Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/e422d3a4-7ed0-30a2-b306-a0e19fdd800b.roa
File:                     e422d3a4-7ed0-30a2-b306-a0e19fdd800b.roa (raw, json)
Hash identifier:          S2DiqLm9/P3m3E+ZMaN0tjJEfduwUdtHHSsbm5HlJrM=
Subject key identifier:   F2:F9:60:6F:4D:00:77:57:83:C8:04:4D:B0:28:91:0F:47:FC:7D:49
Certificate issuer:       /CN=abf1f0ec-0f56-4356-9ce5-9c637405f386
Certificate serial:       010D0C9F4328584D07ACEB060580DEDF4D4A9980
Authority key identifier: 97:4B:C9:47:24:F4:DD:06:50:DF:1D:2A:91:89:75:26:29:90:DA:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/e422d3a4-7ed0-30a2-b306-a0e19fdd800b.roa
Signing time:             Mon 02 Mar 2026 02:00:31 +0000
ROA not before:           Mon 02 Mar 2026 02:00:31 +0000
ROA not after:            Sun 31 May 2026 01:00:31 +0000
asID:                     22423
IP address blocks:        24.231.96.0/20 maxlen: 22
                          45.42.72.0/21 maxlen: 21
                          45.58.96.0/20 maxlen: 20
                          65.38.64.0/19 maxlen: 19
                          69.9.64.0/18 maxlen: 22
                          104.159.0.0/22 maxlen: 22
                          104.159.0.0/24 maxlen: 24
                          104.159.4.0/22 maxlen: 22
                          104.159.20.0/22 maxlen: 22
                          104.159.32.0/19 maxlen: 19
                          104.159.64.0/22 maxlen: 22
                          104.159.108.0/22 maxlen: 22
                          104.159.112.0/22 maxlen: 22
                          104.159.116.0/22 maxlen: 22
                          104.159.120.0/23 maxlen: 23
                          104.159.122.0/23 maxlen: 23
                          104.159.124.0/22 maxlen: 22
                          104.244.64.0/22 maxlen: 22
                          138.229.16.0/20 maxlen: 20
                          144.208.96.0/22 maxlen: 22
                          144.208.100.0/22 maxlen: 22
                          144.208.112.0/22 maxlen: 22
                          160.20.232.0/22 maxlen: 22
                          166.48.158.0/24 maxlen: 24
                          166.48.160.0/23 maxlen: 23
                          166.48.188.0/22 maxlen: 22
                          166.48.192.0/19 maxlen: 19
                          166.48.232.0/21 maxlen: 21
                          166.48.254.0/24 maxlen: 24
                          170.100.208.0/22 maxlen: 22
                          170.100.212.0/22 maxlen: 22
                          180.181.160.0/19 maxlen: 19
                          192.214.128.0/20 maxlen: 20
                          192.214.144.0/20 maxlen: 20
                          192.214.224.0/19 maxlen: 19
                          192.214.255.0/24 maxlen: 24
                          199.189.76.0/22 maxlen: 22
                          199.241.128.0/21 maxlen: 21
                          199.241.128.0/23 maxlen: 23
                          199.241.130.0/23 maxlen: 23
                          199.241.132.0/23 maxlen: 23
                          199.241.134.0/23 maxlen: 23
                          205.233.150.0/24 maxlen: 24
                          205.236.43.0/24 maxlen: 24
                          205.236.80.0/24 maxlen: 24
                          205.236.89.0/24 maxlen: 24
                          205.236.120.0/22 maxlen: 22
                          205.236.120.0/24 maxlen: 24
                          205.236.121.0/24 maxlen: 24
                          205.236.122.0/23 maxlen: 23
                          205.236.226.0/24 maxlen: 24
                          206.180.240.0/20 maxlen: 20
                          206.180.240.0/23 maxlen: 23
                          206.180.242.0/23 maxlen: 23
                          206.180.244.0/23 maxlen: 23
                          206.180.246.0/23 maxlen: 23
                          206.180.248.0/23 maxlen: 23
                          206.180.250.0/23 maxlen: 23
                          206.180.252.0/23 maxlen: 23
                          206.180.254.0/23 maxlen: 23
                          209.182.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/abf1f0ec-0f56-4356-9ce5-9c637405f386.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/abf1f0ec-0f56-4356-9ce5-9c637405f386.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:07:ac:eb:06:05:80:de:df:4d:4a:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf1f0ec-0f56-4356-9ce5-9c637405f386
        Validity
            Not Before: Mar  2 02:00:31 2026 GMT
            Not After : May 31 01:00:31 2026 GMT
        Subject: CN=235c41ea-fe42-4af6-8356-54c33d011e41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:87:61:ba:2e:41:6b:df:ad:1a:b7:77:41:9b:
                    06:7e:f1:cb:b7:8c:e4:07:3a:7c:92:f5:d0:38:7c:
                    0d:56:0b:eb:a1:5e:36:49:70:fc:17:51:1f:3a:7f:
                    65:ad:7b:e5:86:cc:f1:54:a6:a7:74:0a:7c:a0:db:
                    7e:e0:fd:95:0f:50:cf:7e:1c:22:fb:81:6e:2d:ba:
                    66:9b:d2:a7:37:bc:3e:86:77:fe:37:80:61:ee:0d:
                    de:6c:75:91:6f:b7:4e:55:ef:66:a5:c7:86:3e:03:
                    a3:12:42:98:8b:c0:46:e4:d5:d8:17:2c:97:76:79:
                    cb:e7:11:28:11:44:a2:ad:46:8a:9e:a2:ee:9f:5e:
                    4c:a4:5e:4a:26:61:8c:07:eb:56:80:3f:ad:88:40:
                    53:8e:bb:79:86:d8:ba:92:62:ec:c6:3f:39:eb:fd:
                    37:2a:5f:06:c3:ab:c0:5d:11:56:ba:31:ee:e0:cd:
                    e6:20:38:da:cb:70:08:40:f8:dd:26:b0:c0:e0:5a:
                    db:ef:0f:07:bb:ad:d9:83:f5:fd:14:10:9f:a5:ef:
                    4b:49:ef:bc:2f:b2:48:ee:56:62:5f:75:d0:4f:ff:
                    6d:dc:4a:53:d8:82:54:8b:19:5a:5d:9d:f0:22:8e:
                    89:65:79:7a:a5:8f:66:75:e1:36:c2:33:7f:e0:9e:
                    32:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:F9:60:6F:4D:00:77:57:83:C8:04:4D:B0:28:91:0F:47:FC:7D:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/e422d3a4-7ed0-30a2-b306-a0e19fdd800b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/abf1f0ec-0f56-4356-9ce5-9c637405f386.crl

            X509v3 Authority Key Identifier:
                keyid:97:4B:C9:47:24:F4:DD:06:50:DF:1D:2A:91:89:75:26:29:90:DA:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.231.96.0/20
                  45.42.72.0/21
                  45.58.96.0/20
                  65.38.64.0/19
                  69.9.64.0/18
                  104.159.0.0/21
                  104.159.20.0/22
                  104.159.32.0-104.159.67.255
                  104.159.108.0-104.159.127.255
                  104.244.64.0/22
                  138.229.16.0/20
                  144.208.96.0/21
                  144.208.112.0/22
                  160.20.232.0/22
                  166.48.158.0/24
                  166.48.160.0/23
                  166.48.188.0-166.48.223.255
                  166.48.232.0/21
                  166.48.254.0/24
                  170.100.208.0/21
                  180.181.160.0/19
                  192.214.128.0/19
                  192.214.224.0/19
                  199.189.76.0/22
                  199.241.128.0/21
                  205.233.150.0/24
                  205.236.43.0/24
                  205.236.80.0/24
                  205.236.89.0/24
                  205.236.120.0/22
                  205.236.226.0/24
                  206.180.240.0/20
                  209.182.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:a8:b8:52:80:13:57:03:0e:de:6a:0b:d4:e7:32:5a:7b:cf:
         9d:62:08:93:ac:79:39:f5:67:76:57:30:d4:22:48:bc:73:41:
         ae:3e:c1:99:1d:19:38:c1:90:a5:77:fb:09:01:cb:1d:29:15:
         d0:9d:46:9c:c5:47:ed:e7:42:5f:ec:29:d9:f8:0e:72:7d:3e:
         65:77:5a:fc:68:08:e8:e3:3d:c3:76:7d:65:31:a5:4a:0c:90:
         3f:9f:44:7e:a5:27:a1:87:a5:86:50:17:1a:0b:30:68:49:2d:
         9c:91:ce:fc:3c:8d:85:52:fd:56:fc:61:0f:5e:4b:cf:c0:d3:
         6a:c7:2e:36:22:5f:72:a5:35:b4:17:d6:4c:30:c4:c7:a0:47:
         17:fc:f2:88:4f:94:d8:24:a0:6c:a3:b9:89:2f:22:8f:d0:c0:
         13:ba:5a:a4:2c:e9:15:d6:3c:a2:f1:6c:e1:de:6e:2d:1a:fd:
         e7:ff:93:c5:c9:f4:7e:eb:fb:bf:d7:70:53:8d:3f:d2:28:0d:
         ac:71:17:6f:40:7a:62:71:86:65:b1:cc:73:0a:6a:0c:ae:db:
         21:28:0c:e0:29:cf:ef:f0:49:b1:71:cb:f7:c5:b8:b6:8a:eb:
         ea:73:09:44:d4:2a:e2:2b:50:f6:c5:de:62:14:14:19:a9:6b:
         53:a7:f3:19
-----BEGIN CERTIFICATE-----
MIIHIDCCBgigAwIBAgIUAQ0Mn0MoWE0HrOsGBYDe301KmYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmMWYwZWMtMGY1Ni00MzU2LTljZTUtOWM2Mzc0MDVm
Mzg2MB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk
MjM1YzQxZWEtZmU0Mi00YWY2LTgzNTYtNTRjMzNkMDExZTQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA74dhui5Ba9+tGrd3QZsGfvHLt4zkBzp8kvXQ
OHwNVgvroV42SXD8F1EfOn9lrXvlhszxVKandAp8oNt+4P2VD1DPfhwi+4FuLbpm
m9KnN7w+hnf+N4Bh7g3ebHWRb7dOVe9mpceGPgOjEkKYi8BG5NXYFyyXdnnL5xEo
EUSirUaKnqLun15MpF5KJmGMB+tWgD+tiEBTjrt5hti6kmLsxj856/03Kl8Gw6vA
XRFWujHu4M3mIDjay3AIQPjdJrDA4Frb7w8Hu63Zg/X9FBCfpe9LSe+8L7JI7lZi
X3XQT/9t3EpT2IJUixlaXZ3wIo6JZXl6pY9mdeE2wjN/4J4yVwIDAQABo4IEMjCC
BC4wHQYDVR0OBBYEFPL5YG9NAHdXg8gETbAokQ9H/H1JMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYmYx
ZjBlYy0wZjU2LTQzNTYtOWNlNS05YzYzNzQwNWYzODYvZTQyMmQzYTQtN2VkMC0z
MGEyLWIzMDYtYTBlMTlmZGQ4MDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWJmMWYwZWMtMGY1Ni00MzU2LTlj
ZTUtOWM2Mzc0MDVmMzg2L2FiZjFmMGVjLTBmNTYtNDM1Ni05Y2U1LTljNjM3NDA1
ZjM4Ni5jcmwwHwYDVR0jBBgwFoAUl0vJRyT03QZQ3x0qkYl1JimQ2r4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hYmYxZjBlYy0wZjU2LTQzNTYtOWNlNS05YzYz
NzQwNWYzODYuY2VyMIH7BggrBgEFBQcBBwEB/wSB6zCB6DCB5QQCAAEwgd4DBAQY
52ADBAMtKkgDBAQtOmADBAVBJkADBAZFCUADBANonwADBAJonxQwDAMEBWifIAME
AmifQDAMAwQCaJ9sAwQHaJ8AAwQCaPRAAwQEiuUQAwQDkNBgAwQCkNBwAwQCoBTo
AwQApjCeAwQBpjCgMAwDBAKmMLwDBAWmMMADBAOmMOgDBACmMP4DBAOqZNADBAW0
taADBAXA1oADBAXA1uADBALHvUwDBAPH8YADBADN6ZYDBADN7CsDBADN7FADBADN
7FkDBALN7HgDBADN7OIDBATOtPADBADRtuQwVAYDVR0gAQH/BEowSDBGBggrBgEF
BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj
ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAHai4UoATVwMO3moL
1OcyWnvPnWIIk6x5OfVndlcw1CJIvHNBrj7BmR0ZOMGQpXf7CQHLHSkV0J1GnMVH
7edCX+wp2fgOcn0+ZXda/GgI6OM9w3Z9ZTGlSgyQP59EfqUnoYelhlAXGgswaEkt
nJHO/DyNhVL9VvxhD15Lz8DTascuNiJfcqU1tBfWTDDEx6BHF/zyiE+U2CSgbKO5
iS8ij9DAE7papCzpFdY8ovFs4d5uLRr95/+Txcn0fuv7v9dwU40/0igNrHEXb0B6
YnGGZbHMcwpqDK7bISgM4CnP7/BJsXHL98W4torr6nMJRNQq4itQ9sXeYhQUGalr
U6fzGQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:23:17 2026 by rpki-client