Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e75a672e-9319-4a5d-8a0e-142beede6b80/0ce97772-3686-340f-a759-d356587c2e19.roa
File:                     0ce97772-3686-340f-a759-d356587c2e19.roa (raw, json)
Hash identifier:          SM+riHQ7srHoXpeaAMGE780d341rGAilkKBkEw4ZDI0=
Subject key identifier:   60:3D:76:68:A5:0C:3D:2E:FA:24:9F:A2:8C:4D:4C:EA:3D:D8:56:4F
Certificate issuer:       /CN=e75a672e-9319-4a5d-8a0e-142beede6b80
Certificate serial:       010D0C9F4328584F050CC3CCC8FFC46A4DE0B940
Authority key identifier: BE:BE:54:C6:57:7F:37:40:FF:29:18:B4:15:22:D8:23:F9:82:F8:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e75a672e-9319-4a5d-8a0e-142beede6b80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e75a672e-9319-4a5d-8a0e-142beede6b80/0ce97772-3686-340f-a759-d356587c2e19.roa
Signing time:             Mon 31 Aug 2026 13:00:12 +0000
ROA not before:           Mon 31 Aug 2026 13:00:12 +0000
ROA not after:            Sun 29 Nov 2026 14:00:12 +0000
asID:                     397067
IP address blocks:        64.5.0.0/19 maxlen: 19
                          64.5.0.0/24 maxlen: 24
                          64.5.1.0/24 maxlen: 24
                          64.5.2.0/24 maxlen: 24
                          64.5.3.0/24 maxlen: 24
                          64.5.4.0/24 maxlen: 24
                          64.5.5.0/24 maxlen: 24
                          64.5.6.0/24 maxlen: 24
                          64.5.7.0/24 maxlen: 24
                          64.5.8.0/24 maxlen: 24
                          64.5.9.0/24 maxlen: 24
                          64.5.10.0/24 maxlen: 24
                          64.5.11.0/24 maxlen: 24
                          64.5.12.0/24 maxlen: 24
                          64.5.13.0/24 maxlen: 24
                          64.5.14.0/24 maxlen: 24
                          64.5.15.0/24 maxlen: 24
                          64.5.16.0/24 maxlen: 24
                          64.5.17.0/24 maxlen: 24
                          64.5.18.0/24 maxlen: 24
                          64.5.19.0/24 maxlen: 24
                          64.5.20.0/24 maxlen: 24
                          64.5.21.0/24 maxlen: 24
                          64.5.22.0/24 maxlen: 24
                          64.5.23.0/24 maxlen: 24
                          64.5.24.0/24 maxlen: 24
                          64.5.25.0/24 maxlen: 24
                          64.5.26.0/24 maxlen: 24
                          64.5.27.0/24 maxlen: 24
                          64.5.28.0/24 maxlen: 24
                          64.5.29.0/24 maxlen: 24
                          64.5.30.0/24 maxlen: 24
                          64.5.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e75a672e-9319-4a5d-8a0e-142beede6b80/e75a672e-9319-4a5d-8a0e-142beede6b80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e75a672e-9319-4a5d-8a0e-142beede6b80/e75a672e-9319-4a5d-8a0e-142beede6b80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e75a672e-9319-4a5d-8a0e-142beede6b80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:05:0c:c3:cc:c8:ff:c4:6a:4d:e0:b9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e75a672e-9319-4a5d-8a0e-142beede6b80
        Validity
            Not Before: Aug 31 13:00:12 2026 GMT
            Not After : Nov 29 14:00:12 2026 GMT
        Subject: CN=0db30ee8-3a7a-4790-b0db-5629b1b320a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:99:8b:3c:0a:aa:16:a9:b9:56:03:5b:02:07:
                    47:54:76:ea:55:46:ea:9f:c2:41:26:5a:0f:21:24:
                    8f:f3:08:a5:f8:90:7b:62:ea:d6:90:18:a0:84:f0:
                    db:07:dd:fb:04:a6:c8:9b:65:a7:9e:43:84:b2:c9:
                    d6:81:e1:f5:15:eb:64:77:55:96:e6:a7:d2:da:4d:
                    c8:15:6f:33:53:f4:60:5e:76:bd:51:1f:b7:07:4a:
                    ed:f4:4b:8c:bc:b0:67:8f:ec:f2:b8:45:89:7b:ca:
                    3b:ad:5e:af:2c:32:92:f0:11:c1:47:4c:7c:c1:4e:
                    e2:b5:b1:9c:67:be:95:b8:c6:a9:6d:a9:aa:f1:c9:
                    88:c3:b7:ee:37:88:81:b2:8e:2c:b4:1a:df:87:4c:
                    10:ec:ab:2c:36:c5:dd:17:59:bc:bb:b6:56:3a:ad:
                    ba:a9:18:5e:f7:b0:2e:d6:b8:aa:d3:80:b5:86:6a:
                    8f:04:d2:b6:0b:68:ef:88:63:db:72:ea:77:da:99:
                    20:41:6d:46:98:c1:8a:c5:ad:63:c1:93:67:2e:6f:
                    9c:fd:be:2d:4a:b0:b9:8e:26:32:b9:15:7e:c5:e6:
                    f3:f8:ed:75:64:3f:64:fc:32:a6:fa:90:84:be:b1:
                    35:86:df:02:5d:27:03:87:18:d9:d4:98:5e:ad:29:
                    c4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:3D:76:68:A5:0C:3D:2E:FA:24:9F:A2:8C:4D:4C:EA:3D:D8:56:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e75a672e-9319-4a5d-8a0e-142beede6b80/0ce97772-3686-340f-a759-d356587c2e19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e75a672e-9319-4a5d-8a0e-142beede6b80/e75a672e-9319-4a5d-8a0e-142beede6b80.crl

            X509v3 Authority Key Identifier:
                keyid:BE:BE:54:C6:57:7F:37:40:FF:29:18:B4:15:22:D8:23:F9:82:F8:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e75a672e-9319-4a5d-8a0e-142beede6b80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.5.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:e6:f1:f9:9f:7c:fd:c4:f0:77:01:d0:a0:4e:2e:1d:38:3f:
         4b:f9:f1:03:92:13:b6:c4:b0:d9:49:fb:e0:8e:a6:09:a0:b6:
         c7:ea:bf:e7:b1:dc:1a:b1:f7:fd:12:17:bf:b8:dd:b2:a2:e4:
         51:7d:70:8e:2a:0b:c2:cc:b7:9f:1d:e2:c9:36:9b:60:7e:95:
         c4:4c:06:2e:3b:dc:ac:2d:13:c7:58:2b:f7:3a:80:a7:c9:c3:
         87:88:c1:7b:ef:3d:44:e0:eb:28:20:eb:c8:c3:eb:c7:94:14:
         b2:77:a3:94:80:20:68:45:75:2f:00:bb:2d:2e:68:9c:bb:51:
         67:ea:81:aa:8a:83:7b:da:ce:ac:95:4d:3a:c3:68:80:8e:6e:
         de:c2:27:83:05:d5:53:dc:35:1e:25:4c:b0:21:47:dd:d8:eb:
         4a:0b:87:aa:9e:83:89:9c:ca:4a:cb:3e:88:b4:64:79:5e:52:
         65:45:1f:4a:c0:d4:f1:31:7a:53:02:ba:38:b2:e1:c1:c7:7c:
         7c:c8:36:1a:78:9f:2d:ff:57:4a:13:94:2d:13:e2:75:1f:96:
         d7:c2:ef:be:a6:a7:33:11:93:3e:99:ae:ab:8c:88:59:ea:f4:
         0b:ac:9f:55:31:14:d6:95:2b:dd:38:b2:63:27:0a:4c:ac:e5:
         bf:6d:97:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:40:18 2026 by rpki-client