Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/f34d0ece-7111-36a2-9b54-87ff600743ba.roa
File:                     f34d0ece-7111-36a2-9b54-87ff600743ba.roa (raw, json)
Hash identifier:          YoTgfFKu0+R8OjcuPK9vU5OaONCMw1avvg+6XTnNPEA=
Subject key identifier:   2C:AA:5B:B9:E3:CC:E5:0A:D6:3E:30:41:FD:8C:B3:DF:B0:6A:9E:1D
Certificate issuer:       /CN=cbfbd197-84de-44e6-b527-b42dddca269d
Certificate serial:       010D0C9F4328584F3CE2B8A1FF1A451317E103C0
Authority key identifier: 60:0E:2C:A4:4F:50:A8:12:87:F8:AA:8D:F8:F5:E8:4C:A5:40:9A:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/f34d0ece-7111-36a2-9b54-87ff600743ba.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     11847
IP address blocks:        64.135.128.0/22 maxlen: 22
                          64.135.136.0/21 maxlen: 21
                          66.181.112.0/20 maxlen: 20
                          66.252.32.0/21 maxlen: 21
                          66.252.44.0/22 maxlen: 22
                          66.252.48.0/21 maxlen: 21
                          66.252.56.0/22 maxlen: 22
                          66.252.60.0/23 maxlen: 23
                          68.68.224.0/24 maxlen: 24
                          68.68.226.0/24 maxlen: 24
                          68.68.229.0/24 maxlen: 24
                          68.68.232.0/23 maxlen: 23
                          68.68.234.0/24 maxlen: 24
                          68.68.236.0/22 maxlen: 22
                          97.107.144.0/21 maxlen: 21
                          97.107.153.0/24 maxlen: 24
                          97.107.154.0/24 maxlen: 24
                          216.220.224.0/21 maxlen: 21
                          216.220.232.0/23 maxlen: 23
                          216.220.234.0/24 maxlen: 24
                          216.220.236.0/23 maxlen: 23
                          216.220.239.0/24 maxlen: 24
                          216.220.240.0/20 maxlen: 20
                          2607:4a00:2000::/36 maxlen: 36
                          2607:4a00:3000::/36 maxlen: 36
                          2607:f718::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/cbfbd197-84de-44e6-b527-b42dddca269d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/cbfbd197-84de-44e6-b527-b42dddca269d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:b8:a1:ff:1a:45:13:17:e1:03:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbfbd197-84de-44e6-b527-b42dddca269d
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=abab7100-f773-485f-a48a-11948b42afb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:15:40:af:2b:6d:16:35:88:14:5f:b6:e6:62:
                    0e:6b:e0:5d:da:51:6d:9a:d9:9e:f2:5f:20:73:ff:
                    cf:7b:0d:42:56:b5:24:1a:bb:96:dd:00:9a:f4:33:
                    1e:57:cc:07:f4:98:14:49:cf:48:f9:9d:e5:ee:0f:
                    8f:8d:ea:78:31:55:74:53:ab:d9:4f:a0:66:1d:4f:
                    2d:1b:d7:c8:b7:fb:a2:15:d3:0a:83:24:af:ac:78:
                    a5:01:eb:f4:da:cc:95:09:4c:cb:31:cc:cd:e4:cc:
                    0a:07:3f:22:a1:81:4a:17:bb:ad:cf:33:7a:02:c4:
                    76:79:24:22:bd:23:6a:99:78:0c:96:b3:4b:a1:a7:
                    ab:1a:ef:96:61:bd:f9:37:1a:e1:53:ef:2c:be:81:
                    49:2e:b3:af:1c:61:a0:d2:b4:76:3f:e7:4a:e5:d2:
                    fc:47:e7:c5:9c:3a:c1:ec:50:c1:8c:3f:2a:51:01:
                    a3:44:ee:8e:5a:4c:c7:47:b5:fc:61:1f:e9:d2:d2:
                    09:85:63:f2:47:95:82:43:96:28:62:2f:d9:76:02:
                    31:ac:0b:a3:8e:91:63:c6:a3:23:f9:7e:41:cf:46:
                    d6:f9:80:fd:b6:d6:c4:dc:8a:e4:2f:de:53:f6:e5:
                    78:13:a9:0c:97:64:34:4c:98:aa:b4:c2:22:df:88:
                    52:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:AA:5B:B9:E3:CC:E5:0A:D6:3E:30:41:FD:8C:B3:DF:B0:6A:9E:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/f34d0ece-7111-36a2-9b54-87ff600743ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/cbfbd197-84de-44e6-b527-b42dddca269d.crl

            X509v3 Authority Key Identifier:
                keyid:60:0E:2C:A4:4F:50:A8:12:87:F8:AA:8D:F8:F5:E8:4C:A5:40:9A:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.135.128.0/22
                  64.135.136.0/21
                  66.181.112.0/20
                  66.252.32.0/21
                  66.252.44.0-66.252.61.255
                  68.68.224.0/24
                  68.68.226.0/24
                  68.68.229.0/24
                  68.68.232.0-68.68.234.255
                  68.68.236.0/22
                  97.107.144.0/21
                  97.107.153.0-97.107.154.255
                  216.220.224.0-216.220.234.255
                  216.220.236.0/23
                  216.220.239.0-216.220.255.255
                IPv6:
                  2607:4a00:2000::/35
                  2607:f718::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:ca:da:e0:85:65:f2:b2:37:c1:c3:85:28:8f:97:87:14:b2:
         69:5c:b6:49:a4:b8:cd:b7:96:f8:b6:dd:9a:98:2f:c5:da:e3:
         13:65:3f:aa:e5:9a:84:2f:18:38:3e:f9:3f:fc:b2:51:4f:50:
         00:0d:47:be:e2:f4:fc:59:31:c0:9b:d3:da:b3:71:d5:8b:dd:
         69:ef:54:85:5a:29:7b:9c:9e:37:f3:d9:a1:ab:c2:29:80:59:
         55:8f:e8:f2:bd:5c:f4:05:a9:f6:93:d8:d6:b7:3d:15:f2:26:
         bf:9a:0d:4d:93:a7:7e:0c:23:55:c1:0d:4d:e1:15:86:90:ce:
         ff:4a:9d:85:4a:23:43:81:c4:04:cd:5f:98:a7:84:f2:06:44:
         24:44:5c:42:3c:78:15:70:93:2f:2b:13:c3:e4:82:fb:a7:00:
         8d:b3:77:c6:98:98:80:22:a2:ea:4b:ba:79:15:26:6b:27:ba:
         e4:01:7c:f8:1c:77:a6:58:3d:6b:92:d1:1e:e2:a2:0f:ce:9b:
         88:16:8b:7f:45:fb:45:82:55:5a:db:96:b4:58:0a:1b:9e:0d:
         f4:40:1f:c7:db:97:fb:1e:82:c6:08:60:cd:73:cc:e4:30:95:
         e0:3b:20:17:86:2a:56:57:b7:87:2e:38:e3:5e:22:15:a6:62:
         9e:4b:8e:22
-----BEGIN CERTIFICATE-----
MIIG2jCCBcKgAwIBAgIUAQ0Mn0MoWE884rih/xpFExfhA8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2JmYmQxOTctODRkZS00NGU2LWI1MjctYjQyZGRkY2Ey
NjlkMB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk
YWJhYjcxMDAtZjc3My00ODVmLWE0OGEtMTE5NDhiNDJhZmIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhVAryttFjWIFF+25mIOa+Bd2lFtmtme8l8g
c//Pew1CVrUkGruW3QCa9DMeV8wH9JgUSc9I+Z3l7g+Pjep4MVV0U6vZT6BmHU8t
G9fIt/uiFdMKgySvrHilAev02syVCUzLMczN5MwKBz8ioYFKF7utzzN6AsR2eSQi
vSNqmXgMlrNLoaerGu+WYb35NxrhU+8svoFJLrOvHGGg0rR2P+dK5dL8R+fFnDrB
7FDBjD8qUQGjRO6OWkzHR7X8YR/p0tIJhWPyR5WCQ5YoYi/ZdgIxrAujjpFjxqMj
+X5Bz0bW+YD9ttbE3IrkL95T9uV4E6kMl2Q0TJiqtMIi34hSAQIDAQABo4ID7DCC
A+gwHQYDVR0OBBYEFCyqW7njzOUK1j4wQf2Ms9+wap4dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jYmZi
ZDE5Ny04NGRlLTQ0ZTYtYjUyNy1iNDJkZGRjYTI2OWQvZjM0ZDBlY2UtNzExMS0z
NmEyLTliNTQtODdmZjYwMDc0M2JhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvY2JmYmQxOTctODRkZS00NGU2LWI1
MjctYjQyZGRkY2EyNjlkL2NiZmJkMTk3LTg0ZGUtNDRlNi1iNTI3LWI0MmRkZGNh
MjY5ZC5jcmwwHwYDVR0jBBgwFoAUYA4spE9QqBKH+KqN+PXoTKVAmu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9jYmZiZDE5Ny04NGRlLTQ0ZTYtYjUyNy1iNDJk
ZGRjYTI2OWQuY2VyMIG1BggrBgEFBQcBBwEB/wSBpTCBojCBiAQCAAEwgYEDBAJA
h4ADBANAh4gDBARCtXADBANC/CAwDAMEAkL8LAMEAUL8PAMEAERE4AMEAERE4gME
AERE5TAMAwQDREToAwQARETqAwQCRETsAwQDYWuQMAwDBABha5kDBABha5owDAME
Bdjc4AMEANjc6gMEAdjc7DALAwQA2NzvAwMA2NwwFQQCAAIwDwMGBSYHSgAgAwUA
Jgf3GDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0
dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG
SIb3DQEBCwUAA4IBAQAPytrghWXysjfBw4Uoj5eHFLJpXLZJpLjNt5b4tt2amC/F
2uMTZT+q5ZqELxg4Pvk//LJRT1AADUe+4vT8WTHAm9Pas3HVi91p71SFWil7nJ43
89mhq8IpgFlVj+jyvVz0Ban2k9jWtz0V8ia/mg1Nk6d+DCNVwQ1N4RWGkM7/Sp2F
SiNDgcQEzV+Yp4TyBkQkRFxCPHgVcJMvKxPD5IL7pwCNs3fGmJiAIqLqS7p5FSZr
J7rkAXz4HHemWD1rktEe4qIPzpuIFot/RftFglVa25a0WAobng30QB/H25f7HoLG
CGDNc8zkMJXgOyAXhipWV7eHLjjjXiIVpmKeS44i
-----END CERTIFICATE-----
Generated at Tue Sep 22 03:20:47 2026 by rpki-client