Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/c6086dd9-635c-3d69-b167-00ce58160e62.roa
File:                     c6086dd9-635c-3d69-b167-00ce58160e62.roa (raw, json)
Hash identifier:          H0IJH61mZmXUKae9UjZ7DDsmuWqVl3bkC5OrU6njtC4=
Subject key identifier:   07:A5:D3:9D:52:E3:64:99:BC:D6:E8:C6:4D:A6:D1:3C:91:B3:BF:B5
Certificate issuer:       /CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
Certificate serial:       010D0C9F4328584BA0D24EB123655A0A0520CF00
Authority key identifier: 2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/c6086dd9-635c-3d69-b167-00ce58160e62.roa
Signing time:             Fri 24 Oct 2025 13:00:38 +0000
ROA not before:           Fri 24 Oct 2025 13:00:38 +0000
ROA not after:            Thu 22 Jan 2026 14:00:38 +0000
asID:                     1299
IP address blocks:        23.93.0.0/16 maxlen: 24
                          50.0.0.0/15 maxlen: 24
                          64.142.0.0/17 maxlen: 24
                          69.12.128.0/17 maxlen: 24
                          70.36.128.0/17 maxlen: 24
                          75.101.0.0/17 maxlen: 24
                          76.191.128.0/17 maxlen: 24
                          107.156.0.0/15 maxlen: 24
                          108.169.0.0/17 maxlen: 24
                          135.180.0.0/16 maxlen: 24
                          142.254.0.0/17 maxlen: 24
                          157.131.0.0/16 maxlen: 24
                          173.228.0.0/17 maxlen: 24
                          184.23.0.0/16 maxlen: 24
                          192.184.128.0/17 maxlen: 24
                          198.27.128.0/17 maxlen: 24
                          199.245.68.0/24 maxlen: 24
                          208.106.0.0/17 maxlen: 24
                          209.148.96.0/19 maxlen: 24
                          209.204.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a0:d2:4e:b1:23:65:5a:0a:05:20:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
        Validity
            Not Before: Oct 24 13:00:38 2025 GMT
            Not After : Jan 22 14:00:38 2026 GMT
        Subject: CN=c2ebcc62-8349-4eac-b7c1-df9dadeaa8ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9a:64:a3:fe:df:83:c8:c8:32:b6:43:f5:e8:
                    5c:23:bb:aa:60:fe:a0:12:51:c7:ad:da:a0:3d:91:
                    16:8f:a4:e1:00:45:90:a7:08:32:33:46:0b:71:d6:
                    49:0a:56:27:da:ff:37:6a:85:5d:a4:02:bf:86:bb:
                    81:3d:f8:f0:81:02:39:e3:d0:5b:79:ca:81:ed:f1:
                    33:53:58:70:b6:93:a0:ec:2f:67:5b:27:df:db:6a:
                    9e:e8:93:2f:f7:2d:cd:3e:3e:ab:4e:28:3c:58:da:
                    9d:97:d0:bd:c5:87:60:0d:5f:06:c1:a9:f0:c0:b2:
                    6d:b9:74:1c:49:22:d4:a1:c8:22:33:31:89:01:c9:
                    35:0b:fc:56:84:94:89:e4:0b:9a:3d:26:d9:b8:bd:
                    27:e3:1c:49:8e:3a:1e:c7:e8:36:5a:42:68:14:d8:
                    0b:c9:89:82:10:30:17:d7:f9:97:de:50:3b:d8:51:
                    79:60:16:8c:a5:73:fc:a6:b8:72:8d:bc:0e:0e:9b:
                    da:ba:a5:29:df:68:85:9c:ab:ef:dc:50:e4:6b:0c:
                    d3:b4:c8:b2:b1:dd:23:8f:0d:ac:5b:83:47:d3:ed:
                    f2:88:66:9a:b8:15:3a:2f:7d:6b:01:c8:35:80:83:
                    bd:7f:b0:66:ce:b8:46:0c:1a:b5:3a:62:3f:94:10:
                    67:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:A5:D3:9D:52:E3:64:99:BC:D6:E8:C6:4D:A6:D1:3C:91:B3:BF:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/c6086dd9-635c-3d69-b167-00ce58160e62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl

            X509v3 Authority Key Identifier:
                keyid:2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.93.0.0/16
                  50.0.0.0/15
                  64.142.0.0/17
                  69.12.128.0/17
                  70.36.128.0/17
                  75.101.0.0/17
                  76.191.128.0/17
                  107.156.0.0/15
                  108.169.0.0/17
                  135.180.0.0/16
                  142.254.0.0/17
                  157.131.0.0/16
                  173.228.0.0/17
                  184.23.0.0/16
                  192.184.128.0/17
                  198.27.128.0/17
                  199.245.68.0/24
                  208.106.0.0/17
                  209.148.96.0/19
                  209.204.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:f9:bc:28:06:36:c0:e0:7d:ad:a9:69:b6:b5:60:47:2c:55:
         82:79:e5:cf:cf:24:c2:4d:a7:1d:4f:42:1d:49:6c:db:e4:03:
         d3:7b:49:2f:15:55:64:cf:c7:6d:15:9f:90:a8:e6:1a:07:0a:
         a8:b8:84:4a:73:64:8c:b4:ea:c5:d7:82:3e:ce:71:fe:b5:7d:
         9e:15:73:5b:2d:0f:7f:ec:14:7b:ae:d8:cb:af:a3:d0:b1:03:
         a5:6a:1a:e7:24:ea:a9:f4:c3:74:c4:d2:1d:f4:89:03:a5:fc:
         19:1e:c2:34:c8:74:b0:7a:7b:98:d4:64:fd:6e:cd:8c:96:de:
         b0:1b:d9:44:57:3e:6c:ee:9a:40:d1:bb:4a:00:b0:42:3c:b5:
         62:be:c3:fb:da:74:fe:a2:cf:7d:d2:d1:35:80:d6:d0:7e:52:
         87:f8:ac:4b:60:0b:df:2a:77:51:f3:4a:38:f5:31:a8:5e:01:
         41:82:f5:4b:f3:45:5b:92:a7:46:4f:bb:7c:08:c0:88:de:9e:
         5a:c2:9c:f0:1e:2a:09:8d:b3:dc:16:0f:43:e0:99:8d:90:a8:
         b3:ed:e6:d6:27:cf:84:93:87:19:8e:f2:23:58:fe:76:05:1d:
         0e:3e:3a:a6:a7:2d:24:b4:a9:28:5b:28:c4:82:94:ee:e8:50:
         d3:9a:8b:7c
-----BEGIN CERTIFICATE-----
MIIGsDCCBZigAwIBAgIUAQ0Mn0MoWEug0k6xI2VaCgUgzwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmU5ZjRhMWYtMTM3MS00ZjNmLWIyOTEtNjllYWJmOGJi
MDg3MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk
YzJlYmNjNjItODM0OS00ZWFjLWI3YzEtZGY5ZGFkZWFhOGFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Jpko/7fg8jIMrZD9ehcI7uqYP6gElHHrdqg
PZEWj6ThAEWQpwgyM0YLcdZJClYn2v83aoVdpAK/hruBPfjwgQI549BbecqB7fEz
U1hwtpOg7C9nWyff22qe6JMv9y3NPj6rTig8WNqdl9C9xYdgDV8GwanwwLJtuXQc
SSLUocgiMzGJAck1C/xWhJSJ5AuaPSbZuL0n4xxJjjoex+g2WkJoFNgLyYmCEDAX
1/mX3lA72FF5YBaMpXP8prhyjbwODpvauqUp32iFnKvv3FDkawzTtMiysd0jjw2s
W4NH0+3yiGaauBU6L31rAcg1gIO9f7BmzrhGDBq1OmI/lBBnjwIDAQABo4IDwjCC
A74wHQYDVR0OBBYEFAel051S42SZvNboxk2m0TyRs7+1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iZTlm
NGExZi0xMzcxLTRmM2YtYjI5MS02OWVhYmY4YmIwODcvYzYwODZkZDktNjM1Yy0z
ZDY5LWIxNjctMDBjZTU4MTYwZTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmU5ZjRhMWYtMTM3MS00ZjNmLWIy
OTEtNjllYWJmOGJiMDg3L2JlOWY0YTFmLTEzNzEtNGYzZi1iMjkxLTY5ZWFiZjhi
YjA4Ny5jcmwwHwYDVR0jBBgwFoAULwwCufh39B5QfFnfYu1eKPkJXfUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9iZTlmNGExZi0xMzcxLTRmM2YtYjI5MS02OWVh
YmY4YmIwODcuY2VyMIGLBggrBgEFBQcBBwEB/wR8MHoweAQCAAEwcgMDABddAwMB
MgADBAdAjgADBAdFDIADBAdGJIADBAdLZQADBAdMv4ADAwFrnAMEB2ypAAMDAIe0
AwQHjv4AAwMAnYMDBAet5AADAwC4FwMEB8C4gAMEB8YbgAMEAMf1RAMEB9BqAAME
BdGUYAMEBtHMgDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCZ+bwoBjbA4H2tqWm2tWBHLFWCeeXPzyTCTacd
T0IdSWzb5APTe0kvFVVkz8dtFZ+QqOYaBwqouIRKc2SMtOrF14I+znH+tX2eFXNb
LQ9/7BR7rtjLr6PQsQOlahrnJOqp9MN0xNId9IkDpfwZHsI0yHSwenuY1GT9bs2M
lt6wG9lEVz5s7ppA0btKALBCPLVivsP72nT+os990tE1gNbQflKH+KxLYAvfKndR
80o49TGoXgFBgvVL80VbkqdGT7t8CMCI3p5awpzwHioJjbPcFg9D4JmNkKiz7ebW
J8+Ek4cZjvIjWP52BR0OPjqmpy0ktKkoWyjEgpTu6FDTmot8
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:35:39 2025 by rpki-client