Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4bfb8143-b010-4f06-b1de-8c27f25d8b00/f86efe51-fb7a-39fa-b9e9-6bc887b7cea3.roa
File:                     f86efe51-fb7a-39fa-b9e9-6bc887b7cea3.roa (raw, json)
Hash identifier:          ffrHIeze3WIOGd+C/DsOKQrNmVZ2cIo0yHw5ggDQkR8=
Subject key identifier:   EC:8F:EE:6A:B9:61:CA:6D:01:4A:78:FA:EA:74:E3:D6:FD:7F:6D:46
Certificate issuer:       /CN=4bfb8143-b010-4f06-b1de-8c27f25d8b00
Certificate serial:       010D0C9F4328584D24F63050248D31A48E97E100
Authority key identifier: 5A:DC:99:BC:64:6F:8B:00:FF:1D:4E:B0:0C:1D:CD:67:22:8D:FA:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4bfb8143-b010-4f06-b1de-8c27f25d8b00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4bfb8143-b010-4f06-b1de-8c27f25d8b00/f86efe51-fb7a-39fa-b9e9-6bc887b7cea3.roa
Signing time:             Mon 09 Mar 2026 21:00:35 +0000
ROA not before:           Mon 09 Mar 2026 21:00:35 +0000
ROA not after:            Sun 07 Jun 2026 21:00:35 +0000
asID:                     6075
IP address blocks:        137.32.1.0/24 maxlen: 24
                          137.32.2.0/24 maxlen: 24
                          137.32.3.0/24 maxlen: 24
                          137.32.4.0/24 maxlen: 24
                          137.32.12.0/24 maxlen: 24
                          137.32.16.0/24 maxlen: 24
                          137.32.20.0/22 maxlen: 22
                          137.32.28.0/24 maxlen: 24
                          137.32.30.0/24 maxlen: 24
                          137.32.31.0/24 maxlen: 24
                          137.32.32.0/24 maxlen: 24
                          137.32.33.0/24 maxlen: 24
                          137.32.34.0/23 maxlen: 23
                          137.32.38.0/24 maxlen: 24
                          137.32.40.0/24 maxlen: 24
                          137.32.41.0/24 maxlen: 24
                          137.32.46.0/23 maxlen: 23
                          137.32.56.0/24 maxlen: 24
                          137.32.65.0/24 maxlen: 24
                          137.32.66.0/24 maxlen: 24
                          137.32.69.0/24 maxlen: 24
                          137.32.80.0/24 maxlen: 24
                          137.32.82.0/23 maxlen: 24
                          137.32.92.0/24 maxlen: 24
                          137.32.96.0/24 maxlen: 24
                          137.32.98.0/24 maxlen: 24
                          137.32.101.0/24 maxlen: 24
                          137.32.102.0/24 maxlen: 24
                          137.32.103.0/24 maxlen: 24
                          137.32.108.0/22 maxlen: 22
                          137.32.164.0/24 maxlen: 24
                          137.32.165.0/24 maxlen: 24
                          137.32.166.0/24 maxlen: 24
                          137.32.196.0/24 maxlen: 24
                          137.32.253.0/24 maxlen: 24
                          137.32.254.0/24 maxlen: 24
                          143.114.1.0/24 maxlen: 24
                          143.114.3.0/24 maxlen: 24
                          143.114.6.0/23 maxlen: 24
                          143.114.8.0/24 maxlen: 24
                          143.114.12.0/23 maxlen: 24
                          143.114.16.0/23 maxlen: 24
                          143.114.56.0/22 maxlen: 24
                          143.114.62.0/24 maxlen: 24
                          143.114.63.0/24 maxlen: 24
                          143.114.160.0/22 maxlen: 22
                          192.34.233.0/24 maxlen: 24
                          192.91.148.0/23 maxlen: 24
                          192.91.150.0/24 maxlen: 24
                          192.91.152.0/23 maxlen: 24
                          192.91.160.0/24 maxlen: 24
                          192.91.171.0/24 maxlen: 24
                          192.91.174.0/24 maxlen: 24
                          192.223.37.0/24 maxlen: 24
                          192.223.38.0/24 maxlen: 24
                          192.223.40.0/24 maxlen: 24
                          192.223.42.0/24 maxlen: 24
                          192.223.44.0/24 maxlen: 24
                          192.223.45.0/24 maxlen: 24
                          192.223.48.0/24 maxlen: 24
                          192.223.53.0/24 maxlen: 24
                          192.223.54.0/24 maxlen: 24
                          192.223.56.0/23 maxlen: 24
                          192.223.63.0/24 maxlen: 24
                          204.153.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4bfb8143-b010-4f06-b1de-8c27f25d8b00/4bfb8143-b010-4f06-b1de-8c27f25d8b00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4bfb8143-b010-4f06-b1de-8c27f25d8b00/4bfb8143-b010-4f06-b1de-8c27f25d8b00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4bfb8143-b010-4f06-b1de-8c27f25d8b00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:f6:30:50:24:8d:31:a4:8e:97:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bfb8143-b010-4f06-b1de-8c27f25d8b00
        Validity
            Not Before: Mar  9 21:00:35 2026 GMT
            Not After : Jun  7 21:00:35 2026 GMT
        Subject: CN=c349e13d-5e67-4d1d-8c23-230464f17924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:64:83:a9:f3:49:d7:4f:71:73:67:94:e7:81:
                    ba:8f:4d:47:d4:58:19:5b:e9:96:f3:67:db:76:d7:
                    ff:3c:6c:43:23:41:fe:34:6d:47:1e:9e:30:0a:d1:
                    ab:fd:1f:5a:ae:d2:ff:92:f5:01:fc:ab:60:ef:f2:
                    0e:37:9c:6c:1a:47:d5:be:4a:55:74:2d:53:40:6b:
                    78:fd:20:30:20:68:f0:e4:21:95:fd:c1:b2:d8:47:
                    20:eb:07:dd:95:7c:e9:a5:92:35:21:cd:39:25:45:
                    41:2b:27:b7:4b:24:fa:96:ff:e3:cc:9f:6c:87:94:
                    98:ba:d7:0e:13:05:bf:0e:fa:28:54:5a:8c:4e:1b:
                    af:d3:07:f7:e0:b5:d7:d3:36:f6:a1:03:cf:05:92:
                    58:ea:5d:95:06:fc:7b:57:96:f3:84:be:de:a1:d0:
                    ac:5c:ac:bb:52:d4:62:92:ce:a4:e0:3a:fd:96:91:
                    cf:a0:af:00:58:56:13:a7:24:21:7d:f3:38:01:e4:
                    a6:dc:2e:b0:23:b9:6d:9c:90:83:ce:21:4e:be:29:
                    98:3f:09:56:6f:37:22:66:0e:46:84:71:e7:aa:53:
                    ae:cb:a0:43:c3:4b:0d:cb:6d:cf:5d:42:89:30:d6:
                    0a:69:da:6b:f2:b9:df:e3:66:dc:5b:b1:32:f7:6d:
                    cf:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:8F:EE:6A:B9:61:CA:6D:01:4A:78:FA:EA:74:E3:D6:FD:7F:6D:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4bfb8143-b010-4f06-b1de-8c27f25d8b00/f86efe51-fb7a-39fa-b9e9-6bc887b7cea3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4bfb8143-b010-4f06-b1de-8c27f25d8b00/4bfb8143-b010-4f06-b1de-8c27f25d8b00.crl

            X509v3 Authority Key Identifier:
                keyid:5A:DC:99:BC:64:6F:8B:00:FF:1D:4E:B0:0C:1D:CD:67:22:8D:FA:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4bfb8143-b010-4f06-b1de-8c27f25d8b00.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.32.1.0-137.32.4.255
                  137.32.12.0/24
                  137.32.16.0/24
                  137.32.20.0/22
                  137.32.28.0/24
                  137.32.30.0-137.32.35.255
                  137.32.38.0/24
                  137.32.40.0/23
                  137.32.46.0/23
                  137.32.56.0/24
                  137.32.65.0-137.32.66.255
                  137.32.69.0/24
                  137.32.80.0/24
                  137.32.82.0/23
                  137.32.92.0/24
                  137.32.96.0/24
                  137.32.98.0/24
                  137.32.101.0-137.32.103.255
                  137.32.108.0/22
                  137.32.164.0-137.32.166.255
                  137.32.196.0/24
                  137.32.253.0-137.32.254.255
                  143.114.1.0/24
                  143.114.3.0/24
                  143.114.6.0-143.114.8.255
                  143.114.12.0/23
                  143.114.16.0/23
                  143.114.56.0/22
                  143.114.62.0/23
                  143.114.160.0/22
                  192.34.233.0/24
                  192.91.148.0-192.91.150.255
                  192.91.152.0/23
                  192.91.160.0/24
                  192.91.171.0/24
                  192.91.174.0/24
                  192.223.37.0-192.223.38.255
                  192.223.40.0/24
                  192.223.42.0/24
                  192.223.44.0/23
                  192.223.48.0/24
                  192.223.53.0-192.223.54.255
                  192.223.56.0/23
                  192.223.63.0/24
                  204.153.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:a0:26:65:2f:f6:dc:21:62:3a:99:5d:ec:b4:2c:2f:34:4f:
         53:d8:63:08:06:88:22:ed:10:0e:f0:dd:f8:07:28:82:ff:43:
         93:53:d8:27:9d:ef:5e:ec:8a:9e:4f:83:fe:3c:29:b4:dd:fc:
         2f:cf:a8:22:cc:f2:0f:81:20:23:be:f9:05:2a:c4:4e:ae:ff:
         19:1b:35:49:fb:2e:b7:19:53:e2:b0:f4:8f:9e:b5:0b:64:e4:
         93:1f:ab:d0:80:af:e5:b1:43:a9:c3:14:78:57:8a:2c:9e:36:
         fd:a0:74:92:b2:3b:19:4c:32:90:52:df:72:2e:ff:34:e1:bf:
         1a:3e:76:3b:3e:73:7a:3a:01:b6:6e:fe:b8:ac:25:74:38:84:
         2e:ad:a6:bb:98:7e:ff:d8:68:67:22:29:a7:e2:e2:83:a1:24:
         b3:a8:98:cb:32:72:3a:69:11:46:a5:f5:3f:fa:7b:8f:ff:d3:
         6a:46:93:44:f2:8f:d6:67:dc:e2:c3:4c:d1:ac:f9:98:5e:c5:
         0e:58:b7:e4:07:1c:e6:61:34:c2:ae:09:3b:00:dd:fe:a0:d8:
         53:5f:86:60:bb:06:ca:21:5e:51:5a:04:54:ea:ce:76:42:fd:
         fa:ad:b7:f9:78:3e:a9:4c:cd:aa:49:84:61:d2:0e:5e:c0:7b:
         d1:89:40:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:58:30 2026 by rpki-client