Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81/0771c23b-83cc-37a6-9f7f-a7eae9053198.roa
File:                     0771c23b-83cc-37a6-9f7f-a7eae9053198.roa (raw, json)
Hash identifier:          8E7tGuul33JnnMfybuXy+pUQANHDPrX8K4i1xfKIk2U=
Subject key identifier:   CE:7A:21:3B:08:94:E0:CD:F8:3F:5E:AB:44:2A:B1:D7:39:F0:AC:F4
Certificate issuer:       /CN=8753160d-30e1-48b1-afdb-394389cbcc81
Certificate serial:       010D0C9F4328584F6F22D42438B4EA8959404A20
Authority key identifier: F9:F1:BE:13:FB:A9:F8:E4:91:49:CD:66:0D:FD:65:4F:4E:F9:55:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81/0771c23b-83cc-37a6-9f7f-a7eae9053198.roa
Signing time:             Thu 08 Oct 2026 13:00:12 +0000
ROA not before:           Thu 08 Oct 2026 13:00:12 +0000
ROA not after:            Wed 06 Jan 2027 14:00:12 +0000
asID:                     21723
IP address blocks:        162.211.192.0/21 maxlen: 24
                          162.222.120.0/21 maxlen: 24
                          162.246.128.0/22 maxlen: 24
                          162.255.248.0/21 maxlen: 24
                          172.85.80.0/21 maxlen: 24
                          172.103.48.0/20 maxlen: 24
                          198.1.56.0/21 maxlen: 24
                          199.91.80.0/21 maxlen: 24
                          199.192.184.0/21 maxlen: 24
                          199.193.88.0/21 maxlen: 24
                          207.232.96.0/19 maxlen: 24
                          208.85.212.0/22 maxlen: 24
                          209.207.64.0/18 maxlen: 24
                          216.21.128.0/19 maxlen: 24
                          216.40.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81/8753160d-30e1-48b1-afdb-394389cbcc81.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81/8753160d-30e1-48b1-afdb-394389cbcc81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:22:d4:24:38:b4:ea:89:59:40:4a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8753160d-30e1-48b1-afdb-394389cbcc81
        Validity
            Not Before: Oct  8 13:00:12 2026 GMT
            Not After : Jan  6 14:00:12 2027 GMT
        Subject: CN=75b53b39-17c5-4671-ae1f-4a4cafdb347d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:06:b5:5c:7b:f4:d2:72:ca:eb:e2:82:6c:b4:
                    82:59:f9:14:17:f9:92:00:c3:4c:f4:a8:f1:be:6c:
                    03:92:3f:84:06:27:8b:9a:4b:a6:23:fd:91:2d:9a:
                    8f:8f:bf:99:ba:41:9a:76:e6:30:d1:8c:25:64:87:
                    20:6c:43:6a:ac:65:be:ff:be:e2:9e:8e:0e:69:3d:
                    a9:92:7d:52:34:02:ae:22:a0:d7:e2:6d:3c:9e:c6:
                    d8:8f:05:7e:45:d1:de:ee:98:9e:00:62:f4:d4:c1:
                    b2:0d:31:d3:1a:b7:ec:ee:75:db:49:1d:90:99:c2:
                    b3:86:83:d4:7e:6d:34:7f:77:df:ba:52:84:64:ae:
                    30:62:8c:a6:63:38:0e:f4:ea:ec:cd:58:99:d6:11:
                    7b:31:86:f4:54:72:5a:3b:b1:c8:a5:f3:00:2f:12:
                    07:f4:b5:78:ff:e4:8f:e2:98:b7:f8:ca:40:6d:59:
                    7a:58:f3:e4:e2:0f:79:7d:83:73:36:ba:c2:e6:a7:
                    8f:cb:74:11:f8:b3:95:84:98:c4:e7:0d:a2:95:7b:
                    22:2e:9c:af:9e:f4:68:f1:d2:f8:7c:82:8d:62:71:
                    08:1c:0d:64:e0:4e:06:48:ff:32:1d:cb:ad:0f:ac:
                    74:97:06:77:9b:99:42:60:6b:f3:0d:18:e7:c0:ee:
                    2e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:7A:21:3B:08:94:E0:CD:F8:3F:5E:AB:44:2A:B1:D7:39:F0:AC:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81/0771c23b-83cc-37a6-9f7f-a7eae9053198.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81/8753160d-30e1-48b1-afdb-394389cbcc81.crl

            X509v3 Authority Key Identifier:
                keyid:F9:F1:BE:13:FB:A9:F8:E4:91:49:CD:66:0D:FD:65:4F:4E:F9:55:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.211.192.0/21
                  162.222.120.0/21
                  162.246.128.0/22
                  162.255.248.0/21
                  172.85.80.0/21
                  172.103.48.0/20
                  198.1.56.0/21
                  199.91.80.0/21
                  199.192.184.0/21
                  199.193.88.0/21
                  207.232.96.0/19
                  208.85.212.0/22
                  209.207.64.0/18
                  216.21.128.0/19
                  216.40.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:21:98:8e:5b:85:a6:fb:e1:8d:72:e2:53:7b:23:45:66:55:
         42:7d:64:16:ce:c9:2e:66:a7:b9:8b:6e:d3:93:2e:08:c4:3a:
         0c:fa:fe:ec:be:a0:e8:f8:4c:21:ae:13:e1:4d:c1:a6:c6:f6:
         08:20:a4:78:52:b4:37:28:27:85:84:10:d4:79:f3:ba:c7:f7:
         66:a7:ae:36:b1:39:b7:b4:33:8a:7e:83:74:79:22:ae:1a:5e:
         a2:9a:b7:ee:0f:63:eb:55:8c:1c:8a:65:34:3f:71:07:8c:fc:
         bd:11:e7:4c:a3:13:e5:f2:c6:ce:37:17:25:0e:2a:57:5a:de:
         77:e7:12:41:85:76:1e:3e:74:5c:e1:4b:9b:e4:5c:9b:6d:21:
         dd:8e:c2:1a:a2:ec:c2:6d:6f:f2:00:92:55:0c:5b:1e:f1:62:
         53:f8:c9:f6:f8:16:2f:93:7b:a6:04:9b:46:b5:43:9f:2f:2a:
         a0:6f:bf:7f:6a:43:01:a3:3f:62:55:8c:a5:c4:84:e1:3a:dd:
         d2:25:b3:35:76:4e:28:de:26:01:7e:fe:1d:be:56:1f:0a:47:
         c3:0b:3f:6b:cf:49:87:bf:e3:74:12:0b:ba:32:54:37:84:b4:
         71:e4:a1:6c:7e:0d:a2:65:76:6f:f5:f2:a7:73:c4:e3:01:79:
         90:cc:b3:36
-----BEGIN CERTIFICATE-----
MIIGlzCCBX+gAwIBAgIUAQ0Mn0MoWE9vItQkOLTqiVlASiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODc1MzE2MGQtMzBlMS00OGIxLWFmZGItMzk0Mzg5Y2Jj
YzgxMB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk
NzViNTNiMzktMTdjNS00NjcxLWFlMWYtNGE0Y2FmZGIzNDdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQa1XHv00nLK6+KCbLSCWfkUF/mSAMNM9Kjx
vmwDkj+EBieLmkumI/2RLZqPj7+ZukGaduYw0YwlZIcgbENqrGW+/77ino4OaT2p
kn1SNAKuIqDX4m08nsbYjwV+RdHe7pieAGL01MGyDTHTGrfs7nXbSR2QmcKzhoPU
fm00f3ffulKEZK4wYoymYzgO9OrszViZ1hF7MYb0VHJaO7HIpfMALxIH9LV4/+SP
4pi3+MpAbVl6WPPk4g95fYNzNrrC5qePy3QR+LOVhJjE5w2ilXsiLpyvnvRo8dL4
fIKNYnEIHA1k4E4GSP8yHcutD6x0lwZ3m5lCYGvzDRjnwO4u6QIDAQABo4IDqTCC
A6UwHQYDVR0OBBYEFM56ITsIlODN+D9eq0Qqsdc58Kz0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NzUz
MTYwZC0zMGUxLTQ4YjEtYWZkYi0zOTQzODljYmNjODEvMDc3MWMyM2ItODNjYy0z
N2E2LTlmN2YtYTdlYWU5MDUzMTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODc1MzE2MGQtMzBlMS00OGIxLWFm
ZGItMzk0Mzg5Y2JjYzgxLzg3NTMxNjBkLTMwZTEtNDhiMS1hZmRiLTM5NDM4OWNi
Y2M4MS5jcmwwHwYDVR0jBBgwFoAU+fG+E/up+OSRSc1mDf1lT075VU4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NzUzMTYwZC0zMGUxLTQ4YjEtYWZkYi0zOTQz
ODljYmNjODEuY2VyMHMGCCsGAQUFBwEHAQH/BGQwYjBgBAIAATBaAwQDotPAAwQD
ot54AwQCovaAAwQDov/4AwQDrFVQAwQErGcwAwQDxgE4AwQDx1tQAwQDx8C4AwQD
x8FYAwQFz+hgAwQC0FXUAwQG0c9AAwQF2BWAAwQF2ChgMFQGA1UdIAEB/wRKMEgw
RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv
cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGAhmI5b
hab74Y1y4lN7I0VmVUJ9ZBbOyS5mp7mLbtOTLgjEOgz6/uy+oOj4TCGuE+FNwabG
9gggpHhStDcoJ4WEENR587rH92anrjaxObe0M4p+g3R5Iq4aXqKat+4PY+tVjByK
ZTQ/cQeM/L0R50yjE+Xyxs43FyUOKlda3nfnEkGFdh4+dFzhS5vkXJttId2Owhqi
7MJtb/IAklUMWx7xYlP4yfb4Fi+Te6YEm0a1Q58vKqBvv39qQwGjP2JVjKXEhOE6
3dIlszV2TijeJgF+/h2+Vh8KR8MLP2vPSYe/43QSC7oyVDeEtHHkoWx+DaJldm/1
8qdzxOMBeZDMszY=
-----END CERTIFICATE-----
Generated at Sun Oct 11 20:21:00 2026 by rpki-client