Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/bb330b77-f6a5-3349-83dd-00364aa65fa2.roa
File:                     bb330b77-f6a5-3349-83dd-00364aa65fa2.roa (raw, json)
Hash identifier:          4u6/m1jlr1nSXccgt1FWZb57STcIXS0qMl3xX90ZQV8=
Subject key identifier:   17:A9:F1:8C:24:7E:45:07:47:E3:F3:45:8E:8D:0A:DA:91:61:BD:CD
Certificate issuer:       /CN=835152c2-2ed8-4151-8f82-ac9407335b2c
Certificate serial:       010D0C9F4328584B4E770AAA68A37DB856CE3A00
Authority key identifier: 8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/bb330b77-f6a5-3349-83dd-00364aa65fa2.roa
Signing time:             Thu 25 Sep 2025 01:00:33 +0000
ROA not before:           Thu 25 Sep 2025 01:00:33 +0000
ROA not after:            Wed 24 Dec 2025 02:00:33 +0000
asID:                     396982
IP address blocks:        50.116.64.0/23 maxlen: 23
                          50.116.66.0/23 maxlen: 23
                          50.116.68.0/22 maxlen: 22
                          50.116.80.0/22 maxlen: 22
                          50.116.84.0/23 maxlen: 23
                          50.116.86.0/23 maxlen: 23
                          50.116.88.0/22 maxlen: 22
                          50.116.92.0/22 maxlen: 22
                          50.116.112.0/23 maxlen: 23
                          50.116.124.0/22 maxlen: 22
                          96.125.162.0/23 maxlen: 23
                          96.125.174.0/23 maxlen: 23
                          108.167.132.0/24 maxlen: 24
                          108.167.133.0/24 maxlen: 24
                          108.167.140.0/22 maxlen: 22
                          108.167.144.0/23 maxlen: 23
                          108.167.146.0/23 maxlen: 23
                          108.167.148.0/23 maxlen: 23
                          108.167.151.0/24 maxlen: 24
                          108.167.152.0/22 maxlen: 22
                          108.167.156.0/22 maxlen: 22
                          108.167.164.0/23 maxlen: 23
                          108.167.166.0/24 maxlen: 24
                          108.167.168.0/22 maxlen: 22
                          108.167.188.0/24 maxlen: 24
                          108.167.190.0/23 maxlen: 23
                          108.179.192.0/23 maxlen: 23
                          108.179.194.0/24 maxlen: 24
                          108.179.200.0/23 maxlen: 23
                          108.179.212.0/22 maxlen: 22
                          108.179.228.0/22 maxlen: 22
                          108.179.241.0/24 maxlen: 24
                          108.179.242.0/23 maxlen: 23
                          108.179.246.0/23 maxlen: 23
                          108.179.252.0/23 maxlen: 23
                          108.179.254.0/24 maxlen: 24
                          192.185.2.0/23 maxlen: 23
                          192.185.4.0/23 maxlen: 23
                          192.185.12.0/22 maxlen: 22
                          192.185.16.0/21 maxlen: 21
                          192.185.24.0/21 maxlen: 21
                          192.185.32.0/20 maxlen: 20
                          192.185.48.0/21 maxlen: 21
                          192.185.56.0/23 maxlen: 23
                          192.185.58.0/23 maxlen: 23
                          192.185.60.0/22 maxlen: 22
                          192.185.64.0/21 maxlen: 21
                          192.185.72.0/21 maxlen: 21
                          192.185.81.0/24 maxlen: 24
                          192.185.82.0/23 maxlen: 23
                          192.185.84.0/22 maxlen: 22
                          192.185.88.0/21 maxlen: 21
                          192.185.96.0/21 maxlen: 21
                          192.185.104.0/21 maxlen: 21
                          192.185.112.0/21 maxlen: 21
                          192.185.120.0/21 maxlen: 21
                          192.185.129.0/24 maxlen: 24
                          192.185.131.0/24 maxlen: 24
                          192.185.132.0/23 maxlen: 23
                          192.185.136.0/21 maxlen: 21
                          192.185.179.0/24 maxlen: 24
                          192.185.180.0/22 maxlen: 22
                          192.185.184.0/21 maxlen: 21
                          192.185.192.0/21 maxlen: 21
                          192.185.202.0/23 maxlen: 23
                          192.232.216.0/21 maxlen: 21
                          192.254.224.0/20 maxlen: 20
                          192.254.250.0/23 maxlen: 23
                          216.172.168.0/23 maxlen: 23
                          216.172.172.0/23 maxlen: 23
                          216.172.175.0/24 maxlen: 24
                          216.172.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4e:77:0a:aa:68:a3:7d:b8:56:ce:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835152c2-2ed8-4151-8f82-ac9407335b2c
        Validity
            Not Before: Sep 25 01:00:33 2025 GMT
            Not After : Dec 24 02:00:33 2025 GMT
        Subject: CN=7d4d4360-623e-4506-ae44-7e6e0e5bdfa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:39:6f:b1:6e:f4:ca:e2:cd:7a:42:db:e0:37:
                    0e:da:c3:97:1e:b4:d0:84:39:16:b9:f5:81:45:6d:
                    0e:0e:53:7f:34:32:27:87:7b:af:e4:f5:aa:13:d0:
                    dd:1c:6b:22:cb:ee:ee:1d:a7:97:d2:06:96:39:ec:
                    cc:26:62:56:3b:24:f4:44:aa:20:f1:1b:76:af:d2:
                    cc:b9:48:7a:95:bd:e2:5c:92:94:29:dd:22:c6:46:
                    8e:9d:ea:17:1c:3e:52:97:72:91:f4:42:eb:a4:48:
                    dd:c3:72:8f:06:66:a7:29:c6:38:02:76:c8:a8:21:
                    dd:cc:e9:6f:dc:a0:c3:7c:f3:86:72:91:d4:c8:f2:
                    d6:60:2b:7b:e1:c1:7e:d1:41:1f:c2:c6:98:42:a7:
                    a1:ea:7e:f7:ce:c7:0a:d4:f9:3a:fa:12:3b:38:17:
                    3f:21:72:d7:aa:8e:66:75:02:42:80:0f:a1:dc:a4:
                    3a:a8:38:52:45:9f:62:0c:20:36:94:ca:b8:55:ca:
                    d3:4e:27:4d:6a:08:5c:c8:92:3b:e8:ad:dd:af:98:
                    b3:52:08:6f:a3:f6:62:1a:6b:f0:74:b3:1c:69:2c:
                    c1:25:60:45:b7:cf:d6:ee:e5:9c:74:54:43:27:82:
                    79:d2:58:39:0b:a7:c6:00:d4:6e:89:d9:c1:49:5e:
                    47:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:A9:F1:8C:24:7E:45:07:47:E3:F3:45:8E:8D:0A:DA:91:61:BD:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/bb330b77-f6a5-3349-83dd-00364aa65fa2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.116.64.0/21
                  50.116.80.0/20
                  50.116.112.0/23
                  50.116.124.0/22
                  96.125.162.0/23
                  96.125.174.0/23
                  108.167.132.0/23
                  108.167.140.0-108.167.149.255
                  108.167.151.0-108.167.159.255
                  108.167.164.0-108.167.166.255
                  108.167.168.0/22
                  108.167.188.0/24
                  108.167.190.0/23
                  108.179.192.0-108.179.194.255
                  108.179.200.0/23
                  108.179.212.0/22
                  108.179.228.0/22
                  108.179.241.0-108.179.243.255
                  108.179.246.0/23
                  108.179.252.0-108.179.254.255
                  192.185.2.0-192.185.5.255
                  192.185.12.0-192.185.79.255
                  192.185.81.0-192.185.127.255
                  192.185.129.0/24
                  192.185.131.0-192.185.133.255
                  192.185.136.0/21
                  192.185.179.0-192.185.199.255
                  192.185.202.0/23
                  192.232.216.0/21
                  192.254.224.0/20
                  192.254.250.0/23
                  216.172.168.0/23
                  216.172.172.0/23
                  216.172.175.0/24
                  216.172.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:0d:79:d0:d1:5d:88:27:b3:f7:8a:46:d8:f6:9d:2c:a2:99:
         6c:79:94:c4:54:ce:84:4e:a7:6d:f5:e3:79:06:59:a3:87:fa:
         8a:a4:bb:85:41:ca:dd:a1:f9:83:0b:fe:fd:4d:03:c8:da:a4:
         00:77:14:c3:5d:86:51:2c:c9:18:e9:b6:b9:2f:ca:d1:e2:13:
         ee:fe:f2:4d:bb:34:40:0c:e9:71:76:fb:79:a9:3b:b2:09:45:
         cc:20:aa:9a:bb:b3:68:39:4d:7f:c1:32:de:b2:19:93:8c:5a:
         b2:d6:88:07:4a:19:bd:26:26:84:88:70:2c:52:ef:36:e0:da:
         91:98:90:27:c0:13:2b:55:12:2b:f7:62:28:64:eb:46:1e:f9:
         6f:97:6f:f8:7d:7f:38:9e:a7:f7:53:a4:30:74:b2:ff:9e:78:
         2e:0f:65:3d:c2:65:6d:c9:21:c9:2b:7a:0e:82:b4:8d:d2:5a:
         a0:d7:24:55:0a:bb:07:62:a2:09:f7:18:21:91:91:56:d8:b6:
         fe:ff:86:5f:90:5b:0b:82:67:60:5a:06:89:65:1c:ff:86:4a:
         e9:45:c9:78:23:1d:55:e4:9d:90:a2:29:81:47:84:3a:cc:00:
         84:e6:de:1d:44:cf:19:93:06:3f:be:db:83:54:7d:93:d3:b4:
         2e:2a:93:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:44:07 2025 by rpki-client