Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/8bf51da3-4cb6-3a0c-a3d6-61a30f1c81a1.roa
File:                     8bf51da3-4cb6-3a0c-a3d6-61a30f1c81a1.roa (raw, json)
Hash identifier:          Oy1xEp+t/tvYMP5YtK0/SN2owURdZxjX6NiFPTilKDI=
Subject key identifier:   47:85:32:BC:33:40:D9:F1:5B:23:01:19:AB:04:D0:A1:0D:39:16:48
Certificate issuer:       /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial:       010D0C9F4328584D2A74EA3FBCDDF75A17886E80
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/8bf51da3-4cb6-3a0c-a3d6-61a30f1c81a1.roa
Signing time:             Sat 14 Mar 2026 13:00:40 +0000
ROA not before:           Sat 14 Mar 2026 13:00:40 +0000
ROA not after:            Fri 12 Jun 2026 13:00:40 +0000
asID:                     398101
IP address blocks:        50.62.80.0/21 maxlen: 24
                          64.202.184.0/21 maxlen: 24
                          72.167.20.0/22 maxlen: 24
                          72.167.220.0/22 maxlen: 24
                          72.167.224.0/22 maxlen: 24
                          107.180.68.0/22 maxlen: 24
                          107.180.72.0/22 maxlen: 24
                          107.180.80.0/22 maxlen: 24
                          107.180.84.0/22 maxlen: 24
                          107.180.88.0/21 maxlen: 24
                          107.180.100.0/22 maxlen: 24
                          107.180.104.0/22 maxlen: 24
                          132.148.164.0/22 maxlen: 24
                          132.148.168.0/21 maxlen: 24
                          148.72.20.0/22 maxlen: 24
                          148.72.64.0/22 maxlen: 24
                          198.12.224.0/22 maxlen: 24
                          198.12.228.0/22 maxlen: 24
                          198.12.248.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2a:74:ea:3f:bc:dd:f7:5a:17:88:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
        Validity
            Not Before: Mar 14 13:00:40 2026 GMT
            Not After : Jun 12 13:00:40 2026 GMT
        Subject: CN=3d6d8674-4da5-4fe6-b1ab-13fd88291a44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a7:97:e7:ff:c6:aa:6d:25:19:88:c5:88:48:
                    18:e5:c4:34:87:de:25:f5:02:7d:4f:34:b7:af:d8:
                    7d:0d:f9:61:c9:b0:3e:1c:ca:a7:d6:db:8d:04:eb:
                    3b:de:fc:7e:df:ee:89:54:04:84:c7:50:25:0d:78:
                    45:a5:1f:49:38:30:ec:de:8d:6a:1b:cf:00:1f:be:
                    e9:76:f5:9f:52:f0:be:d6:4e:bd:8a:79:7c:33:f7:
                    29:2f:9d:59:fe:b0:db:18:49:3c:e7:43:bc:a1:dd:
                    6d:b9:fe:75:bf:60:03:af:29:d7:2c:5c:bf:a1:8f:
                    72:48:42:6a:e2:7c:bc:e3:24:f7:cf:93:a8:e3:1c:
                    78:fe:f3:ed:64:6f:b7:14:5e:a9:2c:7e:f0:83:0c:
                    6d:71:20:b1:7d:3f:e2:52:6d:d8:e9:a0:7f:0c:c0:
                    94:6f:46:7b:32:38:bd:98:a1:ee:10:a2:bf:0e:e5:
                    0c:b4:d2:0f:f2:1e:79:3e:a6:6f:e3:4b:d0:1b:13:
                    83:a2:b9:c5:5f:5b:d0:e7:a0:34:08:d5:27:e8:3d:
                    3b:1b:1a:e7:37:27:11:b6:9e:af:93:ac:d6:8a:9a:
                    28:5e:17:2a:d7:3a:07:59:c7:fc:3e:79:ee:5c:7b:
                    f6:9d:1b:16:4e:f5:7b:dc:80:d8:21:fa:96:c8:b1:
                    f4:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:85:32:BC:33:40:D9:F1:5B:23:01:19:AB:04:D0:A1:0D:39:16:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/8bf51da3-4cb6-3a0c-a3d6-61a30f1c81a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl

            X509v3 Authority Key Identifier:
                keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.62.80.0/21
                  64.202.184.0/21
                  72.167.20.0/22
                  72.167.220.0-72.167.227.255
                  107.180.68.0-107.180.75.255
                  107.180.80.0/20
                  107.180.100.0-107.180.107.255
                  132.148.164.0-132.148.175.255
                  148.72.20.0/22
                  148.72.64.0/22
                  198.12.224.0/21
                  198.12.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:dc:40:d5:21:b6:26:bb:82:4f:e7:f2:38:52:e3:8b:65:40:
         12:45:a6:c2:7e:1f:18:1d:ad:3e:5a:24:cc:4a:fd:5c:bd:d6:
         6e:18:b1:e9:f3:bd:db:19:f4:48:5e:2d:cd:15:6e:db:33:dd:
         de:7a:b8:ad:7c:ee:af:f4:7a:ba:98:22:d3:69:99:66:83:3f:
         13:03:7a:78:d5:2e:8c:44:a8:2f:a5:c4:aa:8c:bc:b2:aa:7f:
         7d:a8:5a:c4:25:6d:53:2e:fe:f4:19:49:58:ab:55:37:a8:62:
         a2:c9:72:b2:12:82:28:bd:37:75:39:07:7b:d5:18:6b:de:d4:
         7a:43:ad:74:41:76:7f:d2:4b:c8:84:1e:91:b3:7c:6b:4c:1b:
         d7:aa:48:93:de:95:74:43:1b:f2:e3:11:bb:87:ca:e6:5f:20:
         4d:5e:1e:ec:d5:3c:a9:b9:2d:2f:c4:8a:2d:f6:9d:c4:26:bf:
         9e:ae:a4:d0:88:f8:30:3a:e6:25:e9:e8:d4:26:5c:04:b6:b1:
         13:87:d6:a9:7c:8f:19:69:93:82:58:1d:d0:97:5b:f9:6a:15:
         24:a7:4a:70:f9:37:0d:08:36:93:37:79:44:6c:a9:26:10:40:
         5d:c5:09:41:27:21:de:bd:0a:5d:57:23:ff:8c:2b:f7:d5:c2:
         15:a7:49:29
-----BEGIN CERTIFICATE-----
MIIGpjCCBY6gAwIBAgIUAQ0Mn0MoWE0qdOo/vN33WheIboAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWVkNWNlODAtMjI0ZS00NmFiLTk0ZjEtMWFmY2U4Y2Nm
MTNmMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk
M2Q2ZDg2NzQtNGRhNS00ZmU2LWIxYWItMTNmZDg4MjkxYTQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6eX5//Gqm0lGYjFiEgY5cQ0h94l9QJ9TzS3
r9h9DflhybA+HMqn1tuNBOs73vx+3+6JVASEx1AlDXhFpR9JODDs3o1qG88AH77p
dvWfUvC+1k69inl8M/cpL51Z/rDbGEk850O8od1tuf51v2ADrynXLFy/oY9ySEJq
4ny84yT3z5Oo4xx4/vPtZG+3FF6pLH7wgwxtcSCxfT/iUm3Y6aB/DMCUb0Z7Mji9
mKHuEKK/DuUMtNIP8h55PqZv40vQGxODornFX1vQ56A0CNUn6D07GxrnNycRtp6v
k6zWipooXhcq1zoHWcf8PnnuXHv2nRsWTvV73IDYIfqWyLH0xQIDAQABo4IDuDCC
A7QwHQYDVR0OBBYEFEeFMrwzQNnxWyMBGasE0KENORZIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZWQ1
Y2U4MC0yMjRlLTQ2YWItOTRmMS0xYWZjZThjY2YxM2YvOGJmNTFkYTMtNGNiNi0z
YTBjLWEzZDYtNjFhMzBmMWM4MWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWVkNWNlODAtMjI0ZS00NmFiLTk0
ZjEtMWFmY2U4Y2NmMTNmLzllZDVjZTgwLTIyNGUtNDZhYi05NGYxLTFhZmNlOGNj
ZjEzZi5jcmwwHwYDVR0jBBgwFoAUOB2fprp8wahErgn+WgCWnTv84Q8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZWQ1Y2U4MC0yMjRlLTQ2YWItOTRmMS0xYWZj
ZThjY2YxM2YuY2VyMIGBBggrBgEFBQcBBwEB/wRyMHAwbgQCAAEwaAMEAzI+UAME
A0DKuAMEAkinFDAMAwQCSKfcAwQCSKfgMAwDBAJrtEQDBAJrtEgDBARrtFAwDAME
Amu0ZAMEAmu0aDAMAwQChJSkAwQEhJSgAwQClEgUAwQClEhAAwQDxgzgAwQDxgz4
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEzcQNUhtia7gk/n8jhS44tlQBJFpsJ+HxgdrT5aJMxK/Vy91m4Y
senzvdsZ9EheLc0Vbtsz3d56uK187q/0erqYItNpmWaDPxMDenjVLoxEqC+lxKqM
vLKqf32oWsQlbVMu/vQZSVirVTeoYqLJcrISgii9N3U5B3vVGGve1HpDrXRBdn/S
S8iEHpGzfGtMG9eqSJPelXRDG/LjEbuHyuZfIE1eHuzVPKm5LS/Eii32ncQmv56u
pNCI+DA65iXp6NQmXAS2sROH1ql8jxlpk4JYHdCXW/lqFSSnSnD5Nw0INpM3eURs
qSYQQF3FCUEnId69Cl1XI/+MK/fVwhWnSSk=
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:05:41 2026 by rpki-client