Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cb86dbe-3b06-4085-8f38-2ba13c9589ce/1eebd639-b9b9-3869-b88c-3562e08429c1.roa
File:                     1eebd639-b9b9-3869-b88c-3562e08429c1.roa (raw, json)
Hash identifier:          OEp/yQp+ubfouFXlBSBnFCyBZxB51tXh3r4mTosEWfg=
Subject key identifier:   70:44:A7:31:6A:A5:63:8F:25:9C:AC:1F:B4:FD:F0:28:25:78:E1:E5
Certificate issuer:       /CN=9cb86dbe-3b06-4085-8f38-2ba13c9589ce
Certificate serial:       010D0C9F4328584F5A71D6CBD69D856899984200
Authority key identifier: BE:77:8F:9F:EE:E8:D8:78:D1:4A:D2:E0:B6:F7:F2:FF:4A:F6:20:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cb86dbe-3b06-4085-8f38-2ba13c9589ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cb86dbe-3b06-4085-8f38-2ba13c9589ce/1eebd639-b9b9-3869-b88c-3562e08429c1.roa
Signing time:             Thu 01 Oct 2026 03:07:34 +0000
ROA not before:           Thu 01 Oct 2026 03:07:34 +0000
ROA not after:            Wed 30 Dec 2026 03:46:41 +0000
asID:                     399429
IP address blocks:        142.238.0.0/24 maxlen: 24
                          142.238.33.0/24 maxlen: 24
                          142.238.50.0/24 maxlen: 24
                          142.238.66.0/24 maxlen: 24
                          142.238.68.0/24 maxlen: 24
                          142.238.69.0/24 maxlen: 24
                          142.238.100.0/24 maxlen: 24
                          142.238.134.0/24 maxlen: 24
                          142.238.135.0/24 maxlen: 24
                          142.238.170.0/24 maxlen: 24
                          142.238.171.0/24 maxlen: 24
                          142.238.172.0/24 maxlen: 24
                          142.238.173.0/24 maxlen: 24
                          142.238.174.0/24 maxlen: 24
                          142.238.180.0/24 maxlen: 24
                          142.238.181.0/24 maxlen: 24
                          142.238.182.0/24 maxlen: 24
                          142.238.183.0/24 maxlen: 24
                          142.238.184.0/24 maxlen: 24
                          142.238.192.0/23 maxlen: 23
                          142.238.194.0/24 maxlen: 24
                          142.238.209.0/24 maxlen: 24
                          142.238.210.0/24 maxlen: 24
                          142.238.214.0/24 maxlen: 24
                          142.238.226.0/24 maxlen: 24
                          142.238.227.0/24 maxlen: 24
                          142.238.242.0/24 maxlen: 24
                          142.238.249.0/24 maxlen: 24
                          142.238.250.0/24 maxlen: 24
                          142.238.252.0/24 maxlen: 24
                          142.238.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cb86dbe-3b06-4085-8f38-2ba13c9589ce/9cb86dbe-3b06-4085-8f38-2ba13c9589ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cb86dbe-3b06-4085-8f38-2ba13c9589ce/9cb86dbe-3b06-4085-8f38-2ba13c9589ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cb86dbe-3b06-4085-8f38-2ba13c9589ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5a:71:d6:cb:d6:9d:85:68:99:98:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cb86dbe-3b06-4085-8f38-2ba13c9589ce
        Validity
            Not Before: Oct  1 03:07:34 2026 GMT
            Not After : Dec 30 03:46:41 2026 GMT
        Subject: CN=c6e5265c-0a77-4f4b-a8a1-6ffed0f398a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b4:1e:7e:8f:ef:f2:2a:01:56:26:c7:9b:0f:
                    f4:7a:cb:90:dc:37:48:f4:00:2d:c3:ca:86:41:81:
                    e4:3d:63:22:03:3e:07:e7:03:70:0d:5d:6a:ac:fe:
                    26:83:3d:ad:90:20:91:73:9b:fa:d0:6e:9e:d3:a8:
                    bd:ad:a9:89:87:84:fb:77:04:32:13:be:32:a4:15:
                    0c:64:50:dc:84:d3:30:07:1a:d7:c9:7a:3e:c4:98:
                    d9:96:9a:bb:81:f3:e2:51:b9:06:2f:1d:94:68:aa:
                    b2:b8:b7:9c:e0:a0:84:89:2f:ae:8e:09:69:fb:69:
                    1d:b1:fc:b5:80:6e:63:e4:58:a5:8e:8c:ba:f8:3c:
                    c1:df:0f:2c:3e:00:f8:88:84:39:ec:0d:2c:2e:dd:
                    cb:bb:c0:6f:11:9e:ba:c3:16:06:02:88:5b:8d:b2:
                    a0:a8:16:1a:aa:31:0e:63:c7:4e:a5:ee:de:01:c3:
                    ab:3f:86:a3:65:44:db:58:79:50:b9:e5:aa:fa:0e:
                    98:21:eb:ab:3e:ed:a1:0e:83:f7:0d:e9:8b:2c:e9:
                    53:51:3c:8b:8e:77:67:56:64:a6:ee:41:9a:11:02:
                    d8:ca:80:86:6b:25:07:fc:89:3e:43:bc:f8:51:ae:
                    64:c8:1e:95:2b:d0:43:d2:f0:8c:76:9b:19:32:7b:
                    fe:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:44:A7:31:6A:A5:63:8F:25:9C:AC:1F:B4:FD:F0:28:25:78:E1:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cb86dbe-3b06-4085-8f38-2ba13c9589ce/1eebd639-b9b9-3869-b88c-3562e08429c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cb86dbe-3b06-4085-8f38-2ba13c9589ce/9cb86dbe-3b06-4085-8f38-2ba13c9589ce.crl

            X509v3 Authority Key Identifier:
                keyid:BE:77:8F:9F:EE:E8:D8:78:D1:4A:D2:E0:B6:F7:F2:FF:4A:F6:20:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cb86dbe-3b06-4085-8f38-2ba13c9589ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.238.0.0/24
                  142.238.33.0/24
                  142.238.50.0/24
                  142.238.66.0/24
                  142.238.68.0/23
                  142.238.100.0/24
                  142.238.134.0/23
                  142.238.170.0-142.238.174.255
                  142.238.180.0-142.238.184.255
                  142.238.192.0-142.238.194.255
                  142.238.209.0-142.238.210.255
                  142.238.214.0/24
                  142.238.226.0/23
                  142.238.242.0/24
                  142.238.249.0-142.238.250.255
                  142.238.252.0/24
                  142.238.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:02:35:6f:28:3b:d6:22:02:4c:1c:9a:95:e6:ad:63:fd:4b:
         eb:e3:a2:a6:09:b8:79:4c:2f:84:1d:5f:83:35:2a:bf:bd:ae:
         71:00:91:c2:5e:bc:95:a0:b6:12:15:c6:8b:ad:98:f5:79:7c:
         2d:01:49:f5:4d:78:f9:78:54:31:3a:67:67:4a:46:78:c4:ef:
         f2:3a:cc:a2:6f:0d:c4:58:04:42:2a:03:3a:95:04:72:f6:08:
         50:a1:50:dc:ff:75:41:14:6f:c4:8a:61:e8:57:7b:1e:a9:42:
         bd:dc:22:86:5c:5a:97:2b:20:70:34:b2:60:60:b4:f2:f8:16:
         7c:93:89:ef:db:52:b4:b2:ce:8d:39:39:a2:13:ae:48:f4:5f:
         13:82:ee:75:59:34:27:ac:ee:d4:cf:d2:7e:3c:01:c7:0b:d9:
         28:1e:d1:59:bd:43:b0:d3:53:5e:cd:d9:cf:b5:7a:4f:83:5d:
         68:fb:38:37:84:d2:8c:ca:a9:04:0f:0c:be:a6:7a:20:4f:81:
         ab:1d:13:29:0c:b6:10:0b:1a:cb:f2:48:a4:34:4f:1c:3b:4d:
         fc:9c:0b:88:b1:80:55:37:4e:51:08:1f:2f:ed:a0:ce:03:78:
         9a:8c:51:8c:82:b7:b4:f3:ed:0d:be:45:a8:68:71:15:3d:02:
         9b:fa:55:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 04:34:43 2026 by rpki-client