Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa/9ccdb945-7edc-31b8-8022-dda37f616533.roa
File:                     9ccdb945-7edc-31b8-8022-dda37f616533.roa (raw, json)
Hash identifier:          zFZP2f0RpDzZXUTQQhy80dFY+ckBSf9ACT3y5veHdRE=
Subject key identifier:   16:44:82:87:09:06:1D:82:BF:E4:63:27:B1:7F:A0:0E:3D:8C:96:58
Certificate issuer:       /CN=8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa
Certificate serial:       010D0C9F4328584EA794EDDC1742E4171FFC1840
Authority key identifier: F6:CF:26:45:BA:58:F1:44:50:0E:AF:13:81:D7:CD:59:CF:12:F5:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa/9ccdb945-7edc-31b8-8022-dda37f616533.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     27501
IP address blocks:        64.72.96.0/20 maxlen: 24
                          64.250.224.0/19 maxlen: 24
                          74.113.216.0/21 maxlen: 24
                          103.25.144.0/22 maxlen: 24
                          103.78.160.0/22 maxlen: 24
                          103.85.232.0/22 maxlen: 24
                          148.170.64.0/19 maxlen: 24
                          199.88.32.0/20 maxlen: 24
                          199.88.48.0/22 maxlen: 24
                          199.127.116.0/22 maxlen: 24
                          208.95.108.0/22 maxlen: 24
                          209.51.40.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:ed:dc:17:42:e4:17:1f:fc:18:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=92fe7af4-f87f-4468-b8ee-299e1642f1ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c1:18:9d:90:60:87:55:02:8d:71:54:65:08:
                    38:1d:83:cc:52:04:62:ca:45:27:56:97:aa:d7:25:
                    ff:c5:bd:86:f6:d2:bc:53:c6:48:ce:15:a6:14:f8:
                    36:f4:6f:90:11:14:3c:54:12:41:ef:49:62:17:fc:
                    22:1b:9a:c1:75:bd:ea:13:d0:0e:78:9c:68:c2:2b:
                    40:7b:71:ad:ff:d6:29:6f:59:28:63:41:cb:22:47:
                    dd:8e:90:6b:8a:f0:a3:20:0c:12:2c:e6:84:8b:3f:
                    33:39:b1:08:36:4f:6d:a0:20:36:dd:36:6b:53:b9:
                    26:fd:b8:a4:a3:ce:ec:7a:21:61:38:34:d5:a7:d9:
                    2e:ee:25:4d:1f:d5:15:69:08:04:84:42:33:98:22:
                    92:79:de:60:cd:8e:f8:f8:3a:f7:a5:26:66:a5:76:
                    59:75:d3:20:4a:ae:dd:0f:3f:4f:83:f4:cf:15:a2:
                    31:e7:92:2c:3f:55:54:75:98:d2:71:1c:f0:27:4e:
                    00:20:c7:ab:8d:bc:79:09:74:25:67:ea:b5:b0:a8:
                    10:c6:86:49:5d:0c:12:5d:de:b8:16:8b:c3:fc:42:
                    44:e4:6f:95:8a:93:4f:08:57:80:fe:ae:16:9d:a1:
                    df:05:f4:8d:be:8c:c9:fa:f6:f8:87:f0:e7:0a:a7:
                    47:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:44:82:87:09:06:1D:82:BF:E4:63:27:B1:7F:A0:0E:3D:8C:96:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa/9ccdb945-7edc-31b8-8022-dda37f616533.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa.crl

            X509v3 Authority Key Identifier:
                keyid:F6:CF:26:45:BA:58:F1:44:50:0E:AF:13:81:D7:CD:59:CF:12:F5:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.72.96.0/20
                  64.250.224.0/19
                  74.113.216.0/21
                  103.25.144.0/22
                  103.78.160.0/22
                  103.85.232.0/22
                  148.170.64.0/19
                  199.88.32.0-199.88.51.255
                  199.127.116.0/22
                  208.95.108.0/22
                  209.51.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:30:aa:1f:e6:24:e3:72:01:75:d6:45:3a:72:3e:42:49:34:
         03:3b:e9:97:52:2c:14:24:b0:ff:75:58:09:8a:54:8d:50:c3:
         48:2d:5e:84:bb:0d:c3:03:db:ac:d6:5b:1d:7d:2c:25:6e:72:
         43:8e:57:dc:92:89:f1:0d:db:95:a8:32:70:70:6a:af:34:66:
         c1:35:5f:d3:5c:b5:cf:c9:5c:19:c4:b0:bb:43:d2:5f:14:47:
         4f:a5:fa:4f:8b:dd:d0:4e:b6:7f:b1:3b:f8:ce:5e:6a:f6:6a:
         5d:5b:dc:c1:fa:f6:b3:74:8e:79:eb:77:c7:54:cd:a4:23:dc:
         3a:7b:2f:fe:e0:29:c9:fb:84:2b:f0:1c:6a:25:75:89:2b:0e:
         0b:2e:2a:6b:a9:5b:ac:85:d1:1c:53:ad:38:6b:fb:aa:58:f1:
         a3:bd:fc:fe:63:83:2f:45:ed:1f:dd:d4:a4:28:52:04:69:a8:
         44:d5:93:e9:c0:1c:99:59:e4:f9:b2:a9:1a:06:53:d1:db:07:
         e5:85:22:e0:66:a2:09:1b:cb:cb:ba:a6:07:e8:13:20:3a:8b:
         7e:d9:7c:8b:ce:1c:3f:4a:63:61:05:b7:19:53:94:c8:0b:8a:
         96:39:1e:43:76:3d:c8:88:0c:78:75:88:a1:4f:f2:0a:bb:3c:
         6d:9a:c7:60
-----BEGIN CERTIFICATE-----
MIIGhzCCBW+gAwIBAgIUAQ0Mn0MoWE6nlO3cF0LkFx/8GEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGUwYWFiZDgtZDIxOS00N2NiLTlhMWMtZjcxNWE0YTNk
M2FhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
OTJmZTdhZjQtZjg3Zi00NDY4LWI4ZWUtMjk5ZTE2NDJmMWFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMEYnZBgh1UCjXFUZQg4HYPMUgRiykUnVpeq
1yX/xb2G9tK8U8ZIzhWmFPg29G+QERQ8VBJB70liF/wiG5rBdb3qE9AOeJxowitA
e3Gt/9Ypb1koY0HLIkfdjpBrivCjIAwSLOaEiz8zObEINk9toCA23TZrU7km/bik
o87seiFhODTVp9ku7iVNH9UVaQgEhEIzmCKSed5gzY74+Dr3pSZmpXZZddMgSq7d
Dz9Pg/TPFaIx55IsP1VUdZjScRzwJ04AIMerjbx5CXQlZ+q1sKgQxoZJXQwSXd64
FovD/EJE5G+VipNPCFeA/q4WnaHfBfSNvozJ+vb4h/DnCqdHbwIDAQABo4IDmTCC
A5UwHQYDVR0OBBYEFBZEgocJBh2Cv+RjJ7F/oA49jJZYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84ZTBh
YWJkOC1kMjE5LTQ3Y2ItOWExYy1mNzE1YTRhM2QzYWEvOWNjZGI5NDUtN2VkYy0z
MWI4LTgwMjItZGRhMzdmNjE2NTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGUwYWFiZDgtZDIxOS00N2NiLTlh
MWMtZjcxNWE0YTNkM2FhLzhlMGFhYmQ4LWQyMTktNDdjYi05YTFjLWY3MTVhNGEz
ZDNhYS5jcmwwHwYDVR0jBBgwFoAU9s8mRbpY8URQDq8TgdfNWc8S9c8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84ZTBhYWJkOC1kMjE5LTQ3Y2ItOWExYy1mNzE1
YTRhM2QzYWEuY2VyMGMGCCsGAQUFBwEHAQH/BFQwUjBQBAIAATBKAwQEQEhgAwQF
QPrgAwQDSnHYAwQCZxmQAwQCZ06gAwQCZ1XoAwQFlKpAMAwDBAXHWCADBALHWDAD
BALHf3QDBALQX2wDBAPRMygwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG
CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j
cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAQzCqH+Yk43IBddZFOnI+Qkk0Azvp
l1IsFCSw/3VYCYpUjVDDSC1ehLsNwwPbrNZbHX0sJW5yQ45X3JKJ8Q3blagycHBq
rzRmwTVf01y1z8lcGcSwu0PSXxRHT6X6T4vd0E62f7E7+M5eavZqXVvcwfr2s3SO
eet3x1TNpCPcOnsv/uApyfuEK/AcaiV1iSsOCy4qa6lbrIXRHFOtOGv7qljxo738
/mODL0XtH93UpChSBGmoRNWT6cAcmVnk+bKpGgZT0dsH5YUi4GaiCRvLy7qmB+gT
IDqLftl8i84cP0pjYQW3GVOUyAuKljkeQ3Y9yIgMeHWIoU/yCrs8bZrHYA==
-----END CERTIFICATE-----
Generated at Sun Sep 20 23:09:39 2026 by rpki-client