Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c1d16a89-c281-3e08-922d-74c960ae0e20.roa
File:                     c1d16a89-c281-3e08-922d-74c960ae0e20.roa (raw, json)
Hash identifier:          2Yf45aQAc25XOVhr64mkuMI1PsgM3d9249e1DQXb1hs=
Subject key identifier:   0A:F1:CA:32:FC:9D:AB:DA:BC:A2:06:D3:91:D1:BD:1E:58:7D:43:5E
Certificate issuer:       /CN=c69a1447-7cfa-456f-a600-4b2012c01dc7
Certificate serial:       010D0C9F4328584E0F78190F98B8113EC7D26F40
Authority key identifier: 02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c1d16a89-c281-3e08-922d-74c960ae0e20.roa
Signing time:             Thu 04 Jun 2026 13:47:37 +0000
ROA not before:           Thu 04 Jun 2026 13:47:37 +0000
ROA not after:            Wed 02 Sep 2026 13:21:40 +0000
asID:                     11776
IP address blocks:        23.245.58.0/23 maxlen: 23
                          23.245.60.0/23 maxlen: 23
                          23.245.62.0/23 maxlen: 23
                          24.145.80.0/22 maxlen: 22
                          72.28.164.0/24 maxlen: 24
                          72.28.165.0/24 maxlen: 24
                          72.28.166.0/24 maxlen: 24
                          72.28.167.0/24 maxlen: 24
                          72.28.168.0/21 maxlen: 21
                          72.28.176.0/21 maxlen: 21
                          72.28.184.0/21 maxlen: 21
                          72.28.224.0/21 maxlen: 21
                          72.28.232.0/21 maxlen: 21
                          132.147.16.0/23 maxlen: 23
                          132.147.18.0/23 maxlen: 23
                          132.147.20.0/23 maxlen: 23
                          132.147.22.0/23 maxlen: 23
                          137.103.66.0/23 maxlen: 23
                          137.103.70.0/23 maxlen: 23
                          137.103.72.0/23 maxlen: 23
                          137.103.76.0/24 maxlen: 24
                          137.103.77.0/24 maxlen: 24
                          137.103.78.0/23 maxlen: 23
                          138.207.160.0/22 maxlen: 22
                          138.207.164.0/22 maxlen: 22
                          159.250.128.0/23 maxlen: 23
                          159.250.132.0/23 maxlen: 23
                          159.250.134.0/23 maxlen: 23
                          159.250.136.0/23 maxlen: 23
                          159.250.138.0/23 maxlen: 23
                          159.250.140.0/23 maxlen: 23
                          159.250.142.0/23 maxlen: 23
                          159.250.240.0/21 maxlen: 21
                          159.250.240.0/23 maxlen: 23
                          159.250.250.0/23 maxlen: 23
                          159.250.253.0/24 maxlen: 24
                          159.250.255.0/24 maxlen: 24
                          172.85.16.0/23 maxlen: 23
                          172.85.18.0/23 maxlen: 23
                          172.85.20.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0f:78:19:0f:98:b8:11:3e:c7:d2:6f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c69a1447-7cfa-456f-a600-4b2012c01dc7
        Validity
            Not Before: Jun  4 13:47:37 2026 GMT
            Not After : Sep  2 13:21:40 2026 GMT
        Subject: CN=395a034f-9306-43ff-ab83-1b609777539e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4e:ad:af:ce:b5:f8:6a:b6:7d:cc:1d:ab:32:
                    40:a7:a7:ef:c2:cc:7b:32:b8:a1:2e:d3:8c:e7:cd:
                    ba:e7:7f:b9:10:87:32:6a:b9:d8:84:0a:96:52:c4:
                    f5:0c:dd:01:25:ce:6f:5e:48:e6:db:47:64:8d:67:
                    ba:82:fb:05:15:53:14:49:f7:83:ca:95:6b:bd:3a:
                    1a:04:03:b9:8d:6e:0b:44:b2:b1:31:03:72:2a:19:
                    96:2a:02:e0:ce:5b:09:ad:aa:34:9d:c1:78:71:cc:
                    06:d3:2f:55:dd:ba:8f:18:5f:5a:17:45:a8:74:5e:
                    9d:f5:c7:8f:36:52:af:b6:b7:74:27:48:4b:da:ec:
                    1a:fa:f1:d4:79:08:05:d1:96:42:73:f3:07:e5:74:
                    70:a0:ab:32:bf:f8:25:5a:18:3f:a3:9e:87:24:fc:
                    8c:43:0d:64:0b:79:6b:fd:c1:96:bb:4a:41:b8:51:
                    db:df:c6:f5:83:7b:56:fb:33:92:a8:d4:33:1b:89:
                    e9:dd:b8:24:b2:f4:12:e6:10:b8:32:8b:0b:67:0d:
                    dd:60:84:da:f7:5e:4f:4b:c1:19:f2:94:a9:35:71:
                    79:5f:8b:e8:c8:fa:e3:14:ce:de:be:17:bd:9d:6f:
                    0c:bd:59:90:ca:68:73:ce:74:01:da:5f:a4:97:2b:
                    d8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:F1:CA:32:FC:9D:AB:DA:BC:A2:06:D3:91:D1:BD:1E:58:7D:43:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c1d16a89-c281-3e08-922d-74c960ae0e20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl

            X509v3 Authority Key Identifier:
                keyid:02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.245.58.0-23.245.63.255
                  24.145.80.0/22
                  72.28.164.0-72.28.191.255
                  72.28.224.0/20
                  132.147.16.0/21
                  137.103.66.0/23
                  137.103.70.0-137.103.73.255
                  137.103.76.0/22
                  138.207.160.0/21
                  159.250.128.0/23
                  159.250.132.0-159.250.143.255
                  159.250.240.0/21
                  159.250.250.0/23
                  159.250.253.0/24
                  159.250.255.0/24
                  172.85.16.0-172.85.21.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:49:17:56:d4:e5:47:a4:04:ef:d7:1a:c6:7f:a7:7a:f5:fe:
         3e:bd:1c:ff:cb:dc:cb:fc:d4:44:bf:29:a3:9b:b1:6b:4f:5c:
         10:9a:6b:18:c4:53:63:6e:1c:3b:11:6e:19:95:73:31:a0:9f:
         ff:25:99:49:0a:36:16:aa:04:a8:39:ed:4e:63:a9:65:89:e8:
         7d:2b:c9:cc:b3:cf:ca:f6:ad:72:1a:85:5e:e4:fb:9f:dc:f5:
         63:1a:94:c0:47:5b:d7:0b:a9:bf:22:cf:b1:db:c5:9f:09:8d:
         ac:8c:a1:2d:aa:1b:99:ad:8a:27:f1:f1:ec:4f:11:a5:d6:cb:
         12:27:68:8b:32:44:2f:d3:27:be:3a:04:ed:a4:84:8e:1f:b8:
         28:9e:d9:57:60:ba:84:60:27:de:b5:50:c3:65:5b:24:3d:69:
         1d:e3:f6:4d:cd:9a:b5:48:3d:0d:68:08:cc:cf:90:0b:ee:6a:
         eb:62:0c:b0:31:a3:b1:e8:cf:4a:b2:77:02:35:7f:47:92:c6:
         d7:2d:37:cb:90:e3:d4:80:34:eb:1b:9b:ad:4a:34:bd:9c:dc:
         92:ca:3f:7c:b1:b2:b2:aa:39:cf:c4:96:35:6e:7a:8c:3a:44:
         a4:45:43:67:f9:47:71:ef:31:8b:26:f4:47:7d:1e:00:12:d6:
         87:e9:4d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:45:07 2026 by rpki-client