Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b51d7dfa-2f7b-45ed-856d-e64e586ecdea/bf9a9b06-aaf2-3523-baca-f6d0c598ef65.roa
File:                     bf9a9b06-aaf2-3523-baca-f6d0c598ef65.roa (raw, json)
Hash identifier:          J99rJdPgUaHnPG/1fKmMio8xT2XULWRnnAIjqFw8vCU=
Subject key identifier:   2A:3B:F0:59:5D:A6:19:84:3D:98:F6:63:5F:8E:A7:E1:B7:6D:80:33
Certificate issuer:       /CN=b51d7dfa-2f7b-45ed-856d-e64e586ecdea
Certificate serial:       010D0C9F4328584F2F947F825BAE64D2D63A85C0
Authority key identifier: 60:4C:E8:6C:D4:A1:E9:F4:6D:35:72:25:DF:85:39:75:3B:6F:39:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b51d7dfa-2f7b-45ed-856d-e64e586ecdea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b51d7dfa-2f7b-45ed-856d-e64e586ecdea/bf9a9b06-aaf2-3523-baca-f6d0c598ef65.roa
Signing time:             Tue 15 Sep 2026 18:37:39 +0000
ROA not before:           Tue 15 Sep 2026 18:37:39 +0000
ROA not after:            Mon 14 Dec 2026 19:37:39 +0000
asID:                     16788
IP address blocks:        64.250.32.0/24 maxlen: 24
                          64.250.33.0/24 maxlen: 24
                          64.250.34.0/24 maxlen: 24
                          64.250.35.0/24 maxlen: 24
                          64.250.36.0/24 maxlen: 24
                          64.250.37.0/24 maxlen: 24
                          64.250.38.0/24 maxlen: 24
                          64.250.39.0/24 maxlen: 24
                          64.250.40.0/24 maxlen: 24
                          64.250.41.0/24 maxlen: 24
                          64.250.42.0/24 maxlen: 24
                          64.250.43.0/24 maxlen: 24
                          64.250.44.0/24 maxlen: 24
                          64.250.45.0/24 maxlen: 24
                          64.250.46.0/24 maxlen: 24
                          64.250.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b51d7dfa-2f7b-45ed-856d-e64e586ecdea/b51d7dfa-2f7b-45ed-856d-e64e586ecdea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b51d7dfa-2f7b-45ed-856d-e64e586ecdea/b51d7dfa-2f7b-45ed-856d-e64e586ecdea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b51d7dfa-2f7b-45ed-856d-e64e586ecdea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2f:94:7f:82:5b:ae:64:d2:d6:3a:85:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b51d7dfa-2f7b-45ed-856d-e64e586ecdea
        Validity
            Not Before: Sep 15 18:37:39 2026 GMT
            Not After : Dec 14 19:37:39 2026 GMT
        Subject: CN=cb08162b-0a5c-405c-be36-ec7b66396fb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:67:2f:cb:83:00:91:55:be:16:45:5d:c0:ca:
                    d0:4a:a9:0a:f2:2b:54:03:e1:c0:01:40:68:28:36:
                    40:e1:62:8f:4b:6a:1a:47:70:5d:30:e2:82:2c:11:
                    5f:98:c4:e1:b3:cb:42:f2:c8:e4:8a:83:56:16:5d:
                    25:e9:97:58:4d:a3:90:73:90:cf:8e:8b:6e:e1:b4:
                    ab:65:50:e6:56:75:da:06:32:5b:53:ab:d3:19:44:
                    6b:af:85:d8:05:9d:07:83:d7:f5:09:3d:58:a0:d9:
                    f3:fa:41:25:48:fa:4a:6c:fa:1d:0d:dc:00:97:d1:
                    c7:32:9b:36:40:a2:ae:38:80:1c:e5:49:81:9f:c9:
                    ad:36:ef:fe:52:b2:b5:d6:89:ce:7a:cf:b0:1a:08:
                    72:43:64:44:d7:af:90:6c:5c:3b:46:8b:b7:05:a6:
                    90:0e:50:11:7f:a0:c8:05:2f:90:7b:41:30:65:17:
                    c3:cd:58:39:87:ea:83:2c:a0:99:93:a7:6e:bc:f4:
                    a6:fb:3c:ca:94:cb:f2:f3:5e:22:7f:fc:64:13:49:
                    8f:2c:fe:57:01:08:c1:1b:0d:5a:1c:e5:ec:58:fe:
                    b9:b0:66:e0:1f:a2:83:f9:bb:fc:1d:7b:f6:40:43:
                    7a:8c:07:e5:47:4c:c3:46:8e:78:3c:e0:d8:d4:a6:
                    a2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:3B:F0:59:5D:A6:19:84:3D:98:F6:63:5F:8E:A7:E1:B7:6D:80:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b51d7dfa-2f7b-45ed-856d-e64e586ecdea/bf9a9b06-aaf2-3523-baca-f6d0c598ef65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b51d7dfa-2f7b-45ed-856d-e64e586ecdea/b51d7dfa-2f7b-45ed-856d-e64e586ecdea.crl

            X509v3 Authority Key Identifier:
                keyid:60:4C:E8:6C:D4:A1:E9:F4:6D:35:72:25:DF:85:39:75:3B:6F:39:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b51d7dfa-2f7b-45ed-856d-e64e586ecdea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.250.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:57:4c:1c:e5:47:e7:b9:53:1f:40:83:b8:b5:6f:f1:bb:48:
         cd:dc:72:83:e1:4a:56:63:2f:63:25:32:30:24:33:4e:9f:27:
         0a:4d:30:fa:69:93:c0:07:68:d5:43:c5:92:e6:97:f4:b6:76:
         33:be:3a:6d:6d:2b:67:47:f3:a4:35:70:7a:b5:b9:84:de:8d:
         78:86:93:85:ac:31:06:aa:bf:90:f0:4a:cf:3d:fc:02:ae:26:
         35:91:09:96:cf:b1:fc:a5:4e:d1:16:4a:4f:04:0c:92:fa:0c:
         30:f3:ec:3d:23:88:63:80:06:a1:85:48:14:d0:e6:e8:e0:c7:
         e4:7b:7f:4c:88:62:89:e5:0d:67:ca:52:3d:bc:7f:8f:7f:1f:
         30:0b:8e:8c:52:17:57:09:39:8e:56:f6:3a:dc:5b:98:43:41:
         10:bd:12:db:3d:89:fe:eb:54:54:39:9b:4f:6c:da:da:be:a7:
         42:50:e9:00:82:66:0c:5e:70:78:a6:d8:3b:33:d3:6b:50:e3:
         46:33:67:b0:bb:dd:dc:82:d7:5f:be:68:e6:c9:5b:37:ce:77:
         a5:2e:13:27:c4:c2:65:0d:d5:0d:4a:14:22:ce:60:73:89:19:
         74:fe:d1:ea:02:ed:65:a1:ad:6e:18:72:83:5b:07:98:1c:89:
         0a:7f:ec:f5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8vlH+CW65k0tY6hcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjUxZDdkZmEtMmY3Yi00NWVkLTg1NmQtZTY0ZTU4NmVj
ZGVhMB4XDTI2MDkxNTE4MzczOVoXDTI2MTIxNDE5MzczOVowLzEtMCsGA1UEAxMk
Y2IwODE2MmItMGE1Yy00MDVjLWJlMzYtZWM3YjY2Mzk2ZmI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGcvy4MAkVW+FkVdwMrQSqkK8itUA+HAAUBo
KDZA4WKPS2oaR3BdMOKCLBFfmMThs8tC8sjkioNWFl0l6ZdYTaOQc5DPjotu4bSr
ZVDmVnXaBjJbU6vTGURrr4XYBZ0Hg9f1CT1YoNnz+kElSPpKbPodDdwAl9HHMps2
QKKuOIAc5UmBn8mtNu/+UrK11onOes+wGghyQ2RE16+QbFw7Rou3BaaQDlARf6DI
BS+Qe0EwZRfDzVg5h+qDLKCZk6duvPSm+zzKlMvy814if/xkE0mPLP5XAQjBGw1a
HOXsWP65sGbgH6KD+bv8HXv2QEN6jAflR0zDRo54PODY1Kai6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCo78FldphmEPZj2Y1+Op+G3bYAzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9iNTFk
N2RmYS0yZjdiLTQ1ZWQtODU2ZC1lNjRlNTg2ZWNkZWEvYmY5YTliMDYtYWFmMi0z
NTIzLWJhY2EtZjZkMGM1OThlZjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvYjUxZDdkZmEtMmY3Yi00NWVkLTg1
NmQtZTY0ZTU4NmVjZGVhL2I1MWQ3ZGZhLTJmN2ItNDVlZC04NTZkLWU2NGU1ODZl
Y2RlYS5jcmwwHwYDVR0jBBgwFoAUYEzobNSh6fRtNXIl34U5dTtvOTkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS9iNTFkN2RmYS0yZjdiLTQ1ZWQtODU2ZC1lNjRl
NTg2ZWNkZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQPogMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIRXTBzlR+e5Ux9Ag7i1b/G7SM3ccoPhSlZjL2MlMjAkM06fJwpNMPpp
k8AHaNVDxZLml/S2djO+Om1tK2dH86Q1cHq1uYTejXiGk4WsMQaqv5DwSs89/AKu
JjWRCZbPsfylTtEWSk8EDJL6DDDz7D0jiGOABqGFSBTQ5ujgx+R7f0yIYonlDWfK
Uj28f49/HzALjoxSF1cJOY5W9jrcW5hDQRC9Ets9if7rVFQ5m09s2tq+p0JQ6QCC
ZgxecHim2Dsz02tQ40YzZ7C73dyC11++aObJWzfOd6UuEyfEwmUN1Q1KFCLOYHOJ
GXT+0eoC7WWhrW4YcoNbB5gciQp/7PU=
-----END CERTIFICATE-----
Generated at Mon Sep 21 15:54:54 2026 by rpki-client