Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/9c6fb6db-9ad0-332e-bb05-8c8dbaae9e4e.roa
File:                     9c6fb6db-9ad0-332e-bb05-8c8dbaae9e4e.roa (raw, json)
Hash identifier:          DojeiYpCXcjahRLgv4n3RSuSKFG9DpIEwiJmicG1COc=
Subject key identifier:   DA:81:4D:92:C9:27:B3:EC:6D:D9:EA:5C:DD:B8:09:F4:9A:42:68:6F
Certificate issuer:       /CN=f9832b96-bd4c-421c-9299-d5f2c689d463
Certificate serial:       010D0C9F4328584F03A795C3EA2CC459F63F0AC0
Authority key identifier: 20:9C:BB:41:66:DA:B5:0B:B5:94:F9:34:2E:BD:4C:6D:D0:53:11:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/9c6fb6db-9ad0-332e-bb05-8c8dbaae9e4e.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     21565
IP address blocks:        64.138.192.0/18 maxlen: 24
                          64.150.128.0/19 maxlen: 24
                          66.153.128.0/17 maxlen: 24
                          66.220.64.0/20 maxlen: 24
                          67.212.32.0/19 maxlen: 24
                          107.190.144.0/20 maxlen: 24
                          108.175.176.0/20 maxlen: 24
                          152.44.112.0/20 maxlen: 24
                          159.117.160.0/19 maxlen: 24
                          162.221.104.0/21 maxlen: 24
                          162.252.0.0/21 maxlen: 24
                          198.29.48.0/20 maxlen: 24
                          198.52.224.0/20 maxlen: 24
                          198.232.104.0/21 maxlen: 24
                          206.195.64.0/19 maxlen: 24
                          216.16.160.0/19 maxlen: 24
                          216.223.192.0/19 maxlen: 24
                          2606:8400::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/f9832b96-bd4c-421c-9299-d5f2c689d463.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/f9832b96-bd4c-421c-9299-d5f2c689d463.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:95:c3:ea:2c:c4:59:f6:3f:0a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9832b96-bd4c-421c-9299-d5f2c689d463
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=af9c7206-b390-4e90-8025-8793703fd81e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:61:90:b2:4d:22:42:8b:71:a4:3a:1c:e1:9c:
                    8f:b9:a8:b4:f5:21:1b:57:ef:ff:b7:de:dc:ea:cd:
                    8e:1d:b2:a7:89:9a:4c:72:b8:22:6d:58:95:7c:57:
                    f0:f5:b4:ce:1e:47:13:39:39:6f:d7:f0:59:30:de:
                    92:8a:87:42:70:cb:14:8f:20:fd:d5:b6:40:f1:30:
                    25:cf:ec:7d:1d:66:31:bb:be:d6:42:0e:58:1f:3f:
                    fe:c1:d9:ec:22:cd:0f:f8:43:a5:ad:78:d8:25:c7:
                    34:da:c9:2c:a1:f5:44:a2:a7:f0:cf:97:7a:bd:b3:
                    68:10:1a:42:88:0c:39:11:ef:b2:c9:de:25:2b:90:
                    80:f9:df:65:1e:6e:2e:10:08:9b:75:d6:9c:8b:79:
                    05:75:d9:e1:b3:68:ac:32:95:b7:6c:62:f7:82:cf:
                    8e:21:6c:26:0b:35:41:c4:53:cd:36:30:10:f0:a1:
                    17:fc:cd:6e:03:1a:62:f7:d6:17:d9:6d:2c:97:da:
                    e2:57:99:5b:7c:97:4e:df:9b:8f:e8:61:e3:00:7a:
                    59:b9:b6:2f:cd:36:ed:7d:e6:60:77:55:de:76:fd:
                    b0:4a:6f:a6:57:31:6f:09:01:d0:11:fa:4a:b8:e2:
                    68:3e:7d:c1:6e:64:5b:9b:29:e4:41:98:79:86:5c:
                    df:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:81:4D:92:C9:27:B3:EC:6D:D9:EA:5C:DD:B8:09:F4:9A:42:68:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/9c6fb6db-9ad0-332e-bb05-8c8dbaae9e4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/f9832b96-bd4c-421c-9299-d5f2c689d463.crl

            X509v3 Authority Key Identifier:
                keyid:20:9C:BB:41:66:DA:B5:0B:B5:94:F9:34:2E:BD:4C:6D:D0:53:11:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.138.192.0/18
                  64.150.128.0/19
                  66.153.128.0/17
                  66.220.64.0/20
                  67.212.32.0/19
                  107.190.144.0/20
                  108.175.176.0/20
                  152.44.112.0/20
                  159.117.160.0/19
                  162.221.104.0/21
                  162.252.0.0/21
                  198.29.48.0/20
                  198.52.224.0/20
                  198.232.104.0/21
                  206.195.64.0/19
                  216.16.160.0/19
                  216.223.192.0/19
                IPv6:
                  2606:8400::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:f0:9a:06:59:a0:7a:cf:c1:d3:9a:e2:54:b6:f5:b7:83:5d:
         d0:55:3c:0d:a9:96:42:0b:d5:3b:1f:db:b9:bb:23:22:83:3b:
         af:76:1e:06:5e:c5:9c:9e:21:59:f3:c8:aa:ad:3d:94:93:e7:
         96:e7:3e:fe:fb:75:4a:0c:90:c0:d5:a4:c0:44:ce:4b:28:31:
         0f:28:a0:94:6c:8e:17:38:0b:75:82:57:a1:f9:c6:03:f6:e6:
         fe:71:a3:23:88:3a:61:7c:6a:a7:5c:24:45:12:24:dd:eb:ef:
         a1:0d:d9:c8:5e:9c:9c:00:e2:1a:3c:8d:ac:91:9e:99:c9:d8:
         0a:83:c0:ec:47:b2:1a:27:30:71:10:f9:e2:ba:96:ca:30:6f:
         24:b0:a3:12:a3:c7:38:da:5f:b4:65:9c:c7:32:dd:90:1e:88:
         44:85:5b:12:05:d6:8c:6d:35:7f:ca:d0:5b:f5:91:f9:d9:f8:
         c1:ff:05:e5:0b:2e:a8:80:48:70:4a:f8:ec:9f:c2:b4:b0:0d:
         5c:7d:d5:46:9b:93:6d:85:0f:cc:25:3c:e1:3a:df:90:74:55:
         b5:24:95:13:27:20:03:58:00:a1:aa:33:dc:e6:ce:f8:73:75:
         69:31:e5:8a:55:6d:67:2d:70:9f:e3:06:cf:71:d9:91:df:0c:
         96:32:be:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 12:33:59 2026 by rpki-client