Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/09c3b0cc-16fe-3bc1-8424-76f1ab132ac6.roa
File:                     09c3b0cc-16fe-3bc1-8424-76f1ab132ac6.roa (raw, json)
Hash identifier:          RWnh0yG8ARja/FT4fmBcGV0RZ0rk1YcbIVNmLE1lNQI=
Subject key identifier:   48:6A:D4:2A:6C:A2:FF:F9:86:09:2C:16:31:7B:02:3B:3D:8A:2B:9A
Certificate issuer:       /CN=c69a1447-7cfa-456f-a600-4b2012c01dc7
Certificate serial:       010D0C9F4328584E1AABAFBB78660558D5DB0500
Authority key identifier: 02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/09c3b0cc-16fe-3bc1-8424-76f1ab132ac6.roa
Signing time:             Mon 08 Jun 2026 14:05:27 +0000
ROA not before:           Mon 08 Jun 2026 14:05:27 +0000
ROA not after:            Sun 06 Sep 2026 13:41:21 +0000
asID:                     11776
IP address blocks:        146.168.66.0/23 maxlen: 23
                          146.168.68.0/23 maxlen: 23
                          146.168.70.0/23 maxlen: 23
                          146.168.76.0/23 maxlen: 23
                          146.168.78.0/23 maxlen: 23
                          146.168.80.0/23 maxlen: 23
                          146.168.82.0/23 maxlen: 23
                          146.168.84.0/23 maxlen: 23
                          146.168.88.0/23 maxlen: 23
                          146.168.90.0/23 maxlen: 23
                          146.168.92.0/23 maxlen: 23
                          146.168.94.0/23 maxlen: 23
                          146.168.96.0/21 maxlen: 21
                          146.168.108.0/23 maxlen: 23
                          146.168.110.0/23 maxlen: 23
                          146.168.112.0/23 maxlen: 23
                          146.168.114.0/23 maxlen: 23
                          146.168.116.0/22 maxlen: 22
                          146.168.120.0/23 maxlen: 23
                          159.250.96.0/21 maxlen: 21
                          159.250.104.0/21 maxlen: 21
                          159.250.112.0/21 maxlen: 21
                          159.250.120.0/21 maxlen: 21
                          159.250.160.0/21 maxlen: 21
                          159.250.176.0/21 maxlen: 21
                          159.250.184.0/21 maxlen: 21
                          159.250.232.0/23 maxlen: 23
                          162.218.20.0/24 maxlen: 24
                          165.188.152.0/23 maxlen: 23
                          170.103.44.0/23 maxlen: 23
                          170.103.46.0/23 maxlen: 23
                          170.103.48.0/23 maxlen: 23
                          170.103.63.0/24 maxlen: 24
                          174.140.96.0/21 maxlen: 21
                          174.140.108.0/24 maxlen: 24
                          174.140.110.0/24 maxlen: 24
                          174.140.111.0/24 maxlen: 24
                          184.164.160.0/21 maxlen: 21
                          184.164.160.0/23 maxlen: 23
                          184.164.162.0/23 maxlen: 23
                          184.164.164.0/23 maxlen: 23
                          184.164.166.0/23 maxlen: 23
                          184.164.172.0/23 maxlen: 23
                          184.164.174.0/23 maxlen: 23
                          184.164.176.0/22 maxlen: 22
                          184.164.180.0/23 maxlen: 23
                          184.164.182.0/23 maxlen: 23
                          184.164.184.0/22 maxlen: 22
                          204.11.80.0/22 maxlen: 22
                          204.11.80.0/23 maxlen: 23
                          204.11.82.0/23 maxlen: 23
                          204.195.137.0/24 maxlen: 24
                          204.195.138.0/23 maxlen: 23
                          204.195.144.0/22 maxlen: 22
                          204.195.148.0/23 maxlen: 23
                          204.195.152.0/24 maxlen: 24
                          204.195.153.0/24 maxlen: 24
                          204.195.154.0/24 maxlen: 24
                          204.195.155.0/24 maxlen: 24
                          204.195.156.0/23 maxlen: 23
                          204.195.158.0/23 maxlen: 23
                          207.244.160.0/22 maxlen: 22
                          207.244.164.0/22 maxlen: 22
                          207.244.168.0/22 maxlen: 22
                          207.244.172.0/23 maxlen: 23
                          207.244.176.0/20 maxlen: 20
                          216.189.172.0/22 maxlen: 22
                          216.189.176.0/23 maxlen: 23
                          216.189.178.0/23 maxlen: 23
                          216.189.180.0/22 maxlen: 22
                          216.189.184.0/23 maxlen: 23
                          216.189.186.0/23 maxlen: 23
                          216.189.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1a:ab:af:bb:78:66:05:58:d5:db:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c69a1447-7cfa-456f-a600-4b2012c01dc7
        Validity
            Not Before: Jun  8 14:05:27 2026 GMT
            Not After : Sep  6 13:41:21 2026 GMT
        Subject: CN=add9a295-7697-48c0-811b-575e2856c4ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:70:76:34:d5:bb:36:43:fd:38:59:24:b0:a9:
                    27:cb:4a:ef:dc:46:39:e2:36:bc:fa:6e:c3:2d:a5:
                    90:43:62:fc:7f:a6:a5:68:28:62:8b:8f:af:b9:f4:
                    a6:d8:5d:d3:4b:d1:10:d2:60:9a:c9:00:89:06:22:
                    20:a9:34:eb:cd:74:41:bc:9f:5a:40:34:d1:4c:da:
                    43:fe:21:1e:12:f1:a3:da:af:00:53:d5:62:98:90:
                    ee:e3:70:2b:3e:65:25:af:f7:c3:47:37:83:8e:a2:
                    2a:e4:fe:56:19:82:5b:11:08:f1:99:9c:49:b1:28:
                    d8:57:f9:92:0a:ac:72:b8:cf:1c:ec:96:38:f9:1f:
                    4c:07:fe:08:7c:c6:b5:3d:35:f0:6f:87:a3:ad:8a:
                    24:2f:0e:a0:94:05:54:32:c3:b9:0c:c8:8f:dc:5a:
                    80:ff:cf:93:e8:7b:9f:75:2a:82:90:99:ac:23:64:
                    dd:f4:b5:64:90:91:1e:f8:b2:de:37:4a:cc:a4:5e:
                    bb:14:b9:22:34:d9:41:ce:0e:37:9f:57:15:e6:32:
                    03:a1:35:52:4b:7e:e8:b3:65:3f:64:4e:36:25:d4:
                    29:f7:d8:3e:a4:6e:b8:ee:c2:6d:2e:c1:fe:26:c5:
                    f6:55:74:c7:c5:f8:b2:90:b3:f2:bb:f9:fa:cd:b6:
                    ad:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:6A:D4:2A:6C:A2:FF:F9:86:09:2C:16:31:7B:02:3B:3D:8A:2B:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/09c3b0cc-16fe-3bc1-8424-76f1ab132ac6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl

            X509v3 Authority Key Identifier:
                keyid:02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.168.66.0-146.168.71.255
                  146.168.76.0-146.168.85.255
                  146.168.88.0-146.168.103.255
                  146.168.108.0-146.168.121.255
                  159.250.96.0/19
                  159.250.160.0/21
                  159.250.176.0/20
                  159.250.232.0/23
                  162.218.20.0/24
                  165.188.152.0/23
                  170.103.44.0-170.103.49.255
                  170.103.63.0/24
                  174.140.96.0/21
                  174.140.108.0/24
                  174.140.110.0/23
                  184.164.160.0/21
                  184.164.172.0-184.164.187.255
                  204.11.80.0/22
                  204.195.137.0-204.195.139.255
                  204.195.144.0-204.195.149.255
                  204.195.152.0/21
                  207.244.160.0-207.244.173.255
                  207.244.176.0/20
                  216.189.172.0-216.189.191.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:9b:ae:f2:2c:60:c4:17:a2:ad:13:81:98:0a:bd:58:35:d8:
         ee:96:9e:73:10:43:07:4d:f0:df:75:c8:99:b5:e1:ae:80:dd:
         91:3f:68:7c:da:d9:f6:03:83:a3:80:4a:7c:e2:7a:f9:5b:55:
         6c:0e:73:34:83:c7:8d:f7:a8:a1:bc:91:cc:ee:8a:55:46:6a:
         35:a7:84:93:a3:cb:48:32:03:ff:f5:df:eb:35:b6:68:b6:72:
         a9:e1:c1:a2:8a:01:4d:4e:58:2f:28:1d:35:39:84:0a:6e:16:
         53:b6:23:7a:08:b5:be:86:23:ab:62:8c:d7:9a:91:34:20:2d:
         83:09:cd:4b:03:18:d2:06:b9:e0:85:22:af:57:4b:d7:45:81:
         ca:2d:6e:af:e1:f9:c7:df:eb:33:3d:b0:8f:7e:01:0c:b9:c0:
         e8:d5:e3:3f:d3:2a:33:88:68:af:dd:29:a6:06:ba:cb:41:03:
         2e:be:87:e2:a3:a0:bc:cd:92:b9:d0:f6:bf:bf:ca:5a:36:a7:
         e2:ce:70:59:1e:bd:c7:ba:28:a9:38:27:ab:2b:ae:c0:ca:9e:
         88:3c:df:42:be:db:a5:80:b5:c8:19:a2:20:fa:d5:5b:cf:18:
         ca:c5:f6:aa:ad:fa:b1:01:8d:79:3b:76:0a:65:81:18:86:81:
         74:3f:1b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:45:07 2026 by rpki-client