Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/8d6a7436-9f91-31be-ab9b-e3a8a4e0d704.roa
File:                     8d6a7436-9f91-31be-ab9b-e3a8a4e0d704.roa (raw, json)
Hash identifier:          S0JJwEWG/B2zPP/bEZa27o0I08M6k+5pd6xSBDmQ/h0=
Subject key identifier:   DC:4C:86:F3:45:5A:C2:AB:4B:8B:F5:A3:CB:24:80:4E:9B:4D:35:07
Certificate issuer:       /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial:       010D0C9F4328584F46574D7170E533F4AE98CD00
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/8d6a7436-9f91-31be-ab9b-e3a8a4e0d704.roa
Signing time:             Wed 23 Sep 2026 22:17:56 +0000
ROA not before:           Wed 23 Sep 2026 22:17:56 +0000
ROA not after:            Wed 18 Nov 2026 02:00:12 +0000
asID:                     26496
IP address blocks:        64.202.168.0/24 maxlen: 24
                          64.202.174.0/24 maxlen: 24
                          64.202.184.0/21 maxlen: 24
                          72.167.25.0/24 maxlen: 24
                          72.167.230.0/24 maxlen: 24
                          72.167.241.0/24 maxlen: 24
                          72.167.242.0/23 maxlen: 24
                          97.74.72.0/22 maxlen: 24
                          97.74.76.0/24 maxlen: 24
                          104.238.68.0/22 maxlen: 24
                          107.180.0.0/18 maxlen: 24
                          132.148.92.0/24 maxlen: 24
                          132.148.184.0/21 maxlen: 24
                          148.72.4.0/22 maxlen: 24
                          148.72.16.0/22 maxlen: 24
                          160.153.1.0/24 maxlen: 24
                          160.153.136.0/23 maxlen: 24
                          160.153.138.0/24 maxlen: 24
                          160.153.168.0/24 maxlen: 24
                          166.62.104.0/21 maxlen: 24
                          166.62.112.0/22 maxlen: 24
                          192.169.220.0/22 maxlen: 24
                          198.12.144.0/23 maxlen: 24
                          198.71.188.0/22 maxlen: 24
                          198.71.224.0/21 maxlen: 24
                          198.71.232.0/23 maxlen: 24
                          198.71.248.0/22 maxlen: 24
                          198.71.254.0/24 maxlen: 24
                          208.109.132.0/23 maxlen: 24
                          208.109.136.0/23 maxlen: 24
                          208.109.139.0/24 maxlen: 24
                          208.109.140.0/22 maxlen: 24
                          208.109.144.0/22 maxlen: 24
                          208.109.148.0/24 maxlen: 24
                          208.109.151.0/24 maxlen: 24
                          208.109.152.0/23 maxlen: 24
                          208.109.154.0/24 maxlen: 24
                          208.109.156.0/22 maxlen: 24
                          2603:4:1000::/47 maxlen: 48
                          2603:4:1004::/47 maxlen: 48
                          2603:4:100a::/47 maxlen: 48
                          2603:4:100c::/46 maxlen: 48
                          2603:4:1010::/46 maxlen: 48
                          2603:4:1014::/47 maxlen: 48
                          2603:4:1016::/48 maxlen: 48
                          2603:4:1019::/48 maxlen: 48
                          2603:4:101c::/46 maxlen: 48
                          2603:4:1500::/48 maxlen: 48
                          2603:4:1504::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:46:57:4d:71:70:e5:33:f4:ae:98:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
        Validity
            Not Before: Sep 23 22:17:56 2026 GMT
            Not After : Nov 18 02:00:12 2026 GMT
        Subject: CN=7d529a01-c6c0-4d02-be4b-5bcf6fdbc998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a9:ef:62:35:22:3f:61:7e:79:27:0d:16:42:
                    46:03:ef:5f:c4:37:22:cc:50:9f:31:44:41:9d:f0:
                    da:95:34:23:78:93:19:55:b9:a1:1c:0a:a9:ed:41:
                    cb:ad:db:c3:bd:4b:95:22:7b:89:64:b7:61:b9:db:
                    c8:c0:e0:d3:3a:b5:dc:bf:d8:0a:31:51:ca:26:d9:
                    26:ef:f6:79:57:0a:a5:eb:c5:17:bb:f5:23:30:c2:
                    9d:4f:13:3c:7b:f0:2a:fe:25:6e:af:b9:f6:b8:a4:
                    7e:b8:00:79:ff:0e:64:3c:bc:59:60:d0:4b:fb:34:
                    14:3d:8b:7a:0b:56:37:46:3d:80:18:2f:bc:ae:9b:
                    78:35:c5:ba:54:d4:37:c9:be:f6:e5:3f:25:15:21:
                    37:99:42:23:c4:bd:19:98:e1:80:0f:e9:d9:6a:a2:
                    22:72:ad:7d:15:0a:6a:c1:e2:a1:e0:39:9d:bc:2c:
                    a1:0a:67:2f:91:90:bf:1d:90:31:6c:15:17:db:8c:
                    d0:11:f7:2b:2a:c9:59:2c:77:07:9e:c5:c8:42:0f:
                    f1:8f:12:29:e9:b9:82:c4:46:c0:ec:e2:94:a2:09:
                    1b:f2:1d:71:63:7d:d5:69:45:4e:cd:48:d7:0e:63:
                    6d:09:8f:95:1d:a9:f9:e0:75:7d:f9:4e:9f:3c:e5:
                    14:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:4C:86:F3:45:5A:C2:AB:4B:8B:F5:A3:CB:24:80:4E:9B:4D:35:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/8d6a7436-9f91-31be-ab9b-e3a8a4e0d704.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl

            X509v3 Authority Key Identifier:
                keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.202.168.0/24
                  64.202.174.0/24
                  64.202.184.0/21
                  72.167.25.0/24
                  72.167.230.0/24
                  72.167.241.0-72.167.243.255
                  97.74.72.0-97.74.76.255
                  104.238.68.0/22
                  107.180.0.0/18
                  132.148.92.0/24
                  132.148.184.0/21
                  148.72.4.0/22
                  148.72.16.0/22
                  160.153.1.0/24
                  160.153.136.0-160.153.138.255
                  160.153.168.0/24
                  166.62.104.0-166.62.115.255
                  192.169.220.0/22
                  198.12.144.0/23
                  198.71.188.0/22
                  198.71.224.0-198.71.233.255
                  198.71.248.0/22
                  198.71.254.0/24
                  208.109.132.0/23
                  208.109.136.0/23
                  208.109.139.0-208.109.148.255
                  208.109.151.0-208.109.154.255
                  208.109.156.0/22
                IPv6:
                  2603:4:1000::/47
                  2603:4:1004::/47
                  2603:4:100a::-2603:4:1016:ffff:ffff:ffff:ffff:ffff
                  2603:4:1019::/48
                  2603:4:101c::/46
                  2603:4:1500::/48
                  2603:4:1504::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:f8:ea:dd:b7:21:81:55:25:49:92:90:2c:1d:a0:0c:55:ab:
         75:0f:0d:66:4a:73:f4:d1:9b:76:ca:8d:55:c9:19:4a:0d:8b:
         01:27:04:21:30:2e:71:38:8b:e3:42:e0:d5:bf:71:26:0c:b5:
         05:c8:65:41:c4:d5:6c:01:45:78:4d:59:5d:a8:02:3b:90:5d:
         82:ef:bf:1e:2d:cd:6a:0d:0a:52:c8:46:a0:74:a0:69:7f:58:
         47:6c:4c:78:a8:38:07:05:58:d9:55:7c:26:5a:e6:67:2b:b9:
         c4:9b:a0:d6:7b:4d:88:d4:cb:b8:ee:35:4b:0d:f9:b2:cf:c2:
         66:40:71:66:47:4b:8c:f0:e3:14:98:fc:dd:13:53:74:ac:61:
         38:d5:80:8b:66:e0:d5:26:c4:6c:d1:f9:3f:d7:87:bd:92:c0:
         8e:4d:dc:42:71:81:fd:53:7e:ef:40:64:ea:dd:bc:cc:45:fa:
         d9:a9:1b:21:13:db:17:cb:7b:52:81:b5:b7:70:de:c9:89:5e:
         83:fd:e3:48:d8:ed:52:8e:8d:10:da:37:94:14:b5:36:b7:40:
         4e:95:63:e2:b5:28:85:e2:8e:4f:77:b8:f0:88:a1:04:df:e9:
         a2:09:78:b9:40:d3:ea:8d:44:a5:cc:8e:a5:bd:2b:c8:95:9a:
         1a:5a:75:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:45:01 2026 by rpki-client