Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/22eb73ec-b415-3bc1-9d15-13db833fbec4.roa
File:                     22eb73ec-b415-3bc1-9d15-13db833fbec4.roa (raw, json)
Hash identifier:          xtXMBfoFGRL079jKFR8QmsSjD/6wfIRuJuSowYW+R6E=
Subject key identifier:   42:04:1C:B3:A5:70:E0:42:F0:20:D5:26:93:31:A9:AA:0D:16:28:45
Certificate issuer:       /CN=530ba529-ac94-44aa-8a24-334da5fccb1e
Certificate serial:       010D0C9F4328584E6F3A2B49E1E979902503CBC0
Authority key identifier: E2:70:AF:2A:32:F0:30:09:13:CF:91:AB:C2:55:00:27:FA:B8:C1:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/22eb73ec-b415-3bc1-9d15-13db833fbec4.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     22169
IP address blocks:        204.10.136.0/24 maxlen: 24
                          204.10.139.0/24 maxlen: 24
                          216.239.128.0/24 maxlen: 24
                          216.239.132.0/24 maxlen: 24
                          2607:fe90:7998::/48 maxlen: 48
                          2607:fe90:7999::/48 maxlen: 48
                          2607:fe90:8000::/48 maxlen: 48
                          2607:fe90:8001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/530ba529-ac94-44aa-8a24-334da5fccb1e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/530ba529-ac94-44aa-8a24-334da5fccb1e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:2b:49:e1:e9:79:90:25:03:cb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=530ba529-ac94-44aa-8a24-334da5fccb1e
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=dd4f89a0-0aa7-4f15-988b-63d776eb20ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:24:88:35:a8:0a:d7:a1:94:ac:55:d3:9f:d7:
                    b2:81:bf:14:b7:f5:29:21:9d:ab:79:b6:da:82:3f:
                    4a:9a:db:6f:bb:ef:81:88:74:a9:7b:a6:bb:68:11:
                    63:40:38:77:02:71:87:fb:2f:fe:91:c3:02:3a:a4:
                    bb:0d:98:50:39:cd:92:ad:0a:d4:06:44:f2:51:52:
                    91:b4:4c:0b:87:90:22:54:df:7f:18:ed:a3:f5:14:
                    26:b3:ad:ac:d6:2a:3e:59:da:6c:b5:e3:93:0a:e8:
                    3f:4a:71:d3:ee:4b:0a:1b:75:ab:36:68:e6:d8:8d:
                    b9:07:f8:d3:8d:e8:f0:4f:03:41:2b:30:84:03:a6:
                    0d:cf:b5:e4:37:a0:43:07:f5:8f:c2:d7:0b:32:94:
                    83:f9:5a:53:62:06:90:21:f2:49:86:b6:9c:f0:c0:
                    84:13:53:71:b6:92:fe:60:5e:a1:a5:36:56:40:46:
                    3e:08:6d:b8:65:28:39:e3:61:f7:4a:54:e4:25:cd:
                    d8:07:e2:1c:ff:06:81:6d:f6:93:34:14:6d:92:58:
                    e4:3c:79:17:57:07:fb:43:84:bf:e4:cb:0c:a5:65:
                    d2:f0:44:09:69:87:7e:de:08:69:55:cf:90:b9:18:
                    46:38:01:c0:93:9b:c5:53:60:e1:53:d4:a7:be:ca:
                    41:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:04:1C:B3:A5:70:E0:42:F0:20:D5:26:93:31:A9:AA:0D:16:28:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/22eb73ec-b415-3bc1-9d15-13db833fbec4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/530ba529-ac94-44aa-8a24-334da5fccb1e.crl

            X509v3 Authority Key Identifier:
                keyid:E2:70:AF:2A:32:F0:30:09:13:CF:91:AB:C2:55:00:27:FA:B8:C1:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.10.136.0/24
                  204.10.139.0/24
                  216.239.128.0/24
                  216.239.132.0/24
                IPv6:
                  2607:fe90:7998::/47
                  2607:fe90:8000::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:53:e6:51:33:a4:04:a3:88:31:b0:aa:61:c6:a1:b5:52:6e:
         d9:4a:40:2d:00:47:aa:f0:ac:26:6d:4e:44:ad:d5:96:0b:cb:
         d4:2a:d1:85:49:f3:a6:22:f3:db:eb:66:56:ba:02:06:6c:ef:
         14:45:99:12:a7:82:dc:c5:87:81:15:d1:cd:9b:51:a7:9f:ff:
         73:32:f2:70:9d:53:87:7f:64:8d:24:92:02:6c:03:64:a7:36:
         38:7a:b5:f3:33:2d:d0:a4:31:90:26:03:15:e5:a0:fb:8a:fb:
         74:ad:66:7b:ac:aa:87:fb:03:9d:af:ee:ad:b0:b4:8d:dc:09:
         6b:2b:49:f0:de:cd:17:02:fa:0c:45:c2:c7:70:22:e1:e3:c3:
         5c:fd:8b:94:e3:bc:19:93:f6:5f:20:65:b0:16:44:3e:77:c7:
         92:15:69:47:bc:61:5c:f5:cd:97:fe:59:41:49:6c:92:c8:ae:
         8c:46:0e:74:9b:ad:29:e3:4b:40:9b:8b:63:a0:0c:f2:08:b2:
         a1:e3:3b:45:04:41:9c:f5:a3:68:68:c3:c3:9f:97:80:12:20:
         b6:4c:d7:0d:65:81:5e:72:29:c0:4c:73:77:ac:aa:cd:46:63:
         81:fe:d7:e3:eb:e4:8d:f4:82:1b:82:f1:66:a3:06:5e:08:d8:
         87:74:4f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:05:39 2026 by rpki-client