Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea869763-37d6-43fe-b16f-bd22be08a7c5/af2a2bd8-4a2e-3fdd-9d3f-7a49478f9ad0.roa
File:                     af2a2bd8-4a2e-3fdd-9d3f-7a49478f9ad0.roa (raw, json)
Hash identifier:          0Hj+tM/mD0xawDXos/5beZ2L4osAIlSCpgZZoAIdv0E=
Subject key identifier:   08:C8:D6:F3:47:B9:0F:DE:50:78:B9:81:6B:92:D2:5D:01:47:55:F2
Certificate issuer:       /CN=ea869763-37d6-43fe-b16f-bd22be08a7c5
Certificate serial:       010D0C9F4328584E4C548FCF88FBFFD362E1C568
Authority key identifier: 86:EB:A3:1E:58:34:F5:2A:95:1C:9F:4D:11:8A:B4:A1:80:2A:2E:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea869763-37d6-43fe-b16f-bd22be08a7c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea869763-37d6-43fe-b16f-bd22be08a7c5/af2a2bd8-4a2e-3fdd-9d3f-7a49478f9ad0.roa
Signing time:             Fri 26 Jun 2026 09:00:12 +0000
ROA not before:           Fri 26 Jun 2026 09:00:12 +0000
ROA not after:            Thu 24 Sep 2026 09:00:12 +0000
asID:                     132055
IP address blocks:        198.134.54.0/24 maxlen: 24
                          198.134.56.0/24 maxlen: 24
                          199.52.53.0/24 maxlen: 24
                          199.52.57.0/24 maxlen: 24
                          199.52.58.0/24 maxlen: 24
                          199.52.59.0/24 maxlen: 24
                          199.52.73.0/24 maxlen: 24
                          199.52.74.0/24 maxlen: 24
                          199.52.75.0/24 maxlen: 24
                          199.52.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea869763-37d6-43fe-b16f-bd22be08a7c5/ea869763-37d6-43fe-b16f-bd22be08a7c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea869763-37d6-43fe-b16f-bd22be08a7c5/ea869763-37d6-43fe-b16f-bd22be08a7c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea869763-37d6-43fe-b16f-bd22be08a7c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4c:54:8f:cf:88:fb:ff:d3:62:e1:c5:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea869763-37d6-43fe-b16f-bd22be08a7c5
        Validity
            Not Before: Jun 26 09:00:12 2026 GMT
            Not After : Sep 24 09:00:12 2026 GMT
        Subject: CN=9b4b23fb-2945-485f-97b4-4a18947aab8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9c:68:84:8a:59:d3:4c:83:e3:86:25:ae:26:
                    66:f2:fe:18:6f:eb:96:fe:77:e6:b9:ab:cf:ee:e6:
                    4b:67:96:56:76:42:bb:bb:43:4b:e6:bc:95:8d:2d:
                    7a:25:16:a2:80:17:85:4f:9a:45:34:d7:ac:34:a3:
                    7e:dc:05:1e:f5:a6:18:86:6e:c4:c3:5a:65:88:85:
                    d5:4a:cf:17:88:60:60:74:86:d3:dc:9a:1f:e2:53:
                    af:55:fc:7e:fd:89:fd:42:72:f9:23:e5:39:e3:ce:
                    59:0d:dd:52:0d:23:40:fa:f8:32:d5:78:37:48:2f:
                    87:75:f2:e3:ff:b3:3a:4a:b4:ff:47:da:64:b0:bd:
                    75:79:91:1f:19:be:1d:f9:70:8b:4a:21:2c:e0:cb:
                    08:ff:bd:57:56:e0:37:66:39:84:7b:5c:94:c5:32:
                    4f:5a:a3:db:99:b1:a1:e6:a4:66:36:a9:90:ed:f5:
                    a4:1a:34:3d:8d:a6:96:0f:57:3b:e6:34:19:7f:46:
                    fb:a7:35:88:8a:09:11:7f:d9:03:ab:7f:e8:cf:a3:
                    84:59:a9:1b:f6:ab:20:7e:de:4a:c5:4a:de:cc:f3:
                    35:fd:ef:ba:c9:9b:b9:59:01:32:e7:7a:26:69:bd:
                    11:4f:c4:74:3b:b9:38:33:83:da:39:af:b0:99:cd:
                    dc:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:C8:D6:F3:47:B9:0F:DE:50:78:B9:81:6B:92:D2:5D:01:47:55:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea869763-37d6-43fe-b16f-bd22be08a7c5/af2a2bd8-4a2e-3fdd-9d3f-7a49478f9ad0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea869763-37d6-43fe-b16f-bd22be08a7c5/ea869763-37d6-43fe-b16f-bd22be08a7c5.crl

            X509v3 Authority Key Identifier:
                keyid:86:EB:A3:1E:58:34:F5:2A:95:1C:9F:4D:11:8A:B4:A1:80:2A:2E:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea869763-37d6-43fe-b16f-bd22be08a7c5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.134.54.0/24
                  198.134.56.0/24
                  199.52.53.0/24
                  199.52.57.0-199.52.59.255
                  199.52.73.0-199.52.75.255
                  199.52.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:d8:e1:8a:1d:c2:03:65:0c:93:8e:11:41:94:de:2c:86:15:
         82:63:a3:da:c2:0e:84:56:4e:27:d1:35:ae:aa:f3:1c:f2:ff:
         5f:a6:af:7d:49:28:28:05:31:a0:e1:83:61:d2:57:14:6e:19:
         4b:c0:8d:82:1e:6d:46:af:8e:f9:8b:0b:34:f1:75:fb:17:ea:
         35:c3:67:70:13:f1:b1:97:65:7f:93:56:d8:ec:68:17:31:56:
         00:f6:ca:ad:95:11:f7:f6:26:08:97:4a:67:1e:21:17:f4:9e:
         00:2e:63:9e:88:d9:38:d9:a4:13:e4:b9:ee:d4:e1:b2:07:f9:
         01:32:a5:4f:35:00:c8:98:87:a6:dc:b2:11:a4:50:5c:31:b0:
         13:7f:1f:21:24:d3:c5:e1:d6:17:30:1f:65:54:d5:f8:f9:76:
         98:48:3a:c1:ae:0e:16:e1:d0:93:36:8f:83:0e:ad:37:c3:a1:
         9d:25:4b:39:de:a7:08:ca:1d:bf:f1:0b:75:35:93:32:26:b0:
         43:c8:e6:d7:51:32:ef:b2:9d:10:96:d0:ac:e5:c4:29:70:3f:
         83:65:e4:27:e7:ee:27:7c:44:15:d6:a1:4d:98:ea:b4:36:9d:
         e2:0d:99:f1:58:6a:37:70:d7:00:85:a5:6f:d3:22:ae:df:0f:
         98:40:18:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:43:06 2026 by rpki-client