Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3/5ccc738a-4d60-307a-b635-bbfa03724c5e.roa
File:                     5ccc738a-4d60-307a-b635-bbfa03724c5e.roa (raw, json)
Hash identifier:          QJPQNAA9qoACQeXO57RmdB5jrTjwtCjrdjrujzvI1UY=
Subject key identifier:   AC:DA:53:AE:36:89:14:04:C7:74:DD:8D:C0:90:78:5C:54:8F:2D:DC
Certificate issuer:       /CN=8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3
Certificate serial:       010D0C9F4328584DC8304287E480A2EF48B1F600
Authority key identifier: 33:48:4D:D7:F3:1C:85:0F:19:5D:51:25:B7:79:10:C1:DA:AF:F0:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3/5ccc738a-4d60-307a-b635-bbfa03724c5e.roa
Signing time:             Sun 10 May 2026 01:00:24 +0000
ROA not before:           Sun 10 May 2026 01:00:24 +0000
ROA not after:            Sat 08 Aug 2026 01:00:24 +0000
asID:                     19504
IP address blocks:        64.6.112.0/20 maxlen: 24
                          66.109.112.0/21 maxlen: 24
                          68.171.176.0/20 maxlen: 24
                          104.200.208.0/21 maxlen: 24
                          206.168.16.0/20 maxlen: 24
                          216.122.152.0/21 maxlen: 24
                          216.147.224.0/20 maxlen: 24
                          2604:1c0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c8:30:42:87:e4:80:a2:ef:48:b1:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3
        Validity
            Not Before: May 10 01:00:24 2026 GMT
            Not After : Aug  8 01:00:24 2026 GMT
        Subject: CN=8b94f629-1d85-4ce4-b557-9c661c75bec5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:cb:fb:14:57:cc:8f:ba:d9:45:83:be:8e:44:
                    c1:2f:aa:eb:1a:ca:09:ea:5e:d0:84:e6:35:95:50:
                    51:7b:81:2a:fa:40:70:25:b2:f9:a9:81:4c:88:f8:
                    b4:06:6d:58:46:fe:06:7d:92:87:25:19:0d:4b:e4:
                    fe:f2:ef:ff:ab:74:5f:a2:5e:84:e6:39:1c:e8:59:
                    db:9a:81:b1:49:38:27:3a:9c:73:fd:5f:14:7a:a4:
                    c1:e3:e6:17:bd:c0:29:fc:49:7d:dc:19:ad:78:fb:
                    b4:0a:c4:e1:11:83:6a:75:90:37:3c:14:f1:0d:aa:
                    68:48:d8:5a:83:0b:19:87:1c:ba:79:c0:b1:33:e6:
                    54:9a:46:e9:09:46:2e:49:20:6a:b2:9e:3f:fb:fb:
                    e7:40:e6:ce:b4:5b:51:bf:ea:d9:b0:57:a1:cb:e6:
                    79:40:9f:dc:7a:1c:27:98:62:9b:85:7c:62:28:54:
                    84:5f:8f:2b:b1:4c:63:97:00:e2:63:8b:02:61:3e:
                    fe:ae:9c:18:f8:44:10:8f:f4:b2:67:51:21:5f:1a:
                    90:ef:33:8b:e0:6d:24:d5:5f:b2:bb:3a:7f:23:85:
                    e2:8a:df:80:54:c4:45:fa:cb:4f:96:0d:6e:85:54:
                    00:56:a3:c6:e2:d6:46:8a:b7:7e:77:e3:b6:45:a8:
                    62:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:DA:53:AE:36:89:14:04:C7:74:DD:8D:C0:90:78:5C:54:8F:2D:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3/5ccc738a-4d60-307a-b635-bbfa03724c5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3.crl

            X509v3 Authority Key Identifier:
                keyid:33:48:4D:D7:F3:1C:85:0F:19:5D:51:25:B7:79:10:C1:DA:AF:F0:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.6.112.0/20
                  66.109.112.0/21
                  68.171.176.0/20
                  104.200.208.0/21
                  206.168.16.0/20
                  216.122.152.0/21
                  216.147.224.0/20
                IPv6:
                  2604:1c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:c0:97:4c:89:9a:aa:a8:09:ed:ff:a1:d9:90:ca:0b:20:71:
         48:2b:c6:68:89:a0:d1:69:e2:e3:bf:32:88:96:89:72:81:23:
         fb:ad:57:25:05:f7:6b:60:0e:2c:aa:3a:c3:cc:17:26:ef:6a:
         33:10:32:e5:f9:da:3d:f0:b0:0e:88:f3:30:fa:0e:9e:c3:dc:
         ec:ec:9d:21:9e:98:15:f7:1e:4b:86:42:2e:2c:ad:8d:c4:0d:
         1b:6d:cb:9f:89:a0:4a:20:ec:9c:78:02:bb:8d:c0:15:54:c4:
         a1:a6:93:75:61:e8:69:34:df:26:07:f9:c2:72:6b:e5:25:60:
         80:dd:fe:a6:d5:b4:1a:11:25:f7:93:f9:b8:f3:9d:bb:6f:b0:
         a9:76:29:b0:4a:e7:ff:46:cf:90:d8:fc:45:d5:85:24:64:1b:
         44:e4:2a:67:0b:72:a8:17:15:9e:a5:2b:b2:95:6d:87:e3:d9:
         fa:e5:6f:5a:b9:46:0c:7d:ba:20:c6:df:25:9b:59:fb:6a:e8:
         63:9d:7d:8b:06:bb:30:bd:54:53:23:22:66:5c:2a:29:8d:57:
         f2:5d:37:e4:f1:87:78:d4:22:f1:f8:60:93:d6:1c:a6:c8:cf:
         fc:52:55:95:bc:b7:2f:f4:bc:93:26:af:85:5c:b1:94:ef:34:
         06:75:9e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:21:24 2026 by rpki-client