Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/b25fb2e5-3c67-3bf7-a50b-f0635fba80d8.roa
File:                     b25fb2e5-3c67-3bf7-a50b-f0635fba80d8.roa (raw, json)
Hash identifier:          5W/eM6t8GQm9P8/2fkuE3lhR/6mVcXw9oYKNiesoUCo=
Subject key identifier:   56:91:38:A4:8D:58:56:C5:A9:51:21:D6:C2:B9:42:20:84:B0:DF:82
Certificate issuer:       /CN=0c33aff5-10d3-454a-8b27-ca4c4f50851f
Certificate serial:       010D0C9F4328584E640FC2D3A7D20D665EF66C80
Authority key identifier: 5F:22:DD:58:56:EF:26:C7:1C:AF:8E:EC:EE:A9:FD:69:FB:3D:08:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/b25fb2e5-3c67-3bf7-a50b-f0635fba80d8.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     19686
IP address blocks:        23.139.60.0/24 maxlen: 24
                          23.139.61.0/24 maxlen: 24
                          64.32.50.0/24 maxlen: 24
                          2620:d7:a000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/0c33aff5-10d3-454a-8b27-ca4c4f50851f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/0c33aff5-10d3-454a-8b27-ca4c4f50851f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:c2:d3:a7:d2:0d:66:5e:f6:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c33aff5-10d3-454a-8b27-ca4c4f50851f
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=2642cd95-c2c4-44f1-bc24-6d6d96a41118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:84:3d:5c:87:c3:1f:33:d1:05:92:66:2f:46:
                    33:46:50:1f:18:0d:46:75:41:2c:36:7c:70:5a:ac:
                    54:a4:01:74:93:3a:10:df:06:c5:a4:14:f5:3a:e0:
                    d1:25:24:e1:cc:87:90:8a:de:42:89:31:ab:d3:e3:
                    5c:13:b1:c1:26:22:0b:07:e0:0e:d9:8c:e9:47:d5:
                    25:bf:bb:e0:a8:4f:e2:91:01:1a:89:49:8a:5c:94:
                    c5:43:fc:b3:25:45:bc:19:d8:0b:cc:f1:b3:7c:69:
                    1c:54:64:2e:7b:49:f1:6c:18:c7:0c:20:6d:47:d7:
                    42:6d:2f:a9:80:6d:b3:79:52:59:75:20:66:3d:24:
                    d7:1f:b0:1c:0b:e3:7a:4d:0a:93:ae:0b:3f:34:08:
                    9b:7d:3b:d2:0d:86:58:99:d0:07:d2:e3:01:7c:9a:
                    a6:cd:76:69:f3:f2:d6:d5:4c:8d:08:9c:ce:68:ef:
                    9b:08:a7:fa:7f:65:62:98:12:e3:fc:61:39:2d:49:
                    b6:15:eb:34:9d:5b:04:3b:22:c9:30:34:e0:1b:ec:
                    f5:b8:25:22:bb:aa:0b:cc:aa:1b:d0:65:b9:c8:a3:
                    76:b0:5e:af:e1:70:76:ee:1e:db:48:f4:e4:93:d7:
                    0b:a0:ba:55:87:1b:e9:03:db:e4:65:7b:d1:61:3e:
                    f9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:91:38:A4:8D:58:56:C5:A9:51:21:D6:C2:B9:42:20:84:B0:DF:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/b25fb2e5-3c67-3bf7-a50b-f0635fba80d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/0c33aff5-10d3-454a-8b27-ca4c4f50851f.crl

            X509v3 Authority Key Identifier:
                keyid:5F:22:DD:58:56:EF:26:C7:1C:AF:8E:EC:EE:A9:FD:69:FB:3D:08:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.139.60.0/23
                  64.32.50.0/24
                IPv6:
                  2620:d7:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:29:ea:cc:25:09:f3:1c:f6:e9:df:f9:2c:9e:c6:0c:8b:64:
         c8:83:f2:ed:06:29:d5:cf:d1:be:21:90:c0:65:5f:e3:c2:ff:
         01:03:dd:91:24:3d:b5:d3:4e:59:77:82:a0:bb:76:f6:f3:ef:
         f8:c3:93:f6:0a:84:1a:0c:d5:dc:5a:4a:10:05:2a:bf:f4:9c:
         52:3e:4c:4e:40:6e:4d:37:16:e5:ff:18:c0:0e:8b:f9:f6:1d:
         ea:94:39:e6:e2:1f:4c:e9:fb:14:8d:ea:3f:44:9d:9e:14:63:
         bf:4a:6a:95:df:e0:fb:d7:b4:db:3e:82:9e:11:8a:80:f7:b8:
         81:0f:ca:df:1c:71:a0:51:7d:72:d2:eb:16:95:ed:96:9c:7b:
         a1:f4:25:51:9d:2f:3f:60:e2:ab:87:25:d2:e4:fe:2e:e5:38:
         9f:33:4e:d3:aa:94:16:ab:c0:8a:70:3b:36:d0:04:26:e0:0f:
         f7:aa:2c:d9:b5:c9:d2:62:2f:36:c9:53:ad:f2:ee:28:58:a4:
         ed:06:48:b0:cb:e2:cc:fd:35:78:18:83:67:75:af:c7:6c:01:
         33:69:cd:27:23:e4:81:68:6f:dd:f8:15:f0:f7:d5:c9:83:a8:
         de:ba:0e:09:ff:1a:1c:f1:c8:08:00:e5:17:49:f8:fd:e0:4a:
         ea:21:9b:68
-----BEGIN CERTIFICATE-----
MIIGWjCCBUKgAwIBAgIUAQ0Mn0MoWE5kD8LTp9INZl72bIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGMzM2FmZjUtMTBkMy00NTRhLThiMjctY2E0YzRmNTA4
NTFmMB4XDTI2MDcwNDIxMDAxMloXDTI2MTAwMjIxMDAxMlowLzEtMCsGA1UEAxMk
MjY0MmNkOTUtYzJjNC00NGYxLWJjMjQtNmQ2ZDk2YTQxMTE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIQ9XIfDHzPRBZJmL0YzRlAfGA1GdUEsNnxw
WqxUpAF0kzoQ3wbFpBT1OuDRJSThzIeQit5CiTGr0+NcE7HBJiILB+AO2YzpR9Ul
v7vgqE/ikQEaiUmKXJTFQ/yzJUW8GdgLzPGzfGkcVGQue0nxbBjHDCBtR9dCbS+p
gG2zeVJZdSBmPSTXH7AcC+N6TQqTrgs/NAibfTvSDYZYmdAH0uMBfJqmzXZp8/LW
1UyNCJzOaO+bCKf6f2VimBLj/GE5LUm2Fes0nVsEOyLJMDTgG+z1uCUiu6oLzKob
0GW5yKN2sF6v4XB27h7bSPTkk9cLoLpVhxvpA9vkZXvRYT75LQIDAQABo4IDbDCC
A2gwHQYDVR0OBBYEFFaROKSNWFbFqVEh1sK5QiCEsN+CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wYzMz
YWZmNS0xMGQzLTQ1NGEtOGIyNy1jYTRjNGY1MDg1MWYvYjI1ZmIyZTUtM2M2Ny0z
YmY3LWE1MGItZjA2MzVmYmE4MGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMGMzM2FmZjUtMTBkMy00NTRhLThi
MjctY2E0YzRmNTA4NTFmLzBjMzNhZmY1LTEwZDMtNDU0YS04YjI3LWNhNGM0ZjUw
ODUxZi5jcmwwHwYDVR0jBBgwFoAUXyLdWFbvJsccr47s7qn9afs9CH4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8wYzMzYWZmNS0xMGQzLTQ1NGEtOGIyNy1jYTRj
NGY1MDg1MWYuY2VyMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQBF4s8AwQA
QCAyMA8EAgACMAkDBwAmIADXoAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6
MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr
aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAXinqzCUJ8xz26d/5LJ7GDItk
yIPy7QYp1c/RviGQwGVf48L/AQPdkSQ9tdNOWXeCoLt29vPv+MOT9gqEGgzV3FpK
EAUqv/ScUj5MTkBuTTcW5f8YwA6L+fYd6pQ55uIfTOn7FI3qP0SdnhRjv0pqld/g
+9e02z6CnhGKgPe4gQ/K3xxxoFF9ctLrFpXtlpx7ofQlUZ0vP2Diq4cl0uT+LuU4
nzNO06qUFqvAinA7NtAEJuAP96os2bXJ0mIvNslTrfLuKFik7QZIsMvizP01eBiD
Z3Wvx2wBM2nNJyPkgWhv3fgV8PfVyYOo3roOCf8aHPHICADlF0n4/eBK6iGbaA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:05:08 2026 by rpki-client