Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4bfb8143-b010-4f06-b1de-8c27f25d8b00/f86efe51-fb7a-39fa-b9e9-6bc887b7cea3.roa
File:                     f86efe51-fb7a-39fa-b9e9-6bc887b7cea3.roa (raw, json)
Hash identifier:          uBoIUOB9xa6HgP1wpaqgdWf74DWFv2HOThB38ycsYFA=
Subject key identifier:   F2:02:40:2A:E9:46:98:66:7C:96:39:CB:64:6B:DA:C4:12:58:23:64
Certificate issuer:       /CN=4bfb8143-b010-4f06-b1de-8c27f25d8b00
Certificate serial:       010D0C9F4328584F49749A1F8F6DAEFBC44E0480
Authority key identifier: 5A:DC:99:BC:64:6F:8B:00:FF:1D:4E:B0:0C:1D:CD:67:22:8D:FA:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4bfb8143-b010-4f06-b1de-8c27f25d8b00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4bfb8143-b010-4f06-b1de-8c27f25d8b00/f86efe51-fb7a-39fa-b9e9-6bc887b7cea3.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     6075
IP address blocks:        137.32.1.0/24 maxlen: 24
                          137.32.2.0/24 maxlen: 24
                          137.32.3.0/24 maxlen: 24
                          137.32.4.0/24 maxlen: 24
                          137.32.12.0/24 maxlen: 24
                          137.32.16.0/24 maxlen: 24
                          137.32.20.0/22 maxlen: 22
                          137.32.28.0/24 maxlen: 24
                          137.32.30.0/24 maxlen: 24
                          137.32.31.0/24 maxlen: 24
                          137.32.32.0/24 maxlen: 24
                          137.32.33.0/24 maxlen: 24
                          137.32.34.0/23 maxlen: 23
                          137.32.38.0/24 maxlen: 24
                          137.32.40.0/24 maxlen: 24
                          137.32.41.0/24 maxlen: 24
                          137.32.46.0/23 maxlen: 23
                          137.32.56.0/24 maxlen: 24
                          137.32.65.0/24 maxlen: 24
                          137.32.66.0/24 maxlen: 24
                          137.32.69.0/24 maxlen: 24
                          137.32.80.0/24 maxlen: 24
                          137.32.82.0/23 maxlen: 24
                          137.32.92.0/24 maxlen: 24
                          137.32.96.0/24 maxlen: 24
                          137.32.98.0/24 maxlen: 24
                          137.32.101.0/24 maxlen: 24
                          137.32.102.0/24 maxlen: 24
                          137.32.103.0/24 maxlen: 24
                          137.32.108.0/22 maxlen: 22
                          137.32.164.0/24 maxlen: 24
                          137.32.165.0/24 maxlen: 24
                          137.32.166.0/24 maxlen: 24
                          137.32.196.0/24 maxlen: 24
                          137.32.253.0/24 maxlen: 24
                          137.32.254.0/24 maxlen: 24
                          143.114.1.0/24 maxlen: 24
                          143.114.3.0/24 maxlen: 24
                          143.114.6.0/23 maxlen: 24
                          143.114.8.0/24 maxlen: 24
                          143.114.12.0/23 maxlen: 24
                          143.114.16.0/23 maxlen: 24
                          143.114.56.0/22 maxlen: 24
                          143.114.62.0/24 maxlen: 24
                          143.114.63.0/24 maxlen: 24
                          143.114.160.0/22 maxlen: 22
                          192.34.233.0/24 maxlen: 24
                          192.91.148.0/23 maxlen: 24
                          192.91.150.0/24 maxlen: 24
                          192.91.152.0/23 maxlen: 24
                          192.91.160.0/24 maxlen: 24
                          192.91.171.0/24 maxlen: 24
                          192.91.174.0/24 maxlen: 24
                          192.223.37.0/24 maxlen: 24
                          192.223.38.0/24 maxlen: 24
                          192.223.40.0/24 maxlen: 24
                          192.223.42.0/24 maxlen: 24
                          192.223.44.0/24 maxlen: 24
                          192.223.45.0/24 maxlen: 24
                          192.223.48.0/24 maxlen: 24
                          192.223.53.0/24 maxlen: 24
                          192.223.54.0/24 maxlen: 24
                          192.223.56.0/23 maxlen: 24
                          192.223.63.0/24 maxlen: 24
                          204.153.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4bfb8143-b010-4f06-b1de-8c27f25d8b00/4bfb8143-b010-4f06-b1de-8c27f25d8b00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4bfb8143-b010-4f06-b1de-8c27f25d8b00/4bfb8143-b010-4f06-b1de-8c27f25d8b00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4bfb8143-b010-4f06-b1de-8c27f25d8b00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:9a:1f:8f:6d:ae:fb:c4:4e:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bfb8143-b010-4f06-b1de-8c27f25d8b00
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=394b65ba-347a-4cd6-a2d5-c66144416e87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:63:c6:0a:a9:c0:27:48:43:45:79:d7:f2:8e:
                    c3:1f:c2:01:09:38:cf:47:c9:49:bf:b0:aa:14:fa:
                    ee:03:c7:ba:6a:d2:40:27:0b:15:24:07:9b:30:ae:
                    57:aa:04:9d:06:f3:26:ea:03:2b:3a:0d:97:b5:9a:
                    af:24:68:6c:70:a4:0e:79:83:53:cc:f6:44:32:bb:
                    59:88:b3:82:94:28:8a:e3:1a:a5:b5:0a:32:9b:a0:
                    ac:bb:28:00:d9:6f:3a:17:d7:79:ba:a0:13:ec:2a:
                    c3:cd:89:f7:01:22:b2:12:48:81:89:81:df:b7:71:
                    6d:58:a7:79:ea:ed:d1:49:c4:c5:2b:b7:07:2f:a4:
                    dd:0b:2d:28:2b:f7:39:cb:98:00:c2:54:9f:d4:02:
                    20:e4:f6:f4:13:3d:2e:5f:64:95:b1:71:52:f0:dc:
                    a8:f5:17:57:77:a9:99:a8:59:f8:fe:d5:70:67:e9:
                    b0:3f:00:7b:70:2f:e7:46:f1:46:7b:ad:60:b4:4d:
                    b7:02:51:f3:51:11:29:b3:6d:b1:f9:34:72:2d:1e:
                    75:78:09:13:5f:67:8c:f8:10:7c:31:fc:f7:cc:63:
                    18:f2:c3:b5:23:2c:41:5f:2d:b1:ad:4d:1b:10:16:
                    ff:60:4d:b5:77:9a:96:03:d9:20:68:38:d7:04:82:
                    0d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:02:40:2A:E9:46:98:66:7C:96:39:CB:64:6B:DA:C4:12:58:23:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4bfb8143-b010-4f06-b1de-8c27f25d8b00/f86efe51-fb7a-39fa-b9e9-6bc887b7cea3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4bfb8143-b010-4f06-b1de-8c27f25d8b00/4bfb8143-b010-4f06-b1de-8c27f25d8b00.crl

            X509v3 Authority Key Identifier:
                keyid:5A:DC:99:BC:64:6F:8B:00:FF:1D:4E:B0:0C:1D:CD:67:22:8D:FA:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4bfb8143-b010-4f06-b1de-8c27f25d8b00.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.32.1.0-137.32.4.255
                  137.32.12.0/24
                  137.32.16.0/24
                  137.32.20.0/22
                  137.32.28.0/24
                  137.32.30.0-137.32.35.255
                  137.32.38.0/24
                  137.32.40.0/23
                  137.32.46.0/23
                  137.32.56.0/24
                  137.32.65.0-137.32.66.255
                  137.32.69.0/24
                  137.32.80.0/24
                  137.32.82.0/23
                  137.32.92.0/24
                  137.32.96.0/24
                  137.32.98.0/24
                  137.32.101.0-137.32.103.255
                  137.32.108.0/22
                  137.32.164.0-137.32.166.255
                  137.32.196.0/24
                  137.32.253.0-137.32.254.255
                  143.114.1.0/24
                  143.114.3.0/24
                  143.114.6.0-143.114.8.255
                  143.114.12.0/23
                  143.114.16.0/23
                  143.114.56.0/22
                  143.114.62.0/23
                  143.114.160.0/22
                  192.34.233.0/24
                  192.91.148.0-192.91.150.255
                  192.91.152.0/23
                  192.91.160.0/24
                  192.91.171.0/24
                  192.91.174.0/24
                  192.223.37.0-192.223.38.255
                  192.223.40.0/24
                  192.223.42.0/24
                  192.223.44.0/23
                  192.223.48.0/24
                  192.223.53.0-192.223.54.255
                  192.223.56.0/23
                  192.223.63.0/24
                  204.153.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:b5:43:4a:dc:6e:d5:18:de:99:85:20:c0:05:b2:ee:3e:da:
         e0:41:ab:3e:d6:eb:47:de:86:47:c2:31:56:95:7d:d2:6e:c9:
         c7:ee:00:df:5d:20:cd:c0:bc:c2:af:b6:56:35:c0:af:3a:4b:
         82:87:6e:f9:c9:cf:05:99:5c:ae:13:10:75:a7:6e:23:32:f5:
         d9:b5:55:19:d2:0d:b2:f0:91:e8:60:c9:0b:3a:08:7c:6e:fb:
         53:81:69:d6:43:67:a4:c5:34:63:66:e6:32:9e:78:cc:ca:d6:
         37:f0:3e:fe:88:10:55:d9:06:e2:00:b4:6a:b2:4d:6b:09:f3:
         bc:f4:b8:78:0d:15:02:ca:00:3a:35:5e:e0:c8:71:77:d5:f8:
         99:38:fc:fd:88:b3:57:28:d2:5a:e1:2e:26:98:78:43:8b:36:
         70:a8:11:58:77:60:1c:81:46:0f:0b:8c:87:70:94:45:2c:9b:
         af:cc:a1:2b:82:15:ea:58:fd:2d:d9:24:d5:1d:cc:fb:19:f2:
         5a:0e:21:ff:e6:99:60:5f:dc:a1:c7:e4:a4:7b:f9:5f:ec:d2:
         d7:b9:b7:a5:e7:4a:35:1e:ff:49:2e:1e:48:4c:10:55:1b:24:
         dd:89:25:cf:83:08:53:4b:c2:2e:47:bc:05:a3:b3:12:f7:80:
         61:37:2d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:27:14 2026 by rpki-client