Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/eee23461-2459-3130-ade2-581d3a00c5e9.roa
File:                     eee23461-2459-3130-ade2-581d3a00c5e9.roa (raw, json)
Hash identifier:          RPg942386DLza5X64Dc0fuBjPnrv7t7NQabphvZlcbM=
Subject key identifier:   AB:C3:E1:9D:7F:9E:66:E6:35:43:6C:08:7C:26:22:D2:FF:6A:30:E8
Certificate issuer:       /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
Certificate serial:       010D0C9F4328584F498BD9162A11DF96CB010C80
Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/eee23461-2459-3130-ade2-581d3a00c5e9.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     394708
IP address blocks:        66.209.134.0/23 maxlen: 23
                          66.209.134.0/24 maxlen: 24
                          66.209.135.0/24 maxlen: 24
                          74.126.72.0/21 maxlen: 21
                          74.126.72.0/22 maxlen: 22
                          74.126.76.0/22 maxlen: 22
                          74.126.77.0/24 maxlen: 24
                          74.126.78.0/24 maxlen: 24
                          74.126.79.0/24 maxlen: 24
                          209.173.162.0/23 maxlen: 23
                          209.173.162.0/24 maxlen: 24
                          209.173.163.0/24 maxlen: 24
                          209.173.182.0/24 maxlen: 24
                          209.173.184.0/21 maxlen: 21
                          209.173.184.0/22 maxlen: 22
                          209.173.184.0/24 maxlen: 24
                          209.173.185.0/24 maxlen: 24
                          209.173.186.0/24 maxlen: 24
                          209.173.187.0/24 maxlen: 24
                          209.173.188.0/22 maxlen: 22
                          209.173.188.0/24 maxlen: 24
                          209.173.189.0/24 maxlen: 24
                          209.173.190.0/24 maxlen: 24
                          209.173.191.0/24 maxlen: 24
                          216.201.42.0/24 maxlen: 24
                          216.255.0.0/21 maxlen: 21
                          216.255.4.0/24 maxlen: 24
                          216.255.5.0/24 maxlen: 24
                          216.255.6.0/24 maxlen: 24
                          216.255.7.0/24 maxlen: 24
                          216.255.21.0/24 maxlen: 24
                          216.255.34.0/24 maxlen: 24
                          216.255.43.0/24 maxlen: 24
                          216.255.44.0/23 maxlen: 23
                          216.255.51.0/24 maxlen: 24
                          216.255.60.0/23 maxlen: 23
                          216.255.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8b:d9:16:2a:11:df:96:cb:01:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=044ac682-97aa-43b4-9220-38c7337e85a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:7d:73:6d:3b:48:8b:cc:6d:e8:33:da:f2:d6:
                    00:d1:df:72:84:03:fb:d1:3d:ca:71:0a:ca:51:68:
                    fa:de:73:4b:58:54:d8:d3:e9:42:3c:6f:1c:e0:0b:
                    5a:c7:61:14:a0:b8:60:3a:b3:0b:5c:ed:1b:24:2f:
                    26:c9:d4:05:0c:7c:24:39:c3:24:71:12:9a:07:fe:
                    74:da:dc:0b:7d:c0:af:f6:6e:53:27:1b:6f:78:17:
                    fa:10:e1:e7:33:79:30:6e:a1:75:6e:49:19:23:62:
                    92:bd:81:4b:5c:8d:c5:10:c1:3c:95:29:78:3a:4f:
                    c1:28:96:d4:ea:0e:ba:a9:b6:d9:fc:ec:8b:99:3a:
                    49:6c:81:50:dc:38:c9:2a:0c:bc:fb:4e:fb:4e:90:
                    e0:f7:2b:23:92:ef:51:17:f6:d4:af:9b:14:2f:73:
                    d7:b9:d8:78:43:e2:40:1d:d5:17:fa:16:2a:b3:63:
                    3c:7a:57:0d:6b:69:eb:a0:c4:d3:33:0b:7a:98:63:
                    45:ba:5c:9c:04:e6:c0:c8:ec:f2:a2:38:77:6c:8a:
                    9e:ea:80:fa:e1:17:dd:96:f7:f1:3b:d0:1c:f7:cb:
                    5d:98:00:92:42:03:a6:89:50:fb:66:64:3e:72:20:
                    22:d0:41:c3:b4:ed:0a:c6:d6:86:b2:e7:3e:e7:39:
                    64:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:C3:E1:9D:7F:9E:66:E6:35:43:6C:08:7C:26:22:D2:FF:6A:30:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/eee23461-2459-3130-ade2-581d3a00c5e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl

            X509v3 Authority Key Identifier:
                keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.209.134.0/23
                  74.126.72.0/21
                  209.173.162.0/23
                  209.173.182.0/24
                  209.173.184.0/21
                  216.201.42.0/24
                  216.255.0.0/21
                  216.255.21.0/24
                  216.255.34.0/24
                  216.255.43.0-216.255.45.255
                  216.255.51.0/24
                  216.255.60.0-216.255.62.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:a2:20:0a:65:29:da:b9:04:56:70:ad:e3:1d:28:5b:7e:07:
         22:5c:ba:49:de:7f:7b:96:0a:32:71:b0:f9:ca:b0:fc:c0:a7:
         7e:c9:e0:12:09:dd:f0:a5:db:02:2c:40:af:4b:7d:fc:1c:8c:
         7f:f2:3a:54:17:95:71:5f:51:31:5b:9b:ce:96:23:15:13:5a:
         70:0f:df:0e:c2:73:42:8f:33:7c:c5:41:bd:e4:5e:11:da:33:
         fd:26:90:9b:9c:e0:c7:1e:1f:e4:81:4e:f6:d6:89:a5:cf:a3:
         1d:12:fb:24:4a:17:f1:55:c1:d3:42:3e:9c:5b:5e:61:8a:b7:
         b1:7a:0d:9e:3b:26:e9:c0:74:3e:2b:f7:b5:c2:3f:6d:1c:96:
         71:a5:1d:ec:04:c1:2e:e2:e0:14:49:cf:18:d4:da:57:a7:0d:
         a7:ba:de:ba:fe:cc:c4:41:b7:04:5d:47:e0:6c:17:48:bb:c1:
         a6:b9:57:2b:c2:71:a2:9d:1e:2a:35:57:34:96:fb:8b:9b:4f:
         14:24:2e:2c:43:c3:75:d7:14:df:1b:a0:ca:9f:81:99:e9:cf:
         d7:bc:0a:57:e3:3e:11:17:3f:82:d5:40:f4:20:00:04:29:4d:
         b4:c6:e9:b6:7f:d7:57:a3:41:68:6d:01:6a:57:1d:d9:00:9e:
         84:5e:9e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:29:04 2026 by rpki-client