Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/15adbe77-05e6-3549-9ecb-ba8deecf4b19.roa
File:                     15adbe77-05e6-3549-9ecb-ba8deecf4b19.roa (raw, json)
Hash identifier:          9IMKNm3M6wOi1E5YbEgQdObG5OODSgKIs3zJfO6K3Zw=
Subject key identifier:   84:9F:CF:B7:AE:ED:69:33:7F:4F:81:E2:30:D9:F8:DD:BC:3B:EA:FA
Certificate issuer:       /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial:       010D0C9F4328584F119D1388369639B802B97980
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/15adbe77-05e6-3549-9ecb-ba8deecf4b19.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     25645
IP address blocks:        64.92.64.0/24 maxlen: 24
                          64.92.65.0/24 maxlen: 24
                          64.92.72.0/24 maxlen: 24
                          64.92.75.0/24 maxlen: 24
                          64.92.76.0/24 maxlen: 24
                          64.92.78.0/23 maxlen: 23
                          64.92.84.0/24 maxlen: 24
                          64.92.87.0/24 maxlen: 24
                          64.92.88.0/24 maxlen: 24
                          64.92.89.0/24 maxlen: 24
                          137.239.192.0/24 maxlen: 24
                          137.239.193.0/24 maxlen: 24
                          137.239.195.0/24 maxlen: 24
                          141.193.230.0/24 maxlen: 24
                          148.59.63.0/24 maxlen: 24
                          148.59.139.0/24 maxlen: 24
                          204.16.52.0/24 maxlen: 24
                          204.174.16.0/24 maxlen: 24
                          204.174.18.0/24 maxlen: 24
                          204.174.19.0/24 maxlen: 24
                          204.174.20.0/24 maxlen: 24
                          204.174.21.0/24 maxlen: 24
                          204.174.22.0/24 maxlen: 24
                          204.174.23.0/24 maxlen: 24
                          204.174.24.0/24 maxlen: 24
                          204.174.27.0/24 maxlen: 24
                          209.35.105.0/24 maxlen: 24
                          209.42.160.0/24 maxlen: 24
                          209.42.161.0/24 maxlen: 24
                          209.42.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9d:13:88:36:96:39:b8:02:b9:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=39b4e64b-9503-45f2-bbf7-dde6a1bf65ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e1:80:47:b9:53:4e:81:94:8c:15:b1:79:63:
                    d5:f2:9d:53:88:0e:87:fb:eb:71:a1:1f:e0:85:4d:
                    de:81:5b:b7:3a:08:b6:48:b0:ba:ab:1f:d4:b4:8c:
                    35:e4:04:5b:96:96:94:53:9f:7f:96:3f:61:26:6b:
                    72:c9:aa:23:e8:10:37:18:23:dd:d4:7e:66:1b:5a:
                    96:bf:98:8d:e8:56:3b:40:4c:88:cb:97:ae:be:6a:
                    eb:55:1b:b4:b2:47:5d:d4:04:71:f2:a6:4c:b2:94:
                    28:d2:de:cc:c0:10:8e:cd:c2:a4:9f:32:a5:fd:25:
                    82:04:5a:a0:bd:84:34:0d:5d:56:94:66:32:e9:0b:
                    0a:0f:d9:3d:f2:a8:e3:03:1a:ad:01:88:3c:b1:bc:
                    3e:f9:0d:0c:5c:61:86:4b:f2:37:06:ed:cf:67:ea:
                    6b:ff:05:3f:a5:c7:16:16:10:da:14:2b:61:49:da:
                    3d:e2:0e:5c:ac:da:1f:31:0b:27:e6:c8:7a:cf:97:
                    32:4f:b2:af:2e:ef:3f:d8:0e:c5:3e:b0:8d:a4:5b:
                    19:8f:d3:2a:18:26:11:4d:22:be:09:e1:d5:f0:4f:
                    de:d1:a9:de:93:3f:7f:af:ef:1f:2f:0a:6f:2d:04:
                    2d:5a:17:0d:60:cb:cf:73:23:78:f9:af:13:c4:08:
                    32:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:9F:CF:B7:AE:ED:69:33:7F:4F:81:E2:30:D9:F8:DD:BC:3B:EA:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/15adbe77-05e6-3549-9ecb-ba8deecf4b19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl

            X509v3 Authority Key Identifier:
                keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.92.64.0/23
                  64.92.72.0/24
                  64.92.75.0-64.92.76.255
                  64.92.78.0/23
                  64.92.84.0/24
                  64.92.87.0-64.92.89.255
                  137.239.192.0/23
                  137.239.195.0/24
                  141.193.230.0/24
                  148.59.63.0/24
                  148.59.139.0/24
                  204.16.52.0/24
                  204.174.16.0/24
                  204.174.18.0-204.174.24.255
                  204.174.27.0/24
                  209.35.105.0/24
                  209.42.160.0/23
                  209.42.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:29:43:ff:ba:43:41:5d:d8:6d:8a:8c:52:ab:b7:a2:1a:ac:
         0f:48:80:e8:37:a0:f3:34:ba:65:d4:39:9b:d5:16:7a:24:90:
         a9:bd:29:ae:ec:fd:73:5d:1a:a9:95:f6:5e:c1:5f:18:10:20:
         f7:00:7b:96:af:16:78:03:7f:2a:36:0b:3c:d8:61:d2:be:5d:
         b7:90:57:39:78:a0:8c:08:e3:7a:e5:d9:77:41:ab:f1:22:ea:
         ee:ef:e3:f8:00:95:6d:b0:f1:3d:19:02:79:51:6f:6e:ce:56:
         36:db:93:e9:0e:71:93:b2:f9:13:01:71:b3:fb:dd:d7:92:b4:
         22:ad:3e:7c:51:1b:7a:a8:a4:de:9f:91:24:a7:86:6e:63:19:
         fc:46:b8:4e:45:d3:9a:33:c6:e6:0b:de:cc:ad:54:ea:20:21:
         92:2a:51:d2:31:f0:aa:14:0e:69:7e:40:03:db:c8:4d:9a:17:
         0c:92:76:7b:a5:ce:b3:95:e1:17:dd:d2:8a:5d:7b:f2:e5:b4:
         38:56:8c:f1:da:a5:13:d8:5d:34:a0:b2:1f:93:06:bc:e3:89:
         a9:7d:6a:26:7c:8f:60:d2:66:2e:9c:fb:a4:1c:84:af:47:1e:
         30:b2:cd:f9:8e:5a:3a:14:f6:07:3a:d1:16:2f:82:da:13:f6:
         e5:db:9d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:27:00 2026 by rpki-client