Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/9cc6b592-366f-3a26-87a5-415ed1867edd.roa
File:                     9cc6b592-366f-3a26-87a5-415ed1867edd.roa (raw, json)
Hash identifier:          SYFabU51Gel+w4ZChYeBGLUpw2mkok8iJQbJKqx5xao=
Subject key identifier:   DB:39:64:17:E0:52:1B:E7:E3:F8:A1:C6:87:A9:F2:53:8C:72:88:40
Certificate issuer:       /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Certificate serial:       010D0C9F4328584FAF589D2DDF52E418CF65DD80
Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/9cc6b592-366f-3a26-87a5-415ed1867edd.roa
Signing time:             Sat 31 Oct 2026 13:00:13 +0000
ROA not before:           Sat 31 Oct 2026 13:00:13 +0000
ROA not after:            Fri 29 Jan 2027 14:00:13 +0000
asID:                     36352
IP address blocks:        72.249.94.0/24 maxlen: 24
                          72.249.124.0/24 maxlen: 24
                          206.123.95.0/24 maxlen: 24
                          207.210.239.0/24 maxlen: 24
                          207.210.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:af:58:9d:2d:df:52:e4:18:cf:65:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
        Validity
            Not Before: Oct 31 13:00:13 2026 GMT
            Not After : Jan 29 14:00:13 2027 GMT
        Subject: CN=e5320ab8-de21-4066-999b-d82165a9f4f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:2b:e6:58:61:f4:d6:56:c2:82:a4:77:ae:02:
                    92:d1:3b:23:64:74:67:61:71:23:11:a7:78:eb:cb:
                    a0:b4:53:27:db:82:f3:b4:52:e3:ad:62:a3:07:41:
                    1b:4b:b2:c0:0a:26:35:da:08:2c:2a:d5:25:d9:67:
                    88:ef:9b:66:2a:90:c0:8f:49:79:9f:8b:17:46:77:
                    78:0a:37:70:e6:f1:a6:37:1f:8f:e6:4b:6f:72:ee:
                    dd:63:74:6e:82:3d:1b:97:a5:fd:96:93:ae:65:ac:
                    b0:33:08:e2:fe:1f:9f:97:67:72:4f:cf:aa:d7:2f:
                    3e:da:22:45:03:09:3b:3c:37:10:27:97:e5:93:b4:
                    e6:9a:8c:7e:68:bd:36:af:19:20:2c:67:aa:61:06:
                    7e:29:fc:26:b9:d2:da:6d:97:49:72:af:82:45:69:
                    97:67:7b:38:fa:a6:f1:07:fb:d4:e9:29:82:40:1c:
                    2e:4c:68:47:f4:9d:8c:ee:de:23:8c:47:59:6b:6f:
                    18:a2:74:90:5a:b6:39:d9:f3:59:14:68:ef:22:c2:
                    f5:be:cc:e8:59:c0:37:bb:87:e5:a9:f5:7f:7d:d5:
                    03:19:d8:8e:98:34:75:f9:21:ee:ba:6a:da:08:2e:
                    3b:eb:66:d2:f8:35:8e:4a:35:a0:1a:86:3d:fd:9d:
                    6f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:39:64:17:E0:52:1B:E7:E3:F8:A1:C6:87:A9:F2:53:8C:72:88:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/9cc6b592-366f-3a26-87a5-415ed1867edd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl

            X509v3 Authority Key Identifier:
                keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.249.94.0/24
                  72.249.124.0/24
                  206.123.95.0/24
                  207.210.239.0/24
                  207.210.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:c4:eb:5d:73:a8:21:5e:3b:52:b1:e0:11:a9:3c:1a:0b:64:
         f7:75:05:d7:fb:34:97:cc:6f:45:ab:3d:91:af:ad:e3:bc:bd:
         e0:ba:f6:f4:fd:0b:b1:db:15:1c:0f:7e:89:ce:e5:fc:ba:21:
         bd:b1:9c:c1:d7:b2:94:ba:d4:5f:d4:1c:bc:51:42:ab:ce:a7:
         76:63:10:d7:89:50:d4:35:02:6c:03:4f:fa:c0:be:06:46:b9:
         08:81:f3:33:4c:91:c2:62:3f:6d:21:a2:c5:5d:c8:75:7e:8d:
         1e:a7:8f:ce:f6:fc:61:6c:5b:31:ee:2a:da:f7:58:6d:2c:31:
         2e:87:cd:18:63:74:8d:2f:4d:a7:d5:f0:3b:75:19:4d:da:7a:
         6b:39:04:1f:c6:1f:ec:d9:bf:cf:b1:23:d5:b8:a8:c0:aa:c0:
         82:6f:0f:1f:78:b5:8b:13:e5:5f:ef:4f:5b:e8:81:87:76:ec:
         92:5b:cc:65:53:81:8f:aa:27:4e:df:02:f2:40:6b:76:9b:e5:
         c0:0f:58:45:e4:a6:20:8b:af:c1:ac:73:d0:40:f2:50:00:33:
         02:47:06:fd:90:99:df:ec:31:97:2e:f9:31:4f:34:4d:ba:c7:
         f2:b6:7d:e4:94:26:a8:6c:b9:e2:d2:1d:30:39:1d:4c:4d:6a:
         e6:fa:78:c7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Nov 15 17:38:54 2026 by rpki-client