Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/07f2eaa3-89ff-32a2-919a-8647e1b1eceb.roa
File:                     07f2eaa3-89ff-32a2-919a-8647e1b1eceb.roa (raw, json)
Hash identifier:          uwWfDo+7hP7SoKKAQrgdXWzdAmtcJvNynnsEPpLOhBA=
Subject key identifier:   32:72:57:C0:46:0B:94:7B:4D:63:C7:AF:1C:35:4F:4C:F1:F4:60:01
Certificate issuer:       /CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
Certificate serial:       010D0C9F4328584DADAAE41EDA3D465B64EE2A80
Authority key identifier: B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/07f2eaa3-89ff-32a2-919a-8647e1b1eceb.roa
Signing time:             Thu 30 Apr 2026 13:00:31 +0000
ROA not before:           Thu 30 Apr 2026 13:00:31 +0000
ROA not after:            Wed 29 Jul 2026 13:00:31 +0000
asID:                     20473
IP address blocks:        65.20.64.0/18 maxlen: 32
                          66.135.0.0/19 maxlen: 32
                          67.219.96.0/20 maxlen: 32
                          137.220.32.0/19 maxlen: 32
                          139.84.128.0/17 maxlen: 32
                          208.83.232.0/21 maxlen: 32
                          208.85.16.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ad:aa:e4:1e:da:3d:46:5b:64:ee:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
        Validity
            Not Before: Apr 30 13:00:31 2026 GMT
            Not After : Jul 29 13:00:31 2026 GMT
        Subject: CN=83d8d674-5f73-4337-ac3c-d5524edd24f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:cd:60:dd:dd:16:45:a7:81:ec:b4:e1:2a:2b:
                    02:85:db:ee:a4:25:05:ac:2e:0c:5c:4a:41:75:4d:
                    d9:9a:1b:3f:b5:4a:90:d9:00:eb:72:7d:33:8f:cf:
                    1b:46:c5:91:e0:98:25:5a:5b:99:bb:b8:73:c5:8c:
                    97:27:ea:09:ba:e9:2d:b1:0e:4f:9d:4e:8a:b7:3d:
                    3f:c0:b0:02:f2:ae:c6:3b:91:16:1f:4c:12:36:31:
                    fa:17:17:6e:ad:9a:12:8f:2c:6a:f2:b9:16:0d:5a:
                    e5:ae:3e:c2:00:5f:16:c8:99:ae:ae:8c:00:35:ed:
                    3d:f5:d1:cf:9a:ad:d5:b5:ac:6e:a0:a7:9d:74:6e:
                    a5:b2:6f:a7:93:13:33:86:a9:da:dd:5d:f8:1f:74:
                    1e:8a:c7:a0:7c:67:46:a2:30:f4:b1:8c:18:1d:1e:
                    75:45:97:60:7e:1a:39:28:8d:c5:75:25:f3:8f:09:
                    da:71:9a:18:ed:23:88:5f:c7:7c:6e:d1:d1:09:c4:
                    fa:93:ff:00:c7:3b:49:90:05:54:4b:a4:3e:37:da:
                    7f:ac:0f:8b:b6:64:9a:61:c8:cc:41:23:65:dd:27:
                    6e:4a:c3:d0:b9:0c:7b:53:78:17:39:06:79:e6:3b:
                    cb:f6:86:d1:88:dc:05:82:61:0f:1c:60:73:cf:11:
                    98:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:72:57:C0:46:0B:94:7B:4D:63:C7:AF:1C:35:4F:4C:F1:F4:60:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/07f2eaa3-89ff-32a2-919a-8647e1b1eceb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl

            X509v3 Authority Key Identifier:
                keyid:B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.20.64.0/18
                  66.135.0.0/19
                  67.219.96.0/20
                  137.220.32.0/19
                  139.84.128.0/17
                  208.83.232.0/21
                  208.85.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:d7:18:20:0d:d4:71:64:29:36:06:4a:a4:3f:06:68:57:ac:
         c9:fc:83:a4:ce:3f:d1:41:7e:b0:7a:93:52:6a:9e:15:97:8b:
         b4:7a:5e:d1:0e:d8:b7:88:89:86:66:d2:66:b4:83:d9:60:29:
         62:20:c7:14:6d:16:c9:0e:c8:d3:ab:25:b3:e0:45:32:14:2c:
         b0:de:ae:7d:17:4f:a5:29:62:3d:aa:0a:d0:b7:39:16:95:30:
         af:40:74:3b:57:6c:81:3f:b4:a6:6e:9a:c3:7d:14:c4:96:ce:
         f3:5e:00:e4:a6:89:7a:31:da:4b:87:26:7b:fe:cc:bf:a5:d4:
         fc:d2:fa:e8:43:82:cc:96:9a:81:d4:ef:a7:1b:61:9b:25:9f:
         62:83:34:21:b0:d1:e8:07:cc:52:08:c8:ae:cf:6a:dd:fc:92:
         f4:52:db:60:07:72:e8:1d:2d:e8:ce:c2:66:f8:aa:21:4f:44:
         c3:66:bb:1c:cf:42:ca:95:eb:43:69:90:47:2d:75:a2:f1:75:
         b7:8f:af:76:38:a2:b2:d3:1d:d4:2c:8e:32:d4:e8:92:2c:90:
         e5:59:17:20:90:84:43:ab:27:d5:2d:fb:bc:b1:17:fb:b7:a1:
         e4:09:64:57:5d:79:9b:71:b0:d8:7a:6c:90:3a:87:0c:c7:44:
         43:82:da:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:55:28 2026 by rpki-client