Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d0848359-cc87-3030-8bdc-18cf636b6387.roa
File:                     d0848359-cc87-3030-8bdc-18cf636b6387.roa (raw, json)
Hash identifier:          mib6LVLvDVRVnGUrFVFlKFmI7IZD9oZJ03a+CDDVRzs=
Subject key identifier:   D7:FD:A3:88:8C:9F:44:F4:D7:2A:B1:4F:00:7F:B4:93:A6:2D:6A:EE
Certificate issuer:       /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial:       010D0C9F4328584DD0905711569C2090A6A34E80
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d0848359-cc87-3030-8bdc-18cf636b6387.roa
Signing time:             Wed 13 May 2026 01:00:24 +0000
ROA not before:           Wed 13 May 2026 01:00:24 +0000
ROA not after:            Tue 11 Aug 2026 01:00:24 +0000
asID:                     6621
IP address blocks:        67.44.0.0/17 maxlen: 17
                          67.44.128.0/21 maxlen: 21
                          67.44.160.0/22 maxlen: 22
                          67.44.164.0/22 maxlen: 22
                          67.44.168.0/22 maxlen: 22
                          67.44.172.0/22 maxlen: 22
                          67.44.176.0/22 maxlen: 22
                          67.44.180.0/22 maxlen: 22
                          67.44.184.0/22 maxlen: 22
                          67.44.188.0/22 maxlen: 22
                          67.44.192.0/22 maxlen: 22
                          67.44.196.0/22 maxlen: 22
                          67.44.200.0/22 maxlen: 22
                          67.44.204.0/22 maxlen: 22
                          67.44.208.0/22 maxlen: 22
                          67.44.212.0/22 maxlen: 22
                          67.44.216.0/22 maxlen: 22
                          67.44.220.0/22 maxlen: 22
                          67.44.224.0/22 maxlen: 22
                          67.44.228.0/22 maxlen: 22
                          67.44.232.0/22 maxlen: 22
                          67.44.236.0/22 maxlen: 22
                          67.44.240.0/22 maxlen: 22
                          67.44.244.0/22 maxlen: 22
                          67.44.248.0/22 maxlen: 22
                          67.44.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d0:90:57:11:56:9c:20:90:a6:a3:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
        Validity
            Not Before: May 13 01:00:24 2026 GMT
            Not After : Aug 11 01:00:24 2026 GMT
        Subject: CN=930a0ce2-6ccd-41ae-8b46-a48885b81389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:12:9c:aa:bd:9c:2a:cb:6a:7f:69:c0:06:b6:
                    29:bc:49:f2:c7:a1:4c:44:62:d6:b8:96:e0:4b:dc:
                    a5:52:80:b0:f9:21:49:e8:7e:ff:66:2b:f9:3f:c6:
                    c6:ca:3f:89:d5:c1:71:00:83:a0:25:5f:2d:61:59:
                    15:c8:d6:a1:1b:86:8b:3b:70:25:f3:f6:64:49:0b:
                    86:0a:d3:88:a4:2a:52:01:db:92:82:0b:18:c8:00:
                    f6:11:54:04:f1:34:c1:f9:20:32:cd:65:df:06:8a:
                    79:b5:85:37:82:40:24:7c:43:ac:d1:d1:c4:72:08:
                    5d:34:cb:5b:63:6f:93:bd:4b:02:8c:8b:f5:db:bb:
                    2b:92:79:c3:5d:e2:9a:13:dc:aa:d6:2f:c6:67:e3:
                    00:82:6f:e1:16:e4:72:91:e6:2d:19:c6:26:e4:34:
                    4a:bf:a2:04:ce:b3:76:7d:1a:98:e5:b1:22:7a:4d:
                    a7:7a:90:06:b0:c4:c2:c5:92:18:c1:ba:d5:0a:05:
                    f1:71:e4:55:29:9f:73:8f:ca:38:8f:b9:9c:71:20:
                    4d:b9:a0:3f:38:e2:97:01:8e:4a:e0:c4:1c:45:2d:
                    a6:91:81:da:93:30:4c:51:c7:cd:ae:4e:dd:6a:66:
                    63:f3:97:d9:56:85:b7:a7:86:ae:6a:4b:46:00:4a:
                    1d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:FD:A3:88:8C:9F:44:F4:D7:2A:B1:4F:00:7F:B4:93:A6:2D:6A:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d0848359-cc87-3030-8bdc-18cf636b6387.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl

            X509v3 Authority Key Identifier:
                keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.44.0.0-67.44.135.255
                  67.44.160.0-67.44.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:c8:fe:62:8e:e4:71:7e:a9:f2:b5:fd:eb:a4:4f:c2:49:b9:
         a3:c7:65:44:43:5c:d2:56:70:cf:3c:75:fa:42:76:1e:a0:2e:
         41:03:4f:fc:2d:36:89:58:8a:1a:94:ab:1b:e1:14:7d:96:86:
         86:fc:51:0e:17:29:6c:b8:88:e6:e7:53:45:88:79:40:9d:b4:
         ac:2f:8e:e5:bb:20:b5:ed:f8:8b:cf:33:31:82:83:b9:70:52:
         fe:c0:8a:7b:08:75:7e:20:e1:5d:3c:1b:d7:98:27:5f:7a:7e:
         69:69:d9:bc:1d:64:7b:af:7c:79:7c:b6:0a:bc:23:46:4e:9d:
         3d:a7:8f:19:a4:30:03:e8:67:c7:f0:88:f7:b7:7e:1d:c1:a9:
         18:27:4e:fd:95:8f:89:2f:30:65:37:e9:fa:f0:c7:81:8c:c5:
         5d:0d:6f:4b:8e:69:26:18:1d:5a:79:72:5e:27:f3:2e:3c:5a:
         44:b2:12:85:2e:7e:3a:f4:5e:9f:38:58:37:b6:a2:73:69:18:
         6c:c8:d1:08:e1:6a:b2:69:de:c8:63:2d:6b:49:52:20:71:be:
         f4:41:c0:64:61:9c:ff:ea:54:40:b5:26:ef:8c:84:cb:fc:50:
         e2:47:af:94:74:23:e8:5e:c3:6c:f5:34:19:05:8b:8b:a8:ac:
         c5:89:17:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:51:12 2026 by rpki-client