Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/337c4e6f-8279-31cf-8f67-7c0d0188f249.roa
File:                     337c4e6f-8279-31cf-8f67-7c0d0188f249.roa (raw, json)
Hash identifier:          YRcSYrhci5hGclQdn0tsl3042B4Iltu9/Cx+LM88h0s=
Subject key identifier:   05:74:10:0C:11:3B:AC:9B:34:99:96:CA:22:39:D9:5F:91:85:01:E1
Certificate issuer:       /CN=5c9a7da0-3974-48c2-a2c5-fca1ec32848a
Certificate serial:       010D0C9F4328584F498BEC36F5A7266A06978EC0
Authority key identifier: CB:78:E8:D0:CE:C6:C2:B5:5E:A4:23:E7:09:CE:01:8B:39:F2:5F:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/337c4e6f-8279-31cf-8f67-7c0d0188f249.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     3361
IP address blocks:        68.64.49.0/24 maxlen: 24
                          68.64.50.0/23 maxlen: 24
                          68.64.52.0/23 maxlen: 24
                          68.64.54.0/24 maxlen: 24
                          69.46.32.0/23 maxlen: 24
                          69.46.34.0/24 maxlen: 24
                          69.46.36.0/24 maxlen: 24
                          69.46.39.0/24 maxlen: 24
                          69.46.40.0/24 maxlen: 24
                          69.46.43.0/24 maxlen: 24
                          69.46.45.0/24 maxlen: 24
                          69.46.47.0/24 maxlen: 24
                          74.209.160.0/24 maxlen: 24
                          74.209.168.0/24 maxlen: 24
                          74.209.176.0/23 maxlen: 24
                          74.209.182.0/24 maxlen: 24
                          2605:2400::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8b:ec:36:f5:a7:26:6a:06:97:8e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c9a7da0-3974-48c2-a2c5-fca1ec32848a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=d704dbf3-585a-405f-a50a-087cf9df45e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:16:8e:f3:3d:6b:99:02:8e:65:68:4c:e1:62:
                    fb:52:0e:ac:bf:de:1c:7c:6d:4b:d1:d7:d1:1a:0a:
                    6f:a6:90:e4:ec:75:7a:09:d7:40:ae:e6:ea:0f:7f:
                    38:dd:40:f5:b9:8b:e3:b0:99:a8:9e:4c:b3:67:27:
                    24:6e:01:ae:83:c5:65:4f:d1:c0:0d:d3:ae:52:99:
                    85:d5:58:e3:14:2d:b8:f3:5f:d6:95:ea:8b:80:96:
                    c3:1e:13:e8:84:71:a3:1a:1e:5b:93:bb:e5:14:30:
                    a0:bd:63:cc:50:fa:15:2d:76:c8:67:c7:45:06:e0:
                    99:42:02:1a:e7:54:11:6b:b8:35:1f:a5:89:48:25:
                    3c:35:bf:82:8b:dc:ee:a7:26:0c:6a:7c:0b:d8:89:
                    b9:03:0c:58:6e:75:14:57:69:d1:70:30:13:2a:7c:
                    e2:3b:02:56:b4:55:fd:80:57:32:b3:9f:ce:87:bb:
                    4c:28:9c:b1:41:4c:4f:3a:bb:ec:75:7c:ef:aa:c2:
                    eb:d1:cd:a5:d6:6a:d4:15:ec:ca:c5:ba:96:5a:f8:
                    ca:03:51:46:be:50:7a:95:ca:0c:1e:22:99:22:e0:
                    fa:83:a8:a7:8d:a6:e0:cd:1f:cf:1c:81:49:43:98:
                    39:cb:be:4a:2d:15:3f:c9:95:bf:c5:cc:ff:5c:6e:
                    cb:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:74:10:0C:11:3B:AC:9B:34:99:96:CA:22:39:D9:5F:91:85:01:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/337c4e6f-8279-31cf-8f67-7c0d0188f249.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.crl

            X509v3 Authority Key Identifier:
                keyid:CB:78:E8:D0:CE:C6:C2:B5:5E:A4:23:E7:09:CE:01:8B:39:F2:5F:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.64.49.0-68.64.54.255
                  69.46.32.0-69.46.34.255
                  69.46.36.0/24
                  69.46.39.0-69.46.40.255
                  69.46.43.0/24
                  69.46.45.0/24
                  69.46.47.0/24
                  74.209.160.0/24
                  74.209.168.0/24
                  74.209.176.0/23
                  74.209.182.0/24
                IPv6:
                  2605:2400::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:27:c5:54:b3:4b:a1:4a:f2:2a:7d:da:41:db:49:ff:23:18:
         ce:a7:9e:12:8b:a8:2d:5e:84:76:01:a9:97:db:1e:46:8a:db:
         9b:93:80:a9:05:d6:d7:32:af:8a:9f:79:12:75:e3:a4:c3:8a:
         e3:a1:7e:0b:e2:ad:a2:6d:87:d8:f1:8c:f1:2e:e3:85:81:a2:
         a5:c4:82:ca:a5:af:1a:0a:a0:9a:4a:45:29:85:b2:d0:e1:c2:
         10:99:01:14:04:4c:a4:82:c2:4f:58:84:f8:b1:ab:6b:2c:52:
         1b:99:d5:77:40:e0:18:a2:52:60:36:27:ee:7c:c6:0e:56:4c:
         92:f1:7f:2b:f0:71:db:4b:69:df:af:db:fe:4e:c3:95:97:f0:
         aa:4c:2a:c5:9d:62:74:f7:f6:ee:59:53:d9:b9:a8:a1:63:c7:
         7f:31:b1:9e:31:40:28:1d:eb:40:57:c9:82:e7:5d:92:65:a9:
         ca:58:6b:3c:d3:cb:3b:09:1a:02:4a:ee:5d:31:f4:0c:0b:b6:
         60:ce:c2:7a:32:db:f7:b3:84:72:d8:dc:c2:86:49:eb:f3:52:
         30:fb:5e:94:18:a5:17:6b:ca:85:1b:a6:f9:e5:64:59:ed:1a:
         d7:a8:7c:1c:26:06:91:ad:c5:80:df:24:e5:5b:27:51:cf:57:
         0f:cd:8e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 04:18:41 2026 by rpki-client