Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/b0347528-51f9-3df1-ad01-53232c57299c.roa
File:                     b0347528-51f9-3df1-ad01-53232c57299c.roa (raw, json)
Hash identifier:          CS8ZX00pLhsJbJoYpibP93MP0ZVb4i5baJyJQPuiuR8=
Subject key identifier:   DB:80:BD:43:AE:63:FD:F3:51:D3:90:8D:43:65:EF:08:F9:EC:EC:91
Certificate issuer:       /CN=b582df16-c65f-452f-ac4a-a1d3af6f8ad1
Certificate serial:       010D0C9F4328584DBA3AE516C85F507F85873D40
Authority key identifier: 0C:A5:67:C6:89:7E:DC:8D:0C:9A:C7:CB:B3:45:F8:EF:39:13:AD:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/b0347528-51f9-3df1-ad01-53232c57299c.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     55064
IP address blocks:        74.123.28.0/22 maxlen: 24
                          162.210.128.0/22 maxlen: 24
                          2620:a0:4000::/44 maxlen: 48
                          2620:114:a000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/b582df16-c65f-452f-ac4a-a1d3af6f8ad1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/b582df16-c65f-452f-ac4a-a1d3af6f8ad1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3a:e5:16:c8:5f:50:7f:85:87:3d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b582df16-c65f-452f-ac4a-a1d3af6f8ad1
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=dc5ced47-0445-4361-a94a-8aad48d1cf13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:74:2b:60:95:a5:64:35:53:b6:d2:be:03:71:
                    68:6d:55:92:bd:af:6b:81:c8:aa:97:2b:56:7c:a3:
                    09:4d:7b:2e:36:71:54:44:8f:fa:3b:c4:8d:14:6b:
                    3f:89:50:79:7e:7a:5e:3b:3d:05:e7:3a:69:4b:76:
                    ad:da:22:91:96:be:70:53:11:51:14:68:a4:88:76:
                    25:cb:7f:1d:b1:9f:c9:02:8d:7c:74:ee:67:d1:cb:
                    32:c1:e2:6c:9a:38:d5:d1:80:e1:1c:ef:87:8b:f4:
                    11:0b:c6:2b:aa:a9:8f:9e:50:9b:4d:ff:3a:40:91:
                    98:08:7b:b0:0f:ef:e9:d0:3f:4d:16:da:01:13:12:
                    ba:fb:73:a6:9e:e1:a7:9b:a5:dd:87:a9:87:66:1f:
                    69:01:34:b5:14:67:90:88:ac:63:53:fb:2a:88:01:
                    4d:05:03:f0:98:23:75:85:ea:df:cc:a6:de:72:12:
                    f6:df:a8:5d:81:cf:58:bc:d2:e3:c8:26:77:2d:c4:
                    69:6b:40:75:a7:e9:71:ae:91:6d:b2:42:23:89:dc:
                    29:3d:fc:ea:c4:06:79:9d:72:3c:5f:b8:3e:55:9b:
                    8f:a4:eb:32:6e:a8:07:0a:07:d3:48:00:1e:b2:b8:
                    bc:e6:23:3a:23:86:90:e0:da:06:36:2b:e0:e3:bd:
                    b3:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:80:BD:43:AE:63:FD:F3:51:D3:90:8D:43:65:EF:08:F9:EC:EC:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/b0347528-51f9-3df1-ad01-53232c57299c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/b582df16-c65f-452f-ac4a-a1d3af6f8ad1.crl

            X509v3 Authority Key Identifier:
                keyid:0C:A5:67:C6:89:7E:DC:8D:0C:9A:C7:CB:B3:45:F8:EF:39:13:AD:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.123.28.0/22
                  162.210.128.0/22
                IPv6:
                  2620:a0:4000::/44
                  2620:114:a000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:c0:1a:80:88:fe:2b:72:43:9e:a5:d0:88:aa:5c:bc:3a:d4:
         bd:e1:81:6f:4a:41:8a:c8:5b:ef:a1:43:62:5c:a5:df:ae:93:
         ab:5b:8b:ec:e3:81:ac:ad:7b:22:ee:10:4b:b9:d6:01:90:75:
         6a:28:42:a5:45:89:3b:1f:bb:5a:c0:84:3b:17:fc:f0:fb:45:
         6d:b9:2b:e4:69:5c:b9:95:bc:3b:e0:91:7b:05:26:a3:0e:35:
         c4:35:38:80:ae:26:d2:ab:c4:3b:0f:4a:1f:02:af:47:61:6b:
         e7:fc:a1:bb:46:22:02:33:ad:a3:f6:e5:cc:19:56:a2:95:dc:
         d9:db:b2:a6:8d:47:d2:b8:0a:f9:23:5b:99:69:92:77:a9:ee:
         21:b2:36:81:ad:db:9d:8a:0a:36:eb:9f:03:17:f9:b3:51:dd:
         bf:b2:15:f9:26:f2:6c:7f:e7:4e:b0:76:fe:fc:91:5d:cd:2a:
         3e:4f:e7:3b:ac:62:e4:cc:e8:7a:79:f6:22:4e:52:63:3d:89:
         c0:80:d1:39:50:6c:4e:4f:2a:12:69:1a:60:ac:a9:75:bb:e0:
         23:f9:3d:f8:9e:a1:d8:10:10:f4:f9:2b:27:36:b9:45:07:4c:
         67:dc:56:33:20:f9:ed:11:dc:46:cb:ca:ab:1b:30:2f:9c:9f:
         66:f3:c5:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:35:18 2026 by rpki-client