Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a/c655fc5a-2609-3240-abf3-7db143f47639.roa
File:                     c655fc5a-2609-3240-abf3-7db143f47639.roa (raw, json)
Hash identifier:          QhAr7ProiEEPMeDizLq79jnqX1UWD5K79HCQHFYRRfE=
Subject key identifier:   B5:8E:25:F4:6A:E7:98:55:37:FA:46:19:2B:A2:54:A0:78:45:6E:54
Certificate issuer:       /CN=e4592d18-89a2-4b31-a14b-b5ea3eae2c4a
Certificate serial:       010D0C9F4328584D15A26140EE1965C5197776F0
Authority key identifier: 87:5F:A2:FF:E5:93:3B:B5:16:DE:44:BF:B9:3E:AF:BF:FD:FD:59:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a/c655fc5a-2609-3240-abf3-7db143f47639.roa
Signing time:             Sat 07 Mar 2026 02:00:32 +0000
ROA not before:           Sat 07 Mar 2026 02:00:32 +0000
ROA not after:            Fri 05 Jun 2026 01:00:32 +0000
asID:                     3223
IP address blocks:        23.226.64.0/20 maxlen: 32
                          104.161.16.0/20 maxlen: 32
                          104.161.32.0/19 maxlen: 32
                          104.161.64.0/18 maxlen: 32
                          107.167.64.0/19 maxlen: 32
                          107.178.64.0/18 maxlen: 32
                          107.189.128.0/18 maxlen: 32
                          148.163.0.0/17 maxlen: 32
                          162.213.208.0/22 maxlen: 32
                          162.218.112.0/21 maxlen: 32
                          184.164.64.0/19 maxlen: 32
                          192.30.136.0/22 maxlen: 32
                          192.110.160.0/21 maxlen: 32
                          199.231.84.0/22 maxlen: 32
                          2604:6280::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:15:a2:61:40:ee:19:65:c5:19:77:76:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4592d18-89a2-4b31-a14b-b5ea3eae2c4a
        Validity
            Not Before: Mar  7 02:00:32 2026 GMT
            Not After : Jun  5 01:00:32 2026 GMT
        Subject: CN=7188c046-3fdc-4c24-bf93-6644089006b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:05:ad:75:46:5b:7f:d4:40:4a:b9:9e:f0:d6:
                    02:ae:61:8f:f6:5c:e3:1d:01:3a:b2:3a:c7:7f:d9:
                    60:0f:3e:9a:ad:57:71:df:83:4f:45:81:9e:f9:f3:
                    30:55:05:a0:3c:ac:24:9f:2a:0d:77:c1:5b:76:8c:
                    fd:6a:ab:f3:a0:eb:42:6f:a5:de:46:85:1a:5c:44:
                    c1:a6:73:1c:65:d4:59:0b:0f:cc:c2:cb:2f:73:88:
                    75:06:d5:c1:26:14:c1:c8:91:2d:c1:31:cc:16:dc:
                    15:45:4c:69:e9:1b:d0:3e:45:93:f8:03:6a:8e:3f:
                    50:ba:01:b5:97:0b:81:a6:2a:99:b9:df:ea:af:4e:
                    06:06:41:cf:db:48:2b:8a:ac:9d:13:b7:db:ea:4b:
                    31:2f:f3:83:8e:76:ae:4c:0b:7c:ad:4f:4e:9b:97:
                    d0:07:81:89:16:36:18:34:43:45:25:05:ee:04:92:
                    cd:a7:f2:cf:59:1e:c2:2b:b5:4a:26:89:51:67:bf:
                    7f:32:c5:1c:45:b1:e3:78:61:ea:f4:c4:53:80:aa:
                    4d:c1:43:a9:bd:4a:39:47:e1:a4:b6:16:ca:27:b7:
                    4a:3d:77:ca:02:f2:44:01:f8:20:22:4f:5b:70:31:
                    2e:08:d8:ab:1e:6e:bb:da:92:4f:22:fc:7d:8f:33:
                    dd:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:8E:25:F4:6A:E7:98:55:37:FA:46:19:2B:A2:54:A0:78:45:6E:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a/c655fc5a-2609-3240-abf3-7db143f47639.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a.crl

            X509v3 Authority Key Identifier:
                keyid:87:5F:A2:FF:E5:93:3B:B5:16:DE:44:BF:B9:3E:AF:BF:FD:FD:59:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.226.64.0/20
                  104.161.16.0-104.161.127.255
                  107.167.64.0/19
                  107.178.64.0/18
                  107.189.128.0/18
                  148.163.0.0/17
                  162.213.208.0/22
                  162.218.112.0/21
                  184.164.64.0/19
                  192.30.136.0/22
                  192.110.160.0/21
                  199.231.84.0/22
                IPv6:
                  2604:6280::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:e6:dd:95:58:e2:69:61:e0:c7:74:72:16:8a:60:d0:02:2a:
         39:06:1c:08:60:ac:d2:ba:18:3e:b1:54:e9:c8:92:30:27:da:
         8d:5b:72:d5:38:6a:9e:17:bb:e8:2a:69:8a:fd:c0:12:af:26:
         3d:8e:c0:06:8d:ba:ef:d6:fc:86:39:7c:23:ff:03:dd:b1:3e:
         56:23:53:76:5a:0b:4f:f2:c7:8a:64:4f:8c:1c:e3:97:e6:41:
         ad:cc:4f:34:24:a2:aa:61:c2:ac:85:7a:cc:c8:f2:bf:b5:b5:
         79:af:2e:dd:ff:81:69:c9:42:7c:93:26:b0:a5:7a:88:62:6c:
         d1:6e:a1:7d:b6:64:88:a1:0b:57:43:83:ff:8d:03:18:a2:c6:
         2e:c3:e7:65:03:ce:23:26:e4:8b:47:b7:46:0c:ee:93:b3:24:
         33:1e:6a:34:70:44:5b:77:28:34:a0:fa:16:8b:f6:6f:e8:10:
         5b:4b:41:ab:11:03:97:9e:56:a2:6c:03:c1:32:3b:d8:11:5d:
         6c:84:10:dd:48:97:a8:a2:91:5a:0d:fd:f5:f4:90:2e:48:4c:
         bf:4f:29:e7:3a:b9:01:45:fa:46:43:5c:44:1b:c5:df:51:d6:
         5a:d9:9d:5a:ca:6b:cc:d3:d3:c9:61:52:05:b1:8a:b9:eb:b5:
         f5:55:8f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:53:32 2026 by rpki-client