Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/ec532543-9dd6-3bcf-bdea-82dd95098083.roa
File:                     ec532543-9dd6-3bcf-bdea-82dd95098083.roa (raw, json)
Hash identifier:          b1soXqYH6FX0Twk8UxJ9vJxCaA4DTf0zkK4JYSghG9Y=
Subject key identifier:   CD:BB:44:1D:C7:FF:43:40:6A:80:A5:4A:A7:CD:C9:B4:39:56:CC:B3
Certificate issuer:       /CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
Certificate serial:       010D0C9F4328584D59EA50F26D494F3E38F67F00
Authority key identifier: 2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/ec532543-9dd6-3bcf-bdea-82dd95098083.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     46375
IP address blocks:        23.93.0.0/16 maxlen: 24
                          50.0.0.0/15 maxlen: 24
                          64.142.0.0/17 maxlen: 24
                          69.12.128.0/17 maxlen: 24
                          70.36.128.0/17 maxlen: 24
                          75.101.0.0/17 maxlen: 24
                          76.191.128.0/17 maxlen: 24
                          107.156.0.0/15 maxlen: 24
                          108.169.0.0/17 maxlen: 24
                          135.180.0.0/16 maxlen: 24
                          142.254.0.0/17 maxlen: 24
                          157.131.0.0/16 maxlen: 24
                          173.228.0.0/17 maxlen: 24
                          184.23.0.0/16 maxlen: 24
                          192.184.128.0/17 maxlen: 24
                          198.27.128.0/17 maxlen: 24
                          199.245.68.0/24 maxlen: 24
                          208.106.0.0/17 maxlen: 24
                          209.148.96.0/19 maxlen: 24
                          209.204.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:50:f2:6d:49:4f:3e:38:f6:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=5b3999a6-6363-4859-a95b-da3cfc9b285d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:59:2d:3c:63:04:8a:72:a2:be:fe:e2:a4:b4:
                    31:aa:0d:be:4a:17:67:6f:c6:af:22:23:f0:51:d6:
                    f8:1a:be:3c:f2:3d:2d:f8:d6:da:28:17:2d:8c:25:
                    c6:0c:56:50:2e:40:05:64:22:90:84:b5:df:74:56:
                    6b:f0:2a:07:ac:ec:3f:da:63:f9:2c:ef:79:2b:16:
                    95:52:64:25:20:9d:51:98:cd:ce:2a:cc:c3:8e:93:
                    c7:02:42:4d:a9:7d:db:db:e0:8f:8b:c3:2d:c4:73:
                    06:e1:c3:e6:8b:35:69:b4:25:da:d9:3f:22:40:23:
                    76:27:a4:32:52:45:dc:8a:fb:12:db:67:2a:15:15:
                    c3:61:bf:19:3f:13:9d:3a:07:ab:8a:fe:61:9c:31:
                    97:12:ee:4e:43:dc:08:86:f5:9a:77:0f:75:f0:e3:
                    5a:aa:41:4c:24:49:69:0c:b2:42:9f:d9:86:8f:b2:
                    f0:a1:bb:80:b0:a0:66:a6:79:9e:c2:f4:6a:3b:0b:
                    3f:a9:3b:79:65:61:56:31:35:14:63:cf:7f:4e:58:
                    d1:8d:34:34:7b:02:31:e1:dc:b2:18:61:7d:60:c7:
                    5a:01:e8:ad:fb:56:41:7a:25:6d:80:26:c8:4e:96:
                    9e:4b:a7:85:02:f7:f1:38:e7:01:eb:08:db:e2:1f:
                    8c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:BB:44:1D:C7:FF:43:40:6A:80:A5:4A:A7:CD:C9:B4:39:56:CC:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/ec532543-9dd6-3bcf-bdea-82dd95098083.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl

            X509v3 Authority Key Identifier:
                keyid:2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.93.0.0/16
                  50.0.0.0/15
                  64.142.0.0/17
                  69.12.128.0/17
                  70.36.128.0/17
                  75.101.0.0/17
                  76.191.128.0/17
                  107.156.0.0/15
                  108.169.0.0/17
                  135.180.0.0/16
                  142.254.0.0/17
                  157.131.0.0/16
                  173.228.0.0/17
                  184.23.0.0/16
                  192.184.128.0/17
                  198.27.128.0/17
                  199.245.68.0/24
                  208.106.0.0/17
                  209.148.96.0/19
                  209.204.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:51:61:1d:be:84:7e:90:4b:e2:a8:41:42:b4:19:c9:0e:f9:
         e8:af:cc:20:98:e7:b6:2f:d7:d4:d0:1d:c5:23:e7:7a:f9:9e:
         84:48:ae:e3:ab:ea:63:16:23:c9:23:6e:d1:7d:44:0c:8f:dd:
         c8:36:b3:57:b5:06:6b:63:51:9c:9d:c4:7e:dc:85:35:f2:b8:
         9a:c6:5c:22:9a:d3:13:d2:51:b8:21:34:19:eb:26:7c:08:8c:
         34:50:cd:e5:4f:18:a9:68:ce:7f:0e:4b:20:b0:64:06:1f:d9:
         f8:48:52:11:e5:60:81:1b:33:95:e6:50:76:b1:12:a3:97:36:
         df:dd:a1:16:59:56:da:18:ed:c2:14:a6:98:31:97:42:fd:ef:
         ad:e9:40:dc:dd:fe:2f:2d:4c:a8:ca:1b:e0:bb:fa:a7:a5:78:
         ec:d9:41:48:8c:89:fa:8f:bb:d3:c2:e2:e6:3b:98:86:14:cb:
         e1:e7:ee:07:c7:1b:45:01:32:a6:ae:7f:aa:ca:07:be:d9:59:
         4a:96:35:ac:10:c4:52:f1:c2:a1:60:d4:6c:13:42:9c:fa:01:
         26:34:d6:19:22:96:ff:f4:7c:d5:e9:72:07:66:af:1c:6d:89:
         fa:bc:ed:6e:33:ca:6f:40:44:c0:af:ac:b8:dd:d3:db:6c:f4:
         2d:0e:0d:3e
-----BEGIN CERTIFICATE-----
MIIGsDCCBZigAwIBAgIUAQ0Mn0MoWE1Z6lDybUlPPjj2fwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmU5ZjRhMWYtMTM3MS00ZjNmLWIyOTEtNjllYWJmOGJi
MDg3MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk
NWIzOTk5YTYtNjM2My00ODU5LWE5NWItZGEzY2ZjOWIyODVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA41ktPGMEinKivv7ipLQxqg2+Shdnb8avIiPw
Udb4Gr488j0t+NbaKBctjCXGDFZQLkAFZCKQhLXfdFZr8CoHrOw/2mP5LO95KxaV
UmQlIJ1RmM3OKszDjpPHAkJNqX3b2+CPi8MtxHMG4cPmizVptCXa2T8iQCN2J6Qy
UkXcivsS22cqFRXDYb8ZPxOdOgeriv5hnDGXEu5OQ9wIhvWadw918ONaqkFMJElp
DLJCn9mGj7LwobuAsKBmpnmewvRqOws/qTt5ZWFWMTUUY89/TljRjTQ0ewIx4dyy
GGF9YMdaAeit+1ZBeiVtgCbITpaeS6eFAvfxOOcB6wjb4h+MPQIDAQABo4IDwjCC
A74wHQYDVR0OBBYEFM27RB3H/0NAaoClSqfNybQ5VsyzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iZTlm
NGExZi0xMzcxLTRmM2YtYjI5MS02OWVhYmY4YmIwODcvZWM1MzI1NDMtOWRkNi0z
YmNmLWJkZWEtODJkZDk1MDk4MDgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmU5ZjRhMWYtMTM3MS00ZjNmLWIy
OTEtNjllYWJmOGJiMDg3L2JlOWY0YTFmLTEzNzEtNGYzZi1iMjkxLTY5ZWFiZjhi
YjA4Ny5jcmwwHwYDVR0jBBgwFoAULwwCufh39B5QfFnfYu1eKPkJXfUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9iZTlmNGExZi0xMzcxLTRmM2YtYjI5MS02OWVh
YmY4YmIwODcuY2VyMIGLBggrBgEFBQcBBwEB/wR8MHoweAQCAAEwcgMDABddAwMB
MgADBAdAjgADBAdFDIADBAdGJIADBAdLZQADBAdMv4ADAwFrnAMEB2ypAAMDAIe0
AwQHjv4AAwMAnYMDBAet5AADAwC4FwMEB8C4gAMEB8YbgAMEAMf1RAMEB9BqAAME
BdGUYAMEBtHMgDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCNUWEdvoR+kEviqEFCtBnJDvnor8wgmOe2L9fU
0B3FI+d6+Z6ESK7jq+pjFiPJI27RfUQMj93INrNXtQZrY1GcncR+3IU18riaxlwi
mtMT0lG4ITQZ6yZ8CIw0UM3lTxipaM5/DksgsGQGH9n4SFIR5WCBGzOV5lB2sRKj
lzbf3aEWWVbaGO3CFKaYMZdC/e+t6UDc3f4vLUyoyhvgu/qnpXjs2UFIjIn6j7vT
wuLmO5iGFMvh5+4HxxtFATKmrn+qyge+2VlKljWsEMRS8cKhYNRsE0Kc+gEmNNYZ
Ipb/9HzV6XIHZq8cbYn6vO1uM8pvQETAr6y43dPbbPQtDg0+
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:46:22 2026 by rpki-client