Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb/6bbc85fd-c9a6-3fe6-a0ad-ac878b243f76.roa
File:                     6bbc85fd-c9a6-3fe6-a0ad-ac878b243f76.roa (raw, json)
Hash identifier:          zir60hUgOsJ4WtkURORtg7GrBSt/grKqYoq6cEWYg8w=
Subject key identifier:   68:65:C2:10:05:36:72:27:17:4C:D3:19:F8:E4:BE:FC:90:9A:B5:2E
Certificate issuer:       /CN=33097e36-cef3-418b-a895-cacb797d1eeb
Certificate serial:       010D0C9F4328584DBD058C92EC11D648F58FF580
Authority key identifier: F3:D2:56:2B:76:FF:3B:36:71:0B:45:B0:C7:99:53:16:86:A7:8F:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb/6bbc85fd-c9a6-3fe6-a0ad-ac878b243f76.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     10958
IP address blocks:        147.161.4.0/22 maxlen: 32
                          162.216.108.0/22 maxlen: 32
                          162.216.208.0/21 maxlen: 32
                          198.62.181.0/24 maxlen: 32
                          208.68.56.0/22 maxlen: 32
                          208.80.144.0/21 maxlen: 32
                          208.91.176.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb/33097e36-cef3-418b-a895-cacb797d1eeb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb/33097e36-cef3-418b-a895-cacb797d1eeb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:8c:92:ec:11:d6:48:f5:8f:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33097e36-cef3-418b-a895-cacb797d1eeb
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=d181da0d-92af-4dae-bca8-f85443324c65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:45:58:16:3f:d5:16:82:b0:34:24:10:b6:e7:
                    4f:68:ff:62:f9:50:4c:5b:2e:bf:87:79:d7:6f:24:
                    50:b1:78:65:45:7a:8c:3a:e6:2a:2e:0b:a4:62:d7:
                    f2:e6:f7:ec:d9:64:72:5e:36:84:64:8f:e4:4e:31:
                    7f:ff:f0:0a:05:40:f3:d7:06:f3:23:6b:0d:a9:8d:
                    9d:da:2d:48:5a:33:72:83:13:d2:f1:00:5f:33:e9:
                    cc:13:8b:29:5d:50:e0:92:a6:24:35:3b:dd:25:6b:
                    a4:bb:d6:6c:7e:1f:5b:0f:eb:d5:13:2d:e6:03:18:
                    ea:4f:0d:49:26:7a:29:fd:7d:9c:b7:cb:d0:0d:1d:
                    07:96:b6:52:6c:72:d4:63:28:42:7f:3b:1d:c1:9a:
                    8d:93:02:f6:ea:af:34:04:3e:16:4c:32:94:d0:89:
                    c8:f8:33:97:02:f5:e1:48:ed:ed:c2:40:7f:d0:34:
                    eb:34:b4:ef:26:22:97:e6:5b:2f:e5:64:75:8f:3e:
                    13:db:41:4b:7a:db:d9:aa:37:bd:b5:aa:20:2e:dd:
                    57:f0:37:e6:da:7c:39:16:cd:60:a6:07:fb:a9:72:
                    cb:e1:cb:92:c6:4d:fc:44:a3:09:90:e4:3b:a3:42:
                    c0:bf:55:c7:6c:60:75:58:0a:d1:0e:61:9b:06:e8:
                    3d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:65:C2:10:05:36:72:27:17:4C:D3:19:F8:E4:BE:FC:90:9A:B5:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb/6bbc85fd-c9a6-3fe6-a0ad-ac878b243f76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb/33097e36-cef3-418b-a895-cacb797d1eeb.crl

            X509v3 Authority Key Identifier:
                keyid:F3:D2:56:2B:76:FF:3B:36:71:0B:45:B0:C7:99:53:16:86:A7:8F:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.161.4.0/22
                  162.216.108.0/22
                  162.216.208.0/21
                  198.62.181.0/24
                  208.68.56.0/22
                  208.80.144.0/21
                  208.91.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:56:b2:05:18:5f:96:53:bc:2f:cd:0d:b4:c5:e9:c4:c4:f5:
         19:a0:28:b1:de:b5:3b:9b:c8:4d:28:8e:41:bd:df:4d:ef:88:
         f9:76:0c:f7:4c:df:fc:90:92:8b:f3:a6:cd:f5:75:65:d8:b2:
         06:bc:91:89:72:5f:01:e6:1c:6c:e7:67:87:29:83:63:43:0d:
         3b:96:87:39:30:36:39:ca:89:51:36:9d:a2:8c:9e:4f:0b:45:
         6c:5a:aa:58:fa:ec:3a:6a:dd:96:7e:b0:0c:df:0b:43:96:b2:
         20:ef:cb:9e:34:03:9e:05:1b:f5:cf:15:1c:36:db:fe:2e:e5:
         32:f1:15:e4:6f:14:ca:ef:df:41:65:cb:e7:89:80:a2:d1:5c:
         84:72:e7:d4:ba:db:a5:70:2e:50:c0:d5:a1:41:a5:b8:42:7b:
         0a:63:67:a4:f2:6b:c1:bc:79:7c:f9:51:57:ea:06:a4:f1:70:
         16:67:34:be:88:46:78:f5:95:d1:7b:d8:93:01:d2:ff:fe:cc:
         a7:b5:17:28:11:c0:46:df:f4:1c:1e:14:0b:a3:f8:1a:34:31:
         11:f2:e6:26:1b:f9:3e:c2:a6:dd:a0:4f:85:8b:f0:0f:ed:d6:
         d3:31:e4:33:4a:72:0c:f6:82:ce:c4:b6:01:be:ce:cc:b9:eb:
         84:d9:87:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:40:09 2026 by rpki-client