Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a982ba86-4539-496c-9996-6604c08fd13d/46b3da3d-7ce6-3dad-886e-7d5421e2fb11.roa
File:                     46b3da3d-7ce6-3dad-886e-7d5421e2fb11.roa (raw, json)
Hash identifier:          qXnPSCnET8bkOC31cqETtttDYy8rLKL9WDBBkmJu3OY=
Subject key identifier:   48:7F:99:D6:F3:32:93:22:0C:E6:CE:04:90:30:3A:25:13:E4:11:27
Certificate issuer:       /CN=a982ba86-4539-496c-9996-6604c08fd13d
Certificate serial:       010D0C9F4328584F42B126BFEA2C3450D61CCC00
Authority key identifier: 1E:22:FF:91:9C:67:D9:1C:F9:A2:FB:D7:8B:E9:82:F2:44:40:50:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a982ba86-4539-496c-9996-6604c08fd13d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a982ba86-4539-496c-9996-6604c08fd13d/46b3da3d-7ce6-3dad-886e-7d5421e2fb11.roa
Signing time:             Tue 22 Sep 2026 14:55:44 +0000
ROA not before:           Tue 22 Sep 2026 14:55:44 +0000
ROA not after:            Sun 20 Dec 2026 16:33:29 +0000
asID:                     23481
IP address blocks:        64.127.200.0/22 maxlen: 22
                          64.127.204.0/24 maxlen: 24
                          64.127.205.0/24 maxlen: 24
                          64.127.206.0/24 maxlen: 24
                          64.127.207.0/24 maxlen: 24
                          69.4.48.0/22 maxlen: 22
                          69.4.52.0/22 maxlen: 22
                          69.4.56.0/22 maxlen: 22
                          69.4.60.0/22 maxlen: 22
                          72.12.112.0/21 maxlen: 21
                          72.12.120.0/22 maxlen: 22
                          72.12.124.0/22 maxlen: 22
                          98.143.176.0/22 maxlen: 22
                          98.143.180.0/22 maxlen: 22
                          104.161.0.0/23 maxlen: 23
                          104.161.2.0/23 maxlen: 23
                          104.161.3.0/24 maxlen: 24
                          104.161.4.0/23 maxlen: 23
                          104.161.6.0/23 maxlen: 23
                          152.228.40.0/23 maxlen: 23
                          152.228.42.0/23 maxlen: 23
                          152.228.44.0/23 maxlen: 23
                          152.228.46.0/23 maxlen: 23
                          159.242.252.0/22 maxlen: 22
                          170.76.184.0/22 maxlen: 22
                          173.224.0.0/21 maxlen: 21
                          173.224.8.0/21 maxlen: 21
                          192.170.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a982ba86-4539-496c-9996-6604c08fd13d/a982ba86-4539-496c-9996-6604c08fd13d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a982ba86-4539-496c-9996-6604c08fd13d/a982ba86-4539-496c-9996-6604c08fd13d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a982ba86-4539-496c-9996-6604c08fd13d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:42:b1:26:bf:ea:2c:34:50:d6:1c:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a982ba86-4539-496c-9996-6604c08fd13d
        Validity
            Not Before: Sep 22 14:55:44 2026 GMT
            Not After : Dec 20 16:33:29 2026 GMT
        Subject: CN=72a1939c-63b1-46b8-8ca3-ae29db02c51f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:02:bb:ec:47:55:38:6b:4c:f6:e5:b8:5e:a1:
                    8d:c1:e9:11:8c:45:6a:76:4b:6e:47:9f:c4:ff:cd:
                    da:d8:ab:fb:a8:78:af:64:46:aa:f1:56:5c:66:d4:
                    be:e7:21:28:24:90:6b:44:46:c1:69:8f:6b:21:df:
                    25:db:39:08:c2:7d:21:08:0b:c4:bb:e7:98:fe:b5:
                    9c:d2:63:4d:96:8b:9d:53:94:d4:ef:07:b9:b4:61:
                    3b:98:e5:92:a4:16:57:d3:0a:a9:2e:33:47:bd:b1:
                    f3:2d:de:11:45:8b:7e:ef:b1:af:15:f0:d5:bd:c0:
                    6f:98:c8:ad:9b:8c:ca:b7:14:02:d8:0b:85:37:8e:
                    f7:7a:43:fa:e0:d6:0a:e2:0a:5c:ac:4f:11:49:4f:
                    cb:85:39:5c:35:ad:cc:0f:3b:2b:f8:90:1e:f7:9c:
                    ef:cc:23:2e:87:f3:9d:4a:fc:13:fa:ad:42:d7:30:
                    ce:11:e3:53:a0:f3:1a:65:49:29:e8:af:e6:9b:00:
                    50:c6:a5:62:d7:38:2b:b1:3a:f1:c3:d4:8a:1b:11:
                    b7:ab:dd:f9:00:2f:08:a3:6e:51:6d:ba:33:8e:6a:
                    c9:08:19:ab:de:64:3f:4c:a2:de:a3:0c:56:69:8b:
                    ef:44:fe:3b:7a:4b:60:6b:70:ca:0b:a9:44:54:38:
                    29:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:7F:99:D6:F3:32:93:22:0C:E6:CE:04:90:30:3A:25:13:E4:11:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a982ba86-4539-496c-9996-6604c08fd13d/46b3da3d-7ce6-3dad-886e-7d5421e2fb11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a982ba86-4539-496c-9996-6604c08fd13d/a982ba86-4539-496c-9996-6604c08fd13d.crl

            X509v3 Authority Key Identifier:
                keyid:1E:22:FF:91:9C:67:D9:1C:F9:A2:FB:D7:8B:E9:82:F2:44:40:50:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a982ba86-4539-496c-9996-6604c08fd13d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.127.200.0/21
                  69.4.48.0/20
                  72.12.112.0/20
                  98.143.176.0/21
                  104.161.0.0/21
                  152.228.40.0/21
                  159.242.252.0/22
                  170.76.184.0/22
                  173.224.0.0/20
                  192.170.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:cb:80:ed:1c:59:ed:c1:29:86:bb:8d:cc:6b:39:bd:bc:03:
         e1:48:da:df:fb:9d:0d:5e:a8:30:2d:a7:1e:19:a5:77:83:d7:
         29:2b:bf:7f:4b:30:db:c3:eb:c9:12:f0:43:c3:25:ac:8b:7d:
         98:79:fa:0a:f7:8b:b0:7c:04:dd:f9:c0:7c:b6:78:bd:df:04:
         29:78:62:bf:e9:40:1b:5f:44:54:c9:42:89:03:20:8e:a3:22:
         a0:ff:8e:47:30:3d:36:6f:12:7c:50:ba:02:ec:1a:47:2f:ad:
         4d:64:bd:3f:31:af:d7:c4:0c:7b:02:d7:8b:df:91:25:20:9d:
         18:79:00:55:cd:34:3b:a6:3a:a0:ef:1f:6a:f2:22:f8:7a:d9:
         4f:4a:6f:e9:56:04:3e:f5:02:01:d9:67:4d:28:1a:07:a5:d6:
         57:e8:14:fe:0a:48:80:fe:09:c2:2a:d4:53:6b:96:82:47:8e:
         9c:80:77:4f:bf:c6:2c:cc:44:cb:98:b9:38:db:cc:b6:ed:8b:
         7b:af:da:0e:7f:a8:73:15:1b:a0:c2:a9:1a:a1:ae:98:08:bb:
         af:58:db:d1:25:4e:87:f0:fb:16:1c:c8:f7:a4:18:df:c8:a2:
         7c:5f:de:f6:8d:50:60:02:3b:b2:47:48:76:bb:5a:c9:b0:f0:
         fd:33:ce:de
-----BEGIN CERTIFICATE-----
MIIGeTCCBWGgAwIBAgIUAQ0Mn0MoWE9CsSa/6iw0UNYczAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTk4MmJhODYtNDUzOS00OTZjLTk5OTYtNjYwNGMwOGZk
MTNkMB4XDTI2MDkyMjE0NTU0NFoXDTI2MTIyMDE2MzMyOVowLzEtMCsGA1UEAxMk
NzJhMTkzOWMtNjNiMS00NmI4LThjYTMtYWUyOWRiMDJjNTFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwK77EdVOGtM9uW4XqGNwekRjEVqdktuR5/E
/83a2Kv7qHivZEaq8VZcZtS+5yEoJJBrREbBaY9rId8l2zkIwn0hCAvEu+eY/rWc
0mNNloudU5TU7we5tGE7mOWSpBZX0wqpLjNHvbHzLd4RRYt+77GvFfDVvcBvmMit
m4zKtxQC2AuFN473ekP64NYK4gpcrE8RSU/LhTlcNa3MDzsr+JAe95zvzCMuh/Od
SvwT+q1C1zDOEeNToPMaZUkp6K/mmwBQxqVi1zgrsTrxw9SKGxG3q935AC8Io25R
bbozjmrJCBmr3mQ/TKLeowxWaYvvRP47ektga3DKC6lEVDgpKQIDAQABo4IDizCC
A4cwHQYDVR0OBBYEFEh/mdbzMpMiDObOBJAwOiUT5BEnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9hOTgy
YmE4Ni00NTM5LTQ5NmMtOTk5Ni02NjA0YzA4ZmQxM2QvNDZiM2RhM2QtN2NlNi0z
ZGFkLTg4NmUtN2Q1NDIxZTJmYjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l
ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvYTk4MmJhODYtNDUzOS00OTZjLTk5
OTYtNjYwNGMwOGZkMTNkL2E5ODJiYTg2LTQ1MzktNDk2Yy05OTk2LTY2MDRjMDhm
ZDEzZC5jcmwwHwYDVR0jBBgwFoAUHiL/kZxn2Rz5ovvXi+mC8kRAUG0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx
OS04NmJkLWRlZjJjYTNhZDkxOS9hOTgyYmE4Ni00NTM5LTQ5NmMtOTk5Ni02NjA0
YzA4ZmQxM2QuY2VyMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQDQH/IAwQE
RQQwAwQESAxwAwQDYo+wAwQDaKEAAwQDmOQoAwQCn/L8AwQCqky4AwQEreAAAwQC
wKqEMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAE/LgO0cWe3BKYa7jcxrOb28A+FI2t/7nQ1eqDAtpx4ZpXeD
1ykrv39LMNvD68kS8EPDJayLfZh5+gr3i7B8BN35wHy2eL3fBCl4Yr/pQBtfRFTJ
QokDII6jIqD/jkcwPTZvEnxQugLsGkcvrU1kvT8xr9fEDHsC14vfkSUgnRh5AFXN
NDumOqDvH2ryIvh62U9Kb+lWBD71AgHZZ00oGgel1lfoFP4KSID+CcIq1FNrloJH
jpyAd0+/xizMRMuYuTjbzLbti3uv2g5/qHMVG6DCqRqhrpgIu69Y29ElTofw+xYc
yPekGN/Ionxf3vaNUGACO7JHSHa7Wsmw8P0zzt4=
-----END CERTIFICATE-----
Generated at Fri Oct 2 02:54:04 2026 by rpki-client