Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/15adbe77-05e6-3549-9ecb-ba8deecf4b19.roa
File:                     15adbe77-05e6-3549-9ecb-ba8deecf4b19.roa (raw, json)
Hash identifier:          lUlSjW8WaY/irfeX+nsOZBIkE4FTPKxkitfYF1HMcwo=
Subject key identifier:   D2:DE:14:37:D2:04:F3:5F:44:B8:BF:0E:37:77:B0:C4:D3:12:71:84
Certificate issuer:       /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial:       010D0C9F4328584D8EF581749B6256015A6D0880
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/15adbe77-05e6-3549-9ecb-ba8deecf4b19.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     25645
IP address blocks:        64.92.64.0/24 maxlen: 24
                          64.92.65.0/24 maxlen: 24
                          64.92.72.0/24 maxlen: 24
                          64.92.75.0/24 maxlen: 24
                          64.92.76.0/24 maxlen: 24
                          64.92.78.0/23 maxlen: 23
                          64.92.84.0/24 maxlen: 24
                          64.92.87.0/24 maxlen: 24
                          64.92.88.0/24 maxlen: 24
                          64.92.89.0/24 maxlen: 24
                          137.239.192.0/24 maxlen: 24
                          137.239.193.0/24 maxlen: 24
                          137.239.195.0/24 maxlen: 24
                          141.193.230.0/24 maxlen: 24
                          148.59.63.0/24 maxlen: 24
                          148.59.139.0/24 maxlen: 24
                          204.16.52.0/24 maxlen: 24
                          204.174.16.0/24 maxlen: 24
                          204.174.18.0/24 maxlen: 24
                          204.174.19.0/24 maxlen: 24
                          204.174.20.0/24 maxlen: 24
                          204.174.21.0/24 maxlen: 24
                          204.174.22.0/24 maxlen: 24
                          204.174.23.0/24 maxlen: 24
                          204.174.24.0/24 maxlen: 24
                          204.174.27.0/24 maxlen: 24
                          209.35.105.0/24 maxlen: 24
                          209.42.160.0/24 maxlen: 24
                          209.42.161.0/24 maxlen: 24
                          209.42.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:81:74:9b:62:56:01:5a:6d:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=00bedd83-8ebe-4216-9c44-1ad7f36082f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:04:8f:bd:8b:6f:8b:a8:a0:76:7a:2a:31:de:
                    66:0e:4a:07:c6:c4:ff:d2:56:0c:61:c1:fa:97:81:
                    c7:dc:d9:91:6d:a1:17:6c:31:d8:93:f0:8f:6c:a2:
                    f8:51:76:cf:4d:f0:96:c6:0d:2e:7f:c9:d6:fc:b0:
                    23:85:21:1b:c9:45:9d:02:19:ec:80:05:09:dd:de:
                    21:2a:b8:0f:44:c9:d4:9f:52:1b:73:ea:db:81:50:
                    60:94:05:6b:c2:fc:71:17:47:32:6e:95:cd:59:56:
                    8f:28:24:be:67:ca:bd:1d:8b:0e:05:08:22:c0:54:
                    85:20:3e:f7:77:f8:07:fc:d8:3e:87:2d:03:92:52:
                    a6:0d:e2:fb:fc:b0:81:0c:83:a1:81:ba:98:cf:fc:
                    c6:35:e9:70:14:ea:73:c4:ab:d0:72:eb:76:47:90:
                    b0:e9:b8:87:75:be:6f:d5:9d:0e:24:ea:b6:6c:f9:
                    2f:ae:36:b2:22:6b:5e:fb:97:e4:0e:46:14:5b:f8:
                    b7:fd:19:c4:2a:d0:6e:dc:65:e0:1e:26:98:c5:9d:
                    96:ae:f4:b6:ad:4c:cd:cb:d1:3f:48:0d:00:a9:d1:
                    b1:26:4f:a8:6a:b6:c2:de:fa:8e:a6:c5:b1:26:2c:
                    f1:d3:55:19:e5:72:5d:16:77:f0:4b:03:ec:cc:46:
                    52:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:DE:14:37:D2:04:F3:5F:44:B8:BF:0E:37:77:B0:C4:D3:12:71:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/15adbe77-05e6-3549-9ecb-ba8deecf4b19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl

            X509v3 Authority Key Identifier:
                keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.92.64.0/23
                  64.92.72.0/24
                  64.92.75.0-64.92.76.255
                  64.92.78.0/23
                  64.92.84.0/24
                  64.92.87.0-64.92.89.255
                  137.239.192.0/23
                  137.239.195.0/24
                  141.193.230.0/24
                  148.59.63.0/24
                  148.59.139.0/24
                  204.16.52.0/24
                  204.174.16.0/24
                  204.174.18.0-204.174.24.255
                  204.174.27.0/24
                  209.35.105.0/24
                  209.42.160.0/23
                  209.42.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:7e:11:9f:c7:68:cf:ad:26:75:cb:58:a5:eb:31:c8:c6:93:
         2b:0f:aa:a8:09:c9:37:c7:05:08:e0:0a:18:85:97:6e:fb:11:
         51:64:fa:97:1b:6f:dc:d3:a5:89:0a:a6:19:a3:38:b4:fa:16:
         36:4a:30:34:38:22:5b:ea:d3:ba:f0:53:a2:42:0d:4f:f5:d7:
         57:45:0d:df:b1:e4:c5:0c:f2:1a:fd:72:2f:6b:3c:24:ce:93:
         26:93:50:4d:52:0c:1b:eb:40:ad:96:c4:67:c2:f4:6e:8e:bd:
         16:f0:78:0c:74:a6:7c:c5:af:19:13:30:64:97:a0:3c:19:ab:
         70:e6:1d:47:fe:4d:7d:2b:b4:ee:72:fc:41:77:97:85:48:6c:
         0a:ae:dc:18:27:88:47:10:d0:0f:31:35:fe:17:d5:70:2e:3e:
         6f:5f:2f:73:06:cc:1a:f5:f0:78:fc:63:fd:9c:fd:d7:c2:26:
         7e:48:70:3d:33:0c:3f:98:a1:18:eb:80:b6:46:33:44:19:34:
         5e:ff:0a:a4:26:82:af:91:6a:11:73:c2:37:fb:47:5b:94:06:
         ff:94:01:31:5d:ca:67:5e:2e:7d:56:b9:3b:f4:74:42:c6:21:
         f0:76:84:db:d2:be:6c:14:4f:43:72:90:7b:9d:a5:3a:34:6c:
         73:4c:6f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:38:43 2026 by rpki-client