Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/a3325f5a-465e-3622-a353-ec026e3ae096.roa
File:                     a3325f5a-465e-3622-a353-ec026e3ae096.roa (raw, json)
Hash identifier:          dDY5rkcRc1UqkkP5G2+eEDiGFBqEvhxG5SrZYZQEy8k=
Subject key identifier:   92:D8:CE:95:99:5E:37:0D:D4:AE:56:1A:99:C7:57:D2:94:B3:56:6E
Certificate issuer:       /CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
Certificate serial:       010D0C9F4328584F7E7DAF899F57BD5A4AE14848
Authority key identifier: 2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/a3325f5a-465e-3622-a353-ec026e3ae096.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     7065
IP address blocks:        23.93.0.0/16 maxlen: 24
                          50.0.0.0/15 maxlen: 24
                          64.142.0.0/17 maxlen: 24
                          69.12.128.0/17 maxlen: 24
                          70.36.128.0/17 maxlen: 24
                          75.101.0.0/17 maxlen: 24
                          76.191.128.0/17 maxlen: 24
                          107.156.0.0/15 maxlen: 24
                          108.169.0.0/17 maxlen: 24
                          135.180.0.0/16 maxlen: 24
                          142.254.0.0/17 maxlen: 24
                          157.131.0.0/16 maxlen: 24
                          173.228.0.0/17 maxlen: 24
                          184.23.0.0/16 maxlen: 24
                          192.184.128.0/17 maxlen: 24
                          198.27.128.0/17 maxlen: 24
                          199.245.68.0/24 maxlen: 24
                          208.106.0.0/17 maxlen: 24
                          209.148.96.0/19 maxlen: 24
                          209.204.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:af:89:9f:57:bd:5a:4a:e1:48:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=a83abf20-58d0-42c0-8260-388fa5b1b31e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:03:4f:0f:9f:09:d9:b9:71:ef:81:59:47:8f:
                    ac:ef:e8:4e:bf:e2:61:cc:6a:cc:53:5d:f6:99:3a:
                    39:34:29:f0:0b:f1:6c:8a:bf:21:31:59:ee:db:e2:
                    62:59:03:71:0f:f8:f3:72:de:da:00:5c:c8:13:8c:
                    a1:06:61:0e:53:02:ff:fb:e9:4f:5b:69:ec:eb:f6:
                    0f:f5:44:a9:af:f4:33:86:da:94:82:f5:f3:46:2c:
                    93:db:41:bb:03:c4:9a:94:63:8e:68:a1:9f:ee:57:
                    81:11:24:b6:38:02:1f:56:50:7c:96:af:d7:bf:18:
                    6a:47:f0:7f:2a:d9:3d:47:18:96:d5:91:d6:f0:5b:
                    42:ed:4f:94:7e:81:17:1f:a6:bf:96:d1:bf:a4:fd:
                    7a:cd:35:b8:4b:30:ee:db:04:6c:3c:a1:c0:3e:f8:
                    a6:b0:dd:dd:b5:06:c6:9d:db:bb:32:ae:1f:70:db:
                    de:51:2b:c6:18:9a:45:d9:18:2e:94:93:06:6a:29:
                    dc:ad:5d:8f:04:b3:6c:49:dd:3a:4e:fb:ad:3a:6b:
                    94:be:b6:85:73:31:54:92:f2:99:0b:fb:93:82:27:
                    80:b4:be:01:5c:fa:77:30:3b:1d:dd:fd:a6:01:2e:
                    3f:7f:9c:d1:b7:c3:e0:d9:0b:10:ef:3c:3f:d1:79:
                    1c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:D8:CE:95:99:5E:37:0D:D4:AE:56:1A:99:C7:57:D2:94:B3:56:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/a3325f5a-465e-3622-a353-ec026e3ae096.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl

            X509v3 Authority Key Identifier:
                keyid:2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.93.0.0/16
                  50.0.0.0/15
                  64.142.0.0/17
                  69.12.128.0/17
                  70.36.128.0/17
                  75.101.0.0/17
                  76.191.128.0/17
                  107.156.0.0/15
                  108.169.0.0/17
                  135.180.0.0/16
                  142.254.0.0/17
                  157.131.0.0/16
                  173.228.0.0/17
                  184.23.0.0/16
                  192.184.128.0/17
                  198.27.128.0/17
                  199.245.68.0/24
                  208.106.0.0/17
                  209.148.96.0/19
                  209.204.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:4f:96:be:a3:a3:ec:b2:d5:bd:89:9b:58:ac:31:ab:f1:fa:
         e8:89:7f:ab:0f:62:4f:13:b6:cf:8f:65:87:5d:88:9a:c0:6f:
         8e:33:84:8a:40:00:b7:97:4d:37:74:a7:e6:7f:9a:e6:3c:b1:
         86:df:0a:47:55:10:0f:68:8f:a4:00:28:74:d4:89:75:38:47:
         86:9a:fb:b4:91:d3:54:f9:32:42:b2:90:f0:7a:b2:c9:77:59:
         c9:52:36:2f:14:fd:79:1b:f2:fe:be:bb:b8:3e:02:bb:d1:df:
         1d:64:bf:17:d4:da:7a:ce:26:ca:0a:51:c8:18:32:49:06:24:
         32:36:4a:87:a4:36:26:52:db:28:3d:54:29:c3:74:a7:cb:0d:
         79:ac:c5:e0:96:c1:45:ca:c0:a8:3f:1a:ca:d2:d6:5f:5a:95:
         62:ea:a2:80:ab:1f:81:e9:50:e9:27:3b:99:00:51:27:45:e0:
         36:bb:a7:27:44:d8:fa:5c:68:97:65:c6:91:74:a1:2b:06:70:
         df:57:05:df:80:47:f9:75:40:80:76:77:93:72:15:d6:ae:e3:
         6a:0a:d1:a1:d7:48:21:86:88:00:8c:c8:b6:d8:f7:ce:00:a5:
         95:1f:a5:56:6e:12:15:a7:cc:34:71:6e:6c:e6:7c:7a:a7:af:
         ae:82:93:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 07:24:29 2026 by rpki-client