Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/4f491007-6945-3aff-aa86-fb79c499bcc0.roa
File:                     4f491007-6945-3aff-aa86-fb79c499bcc0.roa (raw, json)
Hash identifier:          PY7G6QWad61OdaGwp9EffL0gqWl7NlqEDg5mpeJnqwk=
Subject key identifier:   89:91:57:6A:BC:50:2F:60:91:64:4A:BF:63:CA:EE:28:F8:7A:A2:84
Certificate issuer:       /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Certificate serial:       010D0C9F4328584D24DF84AA64A909C0EAEA7980
Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/4f491007-6945-3aff-aa86-fb79c499bcc0.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     26337
IP address blocks:        50.87.0.0/16 maxlen: 24
                          66.147.240.0/20 maxlen: 24
                          67.20.64.0/18 maxlen: 24
                          67.222.32.0/19 maxlen: 24
                          69.195.64.0/18 maxlen: 24
                          70.40.192.0/19 maxlen: 24
                          74.220.192.0/19 maxlen: 24
                          162.144.0.0/16 maxlen: 24
                          162.214.0.0/15 maxlen: 24
                          162.240.0.0/15 maxlen: 24
                          173.254.0.0/17 maxlen: 24
                          198.57.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:84:aa:64:a9:09:c0:ea:ea:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=c0c595e5-6b96-48a6-8287-9909669ac1c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fa:cb:09:36:09:5b:40:f5:ed:52:2c:94:ae:
                    94:02:b1:e4:6c:fb:0d:a6:4f:9d:fd:7c:1f:27:22:
                    e2:58:5f:b4:d1:be:32:56:dc:16:af:3a:c3:f3:79:
                    86:3c:c4:b3:12:13:cd:ee:cf:9b:47:eb:dd:c6:77:
                    2d:f6:45:3a:25:9a:f9:64:10:b5:ff:0a:3b:c8:85:
                    18:12:2a:fc:30:49:75:9a:f6:97:3a:e5:59:fd:f6:
                    e4:40:a4:40:7b:87:6b:c6:ee:96:01:d7:e1:e6:7d:
                    0b:27:8a:54:80:96:d6:4b:34:eb:42:55:be:d0:cb:
                    b4:ee:36:54:d9:ad:34:a8:80:47:1e:a9:e3:0b:18:
                    f4:3c:6c:68:cc:39:52:c8:7b:41:be:e3:d7:ef:f2:
                    1d:db:ea:af:22:65:4f:b4:c8:8e:bf:7d:c1:33:cf:
                    ec:af:63:97:da:0d:d0:d0:3e:03:40:e5:49:ff:22:
                    0a:af:51:77:7a:64:09:ba:98:1e:76:38:e4:08:f3:
                    74:d9:6a:96:05:c8:07:cc:71:28:f6:1f:28:4a:be:
                    7a:45:70:d6:78:80:24:f7:3b:af:ec:ca:11:d1:7a:
                    29:6d:aa:b1:fa:ff:aa:a6:1f:3a:16:dc:4c:9f:ef:
                    21:ef:11:9b:3e:5b:e0:1f:e5:3a:ec:e5:09:ca:ee:
                    7a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:91:57:6A:BC:50:2F:60:91:64:4A:BF:63:CA:EE:28:F8:7A:A2:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/4f491007-6945-3aff-aa86-fb79c499bcc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl

            X509v3 Authority Key Identifier:
                keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.87.0.0/16
                  66.147.240.0/20
                  67.20.64.0/18
                  67.222.32.0/19
                  69.195.64.0/18
                  70.40.192.0/19
                  74.220.192.0/19
                  162.144.0.0/16
                  162.214.0.0/15
                  162.240.0.0/15
                  173.254.0.0/17
                  198.57.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:60:8f:7b:4f:1f:fc:e9:da:07:13:7e:30:ea:bd:fc:79:a3:
         7d:9a:e4:79:f7:7a:fb:e5:7f:20:ed:fa:10:62:2e:25:dd:1f:
         4f:df:a5:00:fa:1d:26:87:89:a3:79:ee:0e:50:ad:ff:e2:31:
         df:a3:5f:58:a8:68:46:a3:1a:e0:76:4f:3c:7a:f2:b9:5b:c1:
         80:89:66:60:d8:c9:8d:a5:aa:e7:ab:7c:cb:d7:f0:84:ca:01:
         ff:f7:34:1b:10:17:2c:3b:26:d7:00:be:e6:43:ac:27:c1:d9:
         00:90:de:ac:ee:00:81:cb:ad:73:2b:77:09:9f:03:7f:e4:ee:
         00:fc:58:fb:13:c0:e6:c3:bb:22:a2:94:65:e8:5d:27:54:fe:
         d5:cb:ee:3b:45:02:f3:a3:ab:be:45:7f:f4:a4:10:c8:24:e4:
         1f:1c:c2:46:a2:9f:9c:94:28:69:16:ad:7b:7e:2a:d8:00:99:
         1a:df:d9:e3:aa:39:f8:36:db:de:57:f3:86:7f:e4:ce:1b:81:
         25:9f:81:4a:df:76:cd:d9:a9:66:74:34:49:64:1c:c0:45:fb:
         ca:30:5a:69:ec:20:91:8e:3a:a7:8b:e2:32:33:a1:7f:b7:fa:
         43:49:a2:f1:55:52:2b:d4:bf:ff:90:63:dd:15:d1:57:7f:40:
         fe:20:35:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:50:03 2026 by rpki-client