115.20.0/23
                  24.115.210.0/23
                  24.115.241.0/24
                  64.67.46.0/24
                  64.67.54.0/24
                  64.67.64.0/24
                  64.67.73.0/24
                  64.67.78.0/24
                  64.67.99.0-64.67.100.255
                  64.67.124.0/24
                  64.67.132.0/24
                  64.67.148.0/24
                  70.15.100.0-70.15.111.255
                  70.44.32.0/22
                  70.44.208.0/22
                  70.44.242.0/24
                  70.44.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:ef:ba:60:a5:29:47:fe:cf:0c:ed:29:41:93:d3:bf:1b:2a:
         0f:ed:41:8e:16:4f:b6:ec:9f:b1:c4:97:88:d2:fe:e9:34:ff:
         c1:99:8f:fc:23:fb:ca:9c:e3:36:75:2d:8d:4a:ac:9e:b8:1b:
         86:00:e0:0e:55:19:6c:0d:61:3e:5b:d0:cb:90:b4:72:0a:e9:
         1e:73:96:ab:8f:30:c3:90:bd:01:f8:dd:bd:68:35:fc:d7:b3:
         19:1a:f1:21:03:27:f7:ba:3e:da:b8:b4:3f:4d:38:e7:9a:86:
         74:73:97:47:94:1e:99:41:e0:74:16:b1:d3:08:b6:b8:13:99:
         fc:69:11:7a:2f:d9:ab:75:a8:05:54:9b:2e:f4:6a:26:fb:a2:
         3e:58:e4:a8:e4:d2:35:66:98:fd:6e:65:1e:34:9b:b1:2e:49:
         17:57:32:c2:0f:df:4a:db:b2:24:a5:a6:7e:b0:ab:eb:9f:b9:
         e5:b9:03:92:e7:ee:ed:e2:f7:cb:1b:34:47:10:4e:1d:39:7e:
         6d:51:54:2c:37:38:60:e3:ef:c0:00:dc:a0:e6:c1:40:25:af:
         83:0c:ea:23:4f:55:2f:49:30:81:18:db:c1:05:6f:14:32:da:
         3a:b8:75:4a:de:93:7b:ce:64:9e:e8:1b:bc:03:26:ee:2d:7a:
         67:38:b6:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:32:34 2026 by rpki-client