Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4bfb8143-b010-4f06-b1de-8c27f25d8b00/f86efe51-fb7a-39fa-b9e9-6bc887b7cea3.roa
File:                     f86efe51-fb7a-39fa-b9e9-6bc887b7cea3.roa (raw, json)
Hash identifier:          CJkcIXImKKBwxgAhTAUFl30nEvZULTXLsQguaOGaAo4=
Subject key identifier:   AF:C3:69:D0:D2:6B:27:D6:F1:86:59:19:08:3D:2B:0D:FD:56:63:E1
Certificate issuer:       /CN=4bfb8143-b010-4f06-b1de-8c27f25d8b00
Certificate serial:       010D0C9F4328584DFD3B299A8EA2FDB75584323E
Authority key identifier: 5A:DC:99:BC:64:6F:8B:00:FF:1D:4E:B0:0C:1D:CD:67:22:8D:FA:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4bfb8143-b010-4f06-b1de-8c27f25d8b00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4bfb8143-b010-4f06-b1de-8c27f25d8b00/f86efe51-fb7a-39fa-b9e9-6bc887b7cea3.roa
Signing time:             Fri 29 May 2026 01:00:10 +0000
ROA not before:           Fri 29 May 2026 01:00:10 +0000
ROA not after:            Thu 27 Aug 2026 01:00:10 +0000
asID:                     6075
IP address blocks:        137.32.1.0/24 maxlen: 24
                          137.32.2.0/24 maxlen: 24
                          137.32.3.0/24 maxlen: 24
                          137.32.4.0/24 maxlen: 24
                          137.32.12.0/24 maxlen: 24
                          137.32.16.0/24 maxlen: 24
                          137.32.20.0/22 maxlen: 22
                          137.32.28.0/24 maxlen: 24
                          137.32.30.0/24 maxlen: 24
                          137.32.31.0/24 maxlen: 24
                          137.32.32.0/24 maxlen: 24
                          137.32.33.0/24 maxlen: 24
                          137.32.34.0/23 maxlen: 23
                          137.32.38.0/24 maxlen: 24
                          137.32.40.0/24 maxlen: 24
                          137.32.41.0/24 maxlen: 24
                          137.32.46.0/23 maxlen: 23
                          137.32.56.0/24 maxlen: 24
                          137.32.65.0/24 maxlen: 24
                          137.32.66.0/24 maxlen: 24
                          137.32.69.0/24 maxlen: 24
                          137.32.80.0/24 maxlen: 24
                          137.32.82.0/23 maxlen: 24
                          137.32.92.0/24 maxlen: 24
                          137.32.96.0/24 maxlen: 24
                          137.32.98.0/24 maxlen: 24
                          137.32.101.0/24 maxlen: 24
                          137.32.102.0/24 maxlen: 24
                          137.32.103.0/24 maxlen: 24
                          137.32.108.0/22 maxlen: 22
                          137.32.164.0/24 maxlen: 24
                          137.32.165.0/24 maxlen: 24
                          137.32.166.0/24 maxlen: 24
                          137.32.196.0/24 maxlen: 24
                          137.32.253.0/24 maxlen: 24
                          137.32.254.0/24 maxlen: 24
                          143.114.1.0/24 maxlen: 24
                          143.114.3.0/24 maxlen: 24
                          143.114.6.0/23 maxlen: 24
                          143.114.8.0/24 maxlen: 24
                          143.114.12.0/23 maxlen: 24
                          143.114.16.0/23 maxlen: 24
                          143.114.56.0/22 maxlen: 24
                          143.114.62.0/24 maxlen: 24
                          143.114.63.0/24 maxlen: 24
                          143.114.160.0/22 maxlen: 22
                          192.34.233.0/24 maxlen: 24
                          192.91.148.0/23 maxlen: 24
                          192.91.150.0/24 maxlen: 24
                          192.91.152.0/23 maxlen: 24
                          192.91.160.0/24 maxlen: 24
                          192.91.171.0/24 maxlen: 24
                          192.91.174.0/24 maxlen: 24
                          192.223.37.0/24 maxlen: 24
                          192.223.38.0/24 maxlen: 24
                          192.223.40.0/24 maxlen: 24
                          192.223.42.0/24 maxlen: 24
                          192.223.44.0/24 maxlen: 24
                          192.223.45.0/24 maxlen: 24
                          192.223.48.0/24 maxlen: 24
                          192.223.53.0/24 maxlen: 24
                          192.223.54.0/24 maxlen: 24
                          192.223.56.0/23 maxlen: 24
                          192.223.63.0/24 maxlen: 24
                          204.153.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4bfb8143-b010-4f06-b1de-8c27f25d8b00/4bfb8143-b010-4f06-b1de-8c27f25d8b00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4bfb8143-b010-4f06-b1de-8c27f25d8b00/4bfb8143-b010-4f06-b1de-8c27f25d8b00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4bfb8143-b010-4f06-b1de-8c27f25d8b00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fd:3b:29:9a:8e:a2:fd:b7:55:84:32:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bfb8143-b010-4f06-b1de-8c27f25d8b00
        Validity
            Not Before: May 29 01:00:10 2026 GMT
            Not After : Aug 27 01:00:10 2026 GMT
        Subject: CN=e20195d4-6c44-4cb4-a541-7918e5a0f44e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:9a:51:64:d6:57:e1:7a:1e:33:46:87:ca:4b:
                    25:24:d0:64:38:f7:53:15:4d:d0:93:44:6d:26:f6:
                    84:b2:fe:f1:4a:c2:15:c4:1d:7b:eb:b4:8c:6d:14:
                    6f:64:ba:49:7a:0f:2e:78:16:b5:28:b7:de:ee:b2:
                    6d:db:2a:ec:fe:f9:25:5f:32:8a:2f:db:a3:8d:92:
                    5d:51:e5:54:07:a7:ed:34:92:0f:88:03:6b:18:4a:
                    92:24:74:8d:39:b3:dd:d6:df:8a:5d:a6:06:b0:e5:
                    a8:1a:7c:e2:4d:4d:97:a0:86:ee:5d:96:68:ec:79:
                    90:90:92:c4:25:1b:cb:de:a1:45:0f:87:16:d9:94:
                    21:26:db:72:cf:20:9c:6b:28:20:85:bd:a9:89:fc:
                    5b:90:d3:b7:de:87:fd:c6:46:a0:08:96:11:36:8a:
                    ab:e3:14:38:db:01:23:a4:78:6a:e9:a8:e0:35:0a:
                    69:a1:7b:a1:6c:fc:6f:07:c3:0f:84:89:15:cb:71:
                    3b:66:2a:88:1c:c3:ab:0e:13:33:4e:9b:a8:cf:7a:
                    10:d3:f3:fa:0a:68:8f:45:cf:c5:a6:2b:e0:6b:f8:
                    9a:1b:3c:0d:c2:73:83:0d:b1:e9:05:94:fb:89:09:
                    a2:a3:fb:00:4a:14:3b:1f:96:5a:17:bc:2f:70:49:
                    62:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:C3:69:D0:D2:6B:27:D6:F1:86:59:19:08:3D:2B:0D:FD:56:63:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4bfb8143-b010-4f06-b1de-8c27f25d8b00/f86efe51-fb7a-39fa-b9e9-6bc887b7cea3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4bfb8143-b010-4f06-b1de-8c27f25d8b00/4bfb8143-b010-4f06-b1de-8c27f25d8b00.crl

            X509v3 Authority Key Identifier:
                keyid:5A:DC:99:BC:64:6F:8B:00:FF:1D:4E:B0:0C:1D:CD:67:22:8D:FA:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4bfb8143-b010-4f06-b1de-8c27f25d8b00.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.32.1.0-137.32.4.255
                  137.32.12.0/24
                  137.32.16.0/24
                  137.32.20.0/22
                  137.32.28.0/24
                  137.32.30.0-137.32.35.255
                  137.32.38.0/24
                  137.32.40.0/23
                  137.32.46.0/23
                  137.32.56.0/24
                  137.32.65.0-137.32.66.255
                  137.32.69.0/24
                  137.32.80.0/24
                  137.32.82.0/23
                  137.32.92.0/24
                  137.32.96.0/24
                  137.32.98.0/24
                  137.32.101.0-137.32.103.255
                  137.32.108.0/22
                  137.32.164.0-137.32.166.255
                  137.32.196.0/24
                  137.32.253.0-137.32.254.255
                  143.114.1.0/24
                  143.114.3.0/24
                  143.114.6.0-143.114.8.255
                  143.114.12.0/23
                  143.114.16.0/23
                  143.114.56.0/22
                  143.114.62.0/23
                  143.114.160.0/22
                  192.34.233.0/24
                  192.91.148.0-192.91.150.255
                  192.91.152.0/23
                  192.91.160.0/24
                  192.91.171.0/24
                  192.91.174.0/24
                  192.223.37.0-192.223.38.255
                  192.223.40.0/24
                  192.223.42.0/24
                  192.223.44.0/23
                  192.223.48.0/24
                  192.223.53.0-192.223.54.255
                  192.223.56.0/23
                  192.223.63.0/24
                  204.153.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:8d:05:ad:73:32:d0:e5:ff:41:39:3b:33:1a:e3:1f:13:9d:
         a6:ab:c7:18:42:68:3e:35:42:09:f6:2e:35:d5:bf:0b:08:7a:
         8e:65:96:d7:90:df:3e:8e:18:a8:25:03:e7:22:1f:ba:7f:b7:
         dd:9f:3a:f3:4b:7f:7e:6b:05:6c:cc:bd:f4:d5:35:1e:ed:ee:
         7d:e8:da:45:ec:c5:6b:cb:4c:bb:a6:6b:e9:23:fa:8b:03:21:
         7e:f1:b2:ab:c6:7c:74:e1:5d:1c:2a:8f:2a:52:34:92:94:df:
         fd:85:55:08:c8:42:4f:7c:34:b7:c5:34:5e:cf:1b:b1:3c:5b:
         0f:f8:81:82:e2:72:c7:e0:16:44:99:25:2f:e9:4f:f2:18:7c:
         1c:57:c4:b8:bc:e4:bf:2a:06:1c:aa:d5:71:a4:ac:e7:25:00:
         e9:82:64:3f:62:5d:25:44:2c:24:e5:f9:29:6b:87:9b:36:a3:
         a8:14:2c:d0:20:c9:fb:e9:07:f0:22:49:63:82:58:27:ad:c5:
         5a:8d:ce:e0:86:ea:3c:24:d4:42:15:e4:8e:d9:68:cd:09:c1:
         23:c6:fc:7d:5f:6a:df:d2:28:2c:db:30:c8:a5:a4:28:b5:86:
         78:c6:d5:46:62:3c:0e:e1:9e:18:f1:48:db:1b:7a:7c:36:60:
         27:05:84:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 1 22:00:27 2026 by rpki-client