Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/9c6fb6db-9ad0-332e-bb05-8c8dbaae9e4e.roa
File:                     9c6fb6db-9ad0-332e-bb05-8c8dbaae9e4e.roa (raw, json)
Hash identifier:          f0vs/QBKE8Tua2Sz1zLiJOgwyOX5n4h7t3dQS1ERflk=
Subject key identifier:   E4:47:85:A5:C1:B2:87:34:74:43:D5:3B:36:BA:57:82:8E:CE:1F:56
Certificate issuer:       /CN=f9832b96-bd4c-421c-9299-d5f2c689d463
Certificate serial:       010D0C9F4328584FA59347F3A791AB9101491100
Authority key identifier: 20:9C:BB:41:66:DA:B5:0B:B5:94:F9:34:2E:BD:4C:6D:D0:53:11:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/9c6fb6db-9ad0-332e-bb05-8c8dbaae9e4e.roa
Signing time:             Wed 28 Oct 2026 01:00:13 +0000
ROA not before:           Wed 28 Oct 2026 01:00:13 +0000
ROA not after:            Tue 26 Jan 2027 02:00:13 +0000
asID:                     21565
IP address blocks:        64.138.192.0/18 maxlen: 24
                          64.150.128.0/19 maxlen: 24
                          66.153.128.0/17 maxlen: 24
                          66.220.64.0/20 maxlen: 24
                          67.212.32.0/19 maxlen: 24
                          107.190.144.0/20 maxlen: 24
                          108.175.176.0/20 maxlen: 24
                          152.44.112.0/20 maxlen: 24
                          159.117.160.0/19 maxlen: 24
                          162.221.104.0/21 maxlen: 24
                          162.252.0.0/21 maxlen: 24
                          198.29.48.0/20 maxlen: 24
                          198.52.224.0/20 maxlen: 24
                          198.232.104.0/21 maxlen: 24
                          206.195.64.0/19 maxlen: 24
                          216.16.160.0/19 maxlen: 24
                          216.223.192.0/19 maxlen: 24
                          2606:8400::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/f9832b96-bd4c-421c-9299-d5f2c689d463.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/f9832b96-bd4c-421c-9299-d5f2c689d463.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 31 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a5:93:47:f3:a7:91:ab:91:01:49:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9832b96-bd4c-421c-9299-d5f2c689d463
        Validity
            Not Before: Oct 28 01:00:13 2026 GMT
            Not After : Jan 26 02:00:13 2027 GMT
        Subject: CN=bbfba36b-c69d-43df-8c58-a83a8c215fad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:33:a5:b8:5e:70:b4:1e:56:f1:b6:7f:b8:1a:
                    fe:fa:64:af:42:19:e6:c4:53:2e:0b:32:36:71:2f:
                    18:5b:8b:b5:ce:c6:63:63:90:31:c3:15:a5:ab:b1:
                    b3:e3:a3:5e:b5:79:52:e2:56:99:8f:60:b0:ae:60:
                    2d:3b:1a:e6:92:86:a6:6c:19:c0:49:b8:80:6b:cb:
                    a8:ef:c7:68:9b:5a:d8:03:76:c7:04:c2:bf:61:79:
                    7e:b0:d4:24:a5:53:14:a1:58:9b:f1:f3:14:6b:46:
                    d1:4e:87:3a:d5:7d:46:1e:b4:81:3e:b8:89:b8:3d:
                    c7:04:1a:f7:71:41:93:76:55:d9:f2:c3:8e:aa:d8:
                    0d:d9:9e:0b:79:74:52:4f:b8:4b:38:44:d5:dc:07:
                    ef:7c:b6:49:98:fc:72:5e:6b:37:55:ef:6d:9f:db:
                    d6:bf:3f:c0:f5:b1:42:08:d0:33:93:db:be:47:f6:
                    3c:3d:0e:5f:39:ec:67:ff:f5:34:68:6a:3b:8d:2f:
                    ef:1c:f7:e3:ee:00:25:f3:e1:2c:c9:52:ea:4d:4f:
                    99:19:a4:72:26:04:d8:7d:f8:5c:ca:a6:ca:5e:ac:
                    52:b3:e9:56:3e:4d:b4:f5:14:f3:b5:e2:6a:a5:ef:
                    96:fc:29:49:66:25:fc:87:4e:bc:70:9e:9a:14:76:
                    ee:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:47:85:A5:C1:B2:87:34:74:43:D5:3B:36:BA:57:82:8E:CE:1F:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/9c6fb6db-9ad0-332e-bb05-8c8dbaae9e4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/f9832b96-bd4c-421c-9299-d5f2c689d463.crl

            X509v3 Authority Key Identifier:
                keyid:20:9C:BB:41:66:DA:B5:0B:B5:94:F9:34:2E:BD:4C:6D:D0:53:11:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.138.192.0/18
                  64.150.128.0/19
                  66.153.128.0/17
                  66.220.64.0/20
                  67.212.32.0/19
                  107.190.144.0/20
                  108.175.176.0/20
                  152.44.112.0/20
                  159.117.160.0/19
                  162.221.104.0/21
                  162.252.0.0/21
                  198.29.48.0/20
                  198.52.224.0/20
                  198.232.104.0/21
                  206.195.64.0/19
                  216.16.160.0/19
                  216.223.192.0/19
                IPv6:
                  2606:8400::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:cb:b0:d2:45:7a:3e:fd:ec:97:d5:76:4f:d9:1e:36:08:41:
         03:7f:49:0f:01:f3:88:1a:42:23:16:01:31:eb:a1:ad:cf:38:
         34:a2:ed:2a:bf:d9:76:12:66:d9:3a:c3:d0:8f:05:2f:82:f9:
         3a:9d:36:41:16:0b:4f:a7:53:77:66:1f:98:aa:3a:bd:fc:fb:
         42:4b:e3:f2:9e:a1:be:59:0d:20:29:f5:49:a2:94:9d:06:15:
         39:4b:a2:de:af:0d:ba:d9:1d:99:eb:dc:d6:9f:e4:94:c4:92:
         43:9b:08:6a:ac:6d:ba:6f:28:fb:55:0d:5b:92:0f:89:81:eb:
         30:20:d2:ba:63:87:ab:22:7f:fa:6b:fa:f9:4d:9c:ee:1c:08:
         a3:55:da:9e:9d:49:e3:d9:6f:5d:fc:b6:56:6f:10:e7:b0:15:
         7c:52:bf:26:bf:72:8f:f9:b9:03:d1:22:8c:db:3c:96:36:5d:
         ad:49:e2:46:dc:f6:ff:65:23:6a:d6:04:5a:eb:5c:80:6c:23:
         90:28:be:c7:90:dc:ff:1c:f7:9d:8a:d3:4b:98:02:5d:7d:15:
         1b:93:d3:d0:ad:d6:7e:3a:3b:e0:35:c7:3e:a6:0b:e0:e4:63:
         ae:91:25:c7:54:b7:e5:08:e6:0b:d9:6f:3b:db:73:34:db:ea:
         54:b6:35:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 18:08:26 2026 by rpki-client