Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b/2c1c1bb6-2ab6-33ad-b7b1-ccc4cf4d0d78.roa
File:                     2c1c1bb6-2ab6-33ad-b7b1-ccc4cf4d0d78.roa (raw, json)
Hash identifier:          5/Hv+WsbMzoWslsNWjsDBdY+4bhJl2GqhNQuH4dAhi0=
Subject key identifier:   0E:35:DA:8F:A6:24:AE:B5:47:B7:C5:5E:D8:8D:8C:37:61:62:D1:E5
Certificate issuer:       /CN=480e68d2-5883-4233-9f17-992a2ca71e2b
Certificate serial:       010D0C9F4328584F4973D88B58ACCF20EC0DE900
Authority key identifier: 26:9B:1E:68:03:C3:09:69:E3:8A:E5:95:A7:3F:33:33:66:8A:5F:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b/2c1c1bb6-2ab6-33ad-b7b1-ccc4cf4d0d78.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     19531
IP address blocks:        23.92.80.0/20 maxlen: 24
                          23.239.64.0/19 maxlen: 24
                          107.155.128.0/19 maxlen: 24
                          162.216.0.0/22 maxlen: 24
                          162.216.152.0/21 maxlen: 24
                          184.175.192.0/18 maxlen: 24
                          199.48.160.0/21 maxlen: 24
                          208.84.132.0/22 maxlen: 24
                          2604:4600::/28 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b/480e68d2-5883-4233-9f17-992a2ca71e2b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b/480e68d2-5883-4233-9f17-992a2ca71e2b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:d8:8b:58:ac:cf:20:ec:0d:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=480e68d2-5883-4233-9f17-992a2ca71e2b
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=66e0060c-ef3a-43c2-87d7-5c83cb2cf4d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d3:2f:3e:4c:8b:28:b3:b9:b5:49:4b:9a:ef:
                    84:6f:96:04:f1:05:5a:e0:b1:72:ee:0d:88:df:6a:
                    26:44:e9:42:b1:6a:22:ca:23:66:f3:5f:66:3d:c3:
                    f0:76:79:fd:32:fe:88:21:11:66:44:e7:b0:d3:e1:
                    12:1d:d5:13:85:ed:e7:4b:82:b2:e9:89:f0:1b:19:
                    cf:af:32:16:ae:c9:99:0d:f9:f5:a2:e8:c3:f0:fb:
                    3c:aa:c1:fd:17:e3:3e:c4:12:c6:c3:66:a5:a4:31:
                    be:b8:3c:42:d5:97:7e:af:7a:5c:d0:9a:13:34:54:
                    60:62:8a:37:bc:78:7b:fc:cb:d2:0c:49:b9:8e:ba:
                    6e:43:c2:4a:68:85:f5:3e:26:cf:4c:93:10:90:56:
                    43:aa:1b:cc:6d:c3:e0:1a:96:89:17:0d:f6:55:5f:
                    de:f9:35:7f:24:0d:32:89:80:6b:f2:12:b7:59:fd:
                    78:38:19:48:81:41:c1:5a:51:5b:05:27:e9:e9:1b:
                    d4:3a:d0:73:f6:cd:9c:7d:9d:d6:a1:f2:0f:55:cc:
                    30:43:5b:77:6f:9f:6d:60:50:f4:07:83:73:85:be:
                    69:d5:8f:7b:b9:3f:b1:80:0a:f0:11:77:0f:35:ca:
                    f9:0e:e7:3f:cb:ea:68:8f:ef:2c:ac:78:48:59:b9:
                    37:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:35:DA:8F:A6:24:AE:B5:47:B7:C5:5E:D8:8D:8C:37:61:62:D1:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b/2c1c1bb6-2ab6-33ad-b7b1-ccc4cf4d0d78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b/480e68d2-5883-4233-9f17-992a2ca71e2b.crl

            X509v3 Authority Key Identifier:
                keyid:26:9B:1E:68:03:C3:09:69:E3:8A:E5:95:A7:3F:33:33:66:8A:5F:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.92.80.0/20
                  23.239.64.0/19
                  107.155.128.0/19
                  162.216.0.0/22
                  162.216.152.0/21
                  184.175.192.0/18
                  199.48.160.0/21
                  208.84.132.0/22
                IPv6:
                  2604:4600::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:32:b9:a3:c6:bc:25:34:38:02:99:76:a0:38:1b:86:07:34:
         26:67:38:a3:8a:2f:b3:21:ed:f5:9e:87:e0:ab:df:73:98:14:
         63:47:71:44:ec:ea:59:c5:53:93:b8:f9:a1:2d:33:41:54:67:
         ba:ec:b4:07:5d:71:5c:41:82:7d:f6:a6:dd:e4:95:1f:75:02:
         48:00:dc:39:2b:7d:90:ff:8f:48:01:b1:82:15:65:29:2c:10:
         40:f4:70:dd:55:70:1d:89:e1:43:78:d0:b7:c1:18:bc:84:53:
         99:db:37:73:ec:c7:d9:10:91:2d:0d:13:0f:74:5e:18:f1:58:
         68:3d:44:6b:08:93:d8:f9:e4:ce:60:89:64:99:89:7d:9f:17:
         c7:eb:eb:f1:1e:2c:9e:e8:3c:6c:d0:e9:a2:cc:a6:af:6c:2a:
         b2:49:c1:65:cf:d0:eb:77:e5:d2:73:e6:5d:92:c8:3b:fb:8d:
         2a:86:69:f6:70:16:8c:48:66:dd:85:3e:83:ac:06:68:56:b1:
         5e:4e:fd:c8:63:8b:5e:1e:c9:2f:8b:81:96:3b:f1:41:c9:87:
         91:e1:86:6c:c8:75:8c:f9:1b:25:7d:82:9b:e4:16:83:25:92:
         b3:f6:2c:7b:01:dd:d3:44:32:84:e2:d5:20:bd:72:46:4f:6c:
         6a:e6:b5:45
-----BEGIN CERTIFICATE-----
MIIGfDCCBWSgAwIBAgIUAQ0Mn0MoWE9Jc9iLWKzPIOwN6QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDgwZTY4ZDItNTg4My00MjMzLTlmMTctOTkyYTJjYTcx
ZTJiMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NjZlMDA2MGMtZWYzYS00M2MyLTg3ZDctNWM4M2NiMmNmNGQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktMvPkyLKLO5tUlLmu+Eb5YE8QVa4LFy7g2I
32omROlCsWoiyiNm819mPcPwdnn9Mv6IIRFmROew0+ESHdUThe3nS4Ky6YnwGxnP
rzIWrsmZDfn1oujD8Ps8qsH9F+M+xBLGw2alpDG+uDxC1Zd+r3pc0JoTNFRgYoo3
vHh7/MvSDEm5jrpuQ8JKaIX1PibPTJMQkFZDqhvMbcPgGpaJFw32VV/e+TV/JA0y
iYBr8hK3Wf14OBlIgUHBWlFbBSfp6RvUOtBz9s2cfZ3WofIPVcwwQ1t3b59tYFD0
B4Nzhb5p1Y97uT+xgArwEXcPNcr5Duc/y+poj+8srHhIWbk3nwIDAQABo4IDjjCC
A4owHQYDVR0OBBYEFA412o+mJK61R7fFXtiNjDdhYtHlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ODBl
NjhkMi01ODgzLTQyMzMtOWYxNy05OTJhMmNhNzFlMmIvMmMxYzFiYjYtMmFiNi0z
M2FkLWI3YjEtY2NjNGNmNGQwZDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDgwZTY4ZDItNTg4My00MjMzLTlm
MTctOTkyYTJjYTcxZTJiLzQ4MGU2OGQyLTU4ODMtNDIzMy05ZjE3LTk5MmEyY2E3
MWUyYi5jcmwwHwYDVR0jBBgwFoAUJpseaAPDCWnjiuWVpz8zM2aKXwwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ODBlNjhkMi01ODgzLTQyMzMtOWYxNy05OTJh
MmNhNzFlMmIuY2VyMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQEF1xQAwQF
F+9AAwQFa5uAAwQCotgAAwQDotiYAwQGuK/AAwQDxzCgAwQC0FSEMA0EAgACMAcD
BQQmBEYAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs
aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ
KoZIhvcNAQELBQADggEBAFMyuaPGvCU0OAKZdqA4G4YHNCZnOKOKL7Mh7fWeh+Cr
33OYFGNHcUTs6lnFU5O4+aEtM0FUZ7rstAddcVxBgn32pt3klR91AkgA3DkrfZD/
j0gBsYIVZSksEED0cN1VcB2J4UN40LfBGLyEU5nbN3Psx9kQkS0NEw90XhjxWGg9
RGsIk9j55M5giWSZiX2fF8fr6/EeLJ7oPGzQ6aLMpq9sKrJJwWXP0Ot35dJz5l2S
yDv7jSqGafZwFoxIZt2FPoOsBmhWsV5O/chji14eyS+LgZY78UHJh5HhhmzIdYz5
GyV9gpvkFoMlkrP2LHsB3dNEMoTi1SC9ckZPbGrmtUU=
-----END CERTIFICATE-----
Generated at Sat Sep 26 16:47:40 2026 by rpki-client