Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a/ac772392-4d48-3209-9774-c2c292191994.roa
File:                     ac772392-4d48-3209-9774-c2c292191994.roa (raw, json)
Hash identifier:          YmnUwOJvcDyjJBtDyCZKuPMAPESr+MTgKbTWSVFgDSY=
Subject key identifier:   6A:78:B9:49:21:D4:C3:BD:43:50:87:DF:39:A8:EB:D1:DB:58:48:0F
Certificate issuer:       /CN=e4592d18-89a2-4b31-a14b-b5ea3eae2c4a
Certificate serial:       010D0C9F4328584B5571DAF56A034101F7939B00
Authority key identifier: 87:5F:A2:FF:E5:93:3B:B5:16:DE:44:BF:B9:3E:AF:BF:FD:FD:59:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a/ac772392-4d48-3209-9774-c2c292191994.roa
Signing time:             Sat 27 Sep 2025 13:00:41 +0000
ROA not before:           Sat 27 Sep 2025 13:00:41 +0000
ROA not after:            Fri 26 Dec 2025 14:00:41 +0000
asID:                     53755
IP address blocks:        23.226.64.0/20 maxlen: 32
                          104.161.16.0/20 maxlen: 32
                          104.161.32.0/19 maxlen: 32
                          104.161.64.0/18 maxlen: 32
                          107.167.64.0/19 maxlen: 32
                          107.178.64.0/18 maxlen: 32
                          107.189.128.0/18 maxlen: 32
                          148.163.0.0/17 maxlen: 32
                          162.213.208.0/22 maxlen: 32
                          162.218.112.0/21 maxlen: 32
                          184.164.64.0/19 maxlen: 32
                          192.30.136.0/22 maxlen: 32
                          192.110.160.0/21 maxlen: 32
                          199.231.84.0/22 maxlen: 32
                          2604:6280::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:55:71:da:f5:6a:03:41:01:f7:93:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4592d18-89a2-4b31-a14b-b5ea3eae2c4a
        Validity
            Not Before: Sep 27 13:00:41 2025 GMT
            Not After : Dec 26 14:00:41 2025 GMT
        Subject: CN=cbf36a98-0968-4509-a5ac-0b42851e03bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0c:28:04:53:fc:d7:01:86:a2:8b:39:46:7e:
                    5d:a1:90:bd:d4:74:38:a8:e3:27:fd:96:90:0e:d3:
                    aa:d2:78:d5:93:9e:d7:ef:bc:97:f4:bc:ba:61:34:
                    3d:77:a2:3a:59:a0:6e:ac:78:48:ff:c5:e1:79:db:
                    2e:cc:d3:a2:e2:27:08:5a:ab:6d:c4:f6:31:44:51:
                    fd:23:89:9c:6c:62:9c:6b:c9:81:33:53:1c:47:29:
                    9c:6f:82:c4:78:7a:cb:32:fe:b0:52:9d:09:9e:f0:
                    aa:f5:c7:ad:a4:e1:42:b9:62:af:65:5a:67:80:d9:
                    2a:e3:3e:d1:f2:e0:5d:14:d1:94:f8:e4:75:83:2b:
                    bf:da:47:3d:bc:de:41:b3:3c:28:85:38:ec:c2:f2:
                    88:d6:8f:7a:5a:d2:18:11:f9:4e:25:5b:a8:5f:c6:
                    70:38:54:e9:ca:ba:ba:70:91:d6:24:ab:18:95:e3:
                    7f:00:41:4e:e5:3d:a3:ae:88:4e:4a:78:ad:fe:00:
                    1a:f7:23:92:4c:74:c5:50:be:3d:76:31:97:7e:45:
                    dd:b7:dc:53:60:27:4c:bd:0e:44:05:01:56:d3:82:
                    b8:0a:5f:ec:fc:62:72:a9:93:04:a8:10:a6:da:04:
                    e1:44:ff:d1:89:17:41:55:7e:12:9a:6c:c4:13:da:
                    c0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:78:B9:49:21:D4:C3:BD:43:50:87:DF:39:A8:EB:D1:DB:58:48:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a/ac772392-4d48-3209-9774-c2c292191994.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a.crl

            X509v3 Authority Key Identifier:
                keyid:87:5F:A2:FF:E5:93:3B:B5:16:DE:44:BF:B9:3E:AF:BF:FD:FD:59:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.226.64.0/20
                  104.161.16.0-104.161.127.255
                  107.167.64.0/19
                  107.178.64.0/18
                  107.189.128.0/18
                  148.163.0.0/17
                  162.213.208.0/22
                  162.218.112.0/21
                  184.164.64.0/19
                  192.30.136.0/22
                  192.110.160.0/21
                  199.231.84.0/22
                IPv6:
                  2604:6280::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:d6:2b:5e:dd:62:d5:ff:1f:92:4a:9c:0d:14:5d:e6:a1:63:
         b5:1c:b2:d3:3e:a7:b8:34:e2:97:5c:e3:06:7f:c3:48:17:1e:
         87:aa:9d:a0:a7:2f:6e:22:36:da:ef:0a:fa:c5:c6:46:1b:06:
         18:7a:9e:13:0e:68:6e:f1:5f:86:57:2f:9d:4a:91:82:00:ce:
         e7:82:09:9c:8d:f1:d4:38:43:c2:d5:b6:61:b7:db:1d:54:25:
         e9:77:4d:42:32:53:c2:fa:6d:6b:39:f0:6b:fe:27:89:f6:65:
         e5:97:89:e2:92:a2:7d:a2:b7:0b:30:b2:e5:84:43:ff:62:b6:
         47:22:f1:ed:1d:52:2d:67:ba:17:3b:19:02:32:c1:07:83:d5:
         60:e6:e7:87:15:74:12:9e:26:87:e2:8a:51:47:65:1e:0b:86:
         61:e0:f6:fa:82:5a:c3:df:fb:3c:cf:6a:54:5f:2e:39:d7:ef:
         05:b3:71:d3:56:2b:92:4c:70:16:3a:10:b6:d1:7b:5d:44:ca:
         24:67:c2:25:a3:43:d6:bc:99:6d:55:3b:aa:20:f6:a3:ac:70:
         16:e6:15:a9:c4:0a:7d:d3:d0:49:cf:5a:8b:99:83:d3:c1:95:
         ad:67:71:3a:c7:0c:c4:77:cb:fd:0f:aa:01:35:d1:bd:b2:4c:
         f1:75:07:ca
-----BEGIN CERTIFICATE-----
MIIGnDCCBYSgAwIBAgIUAQ0Mn0MoWEtVcdr1agNBAfeTmwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTQ1OTJkMTgtODlhMi00YjMxLWExNGItYjVlYTNlYWUy
YzRhMB4XDTI1MDkyNzEzMDA0MVoXDTI1MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk
Y2JmMzZhOTgtMDk2OC00NTA5LWE1YWMtMGI0Mjg1MWUwM2JjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgwoBFP81wGGoos5Rn5doZC91HQ4qOMn/ZaQ
DtOq0njVk57X77yX9Ly6YTQ9d6I6WaBurHhI/8XhedsuzNOi4icIWqttxPYxRFH9
I4mcbGKca8mBM1McRymcb4LEeHrLMv6wUp0JnvCq9cetpOFCuWKvZVpngNkq4z7R
8uBdFNGU+OR1gyu/2kc9vN5BszwohTjswvKI1o96WtIYEflOJVuoX8ZwOFTpyrq6
cJHWJKsYleN/AEFO5T2jrohOSnit/gAa9yOSTHTFUL49djGXfkXdt9xTYCdMvQ5E
BQFW04K4Cl/s/GJyqZMEqBCm2gThRP/RiRdBVX4SmmzEE9rA7QIDAQABo4IDrjCC
A6owHQYDVR0OBBYEFGp4uUkh1MO9Q1CH3zmo69HbWEgPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lNDU5
MmQxOC04OWEyLTRiMzEtYTE0Yi1iNWVhM2VhZTJjNGEvYWM3NzIzOTItNGQ0OC0z
MjA5LTk3NzQtYzJjMjkyMTkxOTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTQ1OTJkMTgtODlhMi00YjMxLWEx
NGItYjVlYTNlYWUyYzRhL2U0NTkyZDE4LTg5YTItNGIzMS1hMTRiLWI1ZWEzZWFl
MmM0YS5jcmwwHwYDVR0jBBgwFoAUh1+i/+WTO7UW3kS/uT6vv/39WYUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9lNDU5MmQxOC04OWEyLTRiMzEtYTE0Yi1iNWVh
M2VhZTJjNGEuY2VyMHgGCCsGAQUFBwEHAQH/BGkwZzBWBAIAATBQAwQEF+JAMAwD
BARooRADBAdooQADBAVrp0ADBAZrskADBAZrvYADBAeUowADBAKi1dADBAOi2nAD
BAW4pEADBALAHogDBAPAbqADBALH51QwDQQCAAIwBwMFACYEYoAwVAYDVR0gAQH/
BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu
Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA
LtYrXt1i1f8fkkqcDRRd5qFjtRyy0z6nuDTil1zjBn/DSBceh6qdoKcvbiI22u8K
+sXGRhsGGHqeEw5obvFfhlcvnUqRggDO54IJnI3x1DhDwtW2YbfbHVQl6XdNQjJT
wvptaznwa/4nifZl5ZeJ4pKifaK3CzCy5YRD/2K2RyLx7R1SLWe6FzsZAjLBB4PV
YObnhxV0Ep4mh+KKUUdlHguGYeD2+oJaw9/7PM9qVF8uOdfvBbNx01YrkkxwFjoQ
ttF7XUTKJGfCJaND1ryZbVU7qiD2o6xwFuYVqcQKfdPQSc9ai5mD08GVrWdxOscM
xHfL/Q+qATXRvbJM8XUHyg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:44:36 2025 by rpki-client