Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b1d675d-c8fe-494f-85c3-bff9be51c077/64f7908d-4699-3291-8781-43e53c00c408.roa
File:                     64f7908d-4699-3291-8781-43e53c00c408.roa (raw, json)
Hash identifier:          oerqkBO91ensDvTbYf2Bzjnjvy2bB8KyRVVuS09+ah8=
Subject key identifier:   70:80:C9:C0:57:9D:EC:DD:3B:13:26:30:03:EA:DB:6B:C6:3F:BE:03
Certificate issuer:       /CN=5b1d675d-c8fe-494f-85c3-bff9be51c077
Certificate serial:       010D0C9F4328584EA787544CD65F0C3EC7E24390
Authority key identifier: BD:4D:FA:C9:D8:5E:B2:5E:BF:3B:EC:DD:5D:EF:97:86:0D:0B:87:11
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b1d675d-c8fe-494f-85c3-bff9be51c077.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b1d675d-c8fe-494f-85c3-bff9be51c077/64f7908d-4699-3291-8781-43e53c00c408.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16724
IP address blocks:        173.241.192.0/20 maxlen: 20
                          199.59.80.0/22 maxlen: 22
                          208.38.128.0/23 maxlen: 23
                          208.38.131.0/24 maxlen: 24
                          208.38.132.0/23 maxlen: 23
                          208.38.135.0/24 maxlen: 24
                          208.38.137.0/24 maxlen: 24
                          208.38.138.0/23 maxlen: 23
                          208.38.140.0/22 maxlen: 22
                          208.38.144.0/22 maxlen: 22
                          208.38.149.0/24 maxlen: 24
                          208.38.150.0/24 maxlen: 24
                          208.38.155.0/24 maxlen: 24
                          208.38.161.0/24 maxlen: 24
                          208.38.163.0/24 maxlen: 24
                          208.38.164.0/23 maxlen: 23
                          208.38.169.0/24 maxlen: 24
                          208.38.170.0/24 maxlen: 24
                          208.38.174.0/24 maxlen: 24
                          208.38.176.0/23 maxlen: 23
                          208.38.178.0/24 maxlen: 24
                          208.38.183.0/24 maxlen: 24
                          208.38.184.0/23 maxlen: 23
                          208.38.186.0/24 maxlen: 24
                          208.99.112.0/24 maxlen: 24
                          208.99.114.0/24 maxlen: 24
                          216.139.192.0/21 maxlen: 21
                          216.139.192.0/24 maxlen: 24
                          216.139.194.0/23 maxlen: 23
                          216.139.196.0/24 maxlen: 24
                          216.139.198.0/24 maxlen: 24
                          216.139.200.0/22 maxlen: 22
                          216.139.200.0/23 maxlen: 23
                          216.139.202.0/24 maxlen: 24
                          216.139.205.0/24 maxlen: 24
                          216.139.207.0/24 maxlen: 24
                          2607:f3f0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b1d675d-c8fe-494f-85c3-bff9be51c077/5b1d675d-c8fe-494f-85c3-bff9be51c077.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b1d675d-c8fe-494f-85c3-bff9be51c077/5b1d675d-c8fe-494f-85c3-bff9be51c077.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b1d675d-c8fe-494f-85c3-bff9be51c077.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:54:4c:d6:5f:0c:3e:c7:e2:43:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b1d675d-c8fe-494f-85c3-bff9be51c077
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=48be125e-eb98-4cc7-8b8f-d5c7b89bf2b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:71:28:0a:f1:e9:e5:de:bb:7e:c4:61:40:3d:
                    a9:aa:e4:8a:44:5e:79:38:3a:49:ba:0e:4c:a3:52:
                    1a:5a:70:c1:e3:97:46:1c:fe:8f:29:10:60:91:27:
                    74:c4:b8:c7:7e:5c:34:12:3b:3d:2f:00:80:a6:83:
                    8d:c2:cb:80:da:94:27:dd:de:8b:c6:39:6b:84:68:
                    b2:5d:d2:1d:32:59:55:d5:db:c2:9f:2e:69:19:5d:
                    9b:fb:45:39:c8:fa:8c:6e:22:48:19:a0:7f:72:59:
                    bc:de:a9:99:7e:84:3b:29:c8:9a:a0:3b:fb:41:cb:
                    b1:0e:c3:9f:0e:8e:7d:10:47:d0:b1:c0:82:44:c9:
                    20:41:fd:59:2c:1d:d2:38:3f:03:35:07:78:ad:ed:
                    51:32:8a:b2:6b:09:37:4b:79:a5:30:60:49:f2:bd:
                    2c:6b:1b:06:a0:54:95:bf:4b:15:85:4f:12:fd:fb:
                    c9:da:5c:67:7e:d0:6a:21:63:e7:97:49:d8:4a:aa:
                    24:28:ea:92:c7:81:36:57:b5:9f:6a:85:63:4d:48:
                    f1:67:f2:a7:dc:aa:3c:58:a5:3d:ee:92:56:9b:10:
                    04:01:56:e4:f5:1d:ca:75:87:93:af:26:de:35:27:
                    07:2f:01:69:44:99:02:3e:cf:e0:2b:49:1a:e1:5b:
                    60:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:80:C9:C0:57:9D:EC:DD:3B:13:26:30:03:EA:DB:6B:C6:3F:BE:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b1d675d-c8fe-494f-85c3-bff9be51c077/64f7908d-4699-3291-8781-43e53c00c408.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b1d675d-c8fe-494f-85c3-bff9be51c077/5b1d675d-c8fe-494f-85c3-bff9be51c077.crl

            X509v3 Authority Key Identifier:
                keyid:BD:4D:FA:C9:D8:5E:B2:5E:BF:3B:EC:DD:5D:EF:97:86:0D:0B:87:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b1d675d-c8fe-494f-85c3-bff9be51c077.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.241.192.0/20
                  199.59.80.0/22
                  208.38.128.0/23
                  208.38.131.0-208.38.133.255
                  208.38.135.0/24
                  208.38.137.0-208.38.147.255
                  208.38.149.0-208.38.150.255
                  208.38.155.0/24
                  208.38.161.0/24
                  208.38.163.0-208.38.165.255
                  208.38.169.0-208.38.170.255
                  208.38.174.0/24
                  208.38.176.0-208.38.178.255
                  208.38.183.0-208.38.186.255
                  208.99.112.0/24
                  208.99.114.0/24
                  216.139.192.0-216.139.203.255
                  216.139.205.0/24
                  216.139.207.0/24
                IPv6:
                  2607:f3f0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:4f:c2:97:8e:95:e2:79:ba:27:89:38:60:52:6e:5b:6a:16:
         db:75:20:d1:a1:9b:d2:71:09:cb:c6:b8:3c:87:34:f0:15:61:
         95:a9:a0:67:5f:5f:33:af:55:90:5f:36:18:5e:07:e0:ef:27:
         89:bb:94:90:b9:c1:cf:51:49:5f:27:33:6d:9f:ae:dc:e4:41:
         07:96:a9:82:1a:ef:53:67:2d:96:3a:cd:93:17:2f:20:b7:cb:
         0e:76:a0:14:1d:91:3b:39:a1:9f:f3:06:e1:73:4a:32:3c:7e:
         01:58:99:af:81:5a:ab:af:53:16:54:99:a5:d9:d9:82:89:64:
         0c:5b:5c:86:bb:95:6d:b3:5b:6f:66:86:b2:20:94:09:73:4c:
         49:f0:30:59:ff:c3:ac:b5:f9:fa:7b:77:7f:0c:1a:e9:09:d8:
         9c:a9:3d:95:73:36:a1:07:6b:44:6b:20:a8:f5:09:ee:ee:7c:
         20:d0:2f:a3:b6:d8:f9:7e:f4:47:a8:9c:4a:77:89:3c:24:9b:
         8f:4c:2d:fb:87:40:51:0f:94:0d:ef:b2:3c:49:65:e3:32:86:
         bc:db:ee:ba:11:bc:53:91:b2:82:ab:3c:b7:ca:9c:df:ba:4e:
         88:2f:7f:62:60:36:62:55:11:de:39:96:50:b3:5d:d2:6b:e1:
         c3:25:a2:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 03:01:42 2026 by rpki-client