Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b687897-0772-49b6-9e4b-0f6ffee30894/2bc92cdf-d184-35a1-bfe3-139dda418d51.roa
File:                     2bc92cdf-d184-35a1-bfe3-139dda418d51.roa (raw, json)
Hash identifier:          j6Un3OveY3oful84bGwMef6COSu28Pr7UUWmr5q8ZL8=
Subject key identifier:   7B:8B:8F:F0:9C:68:27:3C:F2:F4:2B:F8:79:25:ED:09:E3:5A:16:41
Certificate issuer:       /CN=2b687897-0772-49b6-9e4b-0f6ffee30894
Certificate serial:       010D0C9F4328584F1E7CBD111099A82F4882CE80
Authority key identifier: 82:30:1A:70:60:99:11:47:F7:EF:AA:08:20:03:78:79:AB:FA:E7:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b687897-0772-49b6-9e4b-0f6ffee30894.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b687897-0772-49b6-9e4b-0f6ffee30894/2bc92cdf-d184-35a1-bfe3-139dda418d51.roa
Signing time:             Wed 09 Sep 2026 15:41:02 +0000
ROA not before:           Wed 09 Sep 2026 15:41:02 +0000
ROA not after:            Wed 11 Nov 2026 02:00:11 +0000
asID:                     29938
IP address blocks:        64.25.240.0/20 maxlen: 20
                          64.25.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b687897-0772-49b6-9e4b-0f6ffee30894/2b687897-0772-49b6-9e4b-0f6ffee30894.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b687897-0772-49b6-9e4b-0f6ffee30894/2b687897-0772-49b6-9e4b-0f6ffee30894.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b687897-0772-49b6-9e4b-0f6ffee30894.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1e:7c:bd:11:10:99:a8:2f:48:82:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b687897-0772-49b6-9e4b-0f6ffee30894
        Validity
            Not Before: Sep  9 15:41:02 2026 GMT
            Not After : Nov 11 02:00:11 2026 GMT
        Subject: CN=5ac38112-e360-4ff4-8ccd-c66250feb4cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ea:b8:20:2e:9a:8d:b5:dc:9d:14:26:eb:23:
                    39:4c:ab:93:9f:5d:2d:dd:41:98:a4:3b:30:7c:21:
                    7c:0c:cf:d8:eb:aa:4a:53:a4:27:78:d4:79:fe:bc:
                    8d:fa:4b:19:73:59:2d:a4:6a:7c:fc:95:65:12:8e:
                    a1:bb:00:f8:85:c5:ea:62:1e:79:9e:c1:1c:9f:17:
                    6d:a0:0a:a1:b0:4f:4d:2b:62:ee:8d:62:fe:ea:4f:
                    26:f4:b5:82:fd:13:8b:3a:36:62:51:50:f8:78:d5:
                    fd:19:13:d0:de:cd:6d:d8:9f:46:40:0a:77:1f:89:
                    83:b6:7e:d5:44:73:d8:24:50:44:1c:6a:3c:b9:53:
                    8b:9a:4d:07:70:28:37:50:62:c7:35:0c:a8:08:1f:
                    06:f6:bf:55:65:cf:13:7e:04:39:e8:1c:69:82:a2:
                    d4:51:34:e6:73:0a:ec:68:15:22:48:10:00:fb:95:
                    28:fc:d9:a1:61:db:aa:cf:15:d2:a9:30:23:37:6f:
                    bd:c6:fa:c4:3c:0e:bb:03:aa:f7:af:90:e6:86:49:
                    70:37:c0:92:4e:96:e3:cd:0d:dd:2d:56:47:73:98:
                    38:f8:84:4a:e2:81:7a:0c:74:3b:8a:87:a1:3f:39:
                    fe:5c:c3:e5:bb:20:cc:e0:02:94:9e:a0:fd:5e:00:
                    a0:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:8B:8F:F0:9C:68:27:3C:F2:F4:2B:F8:79:25:ED:09:E3:5A:16:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b687897-0772-49b6-9e4b-0f6ffee30894/2bc92cdf-d184-35a1-bfe3-139dda418d51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b687897-0772-49b6-9e4b-0f6ffee30894/2b687897-0772-49b6-9e4b-0f6ffee30894.crl

            X509v3 Authority Key Identifier:
                keyid:82:30:1A:70:60:99:11:47:F7:EF:AA:08:20:03:78:79:AB:FA:E7:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b687897-0772-49b6-9e4b-0f6ffee30894.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.25.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:0f:c4:ca:57:74:c0:8b:21:98:e5:5b:b8:99:17:8b:03:8a:
         a0:de:07:a7:39:bc:47:84:9c:b2:97:f8:95:ce:da:f4:38:c7:
         1b:82:ef:da:55:67:dc:84:23:75:f9:6e:17:ca:b7:15:4b:44:
         02:cb:31:56:af:fe:e8:ea:ba:5f:14:75:d4:51:06:47:4d:97:
         c0:22:fb:82:d5:9e:80:37:4c:58:ed:0a:41:61:5f:f9:b3:83:
         17:a0:4e:24:69:33:94:45:55:82:b0:0a:82:2a:28:d5:3e:0b:
         7e:83:2a:4f:49:7b:8f:32:14:30:80:ff:84:ff:da:27:aa:c0:
         9c:4f:82:cc:53:ff:ff:00:a4:54:99:a4:cf:4d:c1:eb:ee:20:
         9e:bb:e5:d8:e4:f6:45:e8:37:eb:ad:18:52:29:25:79:a4:02:
         83:5f:b4:85:c1:90:a8:8d:41:af:85:6e:37:79:f7:4a:ca:0e:
         9f:0c:bd:d3:d7:9f:e1:84:4d:59:95:c2:88:d1:70:9a:57:d0:
         63:f5:55:c0:89:0c:ac:1a:62:07:62:a9:0b:b0:0b:74:6a:ca:
         54:d5:52:ad:7a:10:6a:8e:c6:66:db:65:94:fc:f5:ee:c0:c3:
         97:b4:33:da:d2:f1:41:32:e0:7e:b1:60:d3:90:a7:e3:6b:d2:
         4b:d0:75:5b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8efL0REJmoL0iCzoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmI2ODc4OTctMDc3Mi00OWI2LTllNGItMGY2ZmZlZTMw
ODk0MB4XDTI2MDkwOTE1NDEwMloXDTI2MTExMTAyMDAxMVowLzEtMCsGA1UEAxMk
NWFjMzgxMTItZTM2MC00ZmY0LThjY2QtYzY2MjUwZmViNGNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOq4IC6ajbXcnRQm6yM5TKuTn10t3UGYpDsw
fCF8DM/Y66pKU6QneNR5/ryN+ksZc1ktpGp8/JVlEo6huwD4hcXqYh55nsEcnxdt
oAqhsE9NK2LujWL+6k8m9LWC/ROLOjZiUVD4eNX9GRPQ3s1t2J9GQAp3H4mDtn7V
RHPYJFBEHGo8uVOLmk0HcCg3UGLHNQyoCB8G9r9VZc8TfgQ56BxpgqLUUTTmcwrs
aBUiSBAA+5Uo/NmhYduqzxXSqTAjN2+9xvrEPA67A6r3r5DmhklwN8CSTpbjzQ3d
LVZHc5g4+IRK4oF6DHQ7ioehPzn+XMPluyDM4AKUnqD9XgCg1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHuLj/CcaCc88vQr+Hkl7QnjWhZBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8yYjY4
Nzg5Ny0wNzcyLTQ5YjYtOWU0Yi0wZjZmZmVlMzA4OTQvMmJjOTJjZGYtZDE4NC0z
NWExLWJmZTMtMTM5ZGRhNDE4ZDUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMmI2ODc4OTctMDc3Mi00OWI2LTll
NGItMGY2ZmZlZTMwODk0LzJiNjg3ODk3LTA3NzItNDliNi05ZTRiLTBmNmZmZWUz
MDg5NC5jcmwwHwYDVR0jBBgwFoAUgjAacGCZEUf376oIIAN4eav65/IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi8yYjY4Nzg5Ny0wNzcyLTQ5YjYtOWU0Yi0wZjZm
ZmVlMzA4OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQBnwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEsPxMpXdMCLIZjlW7iZF4sDiqDeB6c5vEeEnLKX+JXO2vQ4xxuC79pV
Z9yEI3X5bhfKtxVLRALLMVav/ujqul8UddRRBkdNl8Ai+4LVnoA3TFjtCkFhX/mz
gxegTiRpM5RFVYKwCoIqKNU+C36DKk9Je48yFDCA/4T/2ieqwJxPgsxT//8ApFSZ
pM9NwevuIJ675djk9kXoN+utGFIpJXmkAoNftIXBkKiNQa+Fbjd590rKDp8MvdPX
n+GETVmVwojRcJpX0GP1VcCJDKwaYgdiqQuwC3RqylTVUq16EGqOxmbbZZT89e7A
w5e0M9rS8UEy4H6xYNOQp+Nr0kvQdVs=
-----END CERTIFICATE-----
Generated at Tue Sep 22 05:48:27 2026 by rpki-client