Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b51d7dfa-2f7b-45ed-856d-e64e586ecdea/bf9a9b06-aaf2-3523-baca-f6d0c598ef65.roa
File:                     bf9a9b06-aaf2-3523-baca-f6d0c598ef65.roa (raw, json)
Hash identifier:          LZLegSB2NcQHGa2XHaQDUQnesBE69apd1YLLdOLCWxQ=
Subject key identifier:   44:0C:69:95:80:AA:D1:E1:BA:B9:10:FF:B4:6E:CB:5F:2C:50:40:49
Certificate issuer:       /CN=b51d7dfa-2f7b-45ed-856d-e64e586ecdea
Certificate serial:       010D0C9F4328584FD25BDBD79F75AEDC59C08C60
Authority key identifier: 60:4C:E8:6C:D4:A1:E9:F4:6D:35:72:25:DF:85:39:75:3B:6F:39:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b51d7dfa-2f7b-45ed-856d-e64e586ecdea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b51d7dfa-2f7b-45ed-856d-e64e586ecdea/bf9a9b06-aaf2-3523-baca-f6d0c598ef65.roa
Signing time:             Fri 13 Nov 2026 02:00:14 +0000
ROA not before:           Fri 13 Nov 2026 02:00:14 +0000
ROA not after:            Thu 11 Feb 2027 02:00:14 +0000
asID:                     16788
IP address blocks:        64.250.32.0/24 maxlen: 24
                          64.250.33.0/24 maxlen: 24
                          64.250.34.0/24 maxlen: 24
                          64.250.35.0/24 maxlen: 24
                          64.250.36.0/24 maxlen: 24
                          64.250.37.0/24 maxlen: 24
                          64.250.38.0/24 maxlen: 24
                          64.250.39.0/24 maxlen: 24
                          64.250.40.0/24 maxlen: 24
                          64.250.41.0/24 maxlen: 24
                          64.250.42.0/24 maxlen: 24
                          64.250.43.0/24 maxlen: 24
                          64.250.44.0/24 maxlen: 24
                          64.250.45.0/24 maxlen: 24
                          64.250.46.0/24 maxlen: 24
                          64.250.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b51d7dfa-2f7b-45ed-856d-e64e586ecdea/b51d7dfa-2f7b-45ed-856d-e64e586ecdea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b51d7dfa-2f7b-45ed-856d-e64e586ecdea/b51d7dfa-2f7b-45ed-856d-e64e586ecdea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b51d7dfa-2f7b-45ed-856d-e64e586ecdea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:d2:5b:db:d7:9f:75:ae:dc:59:c0:8c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b51d7dfa-2f7b-45ed-856d-e64e586ecdea
        Validity
            Not Before: Nov 13 02:00:14 2026 GMT
            Not After : Feb 11 02:00:14 2027 GMT
        Subject: CN=6de049be-d308-4bf3-94fa-7da1ca7a22d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1b:1f:3b:3f:bf:8d:c1:31:b0:ae:bd:8a:09:
                    78:2c:13:5f:26:ed:00:4e:63:68:da:6f:69:39:f1:
                    6d:c6:7e:65:5b:37:8a:75:b9:c6:a5:73:9a:8f:16:
                    fe:ab:7b:ba:19:e2:02:aa:38:85:19:40:0f:a3:4d:
                    c6:4b:bf:f5:b8:5a:60:79:db:2b:90:29:e7:4b:61:
                    ea:3e:c0:1f:69:62:41:0b:59:46:19:1f:28:39:9e:
                    27:ae:40:6e:58:27:2a:43:60:85:e5:59:af:7f:55:
                    d1:c4:fa:40:8c:d9:68:71:f9:38:55:2c:81:44:8b:
                    18:80:56:c5:c8:a5:38:6d:bb:3f:77:dc:3a:5d:2d:
                    98:d7:15:f6:45:72:fa:76:fc:e1:7c:71:90:b7:22:
                    95:c3:f9:c7:05:05:c8:29:88:6e:82:54:0e:d1:9a:
                    6f:cf:7c:76:a6:60:8b:a2:71:af:c5:b3:0f:2f:53:
                    39:3b:35:a8:53:34:57:ec:0a:60:91:b3:5d:3c:c3:
                    80:72:db:5c:c5:61:45:9f:40:eb:fa:cb:dd:2a:cc:
                    8c:28:1a:4f:20:e4:3e:2a:8c:34:a4:8e:47:d0:ce:
                    c2:73:28:f1:78:6a:64:dd:3d:45:99:71:5c:4c:65:
                    2b:3a:cd:e2:f3:cc:13:23:bc:32:e3:e5:39:0a:cc:
                    45:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:0C:69:95:80:AA:D1:E1:BA:B9:10:FF:B4:6E:CB:5F:2C:50:40:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b51d7dfa-2f7b-45ed-856d-e64e586ecdea/bf9a9b06-aaf2-3523-baca-f6d0c598ef65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b51d7dfa-2f7b-45ed-856d-e64e586ecdea/b51d7dfa-2f7b-45ed-856d-e64e586ecdea.crl

            X509v3 Authority Key Identifier:
                keyid:60:4C:E8:6C:D4:A1:E9:F4:6D:35:72:25:DF:85:39:75:3B:6F:39:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b51d7dfa-2f7b-45ed-856d-e64e586ecdea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.250.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:68:09:88:44:ea:20:f2:c4:5e:37:11:33:47:f7:8d:7c:29:
         17:44:a0:ff:74:3e:d1:5c:7d:ad:c0:d6:27:3c:4f:25:eb:5a:
         66:e0:43:f0:cd:21:e7:7d:98:fa:68:13:72:33:be:11:a8:d7:
         23:2d:99:02:c1:56:c1:ca:97:1c:0c:f9:b4:2e:a2:83:50:bd:
         b8:eb:00:45:52:7e:d4:c2:7f:88:c6:a0:75:aa:f8:c8:bd:32:
         33:a1:cb:77:61:b6:ab:98:f6:39:f6:af:10:1f:44:4a:13:ce:
         b7:aa:6b:83:fc:4d:09:76:80:9b:53:66:99:4c:27:94:c9:8d:
         5c:c2:53:d0:58:68:f4:44:8f:98:28:07:e0:43:a6:72:1b:dc:
         e5:27:15:6d:41:81:c0:a2:1f:8a:01:89:2e:49:09:f2:b4:61:
         bd:4a:d5:53:eb:a8:91:ea:09:c2:8a:01:79:3c:73:f4:9f:d3:
         08:93:ee:c8:c2:51:54:35:dc:f9:a2:41:27:3a:78:f9:26:aa:
         d0:e7:ff:72:a5:60:32:90:e9:d1:72:c3:af:d9:25:8e:4f:2a:
         49:b7:dd:4e:2b:eb:1c:06:33:b3:c9:0b:41:53:57:0a:23:33:
         3d:7f:b4:5b:71:3b:1c:3c:d7:22:d4:de:33:76:31:e3:e2:2d:
         8a:55:d1:e4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE/SW9vXn3Wu3FnAjGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjUxZDdkZmEtMmY3Yi00NWVkLTg1NmQtZTY0ZTU4NmVj
ZGVhMB4XDTI2MTExMzAyMDAxNFoXDTI3MDIxMTAyMDAxNFowLzEtMCsGA1UEAxMk
NmRlMDQ5YmUtZDMwOC00YmYzLTk0ZmEtN2RhMWNhN2EyMmQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphsfOz+/jcExsK69igl4LBNfJu0ATmNo2m9p
OfFtxn5lWzeKdbnGpXOajxb+q3u6GeICqjiFGUAPo03GS7/1uFpgedsrkCnnS2Hq
PsAfaWJBC1lGGR8oOZ4nrkBuWCcqQ2CF5Vmvf1XRxPpAjNlocfk4VSyBRIsYgFbF
yKU4bbs/d9w6XS2Y1xX2RXL6dvzhfHGQtyKVw/nHBQXIKYhuglQO0Zpvz3x2pmCL
onGvxbMPL1M5OzWoUzRX7ApgkbNdPMOActtcxWFFn0Dr+svdKsyMKBpPIOQ+Kow0
pI5H0M7CcyjxeGpk3T1FmXFcTGUrOs3i88wTI7wy4+U5CsxFuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEQMaZWAqtHhurkQ/7Ruy18sUEBJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9iNTFk
N2RmYS0yZjdiLTQ1ZWQtODU2ZC1lNjRlNTg2ZWNkZWEvYmY5YTliMDYtYWFmMi0z
NTIzLWJhY2EtZjZkMGM1OThlZjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvYjUxZDdkZmEtMmY3Yi00NWVkLTg1
NmQtZTY0ZTU4NmVjZGVhL2I1MWQ3ZGZhLTJmN2ItNDVlZC04NTZkLWU2NGU1ODZl
Y2RlYS5jcmwwHwYDVR0jBBgwFoAUYEzobNSh6fRtNXIl34U5dTtvOTkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS9iNTFkN2RmYS0yZjdiLTQ1ZWQtODU2ZC1lNjRl
NTg2ZWNkZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQPogMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFpoCYhE6iDyxF43ETNH9418KRdEoP90PtFcfa3A1ic8TyXrWmbgQ/DN
Ied9mPpoE3IzvhGo1yMtmQLBVsHKlxwM+bQuooNQvbjrAEVSftTCf4jGoHWq+Mi9
MjOhy3dhtquY9jn2rxAfREoTzreqa4P8TQl2gJtTZplMJ5TJjVzCU9BYaPREj5go
B+BDpnIb3OUnFW1BgcCiH4oBiS5JCfK0Yb1K1VPrqJHqCcKKAXk8c/Sf0wiT7sjC
UVQ13PmiQSc6ePkmqtDn/3KlYDKQ6dFyw6/ZJY5PKkm33U4r6xwGM7PJC0FTVwoj
Mz1/tFtxOxw81yLU3jN2MePiLYpV0eQ=
-----END CERTIFICATE-----
Generated at Sun Nov 15 06:37:43 2026 by rpki-client