Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a6ba250-5086-4d58-8336-494a05894bf9/5d7525c2-10d9-322d-888c-c13bde0efc94.roa
File:                     5d7525c2-10d9-322d-888c-c13bde0efc94.roa (raw, json)
Hash identifier:          qn/SybZQS2T/y+HA2Esg6gJWH5qw6GhLLs0LQzMHkOU=
Subject key identifier:   CC:D7:E8:87:C7:99:DF:F0:9B:3B:92:F7:27:D4:BA:D8:2F:E8:C0:B3
Certificate issuer:       /CN=4a6ba250-5086-4d58-8336-494a05894bf9
Certificate serial:       010D0C9F4328584AFEE6A08BB932EFD1903D8BE0
Authority key identifier: CD:32:0B:6B:78:3A:14:84:57:79:A4:CD:CB:EC:7B:BF:51:96:92:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a6ba250-5086-4d58-8336-494a05894bf9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a6ba250-5086-4d58-8336-494a05894bf9/5d7525c2-10d9-322d-888c-c13bde0efc94.roa
Signing time:             Wed 27 Aug 2025 13:00:41 +0000
ROA not before:           Wed 27 Aug 2025 13:00:41 +0000
ROA not after:            Tue 25 Nov 2025 14:00:41 +0000
asID:                     62809
IP address blocks:        23.128.144.0/24 maxlen: 24
                          23.128.145.0/24 maxlen: 24
                          23.128.146.0/24 maxlen: 24
                          23.128.147.0/24 maxlen: 24
                          104.152.136.0/22 maxlen: 24
                          104.244.20.0/22 maxlen: 24
                          130.51.4.0/22 maxlen: 24
                          162.222.28.0/22 maxlen: 24
                          162.251.124.0/22 maxlen: 24
                          199.184.14.0/23 maxlen: 24
                          199.202.232.0/23 maxlen: 24
                          2605:2a40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a6ba250-5086-4d58-8336-494a05894bf9/4a6ba250-5086-4d58-8336-494a05894bf9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a6ba250-5086-4d58-8336-494a05894bf9/4a6ba250-5086-4d58-8336-494a05894bf9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a6ba250-5086-4d58-8336-494a05894bf9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e6:a0:8b:b9:32:ef:d1:90:3d:8b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a6ba250-5086-4d58-8336-494a05894bf9
        Validity
            Not Before: Aug 27 13:00:41 2025 GMT
            Not After : Nov 25 14:00:41 2025 GMT
        Subject: CN=ab46d3cd-6d9f-4f67-9867-6524398cc6af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ea:7b:63:0a:5b:4a:d0:f4:94:68:8e:f5:0b:
                    99:e7:cb:28:9a:5b:e9:d6:25:40:9f:2a:fd:99:96:
                    03:3a:2a:af:62:1b:92:93:3a:7a:5b:59:21:09:1d:
                    6c:52:17:ab:0f:5d:c7:89:d8:9e:d5:5d:59:c3:c1:
                    be:5c:fb:e1:ba:b6:d7:68:9a:dc:35:57:bc:0c:fb:
                    65:c5:90:96:23:0e:01:90:f9:11:1e:59:35:c4:3f:
                    6b:8b:6e:03:95:3b:13:f9:17:8d:33:74:ca:66:56:
                    74:6a:5c:fd:70:19:4c:c9:5c:a9:49:fc:78:9a:62:
                    af:e1:6f:6e:e4:5c:9c:1e:86:38:bb:fe:c0:04:07:
                    ff:a4:73:58:b0:93:a0:e5:04:9d:62:55:a4:06:5b:
                    a1:44:9a:1e:36:c3:bf:51:59:58:6b:4e:ba:2b:d7:
                    7e:30:03:a9:23:7e:8c:f6:6c:be:1a:c2:55:8e:99:
                    d4:db:bd:09:de:f4:7b:2f:29:90:6b:cf:e3:cd:0e:
                    5b:7b:66:47:89:ff:6a:97:3b:0c:1b:4b:af:cd:b0:
                    f4:f9:a7:1e:91:f9:68:73:e7:f3:fa:a9:35:d0:7e:
                    be:e2:00:e5:23:22:29:af:2e:e8:76:85:a7:be:b9:
                    00:11:9b:f9:4f:9e:d1:fb:ed:4e:88:08:1b:78:cc:
                    f9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:D7:E8:87:C7:99:DF:F0:9B:3B:92:F7:27:D4:BA:D8:2F:E8:C0:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a6ba250-5086-4d58-8336-494a05894bf9/5d7525c2-10d9-322d-888c-c13bde0efc94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a6ba250-5086-4d58-8336-494a05894bf9/4a6ba250-5086-4d58-8336-494a05894bf9.crl

            X509v3 Authority Key Identifier:
                keyid:CD:32:0B:6B:78:3A:14:84:57:79:A4:CD:CB:EC:7B:BF:51:96:92:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a6ba250-5086-4d58-8336-494a05894bf9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.128.144.0/22
                  104.152.136.0/22
                  104.244.20.0/22
                  130.51.4.0/22
                  162.222.28.0/22
                  162.251.124.0/22
                  199.184.14.0/23
                  199.202.232.0/23
                IPv6:
                  2605:2a40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:a3:0c:95:24:b9:e2:75:38:04:69:f0:5e:ed:36:7f:48:9e:
         21:f8:7a:e2:6a:ff:df:c9:5d:79:2f:8e:b2:c8:86:76:f8:d4:
         12:10:72:f6:52:b9:7c:0d:79:29:f3:a3:7e:ac:37:71:4b:ca:
         44:4e:0a:ad:ee:ea:10:ec:e0:2d:1b:d7:7b:f8:78:a4:f2:8d:
         8f:37:45:c6:eb:a4:2a:2d:fa:f8:c1:74:91:ad:2e:48:8d:20:
         61:bb:d2:79:05:d9:ab:9f:f5:46:e8:10:69:f9:63:50:97:e7:
         ac:61:22:41:52:8d:0d:a9:53:29:82:32:bf:19:d1:31:95:93:
         2b:1f:c8:ad:95:db:12:cd:d5:9a:ac:34:65:e1:db:38:cc:bd:
         ed:ea:0e:1a:a2:d3:d3:98:71:ce:d5:ba:c9:9a:f7:2a:2d:15:
         bb:12:4c:ed:08:ae:56:c6:bb:90:67:d7:3b:03:84:8a:4a:0d:
         67:79:a6:d8:18:7e:a6:9f:7e:35:99:08:ac:c9:f5:0e:41:28:
         f0:c6:a7:32:11:2e:99:cf:9c:a8:5f:fc:b3:13:22:43:67:dc:
         5c:f9:82:4b:80:b0:04:4f:1d:0c:2d:00:b6:cb:63:d2:5a:90:
         2c:33:1a:a2:ab:8c:5f:f2:c1:4b:b2:cb:0f:b3:b1:3c:79:69:
         a1:30:fe:56
-----BEGIN CERTIFICATE-----
MIIGfDCCBWSgAwIBAgIUAQ0Mn0MoWEr+5qCLuTLv0ZA9i+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGE2YmEyNTAtNTA4Ni00ZDU4LTgzMzYtNDk0YTA1ODk0
YmY5MB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk
YWI0NmQzY2QtNmQ5Zi00ZjY3LTk4NjctNjUyNDM5OGNjNmFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjup7YwpbStD0lGiO9QuZ58somlvp1iVAnyr9
mZYDOiqvYhuSkzp6W1khCR1sUherD13Hidie1V1Zw8G+XPvhurbXaJrcNVe8DPtl
xZCWIw4BkPkRHlk1xD9ri24DlTsT+ReNM3TKZlZ0alz9cBlMyVypSfx4mmKv4W9u
5FycHoY4u/7ABAf/pHNYsJOg5QSdYlWkBluhRJoeNsO/UVlYa066K9d+MAOpI36M
9my+GsJVjpnU270J3vR7LymQa8/jzQ5be2ZHif9qlzsMG0uvzbD0+acekfloc+fz
+qk10H6+4gDlIyIpry7odoWnvrkAEZv5T57R++1OiAgbeMz5AwIDAQABo4IDjjCC
A4owHQYDVR0OBBYEFMzX6IfHmd/wmzuS9yfUutgv6MCzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YTZi
YTI1MC01MDg2LTRkNTgtODMzNi00OTRhMDU4OTRiZjkvNWQ3NTI1YzItMTBkOS0z
MjJkLTg4OGMtYzEzYmRlMGVmYzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGE2YmEyNTAtNTA4Ni00ZDU4LTgz
MzYtNDk0YTA1ODk0YmY5LzRhNmJhMjUwLTUwODYtNGQ1OC04MzM2LTQ5NGEwNTg5
NGJmOS5jcmwwHwYDVR0jBBgwFoAUzTILa3g6FIRXeaTNy+x7v1GWkqAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS80YTZiYTI1MC01MDg2LTRkNTgtODMzNi00OTRh
MDU4OTRiZjkuY2VyMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQCF4CQAwQC
aJiIAwQCaPQUAwQCgjMEAwQCot4cAwQCovt8AwQBx7gOAwQBx8roMA0EAgACMAcD
BQAmBSpAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs
aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ
KoZIhvcNAQELBQADggEBAKajDJUkueJ1OARp8F7tNn9IniH4euJq/9/JXXkvjrLI
hnb41BIQcvZSuXwNeSnzo36sN3FLykROCq3u6hDs4C0b13v4eKTyjY83RcbrpCot
+vjBdJGtLkiNIGG70nkF2auf9UboEGn5Y1CX56xhIkFSjQ2pUymCMr8Z0TGVkysf
yK2V2xLN1ZqsNGXh2zjMve3qDhqi09OYcc7Vusma9yotFbsSTO0IrlbGu5Bn1zsD
hIpKDWd5ptgYfqaffjWZCKzJ9Q5BKPDGpzIRLpnPnKhf/LMTIkNn3Fz5gkuAsARP
HQwtALbLY9JakCwzGqKrjF/ywUuyyw+zsTx5aaEw/lY=
-----END CERTIFICATE-----
Generated at Mon Oct 20 17:56:00 2025 by rpki-client