Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de0f6a0a-b6c3-4e4a-8941-1736700ded59/9152b08e-e525-38a2-8ed2-62e4227a6fa9.roa
File:                     9152b08e-e525-38a2-8ed2-62e4227a6fa9.roa (raw, json)
Hash identifier:          QXv1guPpa6YbQmoTzp8MEd03UWpY3suhBN3r67CVYz4=
Subject key identifier:   6E:8E:E7:7B:47:4A:69:5C:8F:7F:E5:8E:AA:E9:15:9B:F2:95:6A:E2
Certificate issuer:       /CN=de0f6a0a-b6c3-4e4a-8941-1736700ded59
Certificate serial:       010D0C9F4328584DC29AF3FA72F57B42D5250EC0
Authority key identifier: 96:F9:61:45:2A:73:A2:65:6C:FA:AF:DF:F4:F4:3B:07:C1:68:20:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de0f6a0a-b6c3-4e4a-8941-1736700ded59.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de0f6a0a-b6c3-4e4a-8941-1736700ded59/9152b08e-e525-38a2-8ed2-62e4227a6fa9.roa
Signing time:             Fri 08 May 2026 01:00:24 +0000
ROA not before:           Fri 08 May 2026 01:00:24 +0000
ROA not after:            Thu 06 Aug 2026 01:00:24 +0000
asID:                     62648
IP address blocks:        72.22.192.0/21 maxlen: 21
                          192.198.188.0/22 maxlen: 22
                          209.172.16.0/22 maxlen: 22
                          216.245.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de0f6a0a-b6c3-4e4a-8941-1736700ded59/de0f6a0a-b6c3-4e4a-8941-1736700ded59.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de0f6a0a-b6c3-4e4a-8941-1736700ded59/de0f6a0a-b6c3-4e4a-8941-1736700ded59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de0f6a0a-b6c3-4e4a-8941-1736700ded59.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c2:9a:f3:fa:72:f5:7b:42:d5:25:0e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de0f6a0a-b6c3-4e4a-8941-1736700ded59
        Validity
            Not Before: May  8 01:00:24 2026 GMT
            Not After : Aug  6 01:00:24 2026 GMT
        Subject: CN=3cf1792f-c6ff-4d7b-8924-699417bbff81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:43:b3:22:9c:54:30:ef:f8:22:76:ae:4a:06:
                    28:0d:56:4d:f0:f1:b1:bf:93:ac:52:ac:02:c2:93:
                    6e:f6:30:84:ae:d8:c2:f9:db:cf:d9:59:46:bc:c9:
                    14:42:06:c5:49:98:2d:8a:4d:19:1b:e5:23:fa:2e:
                    5b:f1:70:fa:a6:05:db:8f:ca:95:4b:b3:b8:35:4e:
                    29:7a:60:ad:14:56:e3:3b:c4:09:6d:38:27:3f:63:
                    60:f0:8c:f5:a5:28:58:4d:9a:73:a9:09:09:b3:d5:
                    db:d3:cd:46:41:7c:64:1c:4a:e5:ce:38:38:6e:6e:
                    08:df:e0:ca:55:e1:7c:4a:99:45:e5:18:6b:5e:17:
                    a3:02:3e:06:cf:37:98:52:3c:ca:b6:50:17:52:cc:
                    db:47:e5:1d:bf:30:53:0b:05:02:eb:b8:d6:b5:3c:
                    8d:a9:64:99:ef:af:7c:3c:90:fa:2f:06:d6:75:30:
                    ac:5d:56:3a:5a:87:a8:87:8f:60:27:22:83:3f:1d:
                    f4:db:03:89:71:f4:94:4a:f8:c5:c5:6e:ce:46:9d:
                    03:78:df:ae:e8:a1:01:c4:77:a5:3f:a3:fc:df:73:
                    1c:58:2c:f4:82:f5:10:1c:81:15:c5:27:81:72:51:
                    0f:b2:4c:78:a5:8e:6e:ce:6f:e7:9b:c6:2e:43:6f:
                    a4:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:8E:E7:7B:47:4A:69:5C:8F:7F:E5:8E:AA:E9:15:9B:F2:95:6A:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de0f6a0a-b6c3-4e4a-8941-1736700ded59/9152b08e-e525-38a2-8ed2-62e4227a6fa9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de0f6a0a-b6c3-4e4a-8941-1736700ded59/de0f6a0a-b6c3-4e4a-8941-1736700ded59.crl

            X509v3 Authority Key Identifier:
                keyid:96:F9:61:45:2A:73:A2:65:6C:FA:AF:DF:F4:F4:3B:07:C1:68:20:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de0f6a0a-b6c3-4e4a-8941-1736700ded59.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.22.192.0/21
                  192.198.188.0/22
                  209.172.16.0/22
                  216.245.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:dc:2e:2f:92:f6:23:35:ce:ca:08:2a:50:72:71:f7:1b:d3:
         c0:6e:bc:39:02:9b:d4:56:ca:d1:4d:2f:cf:31:26:e2:27:7c:
         0b:21:c9:2d:26:cf:71:61:79:b9:47:1b:11:91:b3:32:24:28:
         d3:e5:1f:cd:4a:ff:cd:13:e4:d1:35:08:43:ab:c6:6a:8a:c8:
         49:05:77:2a:78:b3:8f:6d:d2:25:00:6e:10:4f:1e:a5:d5:ab:
         53:c7:59:eb:20:f7:79:f4:83:49:36:09:ec:b1:8c:7c:1a:1c:
         2e:ca:ad:8c:2a:1d:41:85:f7:8e:f9:f6:4b:ed:32:f4:7c:3a:
         65:37:2d:38:25:c6:82:23:49:3b:5b:0e:b2:f1:81:58:ea:36:
         fe:ab:45:a9:18:0c:d7:26:13:d9:b7:ef:4e:cd:b0:21:14:52:
         b5:8b:3e:20:72:6f:74:26:9f:bf:6d:c5:c1:2b:c0:de:b2:33:
         ff:3a:cc:c0:80:40:a7:ab:fe:46:6b:9a:9f:25:ff:ec:99:af:
         fb:cb:a0:81:07:ec:eb:5e:ba:cf:6b:3d:8d:05:b1:d6:e9:44:
         6d:46:35:25:36:3c:d2:18:45:b7:a6:72:dc:78:cd:fd:9a:d6:
         0f:6d:20:28:58:9e:45:a2:f9:8a:b1:fe:61:5f:a2:97:63:ea:
         ad:91:06:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:25:23 2026 by rpki-client