Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b/0a6f4ae0-6d63-386f-a433-6e442af05c5b.roa
File:                     0a6f4ae0-6d63-386f-a433-6e442af05c5b.roa (raw, json)
Hash identifier:          dvOcxC9lGUgUQR/IW8hQ0qCAQq2t4xeogvEwYqLH1rU=
Subject key identifier:   CF:CA:25:40:AD:01:CD:F1:1E:A9:D7:D8:1A:7B:DE:F7:AE:F8:53:7C
Certificate issuer:       /CN=480e68d2-5883-4233-9f17-992a2ca71e2b
Certificate serial:       010D0C9F4328584D44FA4C18997EDE6142825120
Authority key identifier: 26:9B:1E:68:03:C3:09:69:E3:8A:E5:95:A7:3F:33:33:66:8A:5F:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b/0a6f4ae0-6d63-386f-a433-6e442af05c5b.roa
Signing time:             Tue 24 Mar 2026 01:00:31 +0000
ROA not before:           Tue 24 Mar 2026 01:00:31 +0000
ROA not after:            Mon 22 Jun 2026 01:00:31 +0000
asID:                     33559
IP address blocks:        107.155.128.0/23 maxlen: 24
                          184.175.192.0/23 maxlen: 24
                          184.175.200.0/22 maxlen: 24
                          208.84.132.0/22 maxlen: 24
                          2604:4600:aa::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b/480e68d2-5883-4233-9f17-992a2ca71e2b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b/480e68d2-5883-4233-9f17-992a2ca71e2b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:fa:4c:18:99:7e:de:61:42:82:51:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=480e68d2-5883-4233-9f17-992a2ca71e2b
        Validity
            Not Before: Mar 24 01:00:31 2026 GMT
            Not After : Jun 22 01:00:31 2026 GMT
        Subject: CN=867b1cc9-ca51-4393-8ec6-298beaae6573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:96:7d:a7:28:0d:a4:c9:1c:77:e8:c7:f7:45:
                    0f:1b:30:e7:c6:0b:84:97:2a:17:7a:0c:fd:5f:2f:
                    26:56:05:34:21:8a:b3:84:01:d3:6f:ad:50:8e:19:
                    e2:41:aa:37:d9:a2:cf:05:09:9a:ea:4d:9a:28:f3:
                    d1:21:cb:06:fb:26:63:f2:e9:74:f8:2b:31:dc:f6:
                    d8:fe:81:fe:f3:f9:10:2f:b1:54:c1:45:46:4d:8a:
                    a6:58:8e:9a:5d:19:6e:7d:aa:07:38:bd:29:7e:34:
                    2b:d3:98:ab:20:32:43:7c:93:ef:33:b8:2f:90:aa:
                    96:1a:5b:ea:9f:c8:ef:1a:0c:49:8a:1e:b2:61:da:
                    57:db:49:09:a0:7a:da:5a:b3:b4:70:9d:90:5a:44:
                    f8:52:5b:f2:1a:1d:76:51:18:0d:da:96:c2:3f:1c:
                    1e:50:62:f3:8f:45:17:55:18:c9:02:7d:3e:0e:08:
                    1a:46:37:01:45:9b:ed:25:ae:10:cf:b5:6f:c9:87:
                    bd:65:cf:d8:8e:cb:df:81:82:ad:1f:4e:01:17:af:
                    ba:c7:98:78:66:02:fd:88:a2:3b:9b:c8:26:52:9b:
                    81:14:57:56:3c:91:5b:89:ec:b5:48:f6:55:5b:cb:
                    a8:5d:f5:40:3c:99:5c:7e:be:7e:bd:9b:9a:80:3b:
                    69:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:CA:25:40:AD:01:CD:F1:1E:A9:D7:D8:1A:7B:DE:F7:AE:F8:53:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b/0a6f4ae0-6d63-386f-a433-6e442af05c5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b/480e68d2-5883-4233-9f17-992a2ca71e2b.crl

            X509v3 Authority Key Identifier:
                keyid:26:9B:1E:68:03:C3:09:69:E3:8A:E5:95:A7:3F:33:33:66:8A:5F:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.155.128.0/23
                  184.175.192.0/23
                  184.175.200.0/22
                  208.84.132.0/22
                IPv6:
                  2604:4600:aa::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:b4:16:68:d5:84:c0:a4:ba:5d:60:75:86:bf:1f:39:ac:bf:
         d8:7b:c5:2a:f5:52:ec:9c:08:af:36:84:ec:d3:3b:19:2d:ed:
         30:2d:69:1b:8a:4c:dc:00:26:3d:c5:7b:ae:29:15:65:70:30:
         98:d4:19:4c:30:72:44:a4:f4:55:8c:86:23:15:52:7c:6f:6c:
         11:58:1e:58:b7:eb:b2:f4:be:93:37:25:d3:80:21:dd:df:e7:
         2c:0e:cc:39:a0:2a:dd:75:43:46:7e:5e:7a:e8:df:de:ab:15:
         37:85:29:cf:68:e6:4a:a4:25:22:1d:cf:70:3c:a5:7b:4b:36:
         e0:94:f0:59:e1:30:05:f4:72:0e:f9:63:01:a5:ec:06:d9:ba:
         95:78:f8:8a:b4:60:0d:e5:28:19:80:0f:30:c6:60:c9:68:49:
         0b:91:31:0e:1b:ba:ad:28:fa:c7:2a:a1:0d:21:a1:bc:77:c7:
         26:4f:7d:8e:13:cd:56:4f:96:5a:8e:ac:a3:0a:6d:82:9b:87:
         f8:c8:06:ef:81:5f:e0:53:f9:d8:22:ac:6b:c9:e6:c8:1e:11:
         c8:96:61:d0:11:dd:00:e8:2e:b1:b6:1e:b7:2f:62:c5:93:1b:
         99:57:58:74:ac:a5:f7:66:ad:1e:e1:21:a4:80:bb:fe:f9:ac:
         12:df:84:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:42:55 2026 by rpki-client