Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4ce02f0d-39db-3ace-9760-6b0aa54eda28.roa
File:                     4ce02f0d-39db-3ace-9760-6b0aa54eda28.roa (raw, json)
Hash identifier:          FpZrAI/CEDmMFPyo5YU3v2RWPQ+JevzVO506bFknoyU=
Subject key identifier:   5B:64:D5:E2:B7:1D:BE:31:D6:56:50:67:E0:0D:17:A4:74:C3:C7:68
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584ED3B68F53A67816A2CB456480
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4ce02f0d-39db-3ace-9760-6b0aa54eda28.roa
Signing time:             Thu 13 Aug 2026 20:51:55 +0000
ROA not before:           Thu 13 Aug 2026 20:51:55 +0000
ROA not after:            Tue 10 Nov 2026 20:42:40 +0000
asID:                     13700
IP address blocks:        165.254.50.0/23 maxlen: 24
                          165.254.208.0/23 maxlen: 24
                          165.254.212.0/23 maxlen: 24
                          198.63.248.0/22 maxlen: 24
                          198.87.184.0/22 maxlen: 24
                          198.88.122.0/23 maxlen: 24
                          198.88.218.0/23 maxlen: 24
                          198.138.208.0/23 maxlen: 24
                          198.139.134.0/23 maxlen: 24
                          204.2.62.0/23 maxlen: 24
                          207.152.64.0/23 maxlen: 24
                          207.152.100.0/23 maxlen: 24
                          207.152.108.0/23 maxlen: 24
                          209.39.16.0/23 maxlen: 24
                          209.39.22.0/23 maxlen: 24
                          209.39.28.0/23 maxlen: 24
                          209.57.34.0/23 maxlen: 24
                          209.57.36.0/22 maxlen: 24
                          209.70.242.0/23 maxlen: 24
                          209.107.64.0/23 maxlen: 24
                          209.107.68.0/23 maxlen: 24
                          209.107.76.0/23 maxlen: 24
                          209.212.230.0/23 maxlen: 24
                          209.212.238.0/23 maxlen: 24
                          209.227.28.0/22 maxlen: 24
                          216.42.128.0/23 maxlen: 24
                          216.42.134.0/23 maxlen: 24
                          216.44.52.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d3:b6:8f:53:a6:78:16:a2:cb:45:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Aug 13 20:51:55 2026 GMT
            Not After : Nov 10 20:42:40 2026 GMT
        Subject: CN=e82c52d6-5c14-4979-9df2-e3dc3f960345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:29:a4:25:48:20:92:53:cb:b4:59:a6:2b:d2:
                    bd:89:cc:b5:f1:e5:47:f0:63:d2:ec:12:37:a8:fc:
                    77:41:82:4e:f3:e7:fa:f3:aa:84:27:b4:1a:6d:27:
                    ce:03:6c:eb:f2:53:e3:d1:fc:5a:8d:18:4f:fc:8c:
                    fa:ea:29:64:e5:57:b0:0c:85:f3:cc:c9:77:c0:ba:
                    f1:91:a6:32:43:47:1a:a3:77:76:db:21:21:d3:6d:
                    3d:5a:0d:7b:4b:a6:44:21:a9:be:64:67:8d:ad:5f:
                    b3:f8:22:d3:3f:1e:b1:0b:41:dd:5c:15:30:5d:f8:
                    4a:6e:89:a8:05:cc:a5:5c:30:95:ac:f2:c1:5a:5a:
                    99:ec:5b:20:b0:6f:fc:0c:10:78:6a:5c:09:11:f9:
                    d2:6b:d8:fc:1e:f6:10:ce:05:ae:be:eb:00:d9:35:
                    5b:e5:ed:14:3e:ff:bf:85:8d:6f:08:62:1c:77:a6:
                    6b:de:9d:90:6a:e5:46:86:bc:a0:1c:a3:f2:95:25:
                    4a:ee:33:9b:2b:c0:bc:61:b0:c9:39:ba:c9:46:43:
                    6a:2e:28:44:ee:b4:dd:94:1a:ff:49:93:83:db:1d:
                    26:c5:bb:f3:c6:ed:65:1b:e9:01:ba:cd:88:aa:1a:
                    cf:67:50:8a:65:f0:cc:0e:d1:ca:7d:29:94:6f:c9:
                    64:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:64:D5:E2:B7:1D:BE:31:D6:56:50:67:E0:0D:17:A4:74:C3:C7:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4ce02f0d-39db-3ace-9760-6b0aa54eda28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.50.0/23
                  165.254.208.0/23
                  165.254.212.0/23
                  198.63.248.0/22
                  198.87.184.0/22
                  198.88.122.0/23
                  198.88.218.0/23
                  198.138.208.0/23
                  198.139.134.0/23
                  204.2.62.0/23
                  207.152.64.0/23
                  207.152.100.0/23
                  207.152.108.0/23
                  209.39.16.0/23
                  209.39.22.0/23
                  209.39.28.0/23
                  209.57.34.0-209.57.39.255
                  209.70.242.0/23
                  209.107.64.0/23
                  209.107.68.0/23
                  209.107.76.0/23
                  209.212.230.0/23
                  209.212.238.0/23
                  209.227.28.0/22
                  216.42.128.0/23
                  216.42.134.0/23
                  216.44.52.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:b5:1a:4c:66:ec:56:56:2a:70:1d:00:b5:41:1c:cd:8b:72:
         ad:e4:fa:3d:85:c2:ca:ea:0c:2d:46:3e:96:37:4b:7d:47:1f:
         0f:ed:1f:81:35:b4:b7:33:f3:f4:51:da:82:63:8e:fe:f4:eb:
         92:0a:5f:83:b4:8c:c8:fe:04:b5:99:70:66:18:58:63:29:3a:
         3a:07:34:fc:58:39:d3:22:60:ab:b1:05:43:9e:22:1f:8e:89:
         a8:68:9f:79:ce:58:a7:cc:e8:32:a9:55:ef:92:d7:e1:3d:ff:
         ab:be:d1:91:05:ec:8f:b4:c1:f1:69:14:e2:8c:ef:04:f6:5f:
         0d:14:22:c2:3b:ac:8f:0b:6b:e3:44:f8:30:28:ae:dd:b1:1a:
         b1:4b:83:35:1f:ab:7c:ae:05:8d:3f:3c:9c:b6:d3:79:fd:f1:
         e3:ce:f2:73:e9:2f:3b:46:f1:e5:62:87:4e:b8:4f:d0:ee:93:
         58:51:ac:c5:9f:fa:7c:51:94:5c:9b:1b:25:b7:b0:bd:9d:79:
         ee:ab:56:3a:8c:3d:ad:3a:c9:12:79:0c:61:d5:24:0e:17:cc:
         fa:cf:a1:ba:b9:25:74:07:73:76:50:9d:8e:6c:c9:22:cc:e8:
         b0:69:0e:bd:03:1a:03:ff:93:a5:80:96:a1:ad:63:95:30:c8:
         81:ff:a0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:03:52 2026 by rpki-client